4, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x900}, 0x0)

[ 2623.850541][ T9684] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2623.892690][ T9684] lowmem_reserve[]: 0 0 0 0 0
05:51:17 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2623.905313][ T9684] Node 1 Normal free:2584124kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:289080kB inactive_anon:11716kB active_file:16676kB inactive_file:128548kB unevictable:0kB writepending:380kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:75620kB pagetables:208288kB bounce:0kB free_pcp:1980kB local_pcp:916kB free_cma:0kB
[ 2623.966961][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2623.998175][ T2230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2624.009645][ T9684] lowmem_reserve[]: 0 0 0 0 0
[ 2624.023767][ T9732] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2624.033477][ T9736] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2624.034419][ T2230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2624.045466][ T9684] Node 0 DMA: 1*4kB (M) 3*8kB (UME) 5*16kB (UE) 4*32kB (UM) 3*64kB (UE) 0*128kB 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10156kB
05:51:18 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2624.063674][ T9739] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2624.073778][ T9684] Node 0 DMA32: 2271*4kB (UMH) 626*8kB (UMH) 288*16kB (UMH) 112*32kB (UMH) 81*64kB (UMH) 38*128kB (UMH) 10*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34892kB
[ 2624.090634][ T2230] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2624.097465][ T9730] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2624.136319][ T9684] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2624.140542][ T9744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2624.151183][ T9684] Node 1 Normal: 1*4kB (E) 29*8kB (UM) 59*16kB (UE) 13*32kB (UM) 1*64kB (E) 39*128kB (UME) 142*256kB (UM) 198*512kB (UM) 97*1024kB (UME) 49*2048kB (UME) 547*4096kB (UM) = 2584572kB
[ 2624.165474][T32247] usb 3-1: device descriptor read/8, error -61
[ 2624.176780][ T9684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2624.184563][ T9736] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2624.205304][ T9746] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2624.214254][ T9684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2624.225877][ T9730] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
05:51:18 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2624.238403][ T2230] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2624.251114][ T2230] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2624.271831][ T2230] usb 6-1: Manufacturer: syz
[ 2624.272730][ T9684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2624.290508][ T2230] usb 6-1: config 0 descriptor??
[ 2624.330183][T32247] usb usb3-port1: unable to enumerate USB device
[ 2624.339437][ T9752] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2624.341553][ T9684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2624.386805][ T9684] 22452 total pagecache pages
[ 2624.392616][ T9684] 0 pages in swap cache
[ 2624.397103][ T9684] Swap cache stats: add 0, delete 0, find 0/0
[ 2624.404579][ T9684] Free swap  = 0kB
[ 2624.411563][ T9684] Total swap = 0kB
[ 2624.420755][ T9684] 1965979 pages RAM
[ 2624.424814][ T9684] 0 pages HighMem/MovableOnly
[ 2624.430502][ T9684] 349903 pages reserved
[ 2624.434802][ T9684] 0 pages cma reserved
[ 2624.789222][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2624.796636][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2624.824255][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2624.838673][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2624.846109][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2624.864988][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2624.878530][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2624.885952][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2624.903778][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2624.918111][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2624.925490][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2624.943431][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2624.956330][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2624.970661][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2624.983737][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2624.997657][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.005039][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.023469][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.036393][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.049341][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.056753][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.076580][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.087468][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.094961][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.116406][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.124083][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.142170][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.157503][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.164906][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.184218][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.196885][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.211046][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.223908][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.238838][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.246913][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.265701][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.278284][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.285665][ T2230] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0
[ 2625.305365][ T2230] plantronics 0003:047F:FFFF.005A: No inputs registered, leaving
[ 2625.320921][ T2230] plantronics 0003:047F:FFFF.005A: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2626.517392][ T6144] usb 6-1: reset high-speed USB device number 57 using dummy_hcd
[ 2627.517404][ T6144] usb 6-1: device descriptor read/64, error -71
05:51:21 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x10, &(0x7f0000000100)={0x2})

05:51:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xa00}, 0x0)

05:51:21 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:51:21 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x1)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x40000041c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x4108a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, r1, 0x0, {0x2, 0x0, 0x2}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000380)="0b144d6ccdab0f99c53502daebab70e07884f3239a74d1c760ee33a3ff0859eec405071dfe19197bfcbee3847484ad36334c73321a141f821dba3f61d7ce50fc100cef02e0dcc57557e993449b9fb6a6073de4cc5c2cf86741805c5b1e01ac8cb14334892cc771bed9235f2cca49d26a10d8aa9d8451ee77f48fd999ddf3e06ac96f1f5372e26082450a9d76f8278414be76f621bb4b436fa9ff6c377ab22cc632689cf11967030058", 0xa9}}, 0x10)
mmap$IORING_OFF_CQ_RING(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f00000002c0)=0x5a07)
r2 = dup(r0)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = socket$unix(0x1, 0x0, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$P9_RMKDIR(r5, 0x0, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x97ffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a802a8c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0)
r6 = open(&(0x7f00000009c0)='./bus\x00', 0x5c1042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r6, 0x0)
sendmsg$SOCK_DESTROY(r6, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x8c}, 0x10)
mknod(&(0x7f0000000100)='./file0\x00', 0x20, 0x8)

05:51:21 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
unshare(0x40000000)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x191000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x30, r2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000240)=0x54)

05:51:21 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2627.987564][ T6144] usb 6-1: device descriptor read/all, error -71
[ 2627.989073][ T9793] netlink: 'syz-executor.1': attribute type 12 has an invalid length.
[ 2628.018593][ T9791] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2628.020064][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2628.050920][ T9795] IPVS: ftp: loaded support on port[0] = 21
05:51:22 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2628.118525][ T9805] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2628.139604][ T9811] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2628.207268][ T9811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2628.220493][ T9794] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2628.238310][ T9793] netlink: 'syz-executor.1': attribute type 12 has an invalid length.
[ 2628.247409][T32247] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 2628.354242][ T9839] xt_CT: You must specify a L4 protocol and not use inversions on it
05:51:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xc00}, 0x0)

[ 2628.395562][ T9804] IPVS: ftp: loaded support on port[0] = 21
[ 2628.437445][ T6144] usb 6-1: reset high-speed USB device number 57 using dummy_hcd
05:51:22 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2628.513920][T29057] tipc: TX() has been purged, node left!
[ 2628.537602][T32247] usb 3-1: device descriptor read/64, error 18
05:51:22 executing program 1:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
epoll_pwait(r1, &(0x7f0000000100), 0x0, 0x200034, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$bt_cmtp(0x1f, 0x3, 0x5)
r4 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="1a614beab760000036c64b2f76922aa4741ca6dd052100000000ffff2e41bac8d1e83ecf8c0d0879d30a8efc06850000ffffffe9"]})
r5 = syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRESOCT=r5, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="030476", @ANYRES16=r5, @ANYBLOB="00022abd7000fddbdf253fcc642f0200000008000600ed00000088000500030000004400035f31000000000600040007000000060007004e2200000500080001000000140006050000000000000000000000000000000020000380080005007f000001140002006d61637365633000000000000000000008ba7200a80a0000"], 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r5, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0xd0)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000000)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0x6, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r5, 0x8, 0x70bd2a, 0x25dfdbfc}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x4000000)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="8000000003b9b6fc8a568edded22cde24bbd51725a47006cf29ed00f12431bd64d358584fdfc29c6f43eac707428e77bbf9e3ae6603bdd2a96ff26712473baf0bc6d1c9b61bc5d51b1918b2c8a8f6c6f900ae06997fa96f2e9f24bde4e9a9b01632913c3c2343a5c5a7150db51384ff0c799d040cea6bb57bf2d9dd5b31b1e37bd8a23857aa17cfd116da9209d017766f6b375f62ca4", @ANYRES16=r5, @ANYBLOB="000325bd7000fcdbdf250d0000000c000280060002004e24000020000180060001000200000008000800feffffff0c0007001000000021000000080005000000000030000180060004004e240000060004004e2000000600010002000000070006006e7100000c00070011000000220000000800060002000000"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000080)=0x2)
dup(r2)
r6 = dup3(r0, r1, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f00000001c0))

[ 2628.561144][ T9866] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:51:22 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2628.644148][ T9881] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2628.646233][ T9871] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2628.697438][ T9866] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2628.724640][ T9871] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2628.746566][ T9866] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
05:51:22 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet(0x2, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000000)=0x4)
write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x14)
sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000380)='./bus\x00', 0x0)

[ 2628.927503][T32247] usb 3-1: device descriptor read/64, error 18
[ 2629.197423][T32247] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 2629.477743][T32247] usb 3-1: device descriptor read/64, error 18
[ 2629.867429][T32247] usb 3-1: device descriptor read/64, error 18
[ 2629.987505][T32247] usb usb3-port1: attempt power cycle
[ 2630.319978][T30903] tipc: TX() has been purged, node left!
[ 2630.697413][T32247] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 2630.747517][ T9868] usb 6-1: reset high-speed USB device number 57 using dummy_hcd
[ 2630.868035][T32247] usb 3-1: device descriptor read/8, error -61
[ 2631.077501][T32247] usb 3-1: device descriptor read/8, error -71
[ 2631.717414][ T9868] usb 6-1: device descriptor read/64, error -71
05:51:26 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x4802, &(0x7f0000000100)={0x2})

05:51:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xe00}, 0x0)

05:51:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:51:26 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "024f4f78c5a3a2cd", "8a144243f194beb17386331e14d3bfc8481508ae441684ed3538bff81f70b20f", "90895088", "9859012866ace086"}, 0x38)
sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b)

05:51:26 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000040)=0x10)

05:51:26 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2632.289696][T23720] usb 6-1: USB disconnect, device number 57
05:51:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2632.358687][ T9943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2632.369838][ T9944] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2632.384206][ T9948] xt_CT: You must specify a L4 protocol and not use inversions on it
05:51:26 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x24080044)
msgget$private(0x0, 0x0)
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x194)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000000c0)=0x10001)
lsetxattr$trusted_overlay_nlink(0x0, 0x0, &(0x7f0000000000)={'L+'}, 0x16, 0x0)
close(r1)
setxattr$security_capability(0x0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x10000}]}, 0x14, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4200, r0, 0x9, 0x100046)

05:51:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2632.538631][ T9954] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2632.554103][ T9959] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2632.572330][ T9966] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2632.580103][ T9954] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:51:26 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110040000000000050000000000bb009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xad], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48)

05:51:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x1ad5}, 0x0)

[ 2632.640099][ T9975] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2632.675080][ T9977] xt_CT: You must specify a L4 protocol and not use inversions on it
05:51:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2632.694247][ T9868] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[ 2632.726550][ T9984] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2632.794641][ T9987] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2632.806626][ T9994] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2632.817426][T23720] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 2632.987602][ T9868] usb 3-1: no configurations
[ 2632.992271][ T9868] usb 3-1: can't read configurations, error -22
[ 2633.147456][ T9868] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 2633.208066][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2633.219063][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2633.230807][T23720] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2633.327505][T23720] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2633.336690][T23720] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2633.345872][T23720] usb 6-1: Manufacturer: syz
[ 2633.357511][T23720] usb 6-1: config 0 descriptor??
[ 2633.427654][ T9868] usb 3-1: no configurations
[ 2633.432273][ T9868] usb 3-1: can't read configurations, error -22
[ 2633.440001][ T9868] usb usb3-port1: attempt power cycle
[ 2633.849221][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2633.856636][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2633.876777][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2633.891007][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2633.898796][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2633.906366][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2633.913999][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2633.922567][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2633.930165][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2633.937790][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2633.945531][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2633.955866][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2633.965585][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2633.977252][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2633.987226][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.002119][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.011591][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.022361][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.033240][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.044099][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.054899][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.065649][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.076070][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.086452][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.097145][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.110616][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.120141][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.131325][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.140764][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.147426][ T9868] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[ 2634.152074][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.165244][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.176724][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.186211][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.205084][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.212580][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.226275][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.233770][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.247739][T23720] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 2634.255523][T23720] plantronics 0003:047F:FFFF.005B: No inputs registered, leaving
[ 2634.278431][ T9868] usb 3-1: no configurations
[ 2634.283305][ T9868] usb 3-1: can't read configurations, error -22
[ 2634.283522][T23720] plantronics 0003:047F:FFFF.005B: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2634.437426][ T9868] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 2634.567939][ T9868] usb 3-1: no configurations
[ 2634.572543][ T9868] usb 3-1: can't read configurations, error -22
[ 2634.580860][ T9868] usb usb3-port1: unable to enumerate USB device
[ 2635.667409][ T5840] usb 6-1: reset high-speed USB device number 58 using dummy_hcd
[ 2636.677404][ T5840] usb 6-1: device descriptor read/64, error -71
05:51:31 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x4805, &(0x7f0000000100)={0x2})

05:51:31 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:51:31 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0))
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netlink\x00')
r2 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8, 0x10, 0x5, 0x3f}, &(0x7f0000000040)=0x18)
sendfile(0xffffffffffffffff, r1, 0x0, 0x0)

05:51:31 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x2000}, 0x0)

05:51:31 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x14}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x6)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000200)=0x9)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
getpeername$qrtr(r6, &(0x7f0000000140), &(0x7f00000001c0)=0xc)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r7)
ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000000)=""/243, 0x10000})

05:51:31 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2637.243453][ T9868] usb 6-1: USB disconnect, device number 58
[ 2637.359599][T10042] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2637.380982][T10045] __nla_validate_parse: 6 callbacks suppressed
[ 2637.380992][T10045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:51:31 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2637.614891][T10051] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2637.647665][ T5840] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 2637.649574][T10067] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2637.659373][T10055] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:51:31 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2637.708831][T10055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2637.734807][T10045] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2637.757180][T10051] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:51:31 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x3801}, 0x0)

[ 2637.827687][ T9868] usb 6-1: new high-speed USB device number 59 using dummy_hcd
05:51:31 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2637.871063][T10073] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2637.897677][T10074] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2637.937454][T10079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2637.958928][ T5840] usb 3-1: no configurations
[ 2637.963558][ T5840] usb 3-1: can't read configurations, error -22
[ 2638.087450][T10088] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2638.090712][T10081] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2638.123639][T10085] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:51:32 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2638.147776][ T5840] usb 3-1: new high-speed USB device number 125 using dummy_hcd
05:51:32 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000280))
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000140)={0x8b, 0x800, 0x7})
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x1127441, 0x0)
ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428)
chdir(&(0x7f0000000240)='./file0\x00')
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1004001ff)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000040)={0x0, @reserved})
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
openat$cgroup_ro(r3, 0x0, 0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESOCT], 0x10132)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480), &(0x7f0000000340)=[&(0x7f00000002c0)='./cgroup.net/syz1\x00'])
fallocate(0xffffffffffffffff, 0x10000008c, 0xfffffffffffffffc, 0x6)

[ 2638.187647][ T9868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2638.205749][T10081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2638.237779][ T9868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2638.256723][T10079] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2638.269427][T10085] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2638.285753][T10094] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2638.296180][ T9868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2638.319721][T10097] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2638.421660][ T9868] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2638.437050][ T9868] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2638.448179][ T5840] usb 3-1: no configurations
[ 2638.453038][ T5840] usb 3-1: can't read configurations, error -22
[ 2638.453371][ T9868] usb 6-1: Manufacturer: syz
[ 2638.461094][ T5840] usb usb3-port1: attempt power cycle
[ 2638.504631][ T9868] usb 6-1: config 0 descriptor??
[ 2639.009135][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.016542][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.039650][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.047194][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.055025][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.062880][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.070742][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.078747][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.086268][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.100454][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.111382][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.122389][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.133314][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.144251][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.152985][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.160837][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.168608][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.176155][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.180566][ T5840] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 2639.183974][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.198980][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.206474][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.214397][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.222218][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.230111][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.238583][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.246078][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.253895][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.261746][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.272572][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.283353][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.294258][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.305125][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.316743][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.328017][ T5840] usb 3-1: no configurations
[ 2639.330905][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.332630][ T5840] usb 3-1: can't read configurations, error -22
[ 2639.352804][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.360595][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.374497][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.382297][ T9868] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0
[ 2639.396711][ T9868] plantronics 0003:047F:FFFF.005C: No inputs registered, leaving
[ 2639.414868][ T9868] plantronics 0003:047F:FFFF.005C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2639.477629][ T5840] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 2639.617804][ T5840] usb 3-1: no configurations
[ 2639.622598][ T5840] usb 3-1: can't read configurations, error -22
[ 2639.635285][ T5840] usb usb3-port1: unable to enumerate USB device
[ 2640.747480][ T9868] usb 6-1: reset high-speed USB device number 59 using dummy_hcd
[ 2641.787385][ T9868] usb 6-1: device descriptor read/64, error -71
05:51:36 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x4c01, &(0x7f0000000100)={0x2})

05:51:36 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:51:36 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x3f00}, 0x0)

05:51:36 executing program 4:
socket$inet6_icmp(0xa, 0x2, 0x3a)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_mreq(r1, 0x0, 0x0, &(0x7f00000019c0)={@private=0xa010102, @remote}, 0x8)
r2 = dup(r0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r4 = accept$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001b80)=0x14)
write(r4, &(0x7f0000000100)="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", 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000108514ee5abfd36d6e0000000000000a2c000000060a01010000000000000000000000000900010073797a30000000000c000240fffffffffffff002140000001100020000000000000000000000000a"], 0x54}}, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r6, &(0x7f0000001d00)=[{&(0x7f0000001a00)=""/98, 0x62}, {&(0x7f0000001a80)=""/230, 0xe6}, {&(0x7f0000001d80)=""/202, 0xca}, {&(0x7f0000001c80)=""/53, 0x35}, {&(0x7f0000001cc0)=""/56, 0x38}], 0x5)
prctl$PR_GET_TSC(0x19, &(0x7f0000001980))
getsockname$tipc(r6, &(0x7f0000001900), &(0x7f0000001940)=0x10)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r7, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
setsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f00000018c0)=0x8, 0x4)
sendmsg$can_bcm(r7, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000017c0)={0x7, 0xa, 0x800, {0x0, 0xea60}, {0x77359400}, {0x4}, 0x1, @can={{0x0, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "cc56774eecf41e6c"}}, 0x48}, 0x1, 0x0, 0x0, 0x8100}, 0x1)

05:51:36 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4144, 0x0, 0x0, 0x8, 0x0, 0x1000, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
pipe(0x0)
syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x5, 0x24002)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050019000000000005002d"], 0x44}}, 0x0)

05:51:36 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2642.313361][ T9868] usb 6-1: can't restore configuration #0 (error=-71)
[ 2642.343712][T32247] usb 6-1: USB disconnect, device number 59
[ 2642.435298][T10142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2642.462604][T10162] xt_CT: You must specify a L4 protocol and not use inversions on it
05:51:36 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2642.552375][T10160] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2642.598573][T10166] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2642.610264][T10174] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2642.630676][T10160] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:51:36 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:51:36 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r2 = dup2(r1, r0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020026bd7000fbdbdf250200000005003d000100000008003f001f00000005003d00e2000000050059004000000008003f0020de0000000200000008006100010000000800690001000000080026001a7500000004000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000081}, 0x44004)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r5 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0xd, 0x0, &(0x7f0000012ffc))
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r7, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$SG_GET_VERSION_NUM(r7, 0x2282, &(0x7f0000000200))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r5, r0, 0x0)

05:51:36 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x4, 0x8, 0x3}, 0x14}}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040))
splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0)

[ 2642.654792][T10175] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2642.655207][T10142] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
05:51:36 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2642.713810][T10183] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2642.723309][ T9868] usb 3-1: new high-speed USB device number 2 using dummy_hcd
05:51:36 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x4000}, 0x0)

[ 2642.767471][T32247] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 2642.826517][T10192] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2642.890059][T10198] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2642.926632][T10198] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2642.937153][T10198] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2642.953708][T10205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2642.964040][T10198] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2643.018451][ T9868] usb 3-1: no configurations
[ 2643.023078][ T9868] usb 3-1: can't read configurations, error -22
[ 2643.147641][T32247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2643.164184][T32247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2643.175382][T32247] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2643.192719][ T9868] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 2643.277505][T32247] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2643.286583][T32247] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2643.299270][T32247] usb 6-1: Manufacturer: syz
[ 2643.315374][T32247] usb 6-1: config 0 descriptor??
[ 2643.477567][ T9868] usb 3-1: no configurations
[ 2643.482193][ T9868] usb 3-1: can't read configurations, error -22
[ 2643.493776][ T9868] usb usb3-port1: attempt power cycle
[ 2643.799099][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.806513][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.825244][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.837632][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.845026][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.852546][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.860040][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.867542][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.874924][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.882439][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.889958][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.903746][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.911814][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.926113][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.934912][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.950282][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.962155][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.971936][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.983665][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2643.993639][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.005411][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.015827][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.035854][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.046574][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.060409][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.071415][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.082055][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.092620][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.103231][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.115287][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.123165][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.133710][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.141571][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.155077][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.162555][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.176248][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.183745][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.192087][T32247] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0
[ 2644.199953][T32247] plantronics 0003:047F:FFFF.005D: No inputs registered, leaving
[ 2644.207826][ T9868] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 2644.225172][T32247] plantronics 0003:047F:FFFF.005D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2644.338001][ T9868] usb 3-1: no configurations
[ 2644.342772][ T9868] usb 3-1: can't read configurations, error -22
[ 2644.507501][ T9868] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 2644.648043][ T9868] usb 3-1: no configurations
[ 2644.652683][ T9868] usb 3-1: can't read configurations, error -22
[ 2644.659335][ T9868] usb usb3-port1: unable to enumerate USB device
[ 2645.617405][ T5840] usb 6-1: reset high-speed USB device number 60 using dummy_hcd
[ 2646.637391][ T5840] usb 6-1: device descriptor read/64, error -71
05:51:41 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x541b, &(0x7f0000000100)={0x2})

05:51:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:51:41 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x101)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_iso={0x0, {0x9, 0x1}, 0x9, 0x4, &(0x7f00000000c0)="db1b6658635b554bf78f79f589322112955b3084546a7aea5ab75aadb2b24cf78faa70eaeb7a465cd08cd56cb8470b6f8322cf63df064a01fe129cbaf5d0e433c64bd01ded9a2d8d556951317416c9c082bca5797981e1032af591a73c59033bc345d949db67b9c7e763811e9b5779ff6e777442fa4b6518978f98a1", 0x7c, 0x400, 0x81, 0x36, 0x7ff, 0x7, &(0x7f0000000880)="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", [{0x0, 0x0, 0xff}, {0x20000800, 0x1, 0x4}, {0x2, 0xde, 0x6}, {0xe0d, 0xa00000}, {0x3f, 0x80, 0x1}, {0x8, 0x0, 0x3}, {0x6341, 0xfff, 0x6}, {0x0, 0x45, 0x4}, {0x6, 0x3fc, 0x40}, {0x4, 0xfff, 0x2}, {0x9, 0x3, 0x9}, {0xfffeffff, 0xffffffff, 0x4}, {0x7, 0x80000001, 0x47}, {0x3, 0x3, 0x7}, {0x10001, 0x3f, 0x5}, {0x100, 0x4, 0x100}, {0x7ff, 0x1a, 0x9}, {0xde, 0x6fce, 0x72c}, {0x4, 0x0, 0xfffffffd}, {0x800, 0x6, 0x2}, {0x7, 0x80000000, 0x3ff}, {0x6, 0x3d4a, 0x6}, {0x4, 0x80000000, 0xe6e}, {0xfffffff9, 0x8, 0x6}, {0x59, 0x9, 0x80000000}, {0x3f, 0x86870000, 0x7}, {0x85, 0x100, 0xffffffff}, {0x5a0a8834, 0x7, 0xef}, {0xffff, 0xf1e, 0xb}, {0x401, 0x1000, 0x22f4}, {0x2, 0x3, 0xfffffffc}, {0x2, 0xff, 0x502}, {0x24, 0x400, 0x6}, {0x1ff, 0x53d, 0x4}, {0x1ff, 0x9, 0x15dbd249}, {0x5, 0xfffffff8, 0x4}, {0x1ff, 0x10000, 0x7}, {0x6, 0xfd, 0xfff}, {0x800, 0x9, 0xffff}, {0x9, 0xe83e}, {0x200074, 0x7, 0x2}, {0x25, 0x101, 0x7fffffff}, {0x10000004, 0x3b, 0x8}, {0x1, 0x8, 0x10a8}, {0x0, 0xc, 0x3}, {0x9, 0xf22, 0xffff}, {0x3ff, 0x8, 0x7}, {0x377d, 0x6, 0x7}, {0x2, 0xfc4, 0x8}, {0x0, 0x8, 0xfff}, {0xce, 0x4, 0x2}, {0x7, 0x6, 0x1}, {0x0, 0x7, 0x5}, {0x2, 0x6, 0x3}]})

05:51:41 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x4800}, 0x0)

05:51:41 executing program 4:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000340)={0x6, 0x5, 0x3, 0x7, 'syz0\x00', 0x8})
r1 = memfd_create(&(0x7f0000000200)='syH\x19eXem0md5sum$\x00', 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x800)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a40)=ANY=[@ANYBLOB="72617700000000010c00000000000000000000000000000000000000000000000200000003000000a80200003801000038010000380100710e000000000000001002000010020000100200001002000010020000030000000000000000000000000000007f000001000000000000000076657468305f766972745f776966690073797a6b616c6c65723100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0003801000000000000000000000000000000000000000048006c696d69740000000000000000000000000000000000000000000000000000000000010000000000000000000000000000ecffffffffffffff00000000000000000000000000380074696d6500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000061505bbe03ef821a00000000000000000073797a6b0161d6c92665b8ca0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000ae080000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000000006800435400000000000000000000000000000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028000000000000000000000000000000000004feffffff"], 0x1)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000100)={'broute\x00', 0x0, 0x3, 0xad, [], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000240)=""/173}, &(0x7f00000001c0)=0x78)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_targets\x00')

05:51:41 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2647.208895][T27826] usb 6-1: USB disconnect, device number 60
[ 2647.315278][T10252] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:51:41 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000000fcffffff770400000000000000b3b6000000000000004000190000000000000089085dce323da01f064fd86e6bcbcecf6ee42956473eef2d6e4af304d81a7789b5c41e2e1bca957864d36e33340fae97572fc0b2", 0x58}], 0x2)

05:51:41 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@mpls_getnetconf={0x5c, 0x52, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_IFINDEX={0x8, 0x1, r6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8000}, @NETCONFA_IFINDEX={0x8, 0x1, r9}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x2000c8c1)

[ 2647.388522][T10260] xt_CT: You must specify a L4 protocol and not use inversions on it
05:51:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:51:41 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x4, @ipv4={[], [], @broadcast}, 0x220}]}, &(0x7f0000000180)=0x10)

[ 2647.476669][T10259] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2647.495549][T10264] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2647.510455][T10267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2647.550539][T10259] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2647.576639][T10252] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2647.578124][ T5840] usb 3-1: new high-speed USB device number 6 using dummy_hcd
05:51:41 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x1a, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="232201b2580400"], 0x0}, 0x0)

05:51:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2647.598120][T10277] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2647.606965][T10264] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2647.622076][T10267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2647.706465][T10300] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2647.707457][T27826] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 2647.947454][ T9868] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 2648.008020][ T5840] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2648.015619][ T5840] usb 3-1: can't read configurations, error -61
[ 2648.097506][T27826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2648.109042][T27826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2648.120340][T27826] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2648.177553][ T5840] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 2648.207392][ T9868] usb 2-1: Using ep0 maxpacket: 8
[ 2648.207552][T27826] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2648.222467][T27826] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2648.230859][T27826] usb 6-1: Manufacturer: syz
[ 2648.236923][T27826] usb 6-1: config 0 descriptor??
[ 2648.327590][ T9868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2648.342128][ T9868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2648.353316][ T9868] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.40
[ 2648.363438][ T9868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2648.373650][ T9868] usb 2-1: config 0 descriptor??
[ 2648.577497][ T5840] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2648.585138][ T5840] usb 3-1: can't read configurations, error -61
[ 2648.593008][ T5840] usb usb3-port1: attempt power cycle
[ 2648.719140][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.726763][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.752239][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.763987][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.773764][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.785471][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.795380][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.807085][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.816832][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.831938][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.841736][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.853482][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.865722][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.879786][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.887206][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.901102][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.913263][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.926917][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.936846][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.947575][ T9868] usbhid 2-1:0.0: can't add hid device: -71
[ 2648.951539][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.953990][ T9868] usbhid: probe of 2-1:0.0 failed with error -71
[ 2648.963258][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2648.980256][ T9868] usb 2-1: USB disconnect, device number 38
[ 2649.001859][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.021342][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.031729][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.043625][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.053431][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.065184][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.087352][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.094768][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.108103][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.115496][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.129324][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.136712][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.151600][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.161261][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.172976][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.182666][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.194175][T27826] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 2649.204127][T27826] plantronics 0003:047F:FFFF.005E: No inputs registered, leaving
[ 2649.221620][T27826] plantronics 0003:047F:FFFF.005E: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2649.317502][ T5840] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 2649.567505][ T5840] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2649.575119][ T5840] usb 3-1: can't read configurations, error -61
[ 2649.647407][T27826] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 2649.727392][ T5840] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 2649.887400][T27826] usb 2-1: Using ep0 maxpacket: 8
[ 2649.977976][ T5840] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2649.985590][ T5840] usb 3-1: can't read configurations, error -61
[ 2649.992908][ T5840] usb usb3-port1: unable to enumerate USB device
[ 2650.008016][T27826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2650.019001][T27826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2650.029186][T27826] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.40
[ 2650.038620][T27826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2650.048853][T27826] usb 2-1: config 0 descriptor??
[ 2650.407529][T27826] usbhid 2-1:0.0: can't add hid device: -71
[ 2650.413625][T27826] usbhid: probe of 2-1:0.0 failed with error -71
[ 2650.425207][T27826] usb 2-1: USB disconnect, device number 39
[ 2650.437826][ T9868] usb 6-1: reset high-speed USB device number 61 using dummy_hcd
[ 2651.477418][ T9868] usb 6-1: device descriptor read/64, error -71
05:51:46 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x5421, &(0x7f0000000100)={0x2})

05:51:46 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x4c00}, 0x0)

05:51:46 executing program 4:
syz_open_dev$vbi(0x0, 0x1, 0x2)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@empty, r2}, 0x14)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg(r3, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0)

05:51:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:51:46 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

05:51:46 executing program 1:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x81, 0xfe, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa0}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4c2d3a8c900000f0000000065000000000000007b0a00ff000000009d00a9c6acb1cb1338000600000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
ioctl(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100))

[ 2652.032549][T32247] usb 6-1: USB disconnect, device number 61
[ 2652.109610][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2652.196558][T10387] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2652.407441][ T9868] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 2652.410107][T10372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:51:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2652.461773][T10386] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2652.484070][T10393] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2652.504947][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2652.523390][T10393] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2652.547816][T10372] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
05:51:46 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x5865}, 0x0)

[ 2652.549622][T10408] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2652.577447][T32247] usb 6-1: new high-speed USB device number 62 using dummy_hcd
05:51:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2652.695879][T10415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2652.762697][T10423] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2652.780926][T10421] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2652.781540][T10415] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:51:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:51:46 executing program 4:
open(&(0x7f0000000080)='./file0\x00', 0x111080, 0x32)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000001000000006e00ffc9ae728b006300000000000000000cb9a53e000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0, <r2=>0x0})
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x22)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r3, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x400, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r4)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r5, r1, 0xfffeffff})

[ 2652.818238][ T9868] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2652.832954][ T9868] usb 3-1: can't read configurations, error -61
[ 2652.853663][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:51:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="0f20e06635000200000f22e00f907800ea00789e000f78280f0f69fbae0f56c5652e0fae3b9a09001c0085a09974", 0x2e}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6a19119ba4295bc2b02a0b00dc73b8fe70da3f", @ANYRES16, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00032dbd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2044011)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x188, 0x0, 0x0, 0x70bd2b, 0x65dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x108, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be6ba12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x28c2}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1bb7a535}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46afcfbc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf812}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac98}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaaf9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc004}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10051c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e111d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c55148a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27538924}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fd7e1d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ff9b8f7}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x179dfc35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f94a461}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f3bb2cc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce65}]}, {0x4}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27721149}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe35f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa56f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x216}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24a47b64}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5109}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d00a55b}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28577e87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21947ae7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5624ac0b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="a02b0000266c298418e3f7b6d024a205d7c5e27f84ce9a70b0681a5a1530692d113eee074976cbdb364c239b69572763", @ANYRES16=0x0, @ANYBLOB="04002dbd7000ffdbdf250200000008000200020000000800010003000000100008800c00078008000600730000000800010002000000180008eb4c00078008000500ff03000008000600b300000008000100030000002c00048005000300070000000500030000000000050003000000000005000300060000000500030007000000080002000100000008000100010000000800020001000000"], 0xa0}, 0x1, 0x0, 0x0, 0x48001}, 0x8000)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0f298c9000042c"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4241}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x174, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24f2ac61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33fe1a49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2722bcae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35de492}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54e79a78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4be2f900}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a265422}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x453c1152}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d7e50d1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x682b4eac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54586a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44fa20f7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e6e90f7}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79dbba89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70173c8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f6df08d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x703d15b5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x454dfd40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc640373}]}, {0x4}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x24044040}, 0x6004)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xe0, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc8, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29c9911a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29f4f108}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47fb6c00}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd48b14c}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfc93880}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65d39e7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x488a25dc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xda34cb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b2459fc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2eac5319}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4aa6be06}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79fb6bc6}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40028891}, 0x20014840)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="4a51996db14fe917dd4be05e26b1fbafd3378c60b40cc9c3956580732bac1c1b44d80c7e24c292bde3823d7361f2ae6d424ea3a949a6e63c8ce5bac9681b857aa231abdd1c8f37a359061a52244ddf72af0fa3c2cc51d124944e570f52b954e0c4971238879ede821033800e825e08f50e333f61a60ea31df7fb848f0d46cb72f3ae137818d5f061e11d49c31beb87353649dc6f2015907b0e1970d2b98eab5e0b4960e028ceee2878a7", @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf2504000000480008800c00078008000500316d27592400078008000600bd00000008000600a900000008000500443c976808000600a00000001400078008000600b80000000800060082000000040008800c000480050003000200000008000100000000007c0008804400078008000600850000000800050029f30b75080006003e00000008000600850000000800050019d9f63e0800060052000000080006002000000008000600ba00000034000780080005006bb88853080006003b0000000800060052000000080006003f0000000800050071d8997608000600da000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4805c}, 0x8811)

[ 2652.880792][T10415] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2652.906839][T10423] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2652.938609][T10434] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2652.951046][T32247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2652.980776][T32247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2653.027464][ T9868] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 2653.043445][T32247] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2653.136334][T10442] warn_alloc: 2 callbacks suppressed
[ 2653.136354][T10442] syz-executor.1: page allocation failure: order:0, mode:0x400cc4(GFP_KERNEL_ACCOUNT|GFP_DMA32), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 2653.167982][T32247] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2653.177050][T32247] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2653.207718][T32247] usb 6-1: Manufacturer: syz
[ 2653.214822][T10442] CPU: 1 PID: 10442 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0
[ 2653.223524][T10442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2653.233572][T10442] Call Trace:
[ 2653.236871][T10442]  dump_stack+0x18f/0x20d
[ 2653.241213][T10442]  warn_alloc.cold+0x87/0x17a
[ 2653.245900][T10442]  ? zone_watermark_ok_safe+0x260/0x260
[ 2653.251481][T10442]  ? wait_for_completion+0x260/0x260
[ 2653.256777][T10442]  __alloc_pages_slowpath.constprop.0+0x2197/0x2780
[ 2653.263386][T10442]  ? warn_alloc+0x120/0x120
[ 2653.267892][T10442]  ? __alloc_pages_nodemask+0x3e5/0x930
[ 2653.273436][T10442]  ? lock_is_held_type+0xb0/0xe0
[ 2653.278364][T10442]  ? find_held_lock+0x2d/0x110
[ 2653.283142][T10442]  __alloc_pages_nodemask+0x68f/0x930
[ 2653.288522][T10442]  ? __zone_watermark_ok+0x370/0x370
[ 2653.293801][T10442]  ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780
[ 2653.300553][T10442]  ? lock_is_held_type+0xb0/0xe0
[ 2653.305487][T10442]  ? rcu_read_lock_sched_held+0x3a/0xb0
[ 2653.311022][T10442]  ? __alloc_pages_nodemask+0x6b1/0x930
[ 2653.316562][T10442]  alloc_pages_current+0x187/0x280
[ 2653.321668][T10442]  alloc_mmu_pages+0x7f/0x170
[ 2653.326335][T10442]  kvm_mmu_create+0x3cb/0x560
[ 2653.331025][T10442]  kvm_arch_vcpu_create+0x16d/0xb70
[ 2653.336219][T10442]  kvm_vm_ioctl+0x1547/0x23c0
[ 2653.340894][T10442]  ? lock_downgrade+0x820/0x820
[ 2653.345736][T10442]  ? kvm_unregister_device_ops+0x60/0x60
[ 2653.351356][T10442]  ? trace_hardirqs_on+0x5f/0x220
[ 2653.356370][T10442]  ? lockdep_hardirqs_on+0x6a/0xe0
[ 2653.361477][T10442]  ? tomoyo_path_number_perm+0x244/0x4d0
[ 2653.367102][T10442]  ? tomoyo_execute_permission+0x470/0x470
[ 2653.372905][T10442]  ? __might_fault+0x11f/0x1d0
[ 2653.377666][T10442]  ? __sanitizer_cov_trace_switch+0x45/0x70
[ 2653.383565][T10442]  ? do_vfs_ioctl+0x27d/0x1090
[ 2653.388320][T10442]  ? generic_block_fiemap+0x60/0x60
[ 2653.393506][T10442]  ? __might_fault+0x190/0x1d0
[ 2653.398257][T10442]  ? _copy_to_user+0x126/0x160
[ 2653.403014][T10442]  ? __fget_files+0x294/0x400
[ 2653.407686][T10442]  ? kvm_unregister_device_ops+0x60/0x60
[ 2653.413306][T10442]  ksys_ioctl+0x11a/0x180
[ 2653.417629][T10442]  __x64_sys_ioctl+0x6f/0xb0
[ 2653.422209][T10442]  ? lockdep_hardirqs_on+0x6a/0xe0
[ 2653.427333][T10442]  do_syscall_64+0x60/0xe0
[ 2653.431756][T10442]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2653.437637][T10442] RIP: 0033:0x45cb29
[ 2653.441528][T10442] Code: Bad RIP value.
[ 2653.445576][T10442] RSP: 002b:00007fd2a59c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2653.453978][T10442] RAX: ffffffffffffffda RBX: 00000000004e7f20 RCX: 000000000045cb29
[ 2653.461935][T10442] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
[ 2653.469893][T10442] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2653.477849][T10442] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 2653.485811][T10442] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fd2a59c56d4
[ 2653.540080][T32247] usb 6-1: config 0 descriptor??
[ 2653.594275][T10442] Mem-Info:
[ 2653.606929][T10442] active_anon:422306 inactive_anon:7051 isolated_anon:0
[ 2653.606929][T10442]  active_file:4177 inactive_file:32185 isolated_file:0
[ 2653.606929][T10442]  unevictable:0 dirty:36 writeback:39
[ 2653.606929][T10442]  slab_reclaimable:26978 slab_unreclaimable:208170
[ 2653.606929][T10442]  mapped:60251 shmem:7306 pagetables:74652 bounce:0
[ 2653.606929][T10442]  free:655179 free_pcp:943 free_cma:0
[ 2653.686007][T10442] Node 0 active_anon:1397912kB inactive_anon:16480kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216816kB dirty:4kB writeback:4kB shmem:17340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB all_unreclaimable? yes
[ 2653.707923][ T9868] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2653.720583][T10442] Node 1 active_anon:291312kB inactive_anon:11724kB active_file:16676kB inactive_file:128740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24188kB dirty:140kB writeback:152kB shmem:11884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? no
[ 2653.741105][ T9868] usb 3-1: can't read configurations, error -61
[ 2653.759640][T10442] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:4308kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:76kB pagetables:288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2653.773530][ T9868] usb usb3-port1: attempt power cycle
[ 2653.802565][T10442] lowmem_reserve[]: 0 2515 2515 2515 2515
[ 2653.832225][T10442] Node 0 DMA32 free:36312kB min:68684kB low:77660kB high:86636kB reserved_highatomic:2048KB active_anon:1393604kB inactive_anon:16480kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2578196kB mlocked:0kB kernel_stack:43928kB pagetables:88260kB bounce:0kB free_pcp:1972kB local_pcp:1136kB free_cma:0kB
[ 2653.955873][T10442] lowmem_reserve[]: 0 0 0 0 0
[ 2653.963658][T10442] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2653.997204][T10442] lowmem_reserve[]: 0 0 0 0 0
[ 2654.009272][T10442] Node 1 Normal free:2573096kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:291412kB inactive_anon:11724kB active_file:16676kB inactive_file:128740kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:76172kB pagetables:210060kB bounce:0kB free_pcp:1840kB local_pcp:1132kB free_cma:0kB
[ 2654.029319][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.088526][T10442] lowmem_reserve[]: 0 0 0 0 0
[ 2654.099840][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.124869][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.125176][T10442] Node 0 DMA: 1*4kB (M) 5*8kB (UME) 5*16kB (UE) 4*32kB (UM) 3*64kB (UE) 0*128kB 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10172kB
[ 2654.148858][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.171712][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.187747][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.197623][T10442] Node 0 DMA32: 2358*4kB (UMH) 694*8kB (UMEH) 327*16kB (UMEH) 155*32kB (UMH) 83*64kB (UMH) 36*128kB (MH) 7*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36888kB
[ 2654.224062][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.224531][T10442] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2654.251989][T10442] Node 1 Normal: 75*4kB (UME) 22*8kB (UE) 16*16kB (UE) 86*32kB (UE) 3*64kB (UME) 1*128kB (U) 108*256kB (UME) 198*512kB (UM) 97*1024kB (UME) 49*2048kB (UME) 547*4096kB (UM) = 2573020kB
[ 2654.256533][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.276826][T10442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2654.294419][T10442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2654.304260][T10442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2654.311550][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.322271][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.330281][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.335459][T10442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2654.338638][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.355400][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.357493][T10442] 22507 total pagecache pages
[ 2654.363411][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.375296][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.383234][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.383855][T10442] 0 pages in swap cache
[ 2654.391195][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.402894][T10442] Swap cache stats: add 0, delete 0, find 0/0
[ 2654.409486][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.417982][T10442] Free swap  = 0kB
[ 2654.421930][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.429996][T10442] Total swap = 0kB
[ 2654.433943][T10442] 1965979 pages RAM
[ 2654.438350][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.445937][T10442] 0 pages HighMem/MovableOnly
[ 2654.451163][T10442] 349903 pages reserved
[ 2654.455565][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.463459][T10442] 0 pages cma reserved
[ 2654.475977][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.484410][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.492350][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.500694][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.510318][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.519110][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.526703][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.535181][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.543113][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.551816][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.559743][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.568175][ T9868] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 2654.576195][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.585373][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.593994][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.602347][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.610431][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.618538][T32247] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0
[ 2654.626631][T32247] plantronics 0003:047F:FFFF.005F: No inputs registered, leaving
[ 2654.664841][T32247] plantronics 0003:047F:FFFF.005F: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2654.837527][ T9868] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2654.845204][ T9868] usb 3-1: can't read configurations, error -61
[ 2654.997424][ T9868] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 2655.127529][ T9868] usb 3-1: device descriptor read/8, error -71
[ 2655.337492][ T9868] usb 3-1: device descriptor read/8, error -71
[ 2655.458872][ T9868] usb usb3-port1: unable to enumerate USB device
05:51:49 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x5450, &(0x7f0000000100)={0x2})

05:51:49 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x6000}, 0x0)

05:51:49 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:51:49 executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}}, 0x0)
r5 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@deltclass={0x98, 0x29, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xc, 0xe}, {0x9}, {0x4, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7f}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x4c, 0x2, [@TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0xb}}, @TCA_ATM_HDR={0x37, 0x3, "e500b6639b0df6f4b319b9f6334ff75f937857cdd802008c1eb305386f4d92f491dcaf9d34bc90b0fd650bef6368a395387d82"}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @tclass_kind_options=@c_fq_codel={0xd, 0x1, 'fq_codel\x00'}]}, 0x98}}, 0x0)

05:51:49 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x500, 0x0)
ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000400)={0xfffffffe, 0x2, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0]})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c000200080003", @ANYRES32=r5], 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fd000000000000ffffac141440"], 0x2c}}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@private2, r5}, 0x14)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r7, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f00000004c0)=0x1, &(0x7f0000000580)=0x4)
sendmsg$nl_generic(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001100100027bd7000ffdbdf25099bd553"], 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x44)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000500)={{}, {}, [{}, {}, {0x2, 0x5}, {0x2, 0xa}, {0x2, 0x4}, {0x2, 0x5}], {}, [{}], {0x10, 0x5}, {0x20, 0x4}}, 0x5c, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x5, 0x7b8, [0x0, 0x200003c0, 0x200005ae, 0x20000982], 0x0, &(0x7f0000000040), &(0x7f00000003c0)=[{}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x3, 0x6a, 0xa01, 'vlan1\x00', 'virt_wifi0\x00', 'vlan0\x00', 'macvlan0\x00', @local, [0xff, 0x101, 0x0, 0xff, 0x0, 0xff], @link_local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0xae, 0x176, 0x1a6, [@time={{'time\x00', 0x0, 0x18}, {{0x0, 0x0, 0x147b0, 0xcd44, 0x80000001, 0x4, 0x3}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x3, 0x6, 0x80, 0x0, 0x0, "99538c469de221b84098788d61dd7d916f103ebe72960bfa53891f63758720e2ab1d8f3c87a169af0f00bf31b1a303b033520f08922a7a734da6dd9c8ed23a69"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8, 'syz0\x00', {0x7ff}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}}, {0x3, 0x10, 0x806, 'ip6tnl0\x00', 'veth0_to_hsr\x00', 'vcan0\x00', 'tunl0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x1ce, 0x1fe, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1ff}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:sshd_var_run_t:s0\x00'}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x9}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x9, 0x8, 0x805, 'syzkaller1\x00', 'vlan1\x00', 'erspan0\x00', 'rose0\x00', @broadcast, [0xff, 0xff, 0x0, 0x6af2ff0a09a0400c, 0xff, 0xff], @dev={[], 0x2b}, [0x25dfaf761010f687, 0xff], 0x10e, 0x13e, 0x18e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x3f, {0x0, 0x100, 0x6, @empty, [0xff, 0xff, 0xff, 0xff], 0x8, 0x1c000, 0x1, 0x3, @dev={[], 0x33}, [0xff, 0x0, 0xff], 0x4e23, 0x4e21, 0x35, 0x1b5, 0x134, 0x1d, 0x9, 0x159, 0x5, 0x400}, 0x4d5, 0x220}}}, @m802_3={{'802_3\x00', 0x0, 0x8}, {{0xd4, 0x8, 0x9, 0x1}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xf533}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz0\x00', {0x5b220000}}}}}, {0x11, 0x41, 0x8100, 'erspan0\x00', 'bond0\x00', 'veth0_to_hsr\x00', 'ip6gretap0\x00', @remote, [0xff, 0x0, 0x0, 0x0, 0xff], @random="c48c28a51cf9", [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x126, 0x1a6, 0x1f6, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0xee00, 0x3, 0x1}}}, @ip6={{'ip6\x00', 0x0, 0x50}, {{@ipv4={[], [], @broadcast}, @mcast1, [0xffffffff, 0xffff7f, 0x0, 0xff000000], [0xffffff00, 0xff000000], 0xe5, 0x0, 0x4, 0x48, 0x4e23, 0x4e23, 0x4e24, 0x4e21}}}], [@common=@log={'log\x00', 0x28, {{0x1, "3eeff00b66aaaee8bc6535c3785e4dfae37cff51fb9fd554978adff55c63", 0x6}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@log={'log\x00', 0x28, {{0x7f, "ca2dd3c1f926c913f5694c4a4497cd1647227d837d50d6aa7e045d2e283c", 0x4}}}}]}]}, 0x830)
fchown(0xffffffffffffffff, 0x0, 0x0)

05:51:49 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2655.956650][ T9868] usb 6-1: USB disconnect, device number 62
[ 2656.037730][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2656.076009][T10503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2656.095260][T10513] xt_CT: You must specify a L4 protocol and not use inversions on it
05:51:50 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2656.171967][T10512] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2656.184878][T10520] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2656.214173][T10512] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:51:50 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x6558}, 0x0)

05:51:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
semctl$SEM_INFO(0xffffffffffffffff, 0x3, 0x13, &(0x7f0000000780)=""/141)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

05:51:50 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2656.282951][T10536] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2656.309103][T10537] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2656.347652][T32247] usb 3-1: new high-speed USB device number 14 using dummy_hcd
05:51:50 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2656.450336][T10553] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2656.458803][T10560] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2656.489162][T10560] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2656.507630][ T9868] usb 6-1: new high-speed USB device number 63 using dummy_hcd
05:51:50 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20188, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x4, 0x0, 0x0, 0x200000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
ioctl$KDSKBLED(r0, 0x4b65, 0xff)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x400, 0x0)
ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000140))
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00')
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000200))
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
sendmmsg$alg(r1, &(0x7f0000002140)=[{0x0, 0x0, &(0x7f00000017c0), 0x0, 0x0, 0x0, 0x84}, {0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001880)="57817ee0c74bb160b2d3f5e2302387b6fac440e52d406a6b8016bcf01a9c0aedba2c7464d238a4be9313ddf83246789b8460fb7c34c076f5257f8293a4c290879f12d93ec0f5210fd8e896632173cffd1f5f697b95e7713231f7cb2f7f504023620d7a04d45ac3713fa173363a44da8a46692ed10a9fc9b5b9ba8c6d4102417e4d441f1ef0c3eda1334d264474583a3e4a04a24581e170460fc898e9c1f56e56f4aea6862db0ba2c7a402e59d0d6", 0xae}, {&(0x7f0000001940)="e8d6dbe69eb582f363acdeb9cbc8c58fa108d6cfdb4e0bc771e53f0a118ed3bcbf9b0d3eee174fffc639351fae08cca5ff7d9a966c3f4b9855a40bbab69a9e1feae549993d1bae57426bbf334aee4303fc0cf2e3848f6a051de872e1be74b39c618b1300b3ac04b99d2deea147e00ae714128fae9e14e527227b72972922e64f2f0357b5aa81a15503a3843e95a0d5c2a8e78ecb4b3c5b72f702b28fbc846363d45c5032e5dab1f3cbf4ddbaeef60d831df543b37682932192c0441705bcdce6093a93e19fff1af76b22e74b55b4cfc4610117704ef5defc", 0xd8}, {&(0x7f0000001c00)="2d8f4d6f55595f677fc6e75b2992138772ad09d5cf468cb129108a829905c072e6c02148fca540603ad2a8ecbbaec1c53198806a8bfa4c6f8184ed536429506deb8eb352e3f1c824e305a8971a2895cf290887beb53de299894071968adec1a7986bfc24a0d5ff96f10375cc400aa1a47f823d8adc46fd71c06c038aa835e6d7c6a386934360bb26c67ba8e7d9e170310e6a3a8ecca5e9f70521c982bccee9773d6a61d93b7dcecf139a", 0xaa}, {&(0x7f0000001a40)="3d5389875949fc46c0bd6ac3f202c5b5b221429b2d0ac007bab8963d527cfdba2353212bc40878dfbcf50c832fd73d0468909a3a6f310106ecef1a2b7d9f36820a6adef8192370084aacf69c158d59aa08b4", 0x52}], 0x4, &(0x7f0000001ac0)=[@iv={0x110, 0x117, 0x2, 0xf9, "ddd5074f5c0d0755a9f97b8a7406f39b9747513de43a00d8e3b3b8a69804bf24ab502f91a5275aaec4535efeef2e6732a49d1f57ee6adf23cd8c79f8f3f53cd7356c0be82f2a3db4ce7f077b6bdbe4e1b5239be4468c84e9ae240141a4f0d1c30323841de203a9dd82dae021f276095a6d0ccb855d932dd464542ec3f13830bfdd36d7e7441b5e7fcdbfeebe17ed822e971f5ca1d5bf43bff535fb41aa293439c121999b43bb79e4343fc327e4845677a914bbfe43e8de188977976311a0b22a18cb5c3379acbc5223f324831a7b4ee025aa7b83de86ca24fe97ac5b690e0d1a243dd67dc93ea0d5ee2a85089164dfa88c19a0d557f7e065db"}, @assoc={0x18}], 0x128, 0x44000}, {0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002240)="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", 0x101}, {&(0x7f0000001d80)="f2bb82e9d80c6590f505e50bb0af34824367c15cb9e978ae18f3316f754aaad27aa6b706d6645dd39bdec4d58c16845991b13f7f6be1e039d8e74e065b77021aaf4bc3d7b239", 0x46}, {&(0x7f0000001e00)="c8e221f04a4d02927a1ed941d015096d37f50d25fa9cd510114e460fb8562e98bf856494e0ea19705e6d70f5b4986c0f9a5f759d6dcda446462222c70e12a8b2efdf647217ba65ea901c79c778a00afcce2aa704b334c4c42f30f114d39551c9733b8be0509760826de96b37e2984c4d772931bbb9c3a9e9c88a9b7ddd39ec1149de20f034bf5a3222a4e09fd6954fb1ce35d11cd00acdafc431ef789c63a9292f142852fb93441ffafaba6678777ecb725f831ec07ad026c271274720a62bac97e347b04babecaf7f9f8423e710c7506844e9486ff1f1f220a53e5b746782a7b40349bdf188850d80ec6451b966343bd8", 0xf1}], 0x3, &(0x7f0000001f40)=[@iv={0x90, 0x117, 0x2, 0x75, "f5e4e687a692911fb507ef8b76502cda61984cec898a88c9803d54e70543fc0f9c958544fe91ea190c757a9b1ad71c542337c4e518685b40fd3173667ce3896c2eb21480d0261115e0311521541c38d2db990fad5a65bf359a021c268ef08c528019f56ab4efc5e4890099b7370f3ee880dd6985f2"}, @op={0x18, 0x117, 0x3, 0x1}], 0xa8, 0x800}, {0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000680)="b6331cbf40e7fedf035e340cc8d0a378294e7ea241823bb9bd830dbc3205e841e7ab7ff6025c3ef12597f616c1c17c0c3202c54302e54df5564a8781cee0b95f8e42d53469a50c0ab66ae613509175882bb75f1c9c4cb395f9e7b71087a3e16e4ab717e73e9054b1aa77cff3772557ab7632ff05f5d9", 0x76}], 0x1, &(0x7f0000001c80), 0x0, 0x4000}], 0x4, 0x4)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000340)={@local})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[ 2656.616248][T10575] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2656.650109][T10576] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2656.787538][T32247] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2656.795265][T32247] usb 3-1: can't read configurations, error -61
[ 2656.938094][ T9868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2656.949158][T32247] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 2656.956882][ T9868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2656.967113][ T9868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2657.058135][ T9868] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2657.067241][ T9868] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2657.075986][ T9868] usb 6-1: Manufacturer: syz
[ 2657.088390][ T9868] usb 6-1: config 0 descriptor??
[ 2657.357493][T32247] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2657.365230][T32247] usb 3-1: can't read configurations, error -61
[ 2657.372101][T32247] usb usb3-port1: attempt power cycle
[ 2657.559197][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.566604][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.593665][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.607742][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.615158][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.631405][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.643234][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.653048][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.664846][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.674682][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.686536][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.696304][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.709374][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.716739][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.736428][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.745066][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.758812][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.766209][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.778903][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.786328][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.802374][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.810511][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.824020][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.831648][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.845152][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.852781][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.866425][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.875149][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.888423][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.895788][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.909602][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.917054][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.930620][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.940233][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.951747][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.961362][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.973084][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.982696][ T9868] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 2657.994044][ T9868] plantronics 0003:047F:FFFF.0060: No inputs registered, leaving
[ 2658.024601][ T9868] plantronics 0003:047F:FFFF.0060: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2658.107516][T32247] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 2658.407567][T32247] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2658.415180][T32247] usb 3-1: can't read configurations, error -61
[ 2658.567354][T32247] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 2658.817780][T32247] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2658.825448][T32247] usb 3-1: can't read configurations, error -61
[ 2658.833803][T32247] usb usb3-port1: unable to enumerate USB device
[ 2659.367432][ T9868] usb 6-1: reset high-speed USB device number 63 using dummy_hcd
[ 2660.377401][ T9868] usb 6-1: device descriptor read/64, error -71
05:51:54 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x5451, &(0x7f0000000100)={0x2})

05:51:54 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x6800}, 0x0)

05:51:54 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, <r0=>0x0, <r1=>0x0}, &(0x7f0000000380)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000500)={{}, {}, [{}, {}, {0x2, 0x5}, {0x2, 0xa}, {0x2, 0x4}, {0x2, 0x5}], {}, [{0x8, 0x0, r1}], {0x10, 0x5}, {0x20, 0x4}}, 0x5c, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x5, 0x7b8, [0x0, 0x200003c0, 0x200005ae, 0x20000982], 0x0, &(0x7f0000000040), &(0x7f00000003c0)=[{}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x3, 0x6a, 0xa01, 'vlan1\x00', 'virt_wifi0\x00', 'vlan0\x00', 'macvlan0\x00', @local, [0xff, 0x101, 0x0, 0xff, 0x0, 0xff], @link_local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0xae, 0x176, 0x1a6, [@time={{'time\x00', 0x0, 0x18}, {{0x0, 0x0, 0x147b0, 0xcd44, 0x80000001, 0x4, 0x3}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x3, 0x6, 0x80, 0x0, 0x0, "99538c469de221b84098788d61dd7d916f103ebe72960bfa53891f63758720e2ab1d8f3c87a169af0f00bf31b1a303b033520f08922a7a734da6dd9c8ed23a69"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8, 'syz0\x00', {0x7ff}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}}, {0x3, 0x10, 0x806, 'ip6tnl0\x00', 'veth0_to_hsr\x00', 'vcan0\x00', 'tunl0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x1ce, 0x1fe, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1ff}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:sshd_var_run_t:s0\x00'}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x9}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x9, 0x8, 0x805, 'syzkaller1\x00', 'vlan1\x00', 'erspan0\x00', 'rose0\x00', @broadcast, [0xff, 0xff, 0x0, 0x6af2ff0a09a0400c, 0xff, 0xff], @dev={[], 0x2b}, [0x25dfaf761010f687, 0xff], 0x10e, 0x13e, 0x18e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x3f, {0x0, 0x100, 0x6, @empty, [0xff, 0xff, 0xff, 0xff], 0x8, 0x1c000, 0x1, 0x3, @dev={[], 0x33}, [0xff, 0x0, 0xff], 0x4e23, 0x4e21, 0x35, 0x1b5, 0x134, 0x1d, 0x9, 0x159, 0x5, 0x400}, 0x4d5, 0x220}}}, @m802_3={{'802_3\x00', 0x0, 0x8}, {{0xd4, 0x8, 0x9, 0x1}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xf533}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz0\x00', {0x5b220000}}}}}, {0x11, 0x41, 0x8100, 'erspan0\x00', 'bond0\x00', 'veth0_to_hsr\x00', 'ip6gretap0\x00', @remote, [0xff, 0x0, 0x0, 0x0, 0xff], @random="c48c28a51cf9", [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x126, 0x1a6, 0x1f6, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, r1, 0xee00, 0x3, 0x1}}}, @ip6={{'ip6\x00', 0x0, 0x50}, {{@ipv4={[], [], @broadcast}, @mcast1, [0xffffffff, 0xffff7f, 0x0, 0xff000000], [0xffffff00, 0xff000000], 0xe5, 0x0, 0x4, 0x48, 0x4e23, 0x4e23, 0x4e24, 0x4e21}}}], [@common=@log={'log\x00', 0x28, {{0x1, "3eeff00b66aaaee8bc6535c3785e4dfae37cff51fb9fd554978adff55c63", 0x6}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@log={'log\x00', 0x28, {{0x7f, "ca2dd3c1f926c913f5694c4a4497cd1647227d837d50d6aa7e045d2e283c", 0x4}}}}]}]}, 0x830)
r2 = dup(0xffffffffffffffff)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000000180)=0xc)
keyctl$get_persistent(0x16, r3, 0xfffffffffffffff9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000380)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000500)={{}, {}, [{}, {}, {0x2, 0x4, r0}, {0x2, 0xa}, {0x2, 0x4}, {0x2, 0x5}], {}, [{0x8, 0x0, r4}], {0x10, 0x5}, {0x20, 0x4}}, 0x5c, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x5, 0x7b8, [0x0, 0x200003c0, 0x200005ae, 0x20000982], 0x0, &(0x7f0000000040), &(0x7f00000003c0)=[{}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x3, 0x6a, 0xa01, 'vlan1\x00', 'virt_wifi0\x00', 'vlan0\x00', 'macvlan0\x00', @local, [0xff, 0x101, 0x0, 0xff, 0x0, 0xff], @link_local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0xae, 0x176, 0x1a6, [@time={{'time\x00', 0x0, 0x18}, {{0x0, 0x0, 0x147b0, 0xcd44, 0x80000001, 0x4, 0x3}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x3, 0x6, 0x80, 0x0, 0x0, "99538c469de221b84098788d61dd7d916f103ebe72960bfa53891f63758720e2ab1d8f3c87a169af0f00bf31b1a303b033520f08922a7a734da6dd9c8ed23a69"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8, 'syz0\x00', {0x7ff}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}}, {0x3, 0x10, 0x806, 'ip6tnl0\x00', 'veth0_to_hsr\x00', 'vcan0\x00', 'tunl0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x1ce, 0x1fe, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1ff}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:sshd_var_run_t:s0\x00'}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x9}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x9, 0x8, 0x805, 'syzkaller1\x00', 'vlan1\x00', 'erspan0\x00', 'rose0\x00', @broadcast, [0xff, 0xff, 0x0, 0x6af2ff0a09a0400c, 0xff, 0xff], @dev={[], 0x2b}, [0x25dfaf761010f687, 0xff], 0x10e, 0x13e, 0x18e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x3f, {0x0, 0x100, 0x6, @empty, [0xff, 0xff, 0xff, 0xff], 0x8, 0x1c000, 0x1, 0x3, @dev={[], 0x33}, [0xff, 0x0, 0xff], 0x4e23, 0x4e21, 0x35, 0x1b5, 0x134, 0x1d, 0x9, 0x159, 0x5, 0x400}, 0x4d5, 0x220}}}, @m802_3={{'802_3\x00', 0x0, 0x8}, {{0xd4, 0x8, 0x9, 0x1}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xf533}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz0\x00', {0x5b220000}}}}}, {0x11, 0x41, 0x8100, 'erspan0\x00', 'bond0\x00', 'veth0_to_hsr\x00', 'ip6gretap0\x00', @remote, [0xff, 0x0, 0x0, 0x0, 0xff], @random="c48c28a51cf9", [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x126, 0x1a6, 0x1f6, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, r3, r4, 0xee00, 0x3, 0x1}}}, @ip6={{'ip6\x00', 0x0, 0x50}, {{@ipv4={[], [], @broadcast}, @mcast1, [0xffffffff, 0xffff7f, 0x0, 0xff000000], [0xffffff00, 0xff000000], 0xe5, 0x0, 0x4, 0x48, 0x4e23, 0x4e23, 0x4e24, 0x4e21}}}], [@common=@log={'log\x00', 0x28, {{0x1, "3eeff00b66aaaee8bc6535c3785e4dfae37cff51fb9fd554978adff55c63", 0x6}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@log={'log\x00', 0x28, {{0x7f, "ca2dd3c1f926c913f5694c4a4497cd1647227d837d50d6aa7e045d2e283c", 0x4}}}}]}]}, 0x830)
stat(&(0x7f0000000140)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [{}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x4}, {}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x4, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r5}], {0x10, 0xf}, {0x20, 0x4}}, 0x6c, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
write$tun(r6, &(0x7f0000000500)={@val={0x0, 0x3}, @val={0x2, 0x80, 0x1, 0x3, 0x5, 0xeb8e}, @eth={@multicast, @broadcast, @val={@void, {0x8100, 0x4}}, {@llc_tr={0x11, {@snap={0xab, 0x1, '\v', "b4396c", 0x11, "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"}}}}}}, 0x1028)
ftruncate(r6, 0x40)
ioctl$EXT4_IOC_SETFLAGS(r6, 0xc028660f, &(0x7f0000000040))

05:51:54 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:51:54 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
dup(r0)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'tunl0\x00', 0x72})
r3 = socket(0x11, 0x800000003, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000040)=0xcd2)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x180, 0x0)
sendmsg$AUDIT_ADD_RULE(r6, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)={0x430, 0x3f3, 0x8, 0x70bd2d, 0x25dfdbff, {0x3, 0x2, 0x7, [0x8, 0x9, 0x3ff, 0xa01, 0x6a, 0x6, 0x9dfc, 0x10, 0x7, 0xd1, 0x400, 0x215, 0xfffffff9, 0x0, 0x10001, 0x6, 0x6, 0x1ff, 0x400, 0x1ff, 0x5, 0x1, 0x2, 0xfffffffa, 0x3f0, 0x6, 0xb4, 0x401, 0x21b6, 0x6, 0xb48, 0xffff8001, 0x2, 0x8, 0x3f, 0x67, 0x2000200, 0x4, 0x8, 0x20, 0x9, 0x24, 0x9, 0x8001, 0x2, 0x4, 0x5, 0x0, 0x9da0000, 0x2, 0x1000, 0x48, 0x6b8, 0x1, 0x100, 0x4, 0x6, 0x9d, 0x100, 0x2fb, 0x6, 0x1ff, 0x2, 0x4], [0x1, 0xdc9, 0x81, 0x7, 0x80000001, 0x2800, 0x3, 0x8000, 0x9, 0x3f, 0x7, 0x8, 0x1, 0x8000, 0x1ff, 0x7fff, 0x7fff, 0x1, 0x1f, 0xfff, 0x40, 0x752, 0x111, 0x1db4, 0xdd, 0x5, 0x5, 0x80, 0xfffffffe, 0x8, 0xbb, 0x3f, 0x3, 0x1, 0x3f, 0x0, 0x3, 0x19c, 0x74, 0x80000000, 0x6, 0xbf9, 0x1000, 0xf0000000, 0x5, 0x1f, 0xfffffff8, 0xf204, 0x401, 0x401, 0x7, 0x8000, 0xffff, 0x1ff, 0x0, 0x7, 0x1, 0x646bdeec, 0x2, 0x7, 0x79f, 0x7, 0x3, 0x2], [0x2, 0x0, 0xff, 0x0, 0xfff, 0x20, 0x4, 0x200, 0xfffffc01, 0x2a79400, 0x6, 0x7, 0x8, 0x7, 0x1, 0x57f, 0x6, 0x4, 0x0, 0x1, 0x2, 0x8, 0x4, 0x800, 0x8, 0x5, 0x6, 0x3, 0x7fffffff, 0x4, 0x8000, 0x1000, 0x1237, 0x7, 0x822, 0x1, 0x9, 0xb9, 0x6, 0x2, 0x20, 0xfffffff9, 0x7ff, 0x7, 0x1, 0x5, 0x682, 0x5, 0x1, 0x8, 0xfffffe00, 0x3, 0x4, 0x2, 0x7ee, 0xfffff801, 0x100, 0x9, 0x5, 0x5, 0xaf, 0x7, 0x3, 0x80000001], [0x8, 0x8001, 0x6, 0x3, 0xff, 0x800, 0x1f, 0x800, 0xac8, 0x0, 0x8000, 0xff, 0x26, 0x401, 0x3, 0x2, 0x79, 0x800, 0x7f, 0xffff8001, 0x7, 0xff, 0x1, 0x7, 0x8, 0xff, 0xbb, 0x8, 0x5, 0xbc, 0x1, 0x7, 0xb5423434, 0x3, 0x3f, 0x8, 0x8, 0x40, 0x0, 0x2, 0xc000000, 0x81, 0x1f, 0x4, 0x6a93, 0x4, 0x3, 0xffffffff, 0x8, 0x20, 0x7f, 0x7, 0x3, 0x81, 0x9, 0x3, 0x7fff, 0x1ff, 0xd300, 0x2, 0x2, 0x8, 0x5, 0x4], 0x10, ['\x97%\x00', '\x00', 'fq\x00', 'tunl0\x00', 'fq\x00']}}, 0x430}, 0x1, 0x0, 0x0, 0x4000000}, 0x20671ee226ee2ddb)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r7)
r8 = dup2(r7, r0)
read$fb(r8, &(0x7f0000000140)=""/160, 0xa0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000012c0)=ANY=[@ANYBLOB="3800000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffff000100667100000c00020008000e0000000000"], 0x38}}, 0x0)

05:51:54 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2660.950599][T27826] usb 6-1: USB disconnect, device number 63
05:51:55 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2661.048466][T10637] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2661.048485][T10635] __nla_validate_parse: 7 callbacks suppressed
[ 2661.048495][T10635] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2661.083836][T10641] xt_CT: You must specify a L4 protocol and not use inversions on it
05:51:55 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200, 0x0)
ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="8000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0xa4401)
r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r2, r3}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'sha512-avx\x00'}})
r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$instantiate(0xc, r3, 0x0, 0x0, r4)

[ 2661.253272][T10648] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2661.265556][T10651] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2661.275274][T10650] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2661.288598][T10662] xt_CT: You must specify a L4 protocol and not use inversions on it
05:51:55 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2661.304377][T10648] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2661.328072][T10635] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2661.337575][ T5840] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 2661.347105][T10648] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:51:55 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x6c00}, 0x0)

05:51:55 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2661.381609][T10669] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2661.400571][T10670] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2661.428353][T10675] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2661.437652][T27826] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 2661.466174][T10675] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
05:51:55 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2661.490894][T10675] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2661.492926][T10682] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2661.512593][T10687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2661.514740][T10683] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2661.547696][T10675] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2661.563544][T23720] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 2661.584760][T10690] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2661.697596][ T5840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2661.712899][ T5840] usb 3-1: config 0 has no interfaces?
[ 2661.797939][ T5840] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2661.807088][ T5840] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2661.817291][T27826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2661.828338][T23720] usb 5-1: Using ep0 maxpacket: 16
[ 2661.834511][ T5840] usb 3-1: Manufacturer: syz
[ 2661.843874][T27826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2661.861621][ T5840] usb 3-1: config 0 descriptor??
[ 2661.864528][T10693] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2661.875312][T27826] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2661.948083][T23720] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30
[ 2661.959681][T23720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2661.971904][T23720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2661.982833][T23720] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73
[ 2661.995902][T23720] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[ 2662.006330][T27826] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2662.016305][T27826] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2662.024677][T23720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2662.032921][T27826] usb 6-1: Manufacturer: syz
[ 2662.045016][T23720] usb 5-1: config 0 descriptor??
[ 2662.056385][T27826] usb 6-1: config 0 descriptor??
[ 2662.113364][T28063] usb 3-1: USB disconnect, device number 18
[ 2662.544388][T23720] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0061/input/input43
[ 2662.557524][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.564922][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.584968][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.600772][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.613532][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.628278][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.657489][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.664889][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.679804][T23720] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0061/input/input44
[ 2662.696580][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.739915][T23720] kye 0003:0458:5013.0061: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0
[ 2662.753007][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.767579][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.775079][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.792009][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.799586][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.827838][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.857410][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.889289][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.921189][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.951984][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2662.975074][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.004898][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.018518][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.025981][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.039897][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.050529][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.061136][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.071748][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.085702][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.105247][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.132664][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.154911][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.176022][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.205241][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.212799][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.227144][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.234879][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.248747][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.256205][T27826] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 2663.271252][T27826] plantronics 0003:047F:FFFF.0062: No inputs registered, leaving
[ 2663.293613][T27826] plantronics 0003:047F:FFFF.0062: hiddev97,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2663.340147][T27826] usb 5-1: USB disconnect, device number 91
[ 2664.107500][T27826] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 2664.347480][T27826] usb 5-1: Using ep0 maxpacket: 16
05:51:58 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x5452, &(0x7f0000000100)={0x2})

05:51:58 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:51:58 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x7400}, 0x0)

05:51:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x7289, 0x68400)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000440)="a62b63f6baac2fdce16b6665ddbe34bf6be99b97e00e6b7eeacea8af5672fed22c00a49d899941fbb82526b9a12d97818c00731c5cc4d6c7ef5b53899a3057e1979f5b88be78fd03781dd59f239a356557fa93be29bf4525e72c08145df9d57b8ceb05f4f735837f03733cc3e5fe27b32d076ad81656fba0d5248bc4b45e84967344e1b8d0dcede05b0297aefd76146b4cd163939b0b569740b410728d5c97815e0473b6be078b1ccb666dd76228a5a630864162d03ee29eedbdb896a191e2bde5", 0xc1}, 0x68)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x22)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r3, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
ptrace$getsig(0x4202, r4, 0xc7, &(0x7f00000002c0))
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00')
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc0400ea8ea900", @ANYRES16=r5, @ANYBLOB="09040000000000000000010000001400020077673100000000000000000000000000d40008804c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff24000200ef637f15e08cf70d92b902404536f960e58c8a177535c64e19fefee4ce04179f780000804800098028000080060001000a0000001400020000000000000000000000ffffac1414aa05000300000000001c00008006000100020000002d000200ac1414aa050003000000000006000500000000002400010000000000000000000000000000000000000000000000000000000000000000000c0000800800030000000000"], 0xfc}}, 0x0)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x4000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f0000000380)={0x0, 0x2, 0x0, 'queue1\x00', 0x800})
pidfd_send_signal(r1, 0x4, &(0x7f0000000240)={0x4, 0x0, 0x5}, 0x0)

05:51:58 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2664.460732][ T9868] usb 6-1: USB disconnect, device number 64
[ 2664.473118][T27826] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30
[ 2664.520750][T27826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2664.546313][T10784] xt_CT: You must specify a L4 protocol and not use inversions on it
05:51:58 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000140)={0x800, 0x81})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000006f035292957df80000000000000007010076657468b95e2358ec9841371a593e0d5973b9f7085c3234873fec3688f3238024fda4a3103530ef4d7380f3a3626670c4a33317baaefb04aa64f05643656ec1ad2e6975279f58027057a0f41ecf39cbcfe6e738d55d3de508b3fca762ddfb12d540385d40af7420bcc7fb2ebbffd37a1479a4492dbea8064fed3f6f482039d9b7286b0db2f393f8ba4e1c67198698110840ce3c99f9b89668679d5bffbcd07c7adc36855be7e8a1ffed4f2eb884cbd9ea530a978d6f4c9a9dc95e724e76ca0ae9ce3af89fb430aabae7a424"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(0x0, r2, &(0x7f00000000c0)='./file0\x00')
r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x8800000)
write$fb(r2, &(0x7f0000000500)="04e317bc8b57103bd92b3669ead888e85f907c2d2fd7abe7f95e3a01df138f5007ccfbe95b546bf425b3bb2152f8f8fb24a7b4715bf8dfd220f697f90d8c20583a14391a206f6819b18c1790b186de3f54bda8f7c75006c13b11555a291d5ff8484478f2039b5960b523c687d087fe2e479fbf024452", 0x76)
socket$nl_generic(0x10, 0x3, 0x10)

[ 2664.609949][T27826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
05:51:58 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2664.666972][T27826] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73
[ 2664.682163][T10799] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:51:58 executing program 4:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x640100ff}, 0x55)
listen(r0, 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/108}, {&(0x7f0000000600)=""/87}, {&(0x7f00000000c0)=""/18}, {&(0x7f00000002c0)=""/30}, {&(0x7f0000000300)=""/108}, {&(0x7f0000000380)=""/139}, {&(0x7f0000000440)=""/238}]}}], 0x4000106, 0xa042, &(0x7f0000000040)={0x77359400})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='numa_maps\x00')
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r5 = dup3(r4, 0xffffffffffffffff, 0x80000)
ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e22, @private=0xa010102}, 0x1, 0x0, 0x0, 0x0, 0x3ff, &(0x7f0000000240)='veth0_macvtap\x00', 0x80000001, 0xfff, 0x7})
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000002a561d31000050700b2b4ac2c5c1983", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x4044010)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf25310000000800db00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="eb2f84edab88a5c73f20885c92c9dea728b009b4cb84af8052a254be769cb9dbd7c6219ee85b6114bb6ace47353128e4a1333b25a14ca0ec139b9d7e1fd3a2"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x1)

[ 2664.777566][T27826] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[ 2664.815607][T27826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
05:51:58 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x7a00}, 0x0)

[ 2664.831224][T10810] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2664.866012][T27826] usb 5-1: config 0 descriptor??
05:51:58 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2664.918578][T27826] usb 5-1: can't set config #0, error -71
[ 2664.953435][T27826] usb 5-1: USB disconnect, device number 92
05:51:59 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x10007fe)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})

05:51:59 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x8100}, 0x0)

[ 2665.047614][ T9868] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 2665.049379][T10830] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2665.074533][T10822] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2665.167729][T23720] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 2665.215844][T10841] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2665.242747][T10848] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2665.427471][ T9868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2665.438539][ T9868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2665.450065][ T9868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2665.527429][T23720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2665.537465][ T9868] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2665.538228][T23720] usb 3-1: config 0 has no interfaces?
[ 2665.546734][ T9868] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2665.561266][ T9868] usb 6-1: Manufacturer: syz
[ 2665.568669][ T9868] usb 6-1: config 0 descriptor??
[ 2665.633312][T23720] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2665.642626][T23720] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2665.655123][T23720] usb 3-1: Manufacturer: syz
[ 2665.661789][T23720] usb 3-1: config 0 descriptor??
[ 2665.926485][ T6144] usb 3-1: USB disconnect, device number 19
[ 2666.049681][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.057092][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.083387][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.094373][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.106923][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.123775][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.140897][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.154446][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.164992][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.180359][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.200739][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.213345][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.223330][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.235830][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.245746][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.259000][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.266367][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.280075][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.290766][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.301462][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.312204][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.322828][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.333451][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.344133][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.354931][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.365543][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.376146][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.386921][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.400681][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.410334][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.421950][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.431852][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.457410][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.466437][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.474168][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.481654][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.489488][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.496881][ T9868] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0
[ 2666.504901][ T9868] plantronics 0003:047F:FFFF.0063: No inputs registered, leaving
[ 2666.535027][ T9868] plantronics 0003:047F:FFFF.0063: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2667.767457][T27826] usb 6-1: reset high-speed USB device number 65 using dummy_hcd
[ 2668.757419][T27826] usb 6-1: device descriptor read/64, error -71
05:52:03 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x5460, &(0x7f0000000100)={0x2})

05:52:03 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:03 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xd51a}, 0x0)

05:52:03 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6161aeb8eb063d109690552400c2ae0a4d00000084726b7c5be8f9a69dd3d7f39221677e3b69575292f8122f1fdb1b00000000000002efc2702f79de1ae80b080c8626b1045174349866355f790c00957f7f29b4ca797fad3fde22fcb9b156b84140a81ac257000b8fce9ff25c829bd3dc5be27b81cb9989bef96664450c1300"/138, @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x20040050}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000000c0)=0x1, 0x4)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000007c80)=ANY=[@ANYBLOB="2c67a70082fe89dc230bc3cdab6c88d81f444f1636ada1864a5c82498aabb15e8c2b952d2032376324076c00d443e1acac7f3e44e19bfd236d90025330415a3047e8d2f84dcfdd196774fe4543017a24c5ba21679c65d0e398a98612d7caa80e868fae", @ANYRES16=r0, @ANYBLOB="000000000000060000000200000006000b0026000000"], 0x2c}, 0x1, 0x0, 0x0, 0x890}, 0x0)
recvmmsg(r0, &(0x7f0000008c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000000140)=""/124, 0x7c}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/181, 0xb5}, 0x7}, {{&(0x7f0000000700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002940)}, 0x8}, {{&(0x7f00000029c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000002b00)=""/4096, 0x1000}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000004c80), 0x0, &(0x7f0000004cc0)=""/235, 0xeb}, 0x4}, {{&(0x7f0000004dc0)=@alg, 0x80, &(0x7f0000006000)=[{&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000005e40)=""/83, 0x53}, {&(0x7f0000005ec0)=""/196, 0xc4}, {&(0x7f0000005fc0)}], 0x4}, 0x3dee}, {{&(0x7f0000006040)=@xdp, 0x80, &(0x7f0000000240)=[{&(0x7f00000060c0)=""/15, 0xf}, {&(0x7f0000006100)=""/75, 0x4b}], 0x2, &(0x7f0000000500)=""/251, 0xfb}, 0xb97}, {{&(0x7f00000062c0)=@ipx, 0x80, &(0x7f00000075c0)=[{&(0x7f0000006340)=""/74, 0x4a}, {&(0x7f00000063c0)=""/4088, 0xff8}, {&(0x7f00000073c0)=""/140, 0x8c}, {&(0x7f0000000880)=""/183, 0xb7}, {&(0x7f0000000780)=""/104, 0x68}], 0x5, &(0x7f0000007640)=""/69, 0x45}, 0x7e47}, {{&(0x7f0000007980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000007c40)=[{&(0x7f0000007b00)=""/16, 0x10}, {&(0x7f0000007b40)=""/103, 0x67}, {&(0x7f0000007bc0)=""/117, 0x75}], 0x3, &(0x7f0000008f40)=""/4107, 0x100b}, 0x10000}], 0x9, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000040)={0x2, 0x2, 0x35, 0x1, 0x100})
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
r6 = syz_open_dev$video(0x0, 0xfffffffffffeffff, 0x4002)
ioctl$VIDIOC_ENUMAUDOUT(r6, 0xc0345642, &(0x7f0000000280)={0x7ff, "2e25f3035cf6b4da6e27836cb0dcf15e8cb8c2be3870fccee3814a8500f585a0", 0x2})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
sendfile(r5, r0, 0x0, 0x7ffff000)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000000380)=0x2)

05:52:03 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

05:52:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, <r2=>r1})
ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000300)={0x6b, &(0x7f0000000280)=""/107})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000340)=""/133, &(0x7f00000017c0)=0x85)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x9c, 0x9, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="fee7ee9d20e4"}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x2}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4880}, 0x1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000})
ioctl$KVM_NMI(r4, 0xae9a)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYRES16=0x0, @ANYBLOB="000000002f52f0bfbf99abe12906000000df"], 0x18}}, 0x0)

[ 2669.341077][T23720] usb 6-1: USB disconnect, device number 65
[ 2669.426466][T10897] __nla_validate_parse: 12 callbacks suppressed
[ 2669.426477][T10897] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2669.526945][T10910] xt_ct_set_helper: 2 callbacks suppressed
[ 2669.526952][T10910] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:03 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2669.653249][T10909] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2669.693526][T10912] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2669.702478][ T9868] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 2669.738332][T10909] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2669.763775][T10905] warn_alloc: 2 callbacks suppressed
[ 2669.763793][T10905] syz-executor.4: page allocation failure: order:0, mode:0x400cc4(GFP_KERNEL_ACCOUNT|GFP_DMA32), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 2669.786887][T10905] CPU: 1 PID: 10905 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0
[ 2669.795561][T10905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2669.805607][T10905] Call Trace:
[ 2669.806299][T10897] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2669.808904][T10905]  dump_stack+0x18f/0x20d
[ 2669.808928][T10905]  warn_alloc.cold+0x87/0x17a
[ 2669.808946][T10905]  ? zone_watermark_ok_safe+0x260/0x260
[ 2669.808977][T10905]  ? wait_for_completion+0x260/0x260
[ 2669.809001][T10905]  __alloc_pages_slowpath.constprop.0+0x2197/0x2780
[ 2669.809039][T10905]  ? warn_alloc+0x120/0x120
[ 2669.809055][T10905]  ? __alloc_pages_nodemask+0x3e5/0x930
[ 2669.809076][T10905]  ? lock_is_held_type+0xb0/0xe0
[ 2669.860553][T10905]  ? find_held_lock+0x2d/0x110
[ 2669.865329][T10905]  __alloc_pages_nodemask+0x68f/0x930
[ 2669.867650][T10912] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2669.870705][T10905]  ? __zone_watermark_ok+0x370/0x370
[ 2669.870726][T10905]  ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780
[ 2669.870741][T10905]  ? lock_is_held_type+0xb0/0xe0
[ 2669.870763][T10905]  ? rcu_read_lock_sched_held+0x3a/0xb0
[ 2669.901292][T10905]  ? __alloc_pages_nodemask+0x6b1/0x930
[ 2669.906868][T10905]  alloc_pages_current+0x187/0x280
[ 2669.912007][T10905]  alloc_mmu_pages+0x7f/0x170
[ 2669.916690][T10905]  kvm_mmu_create+0x3cb/0x560
[ 2669.921372][T10905]  kvm_arch_vcpu_create+0x16d/0xb70
[ 2669.926583][T10905]  kvm_vm_ioctl+0x1547/0x23c0
[ 2669.931265][T10905]  ? lock_downgrade+0x820/0x820
[ 2669.936118][T10905]  ? kvm_unregister_device_ops+0x60/0x60
[ 2669.941751][T10905]  ? trace_hardirqs_on+0x5f/0x220
[ 2669.946799][T10905]  ? lockdep_hardirqs_on+0x6a/0xe0
[ 2669.951915][T10905]  ? tomoyo_path_number_perm+0x244/0x4d0
[ 2669.957542][T10905]  ? tomoyo_execute_permission+0x470/0x470
[ 2669.963353][T10905]  ? __might_fault+0x11f/0x1d0
[ 2669.968120][T10905]  ? __sanitizer_cov_trace_switch+0x45/0x70
[ 2669.974009][T10905]  ? do_vfs_ioctl+0x27d/0x1090
[ 2669.978765][T10905]  ? generic_block_fiemap+0x60/0x60
[ 2669.983969][T10905]  ? __might_fault+0x190/0x1d0
[ 2669.988724][T10905]  ? _copy_to_user+0x126/0x160
[ 2669.993481][T10905]  ? __fget_files+0x294/0x400
[ 2669.998159][T10905]  ? kvm_unregister_device_ops+0x60/0x60
[ 2670.003780][T10905]  ksys_ioctl+0x11a/0x180
[ 2670.008105][T10905]  __x64_sys_ioctl+0x6f/0xb0
[ 2670.013645][T10905]  ? lockdep_hardirqs_on+0x6a/0xe0
[ 2670.018745][T10905]  do_syscall_64+0x60/0xe0
[ 2670.023153][T10905]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2670.029035][T10905] RIP: 0033:0x45cb29
[ 2670.032912][T10905] Code: Bad RIP value.
[ 2670.036976][T10905] RSP: 002b:00007fe72f7bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2670.045387][T10905] RAX: ffffffffffffffda RBX: 00000000004e7f20 RCX: 000000000045cb29
[ 2670.053346][T10905] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005
[ 2670.061303][T10905] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2670.069259][T10905] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
05:52:04 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xf000}, 0x0)

[ 2670.085900][T10905] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fe72f7bf6d4
[ 2670.094496][T23720] usb 6-1: new high-speed USB device number 66 using dummy_hcd
05:52:04 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2670.186206][T10934] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:52:04 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2670.235570][T10939] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2670.267098][T10941] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2670.293053][T10934] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2670.312643][T10949] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2670.326691][T10934] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2670.341345][ T9868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2670.362454][T10941] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2670.368801][T10905] Mem-Info:
[ 2670.374432][ T9868] usb 3-1: config 0 has no interfaces?
[ 2670.374705][T10905] active_anon:422298 inactive_anon:7051 isolated_anon:0
[ 2670.374705][T10905]  active_file:4177 inactive_file:28529 isolated_file:0
05:52:04 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x20000}, 0x0)

[ 2670.374705][T10905]  unevictable:0 dirty:35 writeback:0
[ 2670.374705][T10905]  slab_reclaimable:27087 slab_unreclaimable:210120
[ 2670.374705][T10905]  mapped:60319 shmem:7308 pagetables:74990 bounce:0
[ 2670.374705][T10905]  free:655768 free_pcp:1019 free_cma:0
05:52:04 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2670.442771][T10905] Node 0 active_anon:1397912kB inactive_anon:16480kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216836kB dirty:0kB writeback:0kB shmem:17340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB all_unreclaimable? yes
[ 2670.481877][T10955] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2670.518042][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2670.524041][ T9868] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2670.537027][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2670.540048][ T9868] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2670.558040][T10905] Node 1 active_anon:291180kB inactive_anon:11724kB active_file:16676kB inactive_file:114136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24368kB dirty:112kB writeback:0kB shmem:11884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? no
[ 2670.563016][ T9868] usb 3-1: Manufacturer: syz
[ 2670.588806][T23720] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2670.603533][T10961] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2670.608342][T10905] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:4308kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:76kB pagetables:288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2670.614293][T10955] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2670.643774][ T9868] usb 3-1: config 0 descriptor??
[ 2670.706509][T10905] lowmem_reserve[]: 0 2515 2515 2515 2515
[ 2670.713233][T10905] Node 0 DMA32 free:37016kB min:70732kB low:79708kB high:88684kB reserved_highatomic:2048KB active_anon:1393604kB inactive_anon:16480kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2578196kB mlocked:0kB kernel_stack:43928kB pagetables:88260kB bounce:0kB free_pcp:2468kB local_pcp:1676kB free_cma:0kB
[ 2670.752366][T23720] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2670.761821][T10905] lowmem_reserve[]: 0 0 0 0 0
[ 2670.766491][T10905] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2670.799642][T23720] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2670.809277][T23720] usb 6-1: Manufacturer: syz
[ 2670.821436][T23720] usb 6-1: config 0 descriptor??
[ 2670.826556][T10905] lowmem_reserve[]: 0 0 0 0 0
[ 2670.833347][T10905] Node 1 Normal free:2575324kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:291080kB inactive_anon:11724kB active_file:16676kB inactive_file:114136kB unevictable:0kB writepending:112kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:76528kB pagetables:211224kB bounce:0kB free_pcp:2156kB local_pcp:1400kB free_cma:0kB
[ 2670.874222][T10905] lowmem_reserve[]: 0 0 0 0 0
[ 2670.880744][T10905] Node 0 DMA: 1*4kB (M) 3*8kB (UME) 5*16kB (UE) 4*32kB (UM) 3*64kB (UE) 0*128kB 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10156kB
[ 2670.902623][T10905] Node 0 DMA32: 2366*4kB (UMH) 791*8kB (UMH) 232*16kB (UMH) 170*32kB (UMH) 82*64kB (UMH) 39*128kB (UMEH) 9*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37488kB
[ 2670.926362][T10905] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2670.942377][T10905] Node 1 Normal: 345*4kB (UME) 185*8kB (UME) 80*16kB (UME) 79*32kB (UME) 63*64kB (UM) 18*128kB (UM) 55*256kB (UM) 200*512kB (UM) 98*1024kB (UME) 51*2048kB (UME) 547*4096kB (UM) = 2574796kB
[ 2670.960387][ T9868] usb 3-1: USB disconnect, device number 20
[ 2670.967138][T10905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2670.995749][T10905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2671.012930][T10905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2671.026065][T10905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2671.041525][T10905] 18445 total pagecache pages
[ 2671.046200][T10905] 0 pages in swap cache
[ 2671.052456][T10905] Swap cache stats: add 0, delete 0, find 0/0
[ 2671.061981][T10905] Free swap  = 0kB
[ 2671.065693][T10905] Total swap = 0kB
[ 2671.071907][T10905] 1965979 pages RAM
[ 2671.075713][T10905] 0 pages HighMem/MovableOnly
[ 2671.085040][T10905] 349903 pages reserved
[ 2671.091315][T10905] 0 pages cma reserved
[ 2671.318852][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.326289][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.334331][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.342246][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.350205][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.358134][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.365747][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.373712][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.381681][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.389620][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.397219][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.405166][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.413083][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.421047][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.428935][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.436571][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.444648][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.452586][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.460530][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.468500][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.476116][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.493339][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.509605][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.518813][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.538341][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.545896][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.553740][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.561582][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.569974][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.577828][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.585398][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.593320][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.601228][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.609141][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.616671][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.624539][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.632719][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.640564][T23720] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0
[ 2671.648698][T23720] plantronics 0003:047F:FFFF.0064: No inputs registered, leaving
[ 2671.671952][T23720] plantronics 0003:047F:FFFF.0064: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2673.107402][ T6144] usb 6-1: reset high-speed USB device number 66 using dummy_hcd
[ 2674.097393][ T6144] usb 6-1: device descriptor read/64, error -71
05:52:08 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x6364, &(0x7f0000000100)={0x2})

05:52:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x196, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x300)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
sendmmsg$unix(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000140)="c8e3308151046c381669a732480c640eb072118755f4f6eca4ab865ed7da3a64b47094c7d0f804b94ad6612fdbeb75eb163f3df2fc845c4ae5e47e37be59d14e41c495ed88aebd22cae80dd1a8a18f5a7b1ca4f683442f7b1d9dabd282fcfa32b281feb9fd22ac5e64cbeca6343576917ea7d417bae9fe31a9d025944dad6acf9389bdec620ab3bed62db6c041da7f0cddbee694776a50eb01a87bbb4d5f62db080a16a8e79781243560020436f054c3bca0a157af", 0xb5}, {&(0x7f0000001300)="bdbc716ebed03c49a8bbad507644df3fb3b23ac18ede41bba2d5397baefe9227f62a83c4b81d2da0125054e18c3e2722bf72cb291cf87ef69822cfd2e505f7247d841a8321c6c78be374d9a568d9cfaa6b4a96de4c09207449a8838164cb865f481d3f0d9d61a4e02cec675593b69fd1bb00e31bbe3684f4d7428010aa73e2bec16cb81f24a6cf6b83739bab6fb68ab627ad56c4f3a7eedb30297158fca99e07230d35f0202362424a636de179ccde4378bb54e1c99a5bbff6db213fd92853bd46884b", 0xc3}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="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", 0x1000}], 0x5, &(0x7f0000000000), 0x0, 0x40}], 0x1, 0x24000000)

05:52:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x40000}, 0x0)

05:52:08 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:08 executing program 4:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(0x0, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x0, 0x29, 0x0, 0x0, 0x7f, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, @perf_config_ext={0x24b03cce, 0x5}, 0x0, 0x6, 0x0, 0x5, 0x10000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f00000001c0), 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0x400000, @local}, 0x1c)
listen(r0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000), 0x4)
ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0x10000, 0x45cd44aa, 0x4, 0xd}})
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00')
sendto$inet6(r2, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b)

05:52:08 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

05:52:08 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2674.514754][T11009] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2674.538227][T11012] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2674.548428][ T6144] usb 6-1: device descriptor read/all, error -71
[ 2674.566938][T11015] __nla_validate_parse: 2 callbacks suppressed
[ 2674.566950][T11015] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2674.689757][T11024] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
05:52:08 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2674.731916][T11024] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2674.748944][T11015] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2674.767647][T23720] usb 3-1: new high-speed USB device number 21 using dummy_hcd
05:52:08 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}])
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa04, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @private0}}}, 0x48)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
io_submit(r1, 0x2000000000000072, &(0x7f0000000080))
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000340)={0x5, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}}}, 0x88)
r6 = syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRESOCT=r6, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="030476", @ANYRES16=r6, @ANYBLOB="00022abd7000fddbdf253fcc642f0200000008000600ed00000088000500030000004400035f31000000000600040007000000060007004e2200000500080001000000140006050000000000000000000000000000000020000380080005007f000001140002006d61637365633000000000000000000008ba7200a80a0000"], 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r6, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0xd0)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r6, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000000)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x4000000)
sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0xc8, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000000}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000084}, 0x10000001)

05:52:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xf0ffff}, 0x0)

05:52:08 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2674.876601][T11039] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2674.903212][T11045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2674.917719][ T6144] usb 6-1: reset high-speed USB device number 66 using dummy_hcd
[ 2674.963169][T11050] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2674.980742][T11045] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:52:09 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x1000000}, 0x0)

[ 2675.012624][T11060] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2675.022525][T11045] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2675.034665][T11050] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2675.089011][T11062] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2675.125584][T11065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2675.136429][T23720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2675.157401][T23720] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2675.188713][T11068] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2675.200656][T11065] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2675.214177][T11068] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2675.237988][T23720] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2675.247045][T23720] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2675.255678][T23720] usb 3-1: Manufacturer: syz
[ 2675.261959][T23720] usb 3-1: config 0 descriptor??
[ 2676.094321][ T9868] usb 3-1: USB disconnect, device number 21
[ 2676.301994][ T6144] usb 6-1: USB disconnect, device number 66
[ 2677.068381][T23720] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 2677.427997][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2677.438955][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2677.449136][T23720] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2677.537914][T23720] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2677.546946][T23720] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2677.555488][T23720] usb 6-1: Manufacturer: syz
[ 2677.567552][T23720] usb 6-1: config 0 descriptor??
05:52:11 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x8912, &(0x7f0000000100)={0x2})

05:52:11 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x2000000}, 0x0)

05:52:11 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x4c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400466912a9dc8de6ccec5b800ecc4b3257ebdfa50a20e1bf41cb0b4b06ee2c44c654e706d855aab9fa4e55f363a20f4e151ad4d3edaf233e1d9f5741c92b01d140c2823bbc18cff50ac0e4f51c473923c387b0d7db525e2d70ba3e9b9d11712d0506bae85039fd4019b03b5e25e861f303478747ca4863038c99e3d871c2421d994ac8bae92f90d2dd0575f95180c0d4b2c1581a3f918e28ef12a7a8ade1ae181e37bcda7decc5db87ffd5f36bee43b8edefbc7d0c1267", @ANYRES32, @ANYBLOB="0000000000000000140012000c00010062"], 0x34}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
fcntl$setflags(r2, 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000001c0)={0x2, @pix_mp={0x7, 0x9, 0x3831354f, 0x1, 0xb, [{0x6}, {0x80000001, 0x2}, {0x7c, 0x81}, {0x1, 0x9}, {0x1f, 0x10000000}, {0x3e, 0x1}, {0x4, 0x2}, {0xfffffffb, 0xffffffff}], 0x1, 0x9, 0x4, 0x1, 0x6}})

05:52:11 executing program 4:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x6, "278bba56b38d553d875cc691bf0d81c4198ebbdef10fae81850b724ffb9e4b3f", 0x5, 0x400, 0x7, 0x6636fe89, 0x10, 0x2, 0x1f, 0x9})
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed009064d60010003d000080", 0x14}], 0x1}, 0x0)
uname(&(0x7f0000000080)=""/122)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000800000008000100427066001400020020000400000000000408050004000200"], 0x40}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x130, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x2000084}, 0x4000010)

05:52:11 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff0000090000010902240001"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2677.607521][T23720] usb 6-1: can't set config #0, error -71
[ 2677.615207][T23720] usb 6-1: USB disconnect, device number 67
[ 2677.760500][T11123] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:11 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2677.828968][T11130] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:52:11 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
syz_usb_connect$cdc_ecm(0x2, 0x66, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x4400, 0x0)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0xa9c4, 0x65, &(0x7f0000000140)="17aca96573881a9c604bcd4c93d0d497093c02004fa2d25617da7ac2d16195979c87ea8520ba505ab0c68ecf8b3bd9d1a0a6b7591b44c64ecddcd7d2c1d43bc284d46f05234577b6703822dbbcd189458160e767fa7250da0f2bb04d6724622f87bde9caa0f7614abf822036c1f4212fbe792be836be1186d8624969d7a851c4b584faa74e1f903180b260ad96af931fb8677b69814eaf4072c159a50140eb827061d6e30af63a1728bea4a5e5a1e6850eb91a3894"})
getsockname$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x20)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x3a)

[ 2677.957779][ T5840] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 2678.018045][T11124] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2678.031328][T11146] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:12 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x3000000}, 0x0)

05:52:12 executing program 4:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1b, 0x0, 0x64}})
readv(r0, &(0x7f0000001400)=[{&(0x7f0000000000)=""/132, 0x84}], 0x1)
ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x13}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @broadcast}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000040}, 0x40010)

05:52:12 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2678.124770][T11154] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2678.150450][T11156] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2678.208523][T23720] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 2678.218708][T11166] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2678.225816][T11160] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2678.263758][T11167] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2678.317483][ T6144] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[ 2678.328053][ T5840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2678.345522][ T5840] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2678.427940][ T5840] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2678.436964][ T5840] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2678.446384][ T5840] usb 3-1: Manufacturer: syz
[ 2678.457414][ T5840] usb 3-1: config 0 descriptor??
[ 2678.589098][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2678.600072][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2678.610266][T23720] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2678.627516][ T6144] usb 2-1: device descriptor read/64, error 18
[ 2678.697533][T23720] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2678.703031][ T9868] usb 3-1: USB disconnect, device number 22
[ 2678.711547][T23720] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2678.727435][T23720] usb 6-1: Manufacturer: syz
[ 2678.748851][T23720] usb 6-1: config 0 descriptor??
[ 2679.037539][ T6144] usb 2-1: device descriptor read/64, error 18
[ 2679.229089][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.236767][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.255740][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.269159][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.276557][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.297402][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.304795][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.312376][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.319904][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.327397][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.327841][ T6144] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[ 2679.334777][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.334800][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.334820][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.370076][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.380542][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.391046][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.401529][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.412080][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.422773][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.433789][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.444300][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.454803][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.465447][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.476102][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.492790][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.500313][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.513735][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.521212][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.534742][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.542206][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.555649][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.565111][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.578801][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.586241][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.599752][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.607140][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.617576][ T6144] usb 2-1: device descriptor read/64, error 18
[ 2679.620442][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.636309][T23720] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0
[ 2679.656792][T23720] plantronics 0003:047F:FFFF.0065: No inputs registered, leaving
[ 2679.674518][T23720] plantronics 0003:047F:FFFF.0065: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2680.031962][ T6144] usb 2-1: device descriptor read/64, error 18
[ 2680.158760][ T6144] usb usb2-port1: attempt power cycle
[ 2680.887460][ T6144] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[ 2681.047505][ T6144] usb 2-1: device descriptor read/8, error -71
[ 2681.053762][T32247] usb 6-1: reset high-speed USB device number 68 using dummy_hcd
[ 2681.257488][ T6144] usb 2-1: device descriptor read/8, error -71
[ 2682.057451][T32247] usb 6-1: device descriptor read/64, error -71
05:52:16 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x8933, &(0x7f0000000100)={0x2})

05:52:16 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:16 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r2, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x35f7ae7eb1b0f9ce}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x3f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10000}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x8814}, 0x44000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_GROUP={0x8, 0x1b, 0xe01c}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008004}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000000)=0xd3d, 0x4)

05:52:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x4000000}, 0x0)

05:52:16 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff0000090000010902240001"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

05:52:16 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000002840)='net/udplite6\x00')
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x3}], 0x1c)
dup3(r2, r1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00')
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8)
getdents(r3, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000))
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4)
ftruncate(r4, 0x600004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r5, &(0x7f0000001300)=[{&(0x7f00000017c0)=""/4107, 0x100b}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/126, 0x7e}], 0x3)
ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/88})

[ 2682.608555][T32247] usb 6-1: can't restore configuration #0 (error=-71)
[ 2682.616576][ T9868] usb 6-1: USB disconnect, device number 68
[ 2682.691521][T11229] __nla_validate_parse: 12 callbacks suppressed
[ 2682.691531][T11229] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2682.777978][T11245] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:16 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2682.947456][T11243] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2682.959601][T32247] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 2682.999203][T11249] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2683.032721][T11243] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:52:17 executing program 1:
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80, 0x80000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x6}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0xa00, 0x0)
ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000240)={0x7, "4b5115dec6333c0525e8fa08211dbc8fd8e38d995229219e111847a27c5b91ec", 0x4, 0x8, 0x1ff, 0xc, 0x2})
getsockname$l2tp(r2, &(0x7f00000002c0)={0x2, 0x0, @dev}, &(0x7f0000000300)=0x10)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80000, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000001980)={&(0x7f0000000380), 0xc, &(0x7f0000001940)={&(0x7f00000003c0)={0x1580, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1000}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x24}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1464, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, "6e8404eeb34cb4f637cf1aa4a82e24ecae86ddc25c76c4a3c0085b6ae89840be8a0215fb907c8842964258ff0d5ad0bf7853ca1bac4756a10760866f614f1339ebcfd97f8850f8711ccdc18f18b2e6610414c9112462c980193c8ea83e14689697353f07cb21a7cf7cf3cb8ef86e63dd13d6a4afba0d5164671ad5bbbcc163f804f2a3d7d975995cc6429f488fdf64321635cc88bea2b186dae31025a1d2d618a35b28a0b7542d70"}, @NL80211_BAND_5GHZ={0xb8, 0x1, "bfd4a7f1463a02a02645e7cff9d6684e087f825cf64cbc954adf4945719bd63fd9c7aee811aceb02276325ca27e8f1b8d20839800866076c71eeb56a4620a0fa872256cbb7b148236fa7106532a6a8e2132816d5107dad1a7e410a10c260f1b62f4b2019c88585230fbca16f845f96c348b80c9d73eea7e75fd5569fe5914aa968fe6b134f8a94140619ca4bf646935594e470756e138a86cca77ed645bdd3a46f2a1459b4c1b5aff68e0ab6d0e552ae93b57832"}, @NL80211_BAND_5GHZ={0xa2, 0x1, "a49de640b1bcf5d5fe2850c2f3522585cfb427000eac6bb3e4b13739807980b3c295ce012eefcfbeb5f7a862ebb59af4d54c2181683497053ab7a712d6027163c05692820264b20f03a8d1db2910c8d5c720fe4f0add0ee7e048f3347189b053c6320545287e2ccfb3be611c35b79e6bfc05d44a7f63d92bf1cf8723c532a4a4bfb6b7a587fd116e0c78364211b320ccfeaef9981721356562dc37022bdb"}, @NL80211_BAND_5GHZ={0xac, 0x1, "82b816a484b8752ec6ad78b80e3286416c503e969f211cbeff4841743cdc30ff7d388f793b53cfbb04e1ccb74772dda676c0f8f0f1a76a851338d5fa62bcc15e78e44e5e9884ea1c9cf3fd8cc04583e45e924ddeaf1848670d6aa62d5d245a7913769b413b56f4a2ad5149b7a70007ced9f27b7fd71424e13e7b95bbc728b4355bdf6be306aecde380d61b8714490430504228bb8d8f7731b3e426b6c296dc3a344f959b1903c8cc"}, @NL80211_BAND_6GHZ={0x53, 0x3, "fed1976afb4a4543af9dfdd1df45c893aff6bd6dba22bd84f8ad42c3ed186e9cedc1068b7731c156963b91ce1464ae9b4d632ae395f061bd5845c676b87f87cfdb58775e16b5ca3518ed963e245819"}, @NL80211_BAND_2GHZ={0xfa, 0x0, "dc56a9163aa35121ac1a76705af68a3799007b0432c4118dc1fd7fcd5c814618ec7fb1ce07c027ab673f63c521b84f41c8f943bad72775d082218d927ea1fee24ebba958b3a882dfe65f956269408c0d6434a80198371a35079c82a5749a8dde6ef8779ecd8a1d26489de284f03c5c2fa7deaf459c8a0d269f568d91527841f1e692269eb8f545946007be6f478bf0c3db5974c2576a4c7e995d5906d8d4c06c3d1441502ce0a972316d937c2ee8c7040ecd603a55716b3e27298690b08d8c3ff9739505a3f02256aff9ef94bda328219fd3f4bd7827c276b0ad3d9d1cb0d64a2c286ab882f12cc3e9b1d01db698c1e9d0a809cf2f47"}, @NL80211_BAND_5GHZ={0x56, 0x1, "ddbd2a6e1a5d9b1041fd5e13ec791714dacf5bbed72549dd87c354a5e7de1fbb98d9225aea5762983aea627c89c6d2c94dc05b7109bc06d4933a65cc6a1ef6084c1fc9bd4e412f85cb8a4841cf301a26aaa0"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "838e6dcd5b80513de4225730921daad6c746afd3433923c412c5d9247d9014359e16cc916224cde10229ccd56afbae6a497e56c46e12343308127031e38efdabb1f0cb3ff71cc91ce72cd94f5b5f44915e4a67d93edfe13e656b229e1b565ca85d9687d7d056c70c90a483084065c203e8a6bb22e527305469a2090c170d9777441f85dd1dd7ae25ef9c0e0c284ea0d83e4f42498af9b26ded5fd991d7bc9f9b6b6618e385808d0a51062d5c03d470d544cfcac27ac8d4ece948b874b35d0d390e12dda4db7f280ed148897d7c5b1df71f4ab16d1483cce1c22450531b41ee9e2a08fec62b251436f331564cd3c7154c9b0af3e4543afa4f80ab357e8783591d1b09afa05a94000c738196b3baee412d50d5af19e7d2f0ac346f5af0300e22dc9ad9d370d1c307804658ddc6a42f5e1cf6c6c133d1c6e9ef99516a95cfadb58592bf4ed8e5fca5b2d507f4bfed8ce7b15434cfb19f8d7e325d73393e830460dcc879806f76c18556d9f249909792f52a327bbdcf75b2dbb849ecd32be7f0aa5e8df5cd5b7972b883ccaa93f09e3dac4f6c89b4e5e4dc46f6b0e05fea659c10f7428bcedba7e4008a42adcb17a5180ccc7c15d9495018fcbbf3180a3c2a630fc647af0df1eb005984797688b2e74962b02a30698d9dcb13e6b1f96929517019961ee1c1611a5120e992996e7d7c85f9708f56cbe878fb42cbceb41a26f4dd974494d2e46cb96e8dd80caa1950dc23949b1b7a1d9b1972a8dadbce406dd904cbc9f0a47a97f8078e888557c9454893a65cc7fd565c37a38c5440a2cae782ab04f1575b922c52c7cf360e630fb9d6ff338010da001e09ff224f52ab6b39eae0386b3fc2012b31f0cb6255b4a4cb5b2dda2822784cc4a99a86971bb217c720abc89340ff0d20f34294dde215c23e26955af4dde3ba3b6dada6c1953ddc767e9ce95d3f37c8ab02adf82e228a2fbb49a92e6e42aa650cbb882365f5644ce76d02c16a6303ecaaa018258c6077204ba2ed66f76c02d2f3191c55c2278382a0c07ec0a6d0b00d87644cf10382bf069177f14957e6602b4c5bccbf0e486b2a45391c2065d7a73a5168050693d1fc111dfa65b2db135e955e358e5a7621c51ecdade95da2aef91ef91b42807a22654cbdc9f7fbeb14a2118e1ac4e851acd6aae4863731d064c5c381824cda808596ef9eae97f79ffc4a40e6674c174fe144e2963c2f1d4e8abf7b5bb2090c95d1e85f26272c0e8940efdce9fd229dffd2afa5d5d97d0a7501f5e91e87b11accf0f878bbf67fc8bf5a0233dee6dc312e2e4dab91ebdc1bedb32bbc9f37125f7bc889fcca03664d3e920fe8683980e055a25bc8b3bfaa86f7e7c21adbce40dffc583ef5e37a622cf4e521d2615c7bd16f7934a2083b4d4cf3ed3a5d4b66d19f216dbb7321dd6cce2d2f8495f263ab42a1e4e2a96b2e87e98ce3b43cd3305b5701bc1382d05e46e89d7ab1f18b6a65c0f9acdc393c80092bfa8b2150815e8e13d4ecaa780616109a87d21786bcc52f2832738c8e9d2de38d1acdd6042ce03bad7aea1a54276a7fa7c12730ad3b7cc518a835a0bde37b45dc8b72e0b7fa55f42424f9fa94bebad0cb38c9a75b94ce5be4e8641256382af2f6ff2dbb86d4f08caa22569bf5ee6880d9d172575220c214065b6fbbe0fb67fb71201bec2f85a6b61240913d0681901f5c2bc7b44ac59f5962b12733c2e6aa3cd18d01933a1a5905e3360a462724e09ad3a96f3487c37554d8faaf6f05158f42f66df3f241c5a4f059b3853b72c89e964129d7a775cbf80d93355e4a32f2bdc7ca0d64f83098a05bda642b149ef3155cf62b3648c1f85c53c14c6508faf0d320b04ba0665b91a490f22070cd28db29e70198fc5d15699eb3513a586f4a3885d7b76a37e09eeb09b633abf17a1d068e773a747bf8225ff99f49f5e615608e438be57e69628216418258e9a547bdb8492e21f0ea083eed88b06b45e918c742a817737932e8a177d74fd5074db0cf203026de0ba13f49a099d8dd57f901807b2599503e9736d8d56d9c948cf25e5a8e935e9b6d6a5bd396d1bd05f48573d442b1ad6ee7eb4210fccfabef339a8759ea13b8c5127ddd7d383cf604b5e6af1b01a1eb0fd49f58520e759021c9f3272bfc955802506f26d028a2d51e880030cc5ea4b983f5559347addd57895bbe5b1435590b065c1c4d60691881b17cc0f4c75d9e9c53ddee50238f383b501a8b5aec7452ff14966d73c8b70d75ff6b5412d5632876dbefd25aa87b3b3ed5bef6cc9028a55304e7efcdd301974b58178d9be54c8d77031e28b8cc53bb50a1050868e6bfd42b285f305aedec7b017c05c6de833ec17528ac123a899d7c9b8558ef621fde53429f4590b9a466a6ff814994dc4dfd03bd41abe1a56c2adc4653c7724d28eafbcc5b786f4472559a8545ca2cb042d5d46fea0d4d2255288af6e1ffee1a328f137ce6378f46d7de58b4935346f1c084dd09b7f3cd03b26dc4e7185b51db9d83817bbd822cf27915237beb9084d32392f706781d3c9eab77deb516b0c506b15d7d01e44baa9f59e6074008b08f8142be712b9907f05768b96efbb7bbc3e818a8f77145c312751499e31035ff8990707bb7486d0889ae386ca8662884a6c7db73f96a9fb2974825a088ce73340928be4eef706069df1f65735d71b0842b2b8ffba883a33a66e9b028a67d9d060e0358b9df8577c9c68bec927c6d22ecd2eeb9ad25c30d240927a42850cdd6ddc73a9aa4b60aadd7262fa4ad1cd9aa72c3b2e2db743e31bca4030465c9253b39dcd3db6b75e04bc4daf15ab3d8f36fea11ea688b03f560d5158b0fddd9f53ccb18b65cdaa786f5191f30bdae2e2dbce1031511f0abbb14593217a44b46a13f125dd156c21dd2ba54b905c7e6b1b707deefde61b6f19273e3780f357d34e4a99b239a49620bebe8d08ebb9c2991f674a338e86b5577373d16e56d90a5af73b19d6adeeaba930745e41b6584892905da2927b58d05d3b998dc2e5ad7db42c6ee28b47325802c7d60f546def503f81129318f1d5e1859f6cc7db740887ef50fee7178f3892d97fc61928a8a78e864f7972861fa78abb9f41ce43c8e43f9077cd977ffa752e22300b3e07fb2a2df66268ccca9576240f8bbf19ca4f9313bf974f1380ea9fe7053775c5a747056c0b66b2b44a2c293b0979e407b1ec8ded5b554f835c894282a002ba2720f9f288b795e4e2c2d3795af1d46cc85d2c49664aeaf7650be501215aeec66f6fe9f4180929969b25f86bb528f794a29982b5b616bf682338e31b43626dca0c005cd38c07316e398b556295cdff2227716659af4de2549ba94f86d485f2f2a0b1998da548dc8cf027908626b35508a72d6947aa70415965efc4a48840b4cd7d57bdad1b6905977b42e66d1a28111c80a94a0c5fd4301c2b8b3d1dcd043f2fdbdd51ffaf779accab15a909b809edcbf73089f245cf99af621b8d2762ff426fca59375fbeb602f007f3eda1a4c4cc3b34a29a5532badd95a95f468a552b05824d1bc0a6d8eada9f81d649da4a7f4f7b1c3432499fd3d53713948fb7b72360e6706070b5a5b43d741ca2482414eed0e50ac99b4c779584f3c1566c8dc4bbacb1ef3b57672b23e59213a02a12c8753e0a80bf903050ba6ced345853bf23133db3d241bf3df3354dae1931df6bdb82c87b1b64c14ab11b6b0e1fc4f1231d0e3d40b42a8d414c8219a074dcfa6e8180373885d22bee321f6ccda2cd3d0cb803eefa443779d7a2b5f0bf3853d5e0139177f2f4fe5b058069a39f49b4f77c9dd8d6ae157c531c956f3b8a4faa11e2753078008e32a65c4aa6a2a4a358f444a2f88e4c0dbd98c294d62d3c31dd646d84ae98d022b006a503eb24f58b5f3635a47c9adb8fa281fa94b3dd70be9b25281ff487dd6db114588629d9b1b7110edcb3ba355893c4ebc0dfdf5d47bd334c0a6346752f3a3954a0561d71c4f40717664654fa0efd05e3c932d9fe51be66cc809d406ab68c3ece6b26b272f9130e301117fffb03a1d7b50c3bb76d113750818ec89cf73575cedf9c995884d10a9284620bee3cef9c155759f246f04dc0f34e4c14e17b05add073e39c37798ebc59ee2bb96046a6a86fc643e76ba5f7e3ab38f225bf988193d6fd2ffe622e13f81b7f2942815b73f341d1d70cc1c7ed2a9f178d4a8d0b0e2f8bc6025a77c3d7239f30e678682318c227b05ba52733a2dc33df2b0807f1256977053342e62f832bf681fcbe496c0627e05d120e0972904861bc505dc5892b74d9aed1ced4cff90bebb8f22c4f2453aabfb0b3c020f684c7502ac6e691863c991dc72180798ebf534a6aaf09a5a63f8861891356691d89c8d1b8cc2b12803ea1975b1674107f97a104f121ab92d2a7c24cd5a746015204cf5ce87a80676b1747d42154e000fe80b5b70848b229836795e6747550c6dca17342c6a950ecd347a93751deff874ac1943d8102f7c1a35a30f5479f1771c99d3ee66ca6a0e77ad7563890270e4448ea50476a5c0553636ad34314f0654c103755d7775aac0afc76e8c49c92f277cfe7b21bc2249b77cdbf28acdd1284742838b42dfdc266bfa0a8eafe05e27b01e4d6700930972ee702456cd35ea7f933a567e701e6959e263c510482f5dd7bb1a8cc453fee5a393473ae97d7e644410a5f1fa32dde2e22a45fb286511c0b6a72d599ddcba4cdbf64dd93fa21e05c07bda5b09cc7a7ff4da275d8ef8f168cfe8b5e98d90f175d48c5ee0fd13381efda51912e32d63d012633703068e6956bc12fb31915de299c34c5b00eec33a501343d58abc3f1c17b9f2758cda0ea86ca92c29bc0a89ab90cfe4aebc04d9cf084a8edd8f92860ce1e4352782f88ff507e518a7adc9b6ef784a69bfb1caf1b44dbde7b65703ae1c622e90c88d939a2efae48fa1d1ad9da398338d8fa988c301e8ed9f2b590daf067e716167d7b9f9c806959fe02d4929249a722ad664918b131fd5e1109d881a8fb6646c778962c5a034d1a17579d73662b2926f9aa3fa2d65a02af33aed36b5ccd28d73432932a6dda40bc14d172aee404469655bd11da46bcb1229e15a1ddbce6acd5b09a470aff6523323730d1b71ec45638b9b8adc94c912496711b970a955f6522c1e162e9701550c49a5aad19fbc869404a971af019aa659cb7b48a693095103dcb02591ca355357ab2fcbbf63ea0db214556d12f29fded23a04c54925166d42f7e899d67a8a374a528858a0e199279a1260a4a7c6e96a67fa39f4a3983e987ec01b332f0c07034eccd0c1b37432a884c7c741ecfae283075159b906d90838a600c2093cfde0f0e1624b449ce5bf35fa8b970ae60d73b97eb139b31caff38fa9ead74bc81b8d84041970b6a1febf500b9ba325be9315a78992a5ebd64fab0d734136082f43f795c7a6f1b50ef2d8168a0a4f35b4007806eb4e45d85909ca67af6370ea80fe03927b3077485bb1e441593d805f72a59a75e66e79f27e39db4528c751abd20bf2a1cd63f3d60d6e8ef88999670894adfb4665b13b9fdcae829fb0d9ffd2d7c0c2504d8725182560e0e54751b5efc8afd0f6ce3206389839e2dfe7d972e466045b6fc7882492563a9beafaa1d8e5ad0f9887dc63656c8503b1ab8ad1166732101da67d632bcb51863102e4dac109f6695c1a4723578c01cf8ceb9afa53a15094678bb0300d6343b16ad71d55bdc6e30b062b7fbef2ddcba8c6a46b210d909adc1558d2255f026a0b273df8689ba23d7d684b6bba707364be60eee1d42836c0ec8ef9362a6353897ae8de9b02eabecc30"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xe0, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x14, 0x1, "c70175941dd8748cceff62eb6749add0"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xff}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x6, 0x1, '\bQ'}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x200}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x80000001}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xcd9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2d}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}]}]}, 0x1580}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r4 = openat2(r2, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x8000, 0x10, 0xc}, 0x18)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a80)='devlink\x00')
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000001d40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d00)={&(0x7f0000001ac0)={0x238, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xf35f}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7ff}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x400}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x82a0}, {0x8, 0xb, 0x80000001}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x31a}, {0x6, 0x16, 0x79}, {0x5}, {0x6, 0x11, 0x200}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x81}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x800}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9669}, {0x8, 0xb, 0x85}}]}, 0x238}, 0x1, 0x0, 0x0, 0x300441d1}, 0x4008040)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001e80)={r4, 0x10, &(0x7f0000001e40)={&(0x7f0000001d80)=""/150, 0x96}}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001f80)='/dev/vga_arbiter\x00', 0x20a542, 0x0)
sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002000)={0x98, 0x453, 0x400, 0x70bd28, 0x25dfdbfe, "308ca7a269351396d83d784bedaab9119f180f0ccc8bc0b2f83642d54a0941e1078b7cc75b3df7e7f5311a0586ab1fd1defc22d9431fe2855bbbec1bd000e34aded57627f276b31abacf659c02c254834c9d7f99da545262e042d1d4d4c3ab000dc15bd66d929019c9e281ea36ce5d8577087f881ca1481496e37ba6f1ee51d68b3596cbf6c7", ["", "", "", "", "", "", ""]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r7 = creat(&(0x7f0000002140)='\x00', 0x4)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000021c0)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000002300)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002200)={0x90, r8, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x48001}, 0x800)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000002340)=0x6)

05:52:17 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x417f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x65401a04}, 0x0, 0x0, 0x7ff, 0x8, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2, 0x1b071, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000340))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
close(0xffffffffffffffff)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x100)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0x1000})
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x3, 0x3})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x43a, 0x0, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0)

[ 2683.062616][T11229] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2683.083250][T11243] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:52:17 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x5000000}, 0x0)

[ 2683.119813][T11259] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2683.137413][ T9868] usb 6-1: new high-speed USB device number 69 using dummy_hcd
05:52:17 executing program 1:
bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000))
sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f0000a8a000)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={0x0, 0x4}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0))

[ 2683.236569][T11269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2683.307261][T11277] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2683.351262][T11276] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2683.368851][T32247] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2683.403393][T11279] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2683.413828][T32247] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2683.435497][T11276] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2683.473295][T11269] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2683.518347][T32247] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2683.533987][T32247] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2683.545038][ T9868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2683.565749][ T9868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2683.582011][T32247] usb 3-1: Manufacturer: syz
[ 2683.588901][ T9868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2683.608012][T32247] usb 3-1: config 0 descriptor??
[ 2683.687514][ T9868] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2683.696554][ T9868] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2683.704971][ T9868] usb 6-1: Manufacturer: syz
[ 2683.716560][ T9868] usb 6-1: config 0 descriptor??
[ 2683.851295][T32247] usb 3-1: USB disconnect, device number 23
[ 2684.199095][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.206530][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.226723][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.242630][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.255942][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.269514][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.276914][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.296632][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.309765][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.317145][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.336787][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.350197][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.363662][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.377468][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.384867][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.407366][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.414778][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.427540][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.434954][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.442673][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.450161][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.457639][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.465047][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.472531][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.480018][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.487493][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.494877][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.502367][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.509884][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.517419][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.524806][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.532374][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.539840][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.547225][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.554714][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.562190][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.569696][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.577067][ T9868] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0
[ 2684.597843][ T9868] plantronics 0003:047F:FFFF.0066: No inputs registered, leaving
[ 2684.613831][ T9868] plantronics 0003:047F:FFFF.0066: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2686.027477][ T9868] usb 6-1: reset high-speed USB device number 69 using dummy_hcd
[ 2687.087431][ T9868] usb 6-1: device descriptor read/64, error -71
05:52:21 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x8982, &(0x7f0000000100)={0x2})

05:52:21 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x6000000}, 0x0)

05:52:21 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x8004552d)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/4096, 0xffffffffffffff87}], 0x4)
ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040))

05:52:21 executing program 1:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f00000001c0))
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
connect(r3, &(0x7f0000000140)=@in6={0xa, 0x4e21, 0x0, @mcast1, 0x3391}, 0x80)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}}, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/251, 0xfb}, {&(0x7f0000000300)=""/86, 0x56}], 0x2)

05:52:21 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff0000090000010902240001"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2687.611901][ T2230] usb 6-1: USB disconnect, device number 69
[ 2687.698542][T11344] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2687.761357][T11354] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:21 executing program 4:
r0 = getpid()
r1 = getpid()
ptrace$setsig(0x4203, r1, 0x9440, 0x0)
memfd_create(0x0, 0x0)
getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2}], 0x1, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x101182)
r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x3)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
timer_create(0x2, &(0x7f0000000200)={0x0, 0x15, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
getpgid(r0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x7, 0x3, 0x5, 0x800})
r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
flistxattr(r4, &(0x7f0000000000)=""/219, 0xdb)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000500)={{0x8, 0x1, 0x3, 0x7, '\x00', 0x2}, 0x6, 0x3, 0xffffe028, 0x0, 0x3, 0xffffff80, 'syz0\x00', &(0x7f0000000380)=['/dev/loop#\x00', '.^\xc5', '.^\xc5'], 0x11, [], [0x6, 0x9, 0x7, 0x9]})
setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000b80)="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", 0xd82)

05:52:21 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2687.871402][T11353] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2687.887152][T11358] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2687.907065][T11353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2687.939058][T11344] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2687.958717][T11370] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:21 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x7000000}, 0x0)

05:52:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xc0, 0x0)
setrlimit(0x7, &(0x7f0000000140))
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x22)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
r5 = syz_open_procfs(r4, &(0x7f00000000c0)='net/psched\x00')
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r6 = fcntl$dupfd(r5, 0x0, r3)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r7, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
dup3(r5, r7, 0x80000)
setsockopt$inet_dccp_int(r6, 0x21, 0x10, &(0x7f0000000000)=0x81, 0x4)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[ 2687.984230][T11371] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2687.999213][T27826] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 2688.059288][T11378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:52:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000002c659c491af300050000000000000000000000000012aa951da5d31e0cecafa4c761e445ae88bae1b8ee33fe0f25ad7224a68f77af993bebf4638130c7b598", @ANYRES32=r3, @ANYBLOB="00000000000000000800000008000100627066001400020006000400000000000400050004000200"], 0x40}}, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r4)
signalfd4(r4, &(0x7f0000000400)={[0x8d4b5e0]}, 0x8, 0x80800)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010002000"/20, @ANYRES32=0x0, @ANYBLOB="00000000ed0f636d240012800b000100697036746e6c00001400028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00\x00\x00'], 0x44}}, 0x0)
r5 = accept(0xffffffffffffffff, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000080)=0x80)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000180)={0x33, 0xc, [], [@calipso={0x7, 0x30, {0x2, 0xa, 0xa7, 0x4a0, [0x0, 0x7, 0x1f, 0xfffffffffffffffe, 0x80000000]}}, @calipso={0x7, 0x28, {0x3, 0x8, 0x7f, 0x6, [0x1000, 0x1, 0xab85, 0x5]}}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x70)

[ 2688.137214][T11385] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2688.155113][ T2230] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 2688.170216][T11378] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2688.184452][T11386] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2688.195878][T11389] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2688.200617][T11391] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2688.247709][T11378] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2688.257450][T11385] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2688.271134][T11394] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2688.374049][T11401] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2688.387589][T27826] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2688.404707][T27826] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2688.491798][T27826] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2688.501030][T27826] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2688.511085][T27826] usb 3-1: Manufacturer: syz
[ 2688.517019][T27826] usb 3-1: config 0 descriptor??
[ 2688.532963][ T2230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2688.552481][ T2230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2688.563471][ T2230] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2688.657946][ T2230] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2688.666987][ T2230] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2688.675438][ T2230] usb 6-1: Manufacturer: syz
[ 2688.685561][ T2230] usb 6-1: config 0 descriptor??
[ 2688.784232][T27826] usb 3-1: USB disconnect, device number 24
[ 2689.169176][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.176598][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.195913][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.210259][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.224145][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.232066][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.240432][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.248247][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.255665][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.263770][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.277748][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.285137][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.299145][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.306534][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.322676][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.333479][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.344304][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.355130][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.365714][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.376713][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.392954][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.403730][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.414483][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.425230][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.436012][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.446770][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.456694][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.470675][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.480795][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.491345][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.501959][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.513330][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.523251][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.533959][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.544576][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.555154][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.564811][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.575476][ T2230] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0
[ 2689.586944][ T2230] plantronics 0003:047F:FFFF.0067: No inputs registered, leaving
[ 2689.621748][ T2230] plantronics 0003:047F:FFFF.0067: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2691.007425][ T2230] usb 6-1: reset high-speed USB device number 70 using dummy_hcd
[ 2692.027511][ T2230] usb 6-1: device descriptor read/64, error -71
05:52:26 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0xae01, &(0x7f0000000100)={0x2})

05:52:26 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e80ffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="030000050000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700ff"], 0xd4}}, 0x0)
r0 = socket(0x10, 0x8000000000000003, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10)
sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0)

05:52:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x8000000}, 0x0)

05:52:26 executing program 4:
r0 = socket(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x4009c0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x485c)
getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000019080)=""/102400, &(0x7f0000019040)=0x19000)
getsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

05:52:26 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2692.584845][T23720] usb 6-1: USB disconnect, device number 70
05:52:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2692.686194][T11451] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2692.710453][T11456] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:26 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000009193091a004000000000010902240103010000092100000001220100090581030000000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x40, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="9c6001d8c25e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0)

[ 2692.800985][T11462] __nla_validate_parse: 1 callbacks suppressed
[ 2692.800996][T11462] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
05:52:26 executing program 4:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
fanotify_mark(r1, 0x35, 0x1002, 0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00')
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "d9512bfc480b846d", "e34f5d7f156bfcea18243ec389aef0fe", "9d954014", "24dc3088955de26f"}, 0x28)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000380)=0x5)
write$P9_RREMOVE(r3, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x5)
r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000100))
writev(r5, &(0x7f0000003600)=[{0x0}, {0x0}, {&(0x7f0000000540)="f1", 0xfdef}], 0x3)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x29fe}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x49}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x20}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, [], 0xd}}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x81}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xb55a24b2a002de83}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004084}, 0x800)
ftruncate(r0, 0x800)

[ 2692.892279][T11468] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2692.919867][T11478] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2692.932195][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:52:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2692.943864][T11453] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2692.977536][ T2230] usb 3-1: new high-speed USB device number 25 using dummy_hcd
05:52:27 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x9000000}, 0x0)

05:52:27 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2693.012508][T11486] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2693.026371][T11487] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2693.118864][T11493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2693.127755][T23720] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 2693.157518][ T6144] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 2693.193704][T11500] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2693.202900][T11499] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2693.226127][T11493] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2693.253096][T11504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2693.273479][T11493] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2693.300729][T11499] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2693.378019][ T2230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2693.389379][ T2230] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2693.477917][ T6144] usb 2-1: device descriptor read/64, error 18
[ 2693.485154][ T2230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2693.488027][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2693.494689][ T2230] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2693.513570][ T2230] usb 3-1: Manufacturer: syz
[ 2693.515329][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2693.534210][T23720] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2693.536432][ T2230] usb 3-1: config 0 descriptor??
[ 2693.647889][T23720] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2693.657135][T23720] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2693.670061][T23720] usb 6-1: Manufacturer: syz
[ 2693.676120][T23720] usb 6-1: config 0 descriptor??
[ 2693.803059][T27826] usb 3-1: USB disconnect, device number 25
[ 2693.897464][ T6144] usb 2-1: device descriptor read/64, error 18
[ 2694.167418][ T6144] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 2694.169118][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.182992][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.191712][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.199755][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.208169][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.215841][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.223894][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.237129][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.246232][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.261364][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.277515][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.293214][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.303407][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.315385][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.324503][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.332470][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.340300][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.349235][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.356755][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.364607][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.374113][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.381956][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.391120][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.398994][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.406515][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.414499][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.422401][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.430221][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.439087][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.446525][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.457519][ T6144] usb 2-1: device descriptor read/64, error 18
[ 2694.477391][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.484780][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.507791][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.515154][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.522883][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.530360][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.537975][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.545367][T23720] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0
[ 2694.553178][T23720] plantronics 0003:047F:FFFF.0068: No inputs registered, leaving
[ 2694.569316][T23720] plantronics 0003:047F:FFFF.0068: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2694.877484][ T6144] usb 2-1: device descriptor read/64, error 18
[ 2694.997519][ T6144] usb usb2-port1: attempt power cycle
[ 2695.707407][ T6144] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 2695.797847][ T6144] usb 2-1: Invalid ep0 maxpacket: 145
[ 2695.947553][ T6144] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 2695.987413][ T2230] usb 6-1: reset high-speed USB device number 71 using dummy_hcd
[ 2696.427529][ T6144] usb 2-1: device not accepting address 47, error -71
[ 2696.435000][ T6144] usb usb2-port1: unable to enumerate USB device
[ 2696.977413][ T2230] usb 6-1: device descriptor read/64, error -71
05:52:31 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0xae41, &(0x7f0000000100)={0x2})

05:52:31 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:31 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xa000000}, 0x0)

05:52:31 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

05:52:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000300009030000000000000000000000001400017c44ab262dbd00100001000b00010073616d706c650000da21f883a9256b524caf5d1cd2fb768e409ab4914f63070065265d7822750a647c17c7790e52905521651bc2f9b3160f77f53c34928d60cb666c836443018479d862a39c84e702510fea3890a37572de966c0c92dec347e78e27e20c4de0420a43ce2d"], 0x28}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000000)={0x2, 0x2, 0x7, 0x6, 0xfffffffe, 0x4})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x9}, @IFLA_GENEVE_ID={0x8}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x68}}, 0x20000040)

05:52:31 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x14)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000080)={0xc, 0x1, 0x6, {0x9, 0x7, 0x9c97, 0x7}})
bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r2)
getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000180)=0x78)
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x103000)
listen(r0, 0x1ff)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000000)="b2", 0xffe0}], 0x1, 0x0, 0x0, 0x9000004}, 0x0)

[ 2697.561068][T27826] usb 6-1: USB disconnect, device number 71
[ 2697.603274][T11545] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2697.619234][T11547] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:52:31 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2697.644409][T11549] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2697.760349][T11566] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2697.778336][T11570] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2697.798303][T11566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:52:31 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2697.823672][T11547] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2697.841615][T11582] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2697.855737][T11564] device geneve2 entered promiscuous mode
[ 2697.927527][T23720] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 2698.014387][T11592] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2698.087411][T27826] usb 6-1: new high-speed USB device number 72 using dummy_hcd
05:52:32 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
getsockopt$inet6_int(r1, 0x29, 0x6, 0x0, &(0x7f0000013000))
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40)
mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, r1, 0x0)
close(r0)

[ 2698.297560][T23720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2698.317433][T23720] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
05:52:32 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0xc, @sdr={0x38414761}})
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x30}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

05:52:32 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2698.412032][T11566] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2698.422484][T23720] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2698.431775][T23720] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
05:52:32 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xc000000}, 0x0)

[ 2698.467569][T23720] usb 3-1: Manufacturer: syz
[ 2698.472289][T11572] device geneve2 entered promiscuous mode
[ 2698.488162][T27826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2698.499339][T23720] usb 3-1: config 0 descriptor??
[ 2698.520989][T27826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2698.546803][T27826] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2698.590880][T11619] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2698.668349][T27826] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2698.685481][T27826] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2698.714303][T27826] usb 6-1: Manufacturer: syz
[ 2698.748462][T27826] usb 6-1: config 0 descriptor??
[ 2698.776488][T23720] usb 3-1: USB disconnect, device number 26
[ 2698.980715][T11618] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2699.021248][T11623] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2699.032235][T11625] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2699.062136][T11623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2699.082764][T11618] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2699.107629][T11623] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2699.239105][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.246515][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.266121][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.280827][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.297582][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.304971][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.327365][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.334758][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.352085][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.366395][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.378908][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.386285][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.405087][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.417951][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.425341][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.444211][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.456862][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.469520][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.476915][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.493820][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.507212][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.520181][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.532781][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.547081][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.559918][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.572256][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.585849][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.598985][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.606366][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.626092][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.638824][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.646216][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.665666][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.673360][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.680909][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.688391][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.695800][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.703264][T27826] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0
[ 2699.711135][T27826] plantronics 0003:047F:FFFF.0069: No inputs registered, leaving
[ 2699.728555][T27826] plantronics 0003:047F:FFFF.0069: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2701.067552][ T5840] usb 6-1: reset high-speed USB device number 72 using dummy_hcd
[ 2702.077538][ T5840] usb 6-1: device descriptor read/64, error -71
05:52:36 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x800)
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc60040012000a00160002000080d6451720aa", 0x25}], 0x1}, 0x0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0)

05:52:36 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:36 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x30}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}], 0x20)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x501082, 0x0)
fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000080)=0x5)

05:52:36 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0xae80, &(0x7f0000000100)={0x2})

05:52:36 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xe000000}, 0x0)

05:52:36 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2702.656022][T27826] usb 6-1: USB disconnect, device number 72
[ 2702.742624][T11683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2702.758123][T11682] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2702.800485][T11694] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:36 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:36 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0xf56, 0x2)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000080)='g', 0x1}], 0x1, 0x0)
r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x402200, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000400)={0x0, 0x4, 0x0, 0x7fff, 0x27d, 0x8, 0x7c24, 0x80000000, 0x8001, 0x2, 0x7f, 0x4})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x301000, 0x8)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="23b1333d6ebd"}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x80)
dup3(r1, r0, 0x0)

[ 2702.891798][T11692] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2702.922694][T11702] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2702.962435][T11692] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2702.984280][T11697] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2703.016234][T11702] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2703.027765][T32247] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 2703.036275][T11714] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2703.047229][T11683] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2703.052169][T11718] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2703.095917][T11721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
05:52:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x10000000}, 0x0)

05:52:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r0=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r0)
r1 = dup(0xffffffffffffffff)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000000180)=0xc)
keyctl$get_persistent(0x16, r2, 0xfffffffffffffff9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000380)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000500)={{}, {}, [{}, {}, {0x2, 0x5}, {0x2, 0xa}, {0x2, 0x4}, {0x2, 0x5}], {}, [{0x8, 0x0, r3}], {0x10, 0x5}, {0x20, 0x4}}, 0x5c, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x5, 0x7b8, [0x0, 0x200003c0, 0x200005ae, 0x20000982], 0x0, &(0x7f0000000040), &(0x7f00000003c0)=[{}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x3, 0x6a, 0xa01, 'vlan1\x00', 'virt_wifi0\x00', 'vlan0\x00', 'macvlan0\x00', @local, [0xff, 0x101, 0x0, 0xff, 0x0, 0xff], @link_local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0xae, 0x176, 0x1a6, [@time={{'time\x00', 0x0, 0x18}, {{0x0, 0x0, 0x147b0, 0xcd44, 0x80000001, 0x4, 0x3}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x3, 0x6, 0x80, 0x0, 0x0, "99538c469de221b84098788d61dd7d916f103ebe72960bfa53891f63758720e2ab1d8f3c87a169af0f00bf31b1a303b033520f08922a7a734da6dd9c8ed23a69"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8, 'syz0\x00', {0x7ff}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}}, {0x3, 0x10, 0x806, 'ip6tnl0\x00', 'veth0_to_hsr\x00', 'vcan0\x00', 'tunl0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x1ce, 0x1fe, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1ff}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:sshd_var_run_t:s0\x00'}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x9}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x9, 0x8, 0x805, 'syzkaller1\x00', 'vlan1\x00', 'erspan0\x00', 'rose0\x00', @broadcast, [0xff, 0xff, 0x0, 0x6af2ff0a09a0400c, 0xff, 0xff], @dev={[], 0x2b}, [0x25dfaf761010f687, 0xff], 0x10e, 0x13e, 0x18e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x3f, {0x0, 0x100, 0x6, @empty, [0xff, 0xff, 0xff, 0xff], 0x8, 0x1c000, 0x1, 0x3, @dev={[], 0x33}, [0xff, 0x0, 0xff], 0x4e23, 0x4e21, 0x35, 0x1b5, 0x134, 0x1d, 0x9, 0x159, 0x5, 0x400}, 0x4d5, 0x220}}}, @m802_3={{'802_3\x00', 0x0, 0x8}, {{0xd4, 0x8, 0x9, 0x1}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xf533}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz0\x00', {0x5b220000}}}}}, {0x11, 0x41, 0x8100, 'erspan0\x00', 'bond0\x00', 'veth0_to_hsr\x00', 'ip6gretap0\x00', @remote, [0xff, 0x0, 0x0, 0x0, 0xff], @random="c48c28a51cf9", [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x126, 0x1a6, 0x1f6, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, r2, r3, 0xee00, 0x3, 0x1}}}, @ip6={{'ip6\x00', 0x0, 0x50}, {{@ipv4={[], [], @broadcast}, @mcast1, [0xffffffff, 0xffff7f, 0x0, 0xff000000], [0xffffff00, 0xff000000], 0xe5, 0x0, 0x4, 0x48, 0x4e23, 0x4e23, 0x4e24, 0x4e21}}}], [@common=@log={'log\x00', 0x28, {{0x1, "3eeff00b66aaaee8bc6535c3785e4dfae37cff51fb9fd554978adff55c63", 0x6}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@log={'log\x00', 0x28, {{0x7f, "ca2dd3c1f926c913f5694c4a4497cd1647227d837d50d6aa7e045d2e283c", 0x4}}}}]}]}, 0x830)
chown(&(0x7f0000000000)='./file0\x00', r0, r3)
syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x6, 0x84000)

05:52:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2703.233730][T11728] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2703.247533][T27826] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 2703.253281][T11732] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2703.344478][T11738] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2703.364268][T11739] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2703.386439][T11745] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2703.397948][T32247] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2703.408579][T11732] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:52:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

05:52:37 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket(0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000000))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc0c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

[ 2703.453324][T11749] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2703.464848][T32247] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2703.519591][T11732] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2703.547100][T11751] syz-executor.4: page allocation failure: order:0, mode:0x400cc4(GFP_KERNEL_ACCOUNT|GFP_DMA32), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 2703.554563][T11738] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2703.618002][T32247] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2703.627059][T32247] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2703.635969][T11751] CPU: 0 PID: 11751 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0
[ 2703.644648][T11751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2703.654700][T11751] Call Trace:
[ 2703.657998][T11751]  dump_stack+0x18f/0x20d
[ 2703.662343][T11751]  warn_alloc.cold+0x87/0x17a
[ 2703.667055][T11751]  ? zone_watermark_ok_safe+0x260/0x260
[ 2703.672617][T11751]  ? wait_for_completion+0x260/0x260
[ 2703.677926][T11751]  __alloc_pages_slowpath.constprop.0+0x2197/0x2780
[ 2703.684533][T11751]  ? warn_alloc+0x120/0x120
[ 2703.689037][T11751]  ? __alloc_pages_nodemask+0x3e5/0x930
[ 2703.694583][T11751]  ? lock_is_held_type+0xb0/0xe0
[ 2703.699513][T11751]  ? find_held_lock+0x2d/0x110
[ 2703.704279][T11751]  __alloc_pages_nodemask+0x68f/0x930
[ 2703.709662][T11751]  ? __zone_watermark_ok+0x370/0x370
[ 2703.714943][T11751]  ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780
[ 2703.721694][T11751]  ? lock_is_held_type+0xb0/0xe0
[ 2703.726630][T11751]  ? rcu_read_lock_sched_held+0x3a/0xb0
[ 2703.732183][T11751]  ? __alloc_pages_nodemask+0x6b1/0x930
[ 2703.737726][T11751]  alloc_pages_current+0x187/0x280
[ 2703.742921][T11751]  alloc_mmu_pages+0x7f/0x170
[ 2703.747593][T11751]  kvm_mmu_create+0x3cb/0x560
[ 2703.752263][T11751]  kvm_arch_vcpu_create+0x16d/0xb70
[ 2703.757476][T11751]  kvm_vm_ioctl+0x1547/0x23c0
[ 2703.762147][T11751]  ? lock_downgrade+0x820/0x820
[ 2703.767006][T11751]  ? kvm_unregister_device_ops+0x60/0x60
[ 2703.772637][T11751]  ? trace_hardirqs_on+0x5f/0x220
[ 2703.777661][T11751]  ? lockdep_hardirqs_on+0x6a/0xe0
[ 2703.782771][T11751]  ? tomoyo_path_number_perm+0x244/0x4d0
[ 2703.788422][T11751]  ? tomoyo_execute_permission+0x470/0x470
[ 2703.794228][T11751]  ? __might_fault+0x11f/0x1d0
[ 2703.799010][T11751]  ? __sanitizer_cov_trace_switch+0x45/0x70
[ 2703.804914][T11751]  ? do_vfs_ioctl+0x27d/0x1090
[ 2703.809671][T11751]  ? generic_block_fiemap+0x60/0x60
[ 2703.814859][T11751]  ? __might_fault+0x190/0x1d0
[ 2703.819618][T11751]  ? _copy_to_user+0x126/0x160
[ 2703.824639][T11751]  ? __fget_files+0x294/0x400
[ 2703.829315][T11751]  ? kvm_unregister_device_ops+0x60/0x60
[ 2703.834934][T11751]  ksys_ioctl+0x11a/0x180
[ 2703.839286][T11751]  __x64_sys_ioctl+0x6f/0xb0
[ 2703.843872][T11751]  ? lockdep_hardirqs_on+0x6a/0xe0
[ 2703.848978][T11751]  do_syscall_64+0x60/0xe0
[ 2703.853387][T11751]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2703.859291][T11751] RIP: 0033:0x45cb29
[ 2703.863166][T11751] Code: Bad RIP value.
[ 2703.867217][T11751] RSP: 002b:00007fe72f7bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2703.875636][T11751] RAX: ffffffffffffffda RBX: 00000000004e7f20 RCX: 000000000045cb29
[ 2703.883610][T11751] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[ 2703.891584][T11751] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2703.899544][T11751] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 2703.907527][T11751] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fe72f7bf6d4
[ 2703.917981][T11758] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2703.938106][T27826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2703.945710][T32247] usb 3-1: Manufacturer: syz
05:52:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x20000000}, 0x0)

[ 2703.970192][T27826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2703.986793][T32247] usb 3-1: config 0 descriptor??
[ 2704.030315][T27826] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2704.168230][T27826] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2704.180743][T11772] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2704.185330][T27826] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2704.202105][T27826] usb 6-1: Manufacturer: syz
[ 2704.216749][T11751] Mem-Info:
[ 2704.222256][T11751] active_anon:423025 inactive_anon:7054 isolated_anon:0
[ 2704.222256][T11751]  active_file:4177 inactive_file:28583 isolated_file:0
[ 2704.222256][T11751]  unevictable:0 dirty:74 writeback:22
[ 2704.222256][T11751]  slab_reclaimable:27058 slab_unreclaimable:211169
[ 2704.222256][T11751]  mapped:60614 shmem:7311 pagetables:75525 bounce:0
[ 2704.222256][T11751]  free:654479 free_pcp:792 free_cma:0
[ 2704.260175][T27826] usb 6-1: config 0 descriptor??
[ 2704.280195][T11751] Node 0 active_anon:1397912kB inactive_anon:16480kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216868kB dirty:4kB writeback:4kB shmem:17340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB all_unreclaimable? yes
[ 2704.294709][T32247] usb 3-1: USB disconnect, device number 27
[ 2704.349868][T11751] Node 1 active_anon:294288kB inactive_anon:11736kB active_file:16676kB inactive_file:114332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25588kB dirty:292kB writeback:84kB shmem:11904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? no
[ 2704.398845][T11751] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:4308kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:76kB pagetables:288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2704.437750][T11751] lowmem_reserve[]: 0 2515 2515 2515 2515
[ 2704.444379][T11751] Node 0 DMA32 free:38428kB min:72780kB low:81756kB high:90732kB reserved_highatomic:2048KB active_anon:1393604kB inactive_anon:16480kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2578196kB mlocked:0kB kernel_stack:43928kB pagetables:88260kB bounce:0kB free_pcp:1076kB local_pcp:932kB free_cma:0kB
[ 2704.478434][T11751] lowmem_reserve[]: 0 0 0 0 0
[ 2704.483141][T11751] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2704.513777][T11751] lowmem_reserve[]: 0 0 0 0 0
[ 2704.519775][T11751] Node 1 Normal free:2570556kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:294008kB inactive_anon:11740kB active_file:16676kB inactive_file:114356kB unevictable:0kB writepending:176kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:77124kB pagetables:213324kB bounce:0kB free_pcp:2560kB local_pcp:1140kB free_cma:0kB
[ 2704.556638][T11751] lowmem_reserve[]: 0 0 0 0 0
[ 2704.562247][T11751] Node 0 DMA: 1*4kB (M) 3*8kB (UME) 5*16kB (UE) 4*32kB (UM) 3*64kB (UE) 0*128kB 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10156kB
[ 2704.579045][T11751] Node 0 DMA32: 2381*4kB (UMH) 635*8kB (UMH) 355*16kB (UMH) 177*32kB (UMH) 83*64kB (UMH) 38*128kB (UMH) 9*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38428kB
[ 2704.596495][T11751] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2704.608921][T11751] Node 1 Normal: 1*4kB (U) 1*8kB (U) 11*16kB (ME) 117*32kB (UME) 38*64kB (UM) 19*128kB (UME) 51*256kB (UM) 200*512kB (UM) 98*1024kB (UME) 51*2048kB (UME) 547*4096kB (UM) = 2569564kB
[ 2704.627825][T11751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2704.639107][T11751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2704.649204][T11751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2704.662007][T11751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2704.672223][T11751] 18508 total pagecache pages
[ 2704.676901][T11751] 0 pages in swap cache
[ 2704.682105][T11751] Swap cache stats: add 0, delete 0, find 0/0
[ 2704.689618][T11751] Free swap  = 0kB
[ 2704.693355][T11751] Total swap = 0kB
[ 2704.697049][T11751] 1965979 pages RAM
[ 2704.702302][T11751] 0 pages HighMem/MovableOnly
[ 2704.706975][T11751] 349903 pages reserved
[ 2704.711936][T11751] 0 pages cma reserved
[ 2704.799197][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.806609][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.826928][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.839848][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.847256][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.868547][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.876011][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.883732][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.891309][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.899272][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.906668][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.914594][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.922200][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.929767][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.937158][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.944760][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.952331][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.959895][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.971381][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.980917][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2704.997527][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.004918][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.018176][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.026008][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.039964][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.050484][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.061117][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.073272][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.083884][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.094695][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.105424][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.115972][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.126599][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.137163][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.150386][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.159962][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.171861][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.181462][T27826] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0
[ 2705.192265][T27826] plantronics 0003:047F:FFFF.006A: No inputs registered, leaving
[ 2705.213131][T27826] plantronics 0003:047F:FFFF.006A: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2706.527409][ T5840] usb 6-1: reset high-speed USB device number 73 using dummy_hcd
[ 2707.527422][ T5840] usb 6-1: device descriptor read/64, error -71
05:52:41 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0xaeb7, &(0x7f0000000100)={0x2})

05:52:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:41 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
readv(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/233}], 0x4a)
openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket(0x40000000015, 0x40000000000005, 0x0)
socket(0x40000000015, 0x40000000000005, 0x0)
socket(0x40000000015, 0x40000000000005, 0x0)
r3 = socket(0x40000000015, 0x40000000000005, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES64=r3], 0x6db6e559)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x412400, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f0000000140)={0xb, 0x8c41, 0x80})
mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, r4, 0x6d3)

05:52:41 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x29a1a7bc}, 0x0)

05:52:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

05:52:41 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000100)={0x2})

[ 2707.879371][T11828] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2707.900516][T11829] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2707.903443][T11828] __nla_validate_parse: 6 callbacks suppressed
[ 2707.903452][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:52:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2707.927563][T11819] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2707.937366][T11828] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:52:42 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x38010000}, 0x0)

05:52:42 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2708.099400][T11850] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2708.108011][T11851] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2708.136036][T11856] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:52:42 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0x5, 0x9}, {0xfff, 0x1000}]}, 0x14, 0x1)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[ 2708.157483][T32247] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 2708.174874][T11856] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2708.188771][T11856] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2708.213829][T11861] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:52:42 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
write$FUSE_INTERRUPT(r1, &(0x7f00000000c0)={0x10, 0x0, 0x5}, 0x10)
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000040)={0x3, 0x1, 0x6, 0x8001, 0x3, 0xffff})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0)

[ 2708.264511][T11867] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:52:42 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2708.305640][T11856] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2708.320211][T11871] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2708.333468][T11868] IPVS: ftp: loaded support on port[0] = 21
[ 2708.437155][T11875] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 2708.490965][T11881] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2708.528306][T32247] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2708.556464][T32247] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2708.657541][T32247] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2708.668009][T32247] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2708.676664][T32247] usb 3-1: Manufacturer: syz
[ 2708.687034][T32247] usb 3-1: config 0 descriptor??
[ 2708.996056][T11909] IPVS: ftp: loaded support on port[0] = 21
[ 2709.008600][T27826] usb 3-1: USB disconnect, device number 28
[ 2710.487432][T27826] usb 6-1: reset high-speed USB device number 73 using dummy_hcd
[ 2711.487496][T27826] usb 6-1: device descriptor read/64, error -71
05:52:46 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x4004480f, &(0x7f0000000100)={0x2})

05:52:46 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x3f000000}, 0x0)

05:52:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:46 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
write$FUSE_INTERRUPT(r1, &(0x7f00000000c0)={0x10, 0x0, 0x5}, 0x10)
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000040)={0x3, 0x1, 0x6, 0x8001, 0x3, 0xffff})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0)

05:52:46 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x38010000}, 0x0)

05:52:46 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000100)={0x2})

[ 2712.041482][T27826] usb 6-1: can't restore configuration #0 (error=-71)
[ 2712.052200][T23720] usb 6-1: USB disconnect, device number 73
[ 2712.122718][T11954] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 2712.194589][T11981] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2712.355694][ T2230] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 2712.414640][T11969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2712.445579][T11961] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
05:52:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2712.474728][T11979] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2712.489290][T11980] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2712.505060][T11983] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2712.525621][T23720] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 2712.533289][T11984] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[ 2712.554729][T11983] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:52:46 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x40000000}, 0x0)

05:52:46 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0xaeb7, &(0x7f0000000100)={0x2})

05:52:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2712.585788][T12000] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2712.636358][T12003] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2712.737972][ T2230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2712.755897][ T2230] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2712.767240][T12008] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2712.776821][T12017] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2712.791409][T12021] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2712.878030][ T2230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2712.887084][ T2230] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2712.900059][ T2230] usb 3-1: Manufacturer: syz
[ 2712.913077][ T2230] usb 3-1: config 0 descriptor??
[ 2712.928261][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2712.940914][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2712.952862][T23720] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2712.977609][T27826] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 2713.047557][T23720] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2713.056738][T23720] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2713.066081][T23720] usb 6-1: Manufacturer: syz
[ 2713.073453][T23720] usb 6-1: config 0 descriptor??
[ 2713.168673][T28063] usb 3-1: USB disconnect, device number 29
[ 2713.358986][T27826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2713.370075][T27826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2713.381506][T27826] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2713.479201][T27826] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2713.488742][T27826] usb 2-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2713.499644][T27826] usb 2-1: Manufacturer: syz
[ 2713.514352][T27826] usb 2-1: config 0 descriptor??
[ 2713.559641][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.567151][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.588921][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.596566][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.627353][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.636290][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.657546][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.665045][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.685154][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.699694][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.707229][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.727481][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.734968][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.749628][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.757264][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.781925][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.789918][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.803422][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.810959][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.824554][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.832162][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.845715][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.853390][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.866476][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.876097][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.889670][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.897079][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.911129][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.920692][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.932206][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.941780][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.953210][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.963653][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.975107][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2713.984620][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2714.001071][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2714.012648][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2714.024055][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.037022][T23720] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0
[ 2714.046863][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.060822][T23720] plantronics 0003:047F:FFFF.006B: No inputs registered, leaving
[ 2714.070665][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.083992][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.095284][T23720] plantronics 0003:047F:FFFF.006B: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2714.133524][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.145196][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.165192][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.184082][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.200548][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.211671][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.233645][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.244404][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.255169][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.266230][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.283783][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.292979][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.307009][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.315655][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.329632][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.337055][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.350893][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.360507][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.372194][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.382060][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.394547][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.404247][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.415880][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.425585][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.442329][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.449895][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.457457][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.464957][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.478560][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.486058][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.493985][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.503576][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.515815][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.526523][T27826] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0
[ 2714.541624][T27826] plantronics 0003:047F:FFFF.006C: No inputs registered, leaving
[ 2714.565460][T27826] plantronics 0003:047F:FFFF.006C: hiddev97,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[ 2715.277504][T27826] usb 6-1: reset high-speed USB device number 74 using dummy_hcd
[ 2715.984791][T28063] usb 2-1: USB disconnect, device number 48
[ 2716.307451][T27826] usb 6-1: device descriptor read/64, error -71
05:52:50 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400454ca, &(0x7f0000000100)={0x2})

05:52:50 executing program 4:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904012d900643134ff41317c7d3e3bf9ca618eaa066dcd6a648da8f01d35f4b10c5086905b6cbd1b1a4b6cb"], 0x0)
sysfs$3(0x3)

05:52:50 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x48000000}, 0x0)

05:52:50 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:50 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000100)={0x2})

05:52:50 executing program 1:
pipe(&(0x7f00000002c0))
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r1)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000400)={0x1, 0x1, 0x1000, 0xe2, &(0x7f0000000040)="fd5e831a16fa5e642710429d731de286421b4b96bbc69b19b386fa07a229977e58210d71c4a460729e2bbbde34535a9c9a9bde419898ebeafdf19871b86b96d1b032a7ac16f0c3088e406b02174a4481c27cf25fa3ef2ffe2289124d7b626dae6b6cb296828ffd79ac542747fcfc92bd001cde54148e168a1147be99431cea464e3fe1f36565711adcae8dbb2b20c47ba30619edf231eab9bc527a51d79353cb71bd2448ffda956e8bdbb9501cdaf66fe847b670c2663f6bb6be3199be142f26b48834b5e9693a3a3e2084fa37d7714e027388f6eef4a4772a42b3794a4c1ff420e0", 0xeb, 0x0, &(0x7f00000001c0)="1dfee39818229972ff93b1760d5f309ca875638a408d9dc9937c1ecdbb584c752ea7a0f9f3b7381692e86d1f8a6c395ba4e319f86196ab796c23b2a57507035f5d535b1b1db05d76506c1944784e10688781ce2399e7afe15a3e9f15ce447b483137bcbda45a4b49f4c93a5f845d1346bb658fb417711c709d1fef1391949d1e138af24767732db8c8d32d32b0a50ed94ebaacd70f01dae6d2ee6a6b58caab994b22475eea94be7117bc048e889dc296805d0bfbd562cf167968a9cc77879d8a8c96e4898a784033577dd0f1871b6d60717a754e8d1fb8ba09e007682ae34a7aefa17d23bef91f850afa29"})
prctl$PR_GET_KEEPCAPS(0x7)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d080000007c09e8fe55a10a0015000800142603000e1208000b0000000001a800160008000600e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf63951f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x2, 0x0)

[ 2716.866179][T23720] usb 6-1: USB disconnect, device number 74
05:52:50 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2716.951584][T12104] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2716.959654][T12105] netlink: 'syz-executor.1': attribute type 21 has an invalid length.
[ 2716.978845][T12106] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2717.039935][T12107] __nla_validate_parse: 6 callbacks suppressed
[ 2717.039946][T12107] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:52:51 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2717.110455][T12124] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2717.124726][T12117] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2717.138586][T12116] netlink: 'syz-executor.1': attribute type 21 has an invalid length.
[ 2717.151180][T12121] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2717.169195][T12107] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:52:51 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:51 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x4c000000}, 0x0)

[ 2717.214247][T12130] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2717.257430][T32247] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 2717.265164][ T2230] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 2717.295437][T12135] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:52:51 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2717.296169][T12136] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:51 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2717.384352][T12140] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2717.400623][T12146] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2717.407752][T23720] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 2717.411105][T12147] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2717.436117][T12135] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2717.446787][T12135] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2717.460742][T12140] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2717.497137][T12151] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2717.638138][T32247] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2717.649103][ T2230] usb 5-1: config 1 has an invalid descriptor of length 244, skipping remainder of the config
[ 2717.665890][T32247] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2717.679797][ T2230] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2717.693606][ T2230] usb 5-1: too many endpoints for config 1 interface 1 altsetting 45: 144, using maximum allowed: 30
[ 2717.708267][ T2230] usb 5-1: config 1 interface 1 altsetting 45 has 0 endpoint descriptors, different from the interface descriptor's value: 144
[ 2717.723349][ T2230] usb 5-1: config 1 interface 1 has no altsetting 0
[ 2717.767609][T32247] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2717.777575][T32247] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2717.785956][T32247] usb 3-1: Manufacturer: syz
[ 2717.789918][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2717.796153][T32247] usb 3-1: config 0 descriptor??
[ 2717.822293][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2717.861201][T23720] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2717.898318][ T2230] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2717.912962][ T2230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2717.925520][ T2230] usb 5-1: Product: syz
[ 2717.933744][ T2230] usb 5-1: Manufacturer: syz
[ 2717.940113][ T2230] usb 5-1: SerialNumber: syz
[ 2717.967999][T23720] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2718.001450][T23720] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2718.009672][T23720] usb 6-1: Manufacturer: syz
[ 2718.020595][ T2230] usb 5-1: selecting invalid altsetting 1
[ 2718.036955][ T2230] usb 5-1: selecting invalid altsetting 0
[ 2718.043615][T23720] usb 6-1: config 0 descriptor??
[ 2718.077236][ T2230] usb 5-1: selecting invalid altsetting 0
[ 2718.100496][ T2230] cdc_ncm 5-1:1.0: bind() failure
[ 2718.133627][T32247] usb 3-1: USB disconnect, device number 30
[ 2718.249845][ T2230] usb 5-1: USB disconnect, device number 93
[ 2718.553999][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.577720][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.585148][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.628497][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.636133][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.697402][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.704827][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.763370][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.783235][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.817448][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.824869][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.856589][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.887395][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.894876][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.927411][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.934834][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.966178][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.983679][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2718.997522][ T2230] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 2719.032534][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.045190][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.065235][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.089372][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.096778][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.123777][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.143355][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.171062][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.191195][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.211449][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.232716][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.253859][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.274115][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.294116][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.308313][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.315703][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.345216][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.363266][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.387055][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.398231][ T2230] usb 5-1: config 1 has an invalid descriptor of length 244, skipping remainder of the config
[ 2719.407891][T23720] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0
[ 2719.414808][ T2230] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2719.416170][T23720] plantronics 0003:047F:FFFF.006D: No inputs registered, leaving
[ 2719.456496][ T2230] usb 5-1: too many endpoints for config 1 interface 1 altsetting 45: 144, using maximum allowed: 30
[ 2719.480401][T23720] plantronics 0003:047F:FFFF.006D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2719.484533][ T2230] usb 5-1: config 1 interface 1 altsetting 45 has 0 endpoint descriptors, different from the interface descriptor's value: 144
[ 2719.546946][ T2230] usb 5-1: config 1 interface 1 has no altsetting 0
[ 2719.768133][ T2230] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2719.777185][ T2230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2719.807405][ T2230] usb 5-1: Product: syz
[ 2719.811568][ T2230] usb 5-1: Manufacturer: syz
[ 2719.816148][ T2230] usb 5-1: SerialNumber: syz
[ 2719.868487][ T2230] usb 5-1: selecting invalid altsetting 1
[ 2719.874238][ T2230] usb 5-1: selecting invalid altsetting 0
[ 2719.927027][ T2230] usb 5-1: selecting invalid altsetting 0
[ 2719.965805][ T2230] cdc_ncm 5-1:1.0: bind() failure
[ 2720.045413][ T2230] usb 5-1: USB disconnect, device number 94
05:52:54 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x40049409, &(0x7f0000000100)={0x2})

05:52:54 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x60000000}, 0x0)

05:52:54 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:54 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, 0x0)

05:52:54 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29, 0x4}], 0x18}], 0x146, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
dup3(r4, r5, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f00000017c0)={{0x3, 0x1, 0x401, 0x5, '\x00', 0x2}, 0x1, [0xfff, 0x7, 0x14, 0x9, 0x1f, 0xd40, 0x9, 0x2, 0x1ff, 0x9f, 0xc6e, 0xcea1, 0x20, 0x7, 0xc1a, 0x3, 0xffffffffffffcd60, 0x80000000, 0xe7, 0xff, 0x6, 0xff, 0x1f, 0xfff, 0x20, 0xfffffffffffff879, 0x1000000000000, 0x8, 0x7, 0xff, 0x3, 0x1, 0x7fff, 0xffffffff, 0x7, 0xffffffff, 0x10000, 0x1f, 0xfff, 0xc3, 0xfffffffffffffff8, 0x4, 0x6, 0xbb55, 0x8c98, 0x3, 0x4, 0x8000, 0x1, 0x280000000000000, 0x6f, 0x3ff, 0x3ff, 0x3, 0x0, 0xffffffff, 0x5, 0x0, 0x2, 0xffff, 0x4, 0x40, 0x5, 0x1a85e4b8, 0x1, 0x7, 0x3, 0xffffffffffffffe1, 0x4, 0x7, 0x7fff, 0xfff, 0x1, 0x7, 0x2, 0x7, 0x8, 0xffffffffffffffff, 0x7, 0xe2, 0x9, 0x8001, 0x1, 0x8b, 0x100000001, 0x100000000000000, 0xf3, 0x7f, 0xfe7, 0x2, 0xbe, 0x8, 0x4, 0x9bf1, 0x8, 0x8, 0x1000, 0x4, 0x4, 0x80000000, 0xfa, 0xfffffffffffffc00, 0x9, 0x7, 0xfffffffffffffffa, 0x1ff, 0x9, 0x25, 0x5ab5, 0x80a3, 0x400, 0xfffffffffffffffe, 0xffffffff, 0xb2d, 0x2, 0x100000000, 0x8, 0x6, 0x40, 0x81, 0x3, 0x7a000, 0x8, 0x2, 0x13aa, 0x5, 0x17c4, 0x4]})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r7, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x8, @empty, 0xc1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x12}, 0x1ff}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0x1, @mcast1, 0x88}], 0x84)

05:52:54 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r5)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r7 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0x0)
fcntl$getownex(r7, 0x10, &(0x7f0000000100)={0x0, <r8=>0x0})
r9 = inotify_init1(0x0)
fcntl$setown(r9, 0x8, 0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, <r10=>0x0})
kcmp(r8, r10, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)

[ 2720.494026][T23720] usb 6-1: USB disconnect, device number 75
[ 2720.593286][T12232] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2720.599041][T12238] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:54 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2720.738450][T12248] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2720.760977][T12250] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:52:54 executing program 1:
perf_event_open(&(0x7f00000012c0)={0x2, 0x70, 0x1, 0x2, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x10001}, 0x11020, 0x5, 0x709f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x1, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x1000)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0)
close(r1)
write$P9_RLOCK(r1, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x488200, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 2720.800899][T12248] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2720.846679][T12250] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2720.877448][T32247] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 2720.886815][T12262] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:54 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:54 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x65580000}, 0x0)

05:52:54 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x10100, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
r3 = gettid()
ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000040))
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=r3)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0)
clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
clone3(0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f00000000c0)=0x1)

05:52:55 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2721.002770][T12271] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2721.075065][T12273] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2721.099701][T12284] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2721.147477][T23720] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 2721.251537][T12275] warn_alloc: 1 callbacks suppressed
[ 2721.251570][T12275] syz-executor.4: page allocation failure: order:0, mode:0x400cc4(GFP_KERNEL_ACCOUNT|GFP_DMA32), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 2721.258230][T32247] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2721.271721][T12275] CPU: 0 PID: 12275 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0
[ 2721.289915][T12275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2721.290957][T32247] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2721.299956][T12275] Call Trace:
[ 2721.299980][T12275]  dump_stack+0x18f/0x20d
[ 2721.300002][T12275]  warn_alloc.cold+0x87/0x17a
[ 2721.300020][T12275]  ? zone_watermark_ok_safe+0x260/0x260
[ 2721.300045][T12275]  ? wait_for_completion+0x260/0x260
[ 2721.300071][T12275]  __alloc_pages_slowpath.constprop.0+0x2197/0x2780
[ 2721.300095][T12275]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2721.300116][T12275]  ? warn_alloc+0x120/0x120
[ 2721.300141][T12275]  ? lock_is_held_type+0xb0/0xe0
[ 2721.354264][T12275]  __alloc_pages_nodemask+0x68f/0x930
[ 2721.359628][T12275]  ? kvm_sched_clock_read+0x14/0x40
[ 2721.364823][T12275]  ? sched_clock+0x2a/0x40
[ 2721.369232][T12275]  ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780
[ 2721.376003][T12275]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[ 2721.381983][T12275]  ? trace_hardirqs_on+0x5f/0x220
[ 2721.387003][T12275]  ? lockdep_hardirqs_on+0x6a/0xe0
[ 2721.392129][T12275]  alloc_pages_current+0x187/0x280
[ 2721.397233][T12275]  alloc_mmu_pages+0x7f/0x170
[ 2721.401907][T12275]  kvm_mmu_create+0x3cb/0x560
[ 2721.406579][T12275]  kvm_arch_vcpu_create+0x16d/0xb70
[ 2721.411774][T12275]  kvm_vm_ioctl+0x1547/0x23c0
[ 2721.416442][T12275]  ? lock_downgrade+0x820/0x820
[ 2721.421287][T12275]  ? kvm_unregister_device_ops+0x60/0x60
[ 2721.426927][T12275]  ? kfree+0x1e0/0x2c0
[ 2721.430995][T12275]  ? tomoyo_path_number_perm+0x244/0x4d0
[ 2721.436620][T12275]  ? tomoyo_execute_permission+0x470/0x470
[ 2721.442427][T12275]  ? sched_clock+0x2a/0x40
[ 2721.446850][T12275]  ? sched_clock_cpu+0x18/0x1b0
[ 2721.451714][T12275]  ? __sanitizer_cov_trace_switch+0x45/0x70
[ 2721.457598][T12275]  ? do_vfs_ioctl+0x27d/0x1090
[ 2721.462350][T12275]  ? generic_block_fiemap+0x60/0x60
[ 2721.467550][T12275]  ? __fget_files+0x294/0x400
[ 2721.472241][T12275]  ? kvm_unregister_device_ops+0x60/0x60
[ 2721.477863][T12275]  ksys_ioctl+0x11a/0x180
[ 2721.482183][T12275]  __x64_sys_ioctl+0x6f/0xb0
[ 2721.486766][T12275]  ? lockdep_hardirqs_on+0x6a/0xe0
[ 2721.491865][T12275]  do_syscall_64+0x60/0xe0
[ 2721.496272][T12275]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2721.502154][T12275] RIP: 0033:0x45cb29
[ 2721.506028][T12275] Code: Bad RIP value.
[ 2721.510078][T12275] RSP: 002b:00007fe72f7bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2721.518478][T12275] RAX: ffffffffffffffda RBX: 00000000004e7f20 RCX: 000000000045cb29
[ 2721.526450][T12275] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007
[ 2721.535123][T12275] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2721.543099][T12275] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 2721.551079][T12275] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fe72f7bf6d4
[ 2721.562393][T32247] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2721.571622][T32247] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2721.579853][T32247] usb 3-1: Manufacturer: syz
[ 2721.585946][T32247] usb 3-1: config 0 descriptor??
[ 2721.635421][T12275] Mem-Info:
[ 2721.639957][T12275] active_anon:423317 inactive_anon:7053 isolated_anon:0
[ 2721.639957][T12275]  active_file:4174 inactive_file:28623 isolated_file:0
[ 2721.639957][T12275]  unevictable:0 dirty:126 writeback:0
[ 2721.639957][T12275]  slab_reclaimable:27166 slab_unreclaimable:211916
[ 2721.639957][T12275]  mapped:60420 shmem:7310 pagetables:75825 bounce:0
[ 2721.639957][T12275]  free:652198 free_pcp:911 free_cma:0
[ 2721.682522][T12275] Node 0 active_anon:1397912kB inactive_anon:16480kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216896kB dirty:0kB writeback:0kB shmem:17340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB all_unreclaimable? yes
[ 2721.712760][T12275] Node 1 active_anon:295356kB inactive_anon:11732kB active_file:16680kB inactive_file:114476kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24784kB dirty:504kB writeback:0kB shmem:11900kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? no
[ 2721.743245][T12275] Node 0 DMA free:10164kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:4308kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:76kB pagetables:288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2721.775551][T12275] lowmem_reserve[]: 0 2515 2515 2515 2515
[ 2721.783008][T12275] Node 0 DMA32 free:42380kB min:74828kB low:83804kB high:92780kB reserved_highatomic:2048KB active_anon:1393604kB inactive_anon:16480kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2578196kB mlocked:0kB kernel_stack:43928kB pagetables:88260kB bounce:0kB free_pcp:1512kB local_pcp:772kB free_cma:0kB
[ 2721.820974][T12275] lowmem_reserve[]: 0 0 0 0 0
[ 2721.826276][T12275] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2721.870377][T27826] usb 3-1: USB disconnect, device number 31
[ 2721.898043][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2721.918738][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2721.932699][T12275] lowmem_reserve[]: 0 0 0 0 0
[ 2721.945094][T12275] Node 1 Normal free:2554248kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:295656kB inactive_anon:11732kB active_file:16680kB inactive_file:114476kB unevictable:0kB writepending:504kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:77828kB pagetables:215048kB bounce:0kB free_pcp:1628kB local_pcp:1068kB free_cma:0kB
[ 2721.953481][T23720] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2722.005477][T12275] lowmem_reserve[]: 0 0 0 0 0
[ 2722.010778][T12275] Node 0 DMA: 1*4kB (M) 6*8kB (UME) 4*16kB (UE) 4*32kB (UM) 3*64kB (UE) 0*128kB 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10164kB
[ 2722.035254][T12275] Node 0 DMA32: 2319*4kB (UMEH) 1026*8kB (UMH) 416*16kB (UMH) 192*32kB (UMH) 82*64kB (UMH) 37*128kB (UMH) 10*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42828kB
[ 2722.058586][T12275] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2722.074761][T12275] Node 1 Normal: 44*4kB (UME) 3*8kB (M) 1*16kB (U) 9*32kB (M) 38*64kB (ME) 11*128kB (ME) 19*256kB (ME) 196*512kB (UME) 97*1024kB (UM) 51*2048kB (UME) 547*4096kB (UM) = 2553848kB
[ 2722.100176][T12275] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2722.115098][T12275] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2722.125068][T12275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2722.129350][T23720] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2722.134916][T12275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2722.153324][T23720] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2722.153579][T12275] 18536 total pagecache pages
[ 2722.166723][T12275] 0 pages in swap cache
[ 2722.167691][T23720] usb 6-1: Manufacturer: syz
[ 2722.171476][T12275] Swap cache stats: add 0, delete 0, find 0/0
[ 2722.182534][T23720] usb 6-1: config 0 descriptor??
[ 2722.199114][T12275] Free swap  = 0kB
[ 2722.203118][T12275] Total swap = 0kB
[ 2722.207108][T12275] 1965979 pages RAM
[ 2722.213931][T12275] 0 pages HighMem/MovableOnly
[ 2722.224215][T12275] 349903 pages reserved
[ 2722.229544][T12275] 0 pages cma reserved
[ 2722.312005][T12275] debugfs: Directory '12275-7' with parent 'kvm' already present!
[ 2722.669185][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.676598][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.714530][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.725365][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.739583][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.746963][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.754900][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.762740][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.770570][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.778338][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.785724][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.793423][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.801252][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.809015][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.816468][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.824217][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.832062][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.847384][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.854762][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.867496][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.874898][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.882370][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.889820][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.897206][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.904673][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.912247][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.919773][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.927160][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.934848][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.942386][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.949906][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.957463][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.964851][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.973324][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.980875][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.988374][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2722.995766][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2723.003223][T23720] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0
[ 2723.011046][T23720] plantronics 0003:047F:FFFF.006E: No inputs registered, leaving
[ 2723.044285][T23720] plantronics 0003:047F:FFFF.006E: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2724.477474][ T9868] usb 6-1: reset high-speed USB device number 76 using dummy_hcd
[ 2725.477585][ T9868] usb 6-1: device descriptor read/64, error -71
05:52:59 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x4008ae89, &(0x7f0000000100)={0x2})

05:52:59 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:52:59 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x68000000}, 0x0)

05:52:59 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x22)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
ptrace$getsig(0x4202, r1, 0x1, &(0x7f0000000100))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32, @ANYBLOB="08000300ac"], 0x40}}, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101083, 0x0)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x40010, r2, 0x7)
r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x10, 0x0)
bind$phonet(r3, &(0x7f0000000440)={0x23, 0x0, 0x8, 0xf8}, 0x10)

05:52:59 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, 0x0)

05:52:59 executing program 4:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00000000000000f3280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffffff000000090001006866736300010000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="840000002c00270e00"/20, @ANYRES32=r3, @ANYBLOB="000000000000000003000000090001666c6f73000000b09effffffffffff804c0001001600566b72494d81db015af5010063750000240002801800010000000000000000000000000000000000000000000800050000000000040006000c00070000000000000000000c000800000000000000000000b211bcf4d3"], 0x84}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r6)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r7)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000340)={0x0, 0x5, 0x3, 0x0, 0x0, [{{r5}, 0xb6}, {{r6}}, {{r7}, 0x8}]})
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x0, 0x6, 0x1}}, 0x28)

05:52:59 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2725.697791][T12338] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2725.716546][T12344] __nla_validate_parse: 5 callbacks suppressed
[ 2725.716557][T12344] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:52:59 executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0x4, 0x20, 0xc8fe, 0x7d8a, 0x28c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x26}}]}}]}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040)=0x8, 0x4)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_flowlabel\x00')
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000140)=0x2, 0x4)
ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfe, &(0x7f0000000000))
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00032e0000002e03b6d761c1f385c642f321858c99a6193bd524068cc5ec1f00000000000000"], 0x0, 0x0, 0x0}, 0x0)

[ 2725.864417][T12343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2725.897202][T12368] xt_CT: You must specify a L4 protocol and not use inversions on it
05:52:59 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2725.920237][T12352] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2725.932941][T12355] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2725.933155][T12353] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2725.972879][T12352] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2725.989830][T12344] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2725.992296][T12377] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2726.005856][T12352] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2726.015830][T23720] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 2726.031223][T12353] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'.
05:53:00 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x6c000000}, 0x0)

05:53:00 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2726.071904][T12343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2726.081520][ T9868] usb 6-1: device descriptor read/64, error -71
[ 2726.102711][T12353] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2726.128416][T12353] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2726.157607][ T6144] usb 2-1: new high-speed USB device number 49 using dummy_hcd
05:53:00 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2726.186187][T12382] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2726.207236][T12385] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2726.221062][T12391] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2726.304446][T12393] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2726.367441][ T9868] usb 6-1: reset high-speed USB device number 76 using dummy_hcd
[ 2726.397545][T23720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2726.413563][T23720] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2726.428445][ T6144] usb 2-1: Using ep0 maxpacket: 32
[ 2726.497595][T23720] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2726.511822][T23720] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2726.523917][T23720] usb 3-1: Manufacturer: syz
[ 2726.543780][T23720] usb 3-1: config 0 descriptor??
[ 2726.718625][ T6144] usb 2-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5
[ 2726.727743][ T6144] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2726.735747][ T6144] usb 2-1: Product: syz
[ 2726.744045][ T6144] usb 2-1: Manufacturer: syz
[ 2726.749635][ T6144] usb 2-1: SerialNumber: syz
[ 2726.767136][ T6144] usb 2-1: config 0 descriptor??
[ 2726.868017][T27826] usb 3-1: USB disconnect, device number 32
[ 2727.267788][ T6144] usb 2-1: MIDIStreaming interface descriptor not found
[ 2727.487787][T27826] usb 2-1: USB disconnect, device number 49
[ 2728.277463][T27826] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 2728.527402][T27826] usb 2-1: Using ep0 maxpacket: 32
[ 2728.703302][T32247] usb 6-1: reset high-speed USB device number 76 using dummy_hcd
[ 2728.808071][T27826] usb 2-1: New USB device found, idVendor=c8fe, idProduct=7d8a, bcdDevice=28.c5
[ 2728.817159][T27826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2728.850083][T27826] usb 2-1: Product: syz
[ 2728.854261][T27826] usb 2-1: Manufacturer: syz
[ 2728.860122][T27826] usb 2-1: SerialNumber: syz
[ 2728.887998][T27826] usb 2-1: config 0 descriptor??
[ 2728.915023][T27826] usb 2-1: can't set config #0, error -71
[ 2728.922688][T27826] usb 2-1: USB disconnect, device number 50
[ 2729.687450][T32247] usb 6-1: device descriptor read/64, error -71
05:53:04 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:04 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x4008ae90, &(0x7f0000000100)={0x2})

05:53:04 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, 0x0)

05:53:04 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x74000000}, 0x0)

05:53:04 executing program 4:
syz_emit_ethernet(0x22, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000))

05:53:04 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89)
connect$inet(r0, &(0x7f0000000100), 0x10)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080), 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r3 = fcntl$dupfd(r1, 0x406, r2)
accept$inet(r3, 0x0, &(0x7f0000000080))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000000c0)=0x7ff, 0x4)

[ 2730.261086][ T6144] usb 6-1: USB disconnect, device number 76
[ 2730.385820][T12471] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2730.422297][T12476] xt_CT: You must specify a L4 protocol and not use inversions on it
05:53:04 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2730.515447][T12488] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:04 executing program 4:
unshare(0x2000400)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000180)='0', 0x1}, {&(0x7f00000001c0)="a9", 0x1}], 0x2)

05:53:04 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x7a000000}, 0x0)

05:53:04 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2730.622190][T12494] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2730.657691][T32247] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 2730.734477][T12499] __nla_validate_parse: 8 callbacks suppressed
[ 2730.734488][T12499] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2730.787703][ T6144] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 2730.840401][T12505] xt_CT: You must specify a L4 protocol and not use inversions on it
05:53:04 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2730.973342][T12503] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2731.012732][T12507] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2731.028191][T32247] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2731.053447][T12503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:53:05 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="183cf9fe49b6b9e9330e6e040000000000999dab13000001fc172b0dc984f688f28b2b0bef8dd9ab9e20b33d6e73803ee584851765d2b7d0246372eb8469"], 0x18}}], 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000240)=ANY=[@ANYBLOB="bd000000ef3eb4bd673eeae390a77fc017bce273ddd8401fadd89bf0b799afadc5a478eb400c65673f27cbc7e34280328f8316b7205b5a904b408cadcbe1bff37437775381dd1c3a125f8abc7cb12723f71b9576b7eee3c91900388035572d09bd6e32618c75beba0a427d205320cd84751ee72b221557cf0b7115709e14bee46ccbf17113a1cfe88d14eeca06f914775801ba84a571316ebb942fbdeb3881007b9c1fbf20d4acc2effceb7a67f7ed54b9179d53b3eb4481e62497fe2bfa107f71aafc"])
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x200000, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
r2 = msgget$private(0x0, 0x0)
msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000480)=""/163)
msgrcv(r2, &(0x7f00000001c0)={0x0, ""/74}, 0x52, 0x3, 0x800)
sendmmsg(0xffffffffffffffff, &(0x7f0000005c00), 0x40000000000037b, 0x0)

[ 2731.071661][T32247] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2731.108818][T12499] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2731.140017][T12507] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:05 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x81000000}, 0x0)

[ 2731.157670][ T6144] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2731.196361][T12518] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2731.248971][T32247] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2731.263008][ T6144] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2731.284609][T32247] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2731.301631][ T6144] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2731.322328][T32247] usb 3-1: Manufacturer: syz
[ 2731.363151][T32247] usb 3-1: config 0 descriptor??
[ 2731.368976][T12527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2731.435027][T12530] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2731.453801][T12527] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2731.463731][ T6144] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2731.479095][ T6144] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2731.491234][ T6144] usb 6-1: Manufacturer: syz
[ 2731.507883][T12530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2731.518982][ T6144] usb 6-1: config 0 descriptor??
[ 2731.539877][T12527] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2731.551044][T12530] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2731.630617][T32247] usb 3-1: USB disconnect, device number 33
[ 2731.999169][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.016525][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.045035][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.070157][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.092455][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.109071][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.116471][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.134241][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.147438][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.186498][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.207438][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.214830][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.247445][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.265015][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.281399][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.296349][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.310999][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.325291][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.340803][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.355001][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.369449][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.376896][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.398956][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.406344][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.424174][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.437382][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.472308][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.489975][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.516648][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.534308][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.543304][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.561611][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.577409][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.595011][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.615225][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.622735][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.637390][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.649460][ T6144] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0
[ 2732.657220][ T6144] plantronics 0003:047F:FFFF.006F: No inputs registered, leaving
[ 2732.667880][ T6144] plantronics 0003:047F:FFFF.006F: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
05:53:07 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000100)={0x2})

05:53:07 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000400))
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
write$apparmor_exec(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="657865283c3ade2a00"], 0x6)
socket$inet_sctp(0x2, 0x0, 0x84)

05:53:08 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x83aa79fb}, 0x0)

[ 2733.975136][T32247] usb 6-1: USB disconnect, device number 77
05:53:08 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100))

05:53:08 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2734.075242][T12572] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2734.082867][T12582] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2734.104480][T12584] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2734.241339][T12593] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2734.288920][T12605] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2734.297781][T12596] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:08 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x88a8ffff}, 0x0)

05:53:08 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, [], 0x1}, 0x20}, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x1a}, 0x10001}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x75b, @local, 0x63f}], 0x84)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000100)={0x1, 0x6})
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'bridge_slave_1\x00', {0x2, 0x4e22, @broadcast}})
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902"], 0x0)

[ 2734.417495][T23720] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 2734.432591][T12611] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2734.452887][T12612] xt_CT: You must specify a L4 protocol and not use inversions on it
05:53:08 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2734.487441][T32247] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 2734.573458][T12621] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2734.574434][T12622] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2734.604157][T12621] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:08 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2734.617455][T12625] xt_CT: You must specify a L4 protocol and not use inversions on it
05:53:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x9effffff}, 0x0)

[ 2734.738763][T12629] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2734.747486][T27826] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 2734.798134][T23720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2734.827565][T23720] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2734.848065][T32247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2734.882159][T32247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2734.927712][T32247] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2734.941809][T12634] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2734.947476][T23720] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2734.969123][T23720] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2734.992193][T23720] usb 3-1: Manufacturer: syz
[ 2735.017809][T27826] usb 5-1: Using ep0 maxpacket: 8
[ 2735.036552][T23720] usb 3-1: config 0 descriptor??
[ 2735.048106][T32247] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2735.057153][T32247] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2735.097443][T32247] usb 6-1: Manufacturer: syz
[ 2735.118424][T32247] usb 6-1: config 0 descriptor??
[ 2735.148310][T27826] usb 5-1: config index 0 descriptor too short (expected 28016, got 36)
[ 2735.165449][T27826] usb 5-1: config 120 has too many interfaces: 97, using maximum allowed: 32
[ 2735.210513][T27826] usb 5-1: config 120 has an invalid descriptor of length 54, skipping remainder of the config
[ 2735.253290][T27826] usb 5-1: config 120 has 0 interfaces, different from the descriptor's value: 97
[ 2735.282402][T27826] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07
[ 2735.301922][T27826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2735.308149][ T9868] usb 3-1: USB disconnect, device number 34
[ 2735.599133][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.606577][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.623200][T27826] usb 5-1: string descriptor 0 read error: -71
[ 2735.640007][T27826] usb 5-1: USB disconnect, device number 95
[ 2735.657732][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.665133][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.707448][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.714875][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.747424][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.754841][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.777613][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.785007][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.807471][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.817432][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.824823][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.853706][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.877443][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.884831][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.907515][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.914955][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.927417][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.957402][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.964804][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.987536][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2735.994939][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.017399][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.024832][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.047504][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.054895][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.077432][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.084822][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.107723][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.115114][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.137399][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.147692][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.155079][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.184698][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.197403][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.204833][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.217401][T32247] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0
[ 2736.225170][T32247] plantronics 0003:047F:FFFF.0070: No inputs registered, leaving
[ 2736.250049][T32247] plantronics 0003:047F:FFFF.0070: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
05:53:11 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400c4808, &(0x7f0000000100)={0x2})

05:53:11 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xbca7a129}, 0x0)

05:53:11 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100))

05:53:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003880)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000003980)=0xe8)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000039c0)={@private=0xa010100, @private=0xa010100, r3}, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003400)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539302000000000000000000", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x1f19, &(0x7f00000006c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, r8, 0x1}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x38, r8, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @broadcast}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7f, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000)

[ 2737.545689][T27826] usb 6-1: USB disconnect, device number 78
[ 2737.609564][T12679] __nla_validate_parse: 10 callbacks suppressed
[ 2737.609575][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2737.678541][T12679] device bridge8 entered promiscuous mode
[ 2737.695807][T12682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2737.714891][T12701] xt_ct_set_helper: 1 callbacks suppressed
[ 2737.714898][T12701] xt_CT: You must specify a L4 protocol and not use inversions on it
05:53:11 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2737.892623][T12714] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2737.907981][ T6144] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 2738.097668][T27826] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 2738.268523][ T6144] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2738.304126][ T6144] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2738.399262][ T6144] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2738.421896][ T6144] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2738.449409][ T6144] usb 3-1: Manufacturer: syz
[ 2738.493311][ T6144] usb 3-1: config 0 descriptor??
[ 2738.528065][T27826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2738.556099][T27826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2738.586437][T27826] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2738.697965][T27826] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2738.707019][T27826] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2738.747550][T27826] usb 6-1: Manufacturer: syz
[ 2738.760611][ T6144] usb 3-1: USB disconnect, device number 35
[ 2738.787614][T27826] usb 6-1: config 0 descriptor??
05:53:12 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3)
ioctl$TCFLSH(r0, 0x80047456, 0x2070e000)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={<r3=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r3})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x3)
ioctl$TCFLSH(r4, 0x80047456, 0x2070e000)

[ 2738.941003][T12700] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
05:53:13 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2738.984249][T12706] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2739.007740][T12716] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2739.027766][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2739.060016][T12703] device bridge8 entered promiscuous mode
[ 2739.091808][T12682] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
05:53:13 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xd51a0000}, 0x0)

[ 2739.197036][T12744] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2739.269197][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.276598][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
05:53:13 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100))

05:53:13 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "080002000000000008ff43944eeba71a4976e252922cb18f6e2e48ba000000012e0b385404b03ae96d09800000000000000101013c5811039e15825527ecba66fd767ce7a7f6e1b6b408561839ede6dd248a00000000000000000000000000000006ad8e5ecc326d3a09ffc2c6540200e4f200"}, 0x80)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000240)={0xfffffff, 0x0, 0x8, <r6=>r4, 0x0, &(0x7f0000000200)={0x9b0972, 0x7, [], @p_u16=&(0x7f0000000100)=0x4}})
connect$phonet_pipe(r6, &(0x7f0000000280)={0x23, 0x1, 0x80, 0x7}, 0x10)
tkill(r5, 0x22)
ptrace$cont(0x18, r5, 0x0, 0x0)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r5, 0x0, 0x0)
r7 = syz_open_procfs(r5, &(0x7f00000001c0)='net/igmp6\x00')
readv(r7, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
sendmmsg$inet(r7, &(0x7f0000002840)=[{{&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x40}}], 0x1, 0x0)

[ 2739.372511][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.427388][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.444399][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.468634][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.476031][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.567983][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.611884][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.644847][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.675981][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.708218][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.740320][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.773124][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.807231][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.841897][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.875502][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.896887][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.920530][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.941886][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2739.997443][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.004841][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.007447][ T6144] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 2740.057487][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.064881][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.103178][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.123793][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.142415][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.155979][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.174179][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.195231][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.216512][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.235330][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.254156][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.268863][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.276249][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.302105][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.317099][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.335848][T27826] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[ 2740.354613][T27826] plantronics 0003:047F:FFFF.0071: No inputs registered, leaving
05:53:14 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0)

[ 2740.387570][ T6144] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2740.399674][T27826] plantronics 0003:047F:FFFF.0071: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2740.402429][ T6144] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2740.462991][T12748] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2740.530346][ T6144] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2740.541466][T12750] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2740.560064][T12752] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2740.568806][ T6144] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2740.577581][T12761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2740.591596][T12758] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2740.606310][ T6144] usb 3-1: Manufacturer: syz
[ 2740.613072][T12762] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2740.638792][ T6144] usb 3-1: config 0 descriptor??
[ 2740.970830][ T6144] usb 3-1: USB disconnect, device number 36
05:53:15 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x4018480c, &(0x7f0000000100)={0x2})

05:53:15 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:15 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x418, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "86568edb"}]}}, 0x0}, 0x0)

05:53:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xf0ffffff}, 0x0)

[ 2741.202944][T27826] usb 6-1: USB disconnect, device number 79
05:53:15 executing program 1:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x200, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

[ 2741.373142][T12820] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2741.397734][T12824] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2741.421067][T12818] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:15 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:15 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180), 0x1000000000000037}, 0x0)

05:53:15 executing program 2 (fault-call:3 fault-nth:0):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

05:53:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xfb79aa83}, 0x0)

05:53:15 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2741.567433][T23720] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 2741.593575][T12834] xt_CT: You must specify a L4 protocol and not use inversions on it
05:53:15 executing program 1:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0xbf18dea5a0acd8f3, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}]}]}, 0x28}}, 0x0)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000001340)={0x136c, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x97}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fb6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc826}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc5fe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x25}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_NODE={0x1150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "2adb983042032afb6c213787fbc6078493e1d8609a880c1c8b2f93fd3adabe24a8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "60ec739baf7cbf4de2a4df6c45a77f41241ab810363b19c024f0713eb8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b6b41d00d36f2ee1f57e15c771088c3c63eef5b7affd"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "644d263c2b74ce59af6de1e609c1e96df7c5fd1e51cd91b3fc66bffd7fbe03b2d0"}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x136c}, 0x1, 0x0, 0x0, 0x8080}, 0x80800)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ppoll(0x0, 0x0, &(0x7f0000000500), 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xa28, 0x11, 0x0, 0x27)

[ 2741.670896][T12846] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2741.691039][T12846] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2741.708485][T27826] usb 6-1: new high-speed USB device number 80 using dummy_hcd
05:53:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xfeffffff}, 0x0)

[ 2741.718598][T12852] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2741.742959][T12853] vxcan1: MTU too low for tipc bearer
[ 2741.752961][T12853] tipc: Enabling of bearer <ib:vxcan1> rejected, failed to enable media
[ 2741.837429][ T6144] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 2741.887182][T12853] vxcan1: MTU too low for tipc bearer
[ 2741.894343][T12853] tipc: Enabling of bearer <ib:vxcan1> rejected, failed to enable media
[ 2741.907554][T12857] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2741.920300][T12865] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2741.938437][T23720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2741.964821][T23720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2741.981296][T23720] usb 5-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.40
[ 2741.991447][T23720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2742.008707][T23720] usb 5-1: config 0 descriptor??
[ 2742.067555][T27826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2742.080028][T27826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2742.092002][T27826] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2742.177825][T27826] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2742.186859][T27826] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2742.201024][T27826] usb 6-1: Manufacturer: syz
[ 2742.206867][T27826] usb 6-1: config 0 descriptor??
[ 2742.248133][ T6144] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2742.275670][ T6144] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2742.347747][T23720] usbhid 5-1:0.0: can't add hid device: -71
[ 2742.353747][T23720] usbhid: probe of 5-1:0.0 failed with error -71
[ 2742.366797][T23720] usb 5-1: USB disconnect, device number 96
[ 2742.378236][ T6144] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2742.387275][ T6144] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2742.404045][ T6144] usb 3-1: Manufacturer: syz
[ 2742.414645][ T6144] usb 3-1: config 0 descriptor??
[ 2742.663339][T28063] usb 3-1: USB disconnect, device number 37
[ 2742.689320][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.696743][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.714585][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.734317][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.742150][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.757885][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.765283][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.781932][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.791379][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.802808][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.812355][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.824022][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.837111][T23720] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 2742.844858][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.852460][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.859916][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.868103][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.875559][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.883064][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.892888][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.900396][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.908815][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.916205][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.923745][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.931205][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.938673][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.946056][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.953581][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.961050][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.973941][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.982850][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2742.999665][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2743.007054][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2743.027402][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2743.034796][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2743.047533][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2743.054922][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2743.063009][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2743.074976][T27826] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0
[ 2743.089333][T27826] plantronics 0003:047F:FFFF.0072: No inputs registered, leaving
[ 2743.104995][T27826] plantronics 0003:047F:FFFF.0072: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2743.212362][T23720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2743.230456][T23720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2743.242332][T23720] usb 5-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.40
[ 2743.252198][T23720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2743.266828][T23720] usb 5-1: config 0 descriptor??
[ 2743.767821][T23720] chicony 0003:04F2:0418.0073: hidraw1: USB HID v0.00 Device [HID 04f2:0418] on usb-dummy_hcd.4-1/input0
[ 2743.955352][ T9868] usb 5-1: USB disconnect, device number 97
[ 2744.497459][T23720] usb 6-1: reset high-speed USB device number 80 using dummy_hcd
[ 2744.727482][ T9868] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 2745.088029][ T9868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2745.103442][ T9868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2745.114628][ T9868] usb 5-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.40
[ 2745.128312][ T9868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2745.141065][ T9868] usb 5-1: config 0 descriptor??
[ 2745.367556][ T9868] usbhid 5-1:0.0: can't add hid device: -71
[ 2745.373575][ T9868] usbhid: probe of 5-1:0.0 failed with error -71
[ 2745.385909][ T9868] usb 5-1: USB disconnect, device number 98
[ 2745.537463][T23720] usb 6-1: device descriptor read/64, error -71
05:53:20 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x40184810, &(0x7f0000000100)={0x2})

05:53:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xffffa888}, 0x0)

05:53:20 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:20 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(r0, 0x8, &(0x7f00000000c0)="ea228a487e4100bb92b1a81945c25e8d0f33e4b3e57a02d769b2de5e4ddcb2c5609f9d1ece83f9b588e0a596f94463bbbc15cdabc67620647a62e6cc8bfbe4f39621ec851aefdf3b3c9e8cd82b0dae1e603f097ee4ae730b42e8ffe7e9842c86ad737d0514a4d328d77de18fcfc23f2d09ca335ef210b196e56663c2e1ba25c2b79c0b9e54b96be71ab3a98ef7e270a7ba4f801c16abb0486c3cca926e342f7767ad8283066242a75668a2d95d2f0461adf09f53182c06f75886c95409e6e1595ba58a9ed55fb4301a3b443d4f971e174a")
r1 = syz_open_procfs(0x0, &(0x7f0000272000))
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "d69d1da35d61f239", "e9052f655933ff8c9edae9d616164c5ffe5361c2106687ab5e4d00d93c90ee6e", "dde5408a", "fa8ee9079a6c650b"}, 0x38)
prctl$PR_GET_DUMPABLE(0x3)

05:53:20 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

05:53:20 executing program 4:
rseq(&(0x7f0000000040), 0xffffffffffffff96, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9eec17c93d90277ccfdaac2c468899e2935291ebf096c3628fb6b5d02eb8eb69c88bed403233eeb1bc8043b80413c87a3184adc11c590edaf269eab1d71238fa0eea5bfe1157ef57d6b1fc9c175b5b3bcd50faefda71f9fbb55ffc62c1fc3ada29be50f3554e3ddae861f19e8607da319a71ad58b3d24e6ef3f676727fc9892002883b53b21f391f29fa6d78c7cb9d70b3025755356a64fd4d2ae5dbb8d6648ddb7ce9000000000000", @ANYRES16=r2, @ANYBLOB="000426bd7000fbdbdf25050000002f00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f696e697472635f657865635f743a73300000080005000a01010108000500ffffffff14000200fe8000000000000000000000000000301400020000000000000000000000ffff0a01010214000200fe88000000000000000000000000010108000500e0000002140003ffb383c600000d"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
rseq(&(0x7f0000000000), 0x20, 0x100000001, 0x0)
sendto$l2tp(r1, &(0x7f00000002c0)="e4aff2e0aea8578a30426420d341d1", 0xf, 0x10, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0xffffffffffffffff, &(0x7f0000000380))
semctl$IPC_RMID(0x0, 0x0, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000600)=""/197)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000024000705aa9774ce06d46a5db12e093ed1875cc70000004007a2a30005000000e0f9ec48e0173c3a49376388162a8804d96a7045bafbfeb0eff4c24adbe0dd8d4ce1017857fb58c2e17aed5704338d985c9b10df25e163096db82b24fc9bc912c4661d04177a45c6", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00%\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00001000000000000f00000008000100070de792390a391b577e859f8177b61218345da6a638507244aeff753332000c0002000800040004000000"], 0x38}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b0300900bbf1ebd1fd787727823d15dbd0000000000300012800b00010067656e65766500002000028005000300dea93b9c5eef5e00010800050000000000000000000000000000000000001cca84058d4083952d854c663fbaacf24a93d00d9de9280408d8dee7ba864cb4aa5ac583870eaec59daf33491e955260d2988b740240a4efef6508e74ca1681a3bf511882e", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="8f4c2918169488d577d7"], 0x60}}, 0x20000040)

[ 2746.103301][T23720] usb 6-1: can't restore configuration #0 (error=-71)
[ 2746.113900][T27826] usb 6-1: USB disconnect, device number 80
[ 2746.165876][T12954] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2746.182452][T12964] __nla_validate_parse: 12 callbacks suppressed
[ 2746.182463][T12964] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:53:20 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040010)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x101800, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810], 0x0, 0x5211})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2746.220101][T12965] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2746.339161][T12967] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2746.352081][T12976] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2746.382695][T12979] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2746.407712][T12991] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2746.437705][T23720] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 2746.445717][T12976] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2746.465482][T12992] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2746.469001][T12964] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2746.505900][T12979] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2746.540218][T12987] warn_alloc: 1 callbacks suppressed
05:53:20 executing program 4:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000000c0)={r5, 0x1, 0x8000, 0x1000000})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r6, 0x28, &(0x7f0000000100)}, 0x10)

05:53:20 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2746.540234][T12987] syz-executor.1: page allocation failure: order:0, mode:0x400cc4(GFP_KERNEL_ACCOUNT|GFP_DMA32), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 2746.596911][T12987] CPU: 0 PID: 12987 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0
[ 2746.605593][T12987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2746.615646][T12987] Call Trace:
[ 2746.618941][T12987]  dump_stack+0x18f/0x20d
[ 2746.623281][T12987]  warn_alloc.cold+0x87/0x17a
[ 2746.627968][T12987]  ? zone_watermark_ok_safe+0x260/0x260
[ 2746.633532][T12987]  ? wait_for_completion+0x260/0x260
[ 2746.638827][T12987]  __alloc_pages_slowpath.constprop.0+0x2197/0x2780
[ 2746.645435][T12987]  ? warn_alloc+0x120/0x120
[ 2746.649949][T12987]  ? __alloc_pages_nodemask+0x3e5/0x930
[ 2746.655560][T12987]  ? lock_is_held_type+0xb0/0xe0
[ 2746.660493][T12987]  ? find_held_lock+0x2d/0x110
[ 2746.665273][T12987]  __alloc_pages_nodemask+0x68f/0x930
[ 2746.670656][T12987]  ? __zone_watermark_ok+0x370/0x370
[ 2746.675934][T12987]  ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780
[ 2746.682698][T12987]  ? lock_is_held_type+0xb0/0xe0
[ 2746.687647][T12987]  ? rcu_read_lock_sched_held+0x3a/0xb0
[ 2746.693882][T12987]  ? __alloc_pages_nodemask+0x6b1/0x930
[ 2746.699427][T12987]  alloc_pages_current+0x187/0x280
[ 2746.704536][T12987]  alloc_mmu_pages+0x7f/0x170
[ 2746.709207][T12987]  kvm_mmu_create+0x3cb/0x560
[ 2746.713883][T12987]  kvm_arch_vcpu_create+0x16d/0xb70
[ 2746.719099][T12987]  kvm_vm_ioctl+0x1547/0x23c0
[ 2746.723785][T12987]  ? lock_downgrade+0x820/0x820
[ 2746.728646][T12987]  ? kvm_unregister_device_ops+0x60/0x60
[ 2746.734268][T12987]  ? trace_hardirqs_on+0x5f/0x220
[ 2746.739299][T12987]  ? lockdep_hardirqs_on+0x6a/0xe0
[ 2746.744407][T12987]  ? tomoyo_path_number_perm+0x244/0x4d0
[ 2746.750033][T12987]  ? tomoyo_execute_permission+0x470/0x470
[ 2746.755846][T12987]  ? __might_fault+0x11f/0x1d0
[ 2746.760624][T12987]  ? __sanitizer_cov_trace_switch+0x45/0x70
[ 2746.767012][T12987]  ? do_vfs_ioctl+0x27d/0x1090
[ 2746.771783][T12987]  ? generic_block_fiemap+0x60/0x60
[ 2746.776995][T12987]  ? __might_fault+0x190/0x1d0
[ 2746.781767][T12987]  ? _copy_to_user+0x126/0x160
[ 2746.786526][T12987]  ? __fget_files+0x294/0x400
[ 2746.791298][T12987]  ? kvm_unregister_device_ops+0x60/0x60
[ 2746.796921][T12987]  ksys_ioctl+0x11a/0x180
[ 2746.801249][T12987]  __x64_sys_ioctl+0x6f/0xb0
[ 2746.805830][T12987]  ? lockdep_hardirqs_on+0x6a/0xe0
[ 2746.810931][T12987]  do_syscall_64+0x60/0xe0
[ 2746.815357][T12987]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2746.822196][T12987] RIP: 0033:0x45cb29
[ 2746.826074][T12987] Code: Bad RIP value.
[ 2746.830122][T12987] RSP: 002b:00007fd2a59c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2746.838520][T12987] RAX: ffffffffffffffda RBX: 00000000004e7f20 RCX: 000000000045cb29
05:53:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xfffff000}, 0x0)

[ 2746.846510][T12987] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[ 2746.854477][T12987] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2746.862438][T12987] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 2746.870399][T12987] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fd2a59c56d4
05:53:20 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2746.891855][T27826] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 2746.894989][T13003] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2746.910177][T13002] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2746.955519][T13005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2746.996273][T12987] Mem-Info:
[ 2747.000330][T12987] active_anon:423882 inactive_anon:7053 isolated_anon:0
[ 2747.000330][T12987]  active_file:4172 inactive_file:28665 isolated_file:7
[ 2747.000330][T12987]  unevictable:0 dirty:51 writeback:54
[ 2747.000330][T12987]  slab_reclaimable:27205 slab_unreclaimable:213997
[ 2747.000330][T12987]  mapped:60499 shmem:7310 pagetables:76280 bounce:0
[ 2747.000330][T12987]  free:648314 free_pcp:484 free_cma:0
[ 2747.037853][T13011] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2747.065081][T13014] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2747.092834][T13000] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2747.106820][T13019] xt_CT: No such helper "netbios-ns"
[ 2747.113302][T23720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2747.162910][T12987] Node 0 active_anon:1397912kB inactive_anon:16480kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:216924kB dirty:4kB writeback:0kB shmem:17340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB all_unreclaimable? yes
[ 2747.169745][T23720] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2747.222571][T12987] Node 1 active_anon:297616kB inactive_anon:11732kB active_file:16684kB inactive_file:114660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25172kB dirty:200kB writeback:16kB shmem:11900kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? no
[ 2747.264823][T12987] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:4308kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:76kB pagetables:288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2747.302379][T12987] lowmem_reserve[]: 0 2515 2515 2515 2515
[ 2747.309210][T12987] Node 0 DMA32 free:40144kB min:74828kB low:83804kB high:92780kB reserved_highatomic:2048KB active_anon:1393604kB inactive_anon:16480kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2578196kB mlocked:0kB kernel_stack:43928kB pagetables:88260kB bounce:0kB free_pcp:880kB local_pcp:364kB free_cma:0kB
[ 2747.344486][T12987] lowmem_reserve[]: 0 0 0 0 0
[ 2747.350863][T12987] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2747.380079][T27826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2747.391116][T23720] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2747.400209][T12987] lowmem_reserve[]: 0 0 0 0 0
[ 2747.404917][T12987] Node 1 Normal free:2543964kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:297616kB inactive_anon:11732kB active_file:16684kB inactive_file:114660kB unevictable:0kB writepending:120kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:78228kB pagetables:216572kB bounce:0kB free_pcp:1812kB local_pcp:684kB free_cma:0kB
[ 2747.440634][T12987] lowmem_reserve[]: 0 0 0 0 0
[ 2747.441524][T23720] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2747.445650][T12987] Node 0 DMA: 1*4kB (M) 3*8kB (UME) 6*16kB (UE) 4*32kB (UM) 3*64kB (UE) 0*128kB 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10172kB
[ 2747.454443][T27826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2747.478246][T12987] Node 0 DMA32: 2318*4kB (UMH) 734*8kB (UMEH) 384*16kB (UMH) 201*32kB (UMH) 85*64kB (UMH) 37*128kB (UMH) 9*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40200kB
[ 2747.480555][T23720] usb 3-1: Manufacturer: syz
[ 2747.501137][T27826] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2747.502670][T12987] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2747.522266][T23720] usb 3-1: config 0 descriptor??
[ 2747.532483][T12987] Node 1 Normal: 11*4kB (ME) 128*8kB (UME) 24*16kB (UME) 24*32kB (UME) 17*64kB (UME) 10*128kB (M) 19*256kB (ME) 177*512kB (UME) 97*1024kB (UM) 51*2048kB (UME) 547*4096kB (UM) = 2544364kB
[ 2747.560193][T12987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2747.576573][T12987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2747.586472][T12987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2747.597530][T12987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2747.603867][T27826] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2747.606820][T12987] 18591 total pagecache pages
[ 2747.616803][T27826] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2747.629221][T12987] 0 pages in swap cache
[ 2747.630555][T27826] usb 6-1: Manufacturer: syz
[ 2747.633376][T12987] Swap cache stats: add 0, delete 0, find 0/0
[ 2747.633382][T12987] Free swap  = 0kB
[ 2747.633387][T12987] Total swap = 0kB
[ 2747.633394][T12987] 1965979 pages RAM
[ 2747.633400][T12987] 0 pages HighMem/MovableOnly
[ 2747.633405][T12987] 349903 pages reserved
[ 2747.633410][T12987] 0 pages cma reserved
[ 2747.708695][T27826] usb 6-1: config 0 descriptor??
[ 2747.803974][T23720] usb 3-1: USB disconnect, device number 38
[ 2748.179138][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.186551][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.205799][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.220580][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.234504][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.246808][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.259841][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.267233][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.287338][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.294723][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.313369][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.337243][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.351627][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.363570][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.377057][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.389861][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.397246][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.416270][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.429553][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.436935][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.455826][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.469447][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.476825][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.495191][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.507164][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.521087][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.534639][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.546621][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.559231][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.566611][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.584168][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.596950][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.610605][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.622689][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.635919][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.648352][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.655753][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.674901][T27826] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0
[ 2748.687068][T27826] plantronics 0003:047F:FFFF.0074: No inputs registered, leaving
[ 2748.703075][T27826] plantronics 0003:047F:FFFF.0074: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2750.007448][T32247] usb 6-1: reset high-speed USB device number 81 using dummy_hcd
[ 2750.997401][T32247] usb 6-1: device descriptor read/64, error -71
05:53:25 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x40186366, &(0x7f0000000100)={0x2})

05:53:25 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:25 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xffffff7f}, 0x0)

05:53:25 executing program 1:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5e909c602b0764ce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x103000, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000000c0))
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20804}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x20040, 0x12004}}}}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x50}}, 0x0)

05:53:25 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x19b0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
recvmsg$can_bcm(r1, &(0x7f0000000600)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000080)=""/34, 0x22}, {&(0x7f0000000100)=""/20, 0x14}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f0000000380)=""/239, 0xef}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000540)=""/169, 0xa9}, {&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x9, &(0x7f00000002c0)=""/11, 0xb}, 0x122)
r2 = dup(r0)
setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x9}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', <r5=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0xe000000)

05:53:25 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2751.297740][T13068] __nla_validate_parse: 2 callbacks suppressed
[ 2751.297751][T13068] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2751.422545][T13075] xt_CT: No such helper "netbios-ns"
05:53:25 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2751.505121][T13076] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2751.524728][T13085] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2751.544864][T13081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2751.627922][ T2230] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 2751.896396][T13076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2751.906271][T13068] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
05:53:25 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x2], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2751.938330][T13085] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2751.973082][T13081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
05:53:25 executing program 4:
socket$inet6(0xa, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6}]})
pipe(&(0x7f0000000140))
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
pipe(&(0x7f00000003c0))
syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf}, 0x40)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

05:53:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xffffff9e}, 0x0)

05:53:26 executing program 1:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5e909c602b0764ce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x103000, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000000c0))
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20804}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x20040, 0x12004}}}}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x50}}, 0x0)

[ 2751.999069][ T2230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2752.024786][ T2230] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2752.075283][T13112] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2752.138299][ T2230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2752.162239][ T2230] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2752.172350][T13119] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2752.177099][ T2230] usb 3-1: Manufacturer: syz
05:53:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x3], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2752.185940][T13117] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2752.211411][ T2230] usb 3-1: config 0 descriptor??
[ 2752.224917][T13117] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2752.307953][T13112] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2752.342358][T13124] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2752.467468][   T29] audit: type=1326 audit(1594014806.441:74): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13109 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0
[ 2752.496816][T13133] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2752.824364][ T2230] usb 3-1: USB disconnect, device number 39
[ 2752.885630][   T29] audit: type=1326 audit(1594014806.861:75): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13109 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0
[ 2753.019535][T27826] usb 6-1: USB disconnect, device number 81
[ 2753.597483][T27826] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 2753.787480][T32247] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 2754.007481][T27826] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2754.017594][T27826] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2754.108026][T27826] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2754.117069][T27826] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2754.125435][T27826] usb 3-1: Manufacturer: syz
[ 2754.137112][T27826] usb 3-1: config 0 descriptor??
[ 2754.148111][T32247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2754.160058][T32247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2754.171308][T32247] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2754.257504][T32247] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2754.266556][T32247] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2754.280977][T32247] usb 6-1: Manufacturer: syz
[ 2754.284439][T23720] usb 3-1: USB disconnect, device number 40
[ 2754.292257][T32247] usb 6-1: config 0 descriptor??
05:53:28 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x4020940d, &(0x7f0000000100)={0x2})

05:53:28 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xfffffff0}, 0x0)

05:53:28 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x4], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:28 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="dfbc58ef6edd8c56a50104e9c74330b7ad3279f6018faa78c68246325f39459aaec9f91833c36b4b1ecd40e67082a442e49907a9c3dd329ee63e59ac2f1fa7726149961670d033b545d0b4a33641ca6a04fe32aa601e1d56744ea969057baf6b43709f0b3a38c41682aa0a28986dd175f9f8fee96a137d907535885a68c5e4d4d35117b32421fa629f6804637c8b828585d5c0df4cb5531137cb52ae79d3b8d68a89f92d3b871d2a5c7c17d558f4c9d4d95b94ebdf", 0xb5)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x550, 0x210, 0x140, 0x3b0, 0x2e0, 0x210, 0x480, 0x480, 0x480, 0x480, 0x480, 0x6, &(0x7f0000000e40), {[{{@ipv6={@remote, @mcast2, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffff00, 0xff000000, 0xffffffff, 0xff], 'veth0_to_hsr\x00', 'vcan0\x00', {}, {0xff}, 0x87, 0x7, 0x4, 0x21}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}, {0x0, 0x2, 0x0, [0x2, 0x40, 0xfff, 0x7fff, 0x80, 0x4, 0x7, 0x1, 0x807, 0xffff, 0x1ee, 0xe, 0x9cf, 0x1, 0x1, 0x3], 0x10}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x10}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x81, 0x49}}}, {{@ipv6={@remote, @mcast2, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], [0x0, 0xff, 0xffffff00, 0xffffffff], 'bridge_slave_0\x00', 'bond_slave_1\x00', {}, {0xff}, 0xff, 0x1f, 0x4, 0x51}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3f, 0x7}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [0xff, 0xffffff00, 0xffffff00, 0xffffffff], [0xff000000, 0xffffffff, 0xff], 'vxcan1\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x8, 0x4, 0x0, 0x30}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5, 0x3}}}, {{@ipv6={@loopback, @private1={0xfc, 0x1, [], 0x1}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xff, 0xffffffff], 'vcan0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x2c, 0x7c, 0x1, 0x42}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xb}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, [0x21a1fad4e2b29209, 0x0, 0xffffff00], [0xff, 0xff, 0xff000000], 'bond_slave_0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x1d, 0x9, 0x6, 0x4b}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x6a, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x39}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000002580)="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", 0x1000, 0x40, &(0x7f0000000e00)={0x11, 0xc, r3}, 0x14)
r6 = accept(r0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000d80)=@filter={'filter\x00', 0xe, 0x2, 0xbac, [0x0, 0x200001c0, 0x20000d0c, 0x20000d3c], 0x0, &(0x7f0000000000), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x14, 0x88b5, 'team0\x00', 'macsec0\x00', 'caif0\x00', 'gretap0\x00', @dev={[], 0x29}, [0xff, 0xff, 0xff, 0xf6d2fd53db023077, 0x0, 0xff], @multicast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x896, 0x896, 0x8c6, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x1, 0xffffffff, 0xfffff800, 0x240e, {0x9}}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x7ff}, {0x100, 0x3}, {0x0, 0x3}, {0x5, 0x1}, {0x7, 0x3}, {0x0, 0x2}, {0x8, 0x3}, {0x1}, {0x1f}, {0x7ff}, {0x7fffffff}], [{0x7fffffff, 0x1}, {0xfffffffc, 0xd802}, {0x40, 0x9}, {0x8000000, 0x81}, {0x6}, {0x9, 0x2}, {0xa000, 0x1}, {0x77, 0x1f}, {0x1, 0x80}, {0x800, 0x762b}, {0x4, 0x1ff}], 0xa, 0xb}, {[{0x9, 0x3}, {0xfffffffd, 0x3}, {0x8, 0x3}, {0x1, 0x3}, {0x800}, {0x7, 0x1}, {0x5916600}, {0x8d, 0x2}, {0x7}, {0x9, 0x1}, {0x0, 0x1}], [{0x7, 0x8}, {0xa7, 0x1f}, {0x0, 0x7f}, {0x6, 0x8000}, {0x56}, {0x6ca0085b}, {0xffff, 0x6}, {0x80, 0xffff}, {0x5, 0x8}, {0x9, 0x43d}, {0x401, 0x7}], 0x9, 0x7}, {[{0x2, 0x2}, {0xffffff80, 0x2}, {0x6}, {0x7ff, 0x3}, {0x40, 0x2}, {0x9, 0x3}, {0x0, 0x2}, {0x2, 0x2}, {0x2, 0x2}, {0x7f}, {0xffff, 0x1}], [{0x147, 0xfffff416}, {0x4, 0xa8}, {0x7, 0x3f}, {0x5, 0x8}, {0x0, 0x200}, {0xc4, 0x7fff}, {0xffff8000, 0x200}, {0x4, 0x1}, {0x9, 0x4}, {0x7e, 0x3}, {0x8, 0x1}], 0x4, 0x9}, {[{0xfffffdc7, 0x2}, {0x1, 0x1}, {0x4}, {0x180000, 0x1}, {0x8, 0x2}, {0x1}, {0x1000}, {0x7fffffff, 0x2}, {0x80000001, 0x2}, {0xe7, 0x1}, {0xb8a9, 0x2}], [{0x1, 0x5}, {0x6, 0x1d}, {0x5, 0x6}, {0x1ff, 0x7315}, {0x9, 0x5}, {0x0, 0x9}, {0xfffffffe, 0x2}, {0x3, 0x2}, {0x7, 0x10000}, {0x101, 0x5}, {0x5, 0x1}], 0x7, 0x3}, {[{0x4, 0x3}, {0x1, 0x3}, {0x800, 0x1}, {0x7, 0x2}, {0x80, 0x1}, {0x1}, {0x5, 0x2}, {}, {0xfffffc01, 0x3}, {0x7}, {0x8, 0x1}], [{0x4a95, 0x2}, {0x8, 0x4}, {}, {0x7f, 0x8001}, {0x80000001, 0xf56}, {0x8001, 0x7}, {0x1, 0x9}, {0x800, 0x1000}, {0x7, 0x3}, {0x800}, {0x81, 0x8}], 0x0, 0xa}, {[{0x1, 0x3}, {0xfffffff8, 0x1}, {0x8, 0x3}, {0xfc6}, {0x19, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x8, 0x3}, {0x1, 0x1}, {0x8, 0x2}, {0x6, 0x3}], [{0x3, 0x5}, {0xe4, 0x8}, {0x1f, 0xc0}, {0x1f, 0x27}, {0x3ff000, 0x2}, {}, {0xfffffff8, 0x9}, {0x82b, 0xa51}, {0x90, 0x1}, {0x7623, 0x9}, {0x0, 0x5}], 0x9, 0x6}, {[{0x2, 0x2}, {0x2}, {0x23a, 0x1}, {0x7f, 0x2}, {0x8, 0x2}, {0x4}, {0xffffff30}, {0x7, 0x3}, {0x0, 0x1}, {0x5, 0x1}, {0xfa6, 0x1}], [{0x3, 0x8000}, {0x1f, 0x401}, {0xb9, 0xbc7}, {0x6, 0x98}, {0xffffffa8, 0x7}, {0x7, 0x4}, {0x7, 0x212}, {0x8, 0x6}, {0xebde, 0x3}, {0x4, 0x9}, {0x7, 0x2e}], 0x0, 0x1}, {[{0x860, 0x3}, {0x7}, {0x9, 0x2}, {0x10001, 0x2}, {0x43c250f0, 0x3}, {0x3, 0x3}, {0xae, 0x2}, {0x10001, 0x1}, {0x861a, 0x2}, {0x2, 0x3}, {0x1590, 0x3}], [{0x800, 0x5}, {0x3, 0x65}, {0x80, 0x8001}, {0x0, 0x8}, {0xffff, 0x7}, {0x0, 0x100}, {0x8, 0x3}, {0xa51, 0x20}, {0x7, 0x3b5}, {0x8001, 0xfffffffb}, {0x800, 0x9}], 0x3, 0x1}, {[{0x3, 0x2}, {0x7, 0x1}, {0xcaa0, 0x3}, {0x8000, 0x3}, {0x1, 0x3}, {0xe6}, {0x8, 0x3}, {0x7, 0x2}, {0x1000}, {0x7a3, 0x1}, {0x9d3d, 0x3}], [{0x101, 0x800}, {0x0, 0x541}, {0x8, 0x3ff}, {0x5, 0x4}, {0x5, 0x3}, {0x8001, 0x10000}, {0x19, 0x1c}, {0x2, 0xfffffff7}, {0xfff, 0x7}, {0x401, 0x1}, {0xfff, 0x2}], 0xb, 0x7}, {[{0x1, 0x3}, {0x6}, {0xd8, 0x3}, {0x9, 0x3}, {0x8, 0x1}, {0x8, 0x3}, {0x5, 0x2}, {0x5, 0x1}, {0x8}, {0x6, 0x2}, {0x2, 0x2}], [{0x78c0, 0x3f}, {0x1ff, 0xfe}, {0xba, 0x10000}, {0x2, 0x4}, {0x1, 0x4}, {0x2, 0x80000001}, {0x6, 0x2}, {0x7, 0x2}, {0x3, 0x9}, {0x7, 0x1974}, {0x1, 0x6}], 0x6, 0xa}, {[{0x4, 0x2}, {0x4, 0x1}, {0x744, 0x3}, {}, {0x7fffffff, 0x1}, {0x8, 0x3}, {0x1}, {0x4}, {0x3}, {0xbfd762a, 0x2}, {0x8, 0x3}], [{0x7fff, 0x6}, {0x2, 0x8}, {0x101, 0xb6}, {0x6, 0x7}, {0x8}, {0x8000, 0x1ff}, {0x7f, 0x2}, {0x3, 0x4}, {0x7ff, 0x7}, {0x800, 0x7}, {0x1ff, 0xcd}], 0x7, 0x4}], 0x5, 0x1}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3b}}}}, {0x1d, 0x20, 0xf9, 'ipvlan1\x00', 'veth0_to_hsr\x00', 'veth0_macvtap\x00', 'gre0\x00', @remote, [0xff], @local, [0x0, 0xff, 0x0, 0xff], 0x1de, 0x1de, 0x256, [@comment={{'comment\x00', 0x0, 0x100}}, @limit={{'limit\x00', 0x0, 0x20}, {{0x8, 0x9, 0x8000, 0x8, 0x9, 0xff}}}], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x9, 0x5, 0x30, 0x1, 0x0, "7d5bdf850acc1ae8893b9a43fb161d6a9a8e6791827e7fc27683e1130969ffa905972149fa6ba06f83473f078e2368e0e78c5a601e4427dc3e3b7ac9c401bb1b"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0xc24)
accept4$inet6(r6, &(0x7f00000017c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000001800)=0x1c, 0x800)
sendmmsg$inet6(r6, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000040)='(', 0x1}], 0x1}}], 0x1, 0x0)

05:53:28 executing program 4:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000))
sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000027c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x44)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$NBD_DISCONNECT(r1, 0xab08)
exit_group(0x0)
r2 = socket$inet6(0x10, 0x6, 0xfffeffff)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)="fd19a52b38a305afb4919f48209a39c5e5118687ec92f73aba510e58848c00379110e0b4eeb99fdc6934c7444e18579418abf72f777a31e9ad22d7bb3aaee8e5aa4078c73f3a677795119bf6f76d67715f67d4a1", 0x54}, {&(0x7f0000000240)="d75f460f222e6e8b39e1a8533f99e736cf0da3146ecb57e530547fdc7875bea3ca7387d2e083d2d9d1d0dff0a268271b99daed71a0360cbbffc6c6d372d0565c9fdb0aeb061e68f41b205b99f30daad5550c04ffd7f92c15f72cfed6c1f36dbaa346400ee27f1fe164545da52a504797e2990d544e7fe0be053af555128575c6cf7bf81b4290eec150d73f8ba1d1db1b597151f91b0fb6a08eae65e270b3bc83f80eb9f7a2d13b", 0xa7}, {&(0x7f0000000300)="2d816d60c58cca0db92a6ee028159ab58b4556ad58640514cad205a2861b2ed828c9a0e3e0e642dc1d7ad748f3a3d8f20cd733d6e64417464bbed74b6bfa96841e2f53f7e5c0e822bcd7a2f9dc423420", 0x50}, {&(0x7f0000000380)="fcdafcfd734bd473bd406c06ca8f74ba71d0c6395993de30fa624d34b90be87535fa808473479274b43b094434904929544668977a59ed9088e747e1b2d4d1f22937b52b45077edd5c3792381726ed1fe3c947a2800171dc501e310d351a1da2229b813feb87632d77df5da64386dcfb6a089db1e410349bbd1b08b3e89acbe3db867d09fa0cd0f674bec89ffb7e58f48de6448f2c", 0x95}, {&(0x7f0000000440)="d674d7ca0c2ea13f7e0d98961563b8adefb0402096c1f955b94e81f5cc4ea418a6580ebb777772cfb12279b63f205bccdd24df28d8f914df01f9e72dc1d9dfe558adf69c379b6eb09c5b91ef175f18e9d149682cdeda00e7de7a8224c5d3", 0x5e}, {&(0x7f0000000100)="767c56629cf0a2431d8cb58156480356bd30404dc517f239018ab08f1294f50ef70552185017614d", 0x28}, {&(0x7f00000017c0)="8b68ec62bdfa99de459ac0d72fd5d6e9b93a8ce08c0bd022f02bc0c0a4863015b95214273e70ccf1212a9c112d91af4a3ce0fd754bc3a8f19fecc8b4cd8aa0a7e98f23a04adb5812b5885ab78a586b8ee2fff52f845d10b12620fe51ba0dd31138b7f1b76d97ecd892d83c330bf71f58f76cac070330bd8e66cff1294ae98620991861d2c6ca8ff725a622afe95362a49b153ab1da05a76d1e6d83ecc373f1c836da30243888bd62181ca2c317480513c3936fdaad9b29191e2d0c9954c8c86225dd1c6fd41afecddbc33c3f8bb8b40240117b27a071d81791c04bb4a4617390debc75ab44974ccc84e40a5068d0e89a6eacc4282c6b58e6cb931cc44a9d069e7a6218367b2a25de7ae1f1fa4233abe79e053f355661d38bea1cce97bd73ed1d347711d74b86a254411f7eb7a6646e53d291f50e0481a5eddedbc098ec298f22951154bab6b7ca728113a6398594c3fa3bc7bf1e02980f121e9dfe8fb10addded67573aa6b8ea244426f49529722a44e6a2647799eb4789ead64cb666bc022645f754a093e9568d5b453eed4f2928c06220af4b1f0f8d7c4114349454a6b924e2cff42b29138abebf3fb68eef46125d6d96b75ed3f413ba5fce4007d499552ff1f948ae498763b259877229a7f9957f5beda3bf3e3abe40bfc7c03ba4d244eca66f9be6ad7e0916ed98a16050226573fde83d51c035253c343f6b4bb73e28627bac979a24c0b9430e0df721dbe32cac7785a4870e371c65d79e8918d55d322c347b7ef117ebf8db166eb04ac114097b2f10d803a4ec7dd05f131c1c2d5331af0aa1a944bcb35c1f3b3f5cdf99a76d91f34290662b1bc09e2c39875f3a390154f63272a7d199b7655acde742d6588f39718625500b63bb092700230edd8c8385ea07f4e86ea6ba69ac94a75f8f71a0a5e455deb95cce78708c17d07bc5e933a759546aa3f8c490a8c4d6bfad39eb5fa754d222ec710a1e9d20bf14c22fbc8735e8dca22e2852c19ce7e39180c7469ee4a6ccc9b8d145604a1f489a06d8405b9f00d20ac01bd73a309b11f2ced0eb0c8e9e0a0aa99707f4db0db5d77da79f3ef8e190fa70ea4c1b56be0e5bacb0478f549bb29a4263e7625b35eed78c7e58695f0a495c91c8ae23fa120b5281d460ad663d4c2df908357d71f72b19fa80e85d1756f66b8c4d29a9461eafc822a92bdcd889c6f42c0b7231c8d86d0ba1896a01554814d60828cd79a84c4b493b7274e78b455a25c81deec2761717b7632a052a6280e2a39a1865890f1b2efbad752471b0aef958d53089059857589e36222873da0709918a14d9659081c68b78d50228e753d5564add79c5b292a4cfbacde7c93d0eac1cc9a56b2e62b415444e445a016dd84d544c197fdcac733499f83cc97cd4dc0b6d5da237d2bb9f4e35e9300110cdcfb01d29df99538b44cfa647658a1fef5e822533cd11c6a41ab444b6c3b9ecac8f98efce74fe067b150e1630361577815de450d3c9c799bbe2a8087f8603c7c53cadf88adc76fed3c1e2370754194d43c5c932db67015c6b0a989b7a2cf66c4b0f84582bc17255ed8589eb8f50c18e5885215118ecb4c54fd6cf9ed784b61688eaec9bd44f35234136c5642e98a4a12bf6b44b4db416b9d8d4c75288872380497358f658869635e822374b18f0b6c37c52483e15989ca830c7a42827dd8fca672ca76fcc95d56791da0915c5a1d6672f19c68d27d494df208089f796034d213ac3240c182d50745562e72421dac7dfeb65dd35c2f2c3e979412a941969ed7f513abab4ca2c1aa85ed36fc9fbc263a87a122a6405fe60421862047ce032c53174b1717ea63ddbbee7532f8664734affc57931c71811469aee5ea68edd86c4fa2e4e279d32293a11b8f47cbed0bfe1a2d897477e146216b789f5b4a107f25097eb4dc072c9d36bec5a20e20633096bef5debfa053277dcc913fbe126abc6e0262a0b2f63c5005f100b2eae5c0d3ffe0520d2378e6482633f455c9957388f360aee7814ad43732188a103feb1e370d43ae73fdee543723fdc5487ea69e434cd8f5d4356743997da5570add355b191eee5027bf2af989a1f8da3ed2344884a9951ac794f9e9b06970ae63837ed11ab2dafa21d66ce248db66f9f745e84a9464c887ee4ceb2665bf85c30d1df50b641edb7866adc34c99391bb2a155ed89f0dfb4afc4f6865318fb412d4cd21cf3ac7fc023010de4b24116c3e730ca77dcabe84a8c812dd8dd097fde31e12e8aebba6f3a9d629bb853f7a0be5a1072a65eed1c0af7298b4614dadb591fc59ac0c1692023ff67d73043feb9a1ff71e6598d9fce6087ef6cbb88a207e57ee1202216cb14e61840e6c033d8caa0af2a3271de21107b341decac25adb7146f12783a0ab41dc79d0a7baf01454cf8c93499f68ded9dd1f3a7b880ab6b5d82d61de6369baa5b326147e947f60fe6d1a2c403caada67b867cfff17d6eecdcd50b4794151dd3cebb55860b48d42b1c07fdfbd9ab064353b77230b13bf54bac3ae81c6bf67755019c8eac712e44af2f42923e50a072e360c44d43ddaa8caaf0b3385333b248a75651a64c2cc9049c65ee4a36eb4c7c277e926c5642cf6787485b1a15a30c948829e701ea548a070a471773438a70218a92654e480de75a15a226ac910d11628528a4ac19d0cca5fbdffddf400c68c3eebc376f177fc29421b9a817326a4da1c14ecbb81a0bde3d9c0bb5ca694a0dfa831ab6cafab9bae3c67ae62ff7f5207ddc3c3e04a894cef2471930b3ca5d89b930be9c7c7a12a84c3804129ad755fd2623ab93afb2470ba82938eec1943051f309adbdd2133e2597fb00e6848caac49eac87ce93a077d7c69520d02ad5dc079e10347ca3d6d0e07f0743a6183de7f8e21487012a701e05721849718267c2093ac42ef770c313b5c8c155874d6f73abba91d2b1ec0d6dd6332ea2cbf10b887c36f13d71183a46167a6d0d1451cdb5bd662f0279b442c2251742ee41535ffdeda1f951b0d54dd57aefc7900b24913895d43f650accfb0b5980943054c7017f9702423ad868a3a023e4a13d0d49b25cff1542aee0397cfb3103aae4a0d8e1a946f9890bdb4ce5f2e9e7bd7b3c97f8f336c86abeb71865b30db18385d4f6a19d540e9ae7336890efa9a9cea039f54e8a1ff3da54bd0354aa56a606d904848031e29cf58433821c6ed0adaf0eb7d0e1b6461c07f0c5feb9d472fe619bb011b6fe88e6af28bceb804c9d857da98fe3a30fe7bcbbd8d1871e86d225ccff0ddab13374e580e67ba8e3f0c971d09b1f8f699d5eb495f68f3e5a0a09c5ae93f74b503a215236174eb0dd8adcc31004ad128620a55004ad92f724821b4196750b0f2b78bc00bae674a9657eb870c37cd75dbf567442a395df5d477c192a1f0a22497431ab793403b34da9a59803704769a8fbb4c73e5994e024956ca4c04a8f874334fed92793d41a367c4b62b94b06feb57cee3dcf22700dc5a170faf32fd5ee7f226814c05acf0c00264c0d2253a9326603b300d9363e934d385c94a488cb807902b64d0daf11c3d482163e775faff136eeced2a3ebc13c4d8efbac6cb965d8211befb1c937bebac0b773b7387848cba707d77b6523ed2c657f4e3fe49eae5d5a412dc9177a57544b9ac6d20a2ade9ae52fae5a989113952df0ee99f2a9be5cb4bfba90686153c8a37d80a204c6951784f514d9cdd904abee28b55071e3e12e83ef8dbeb585815069c8040222853c8d48f6235ad088bb11e4c86af1d1ba35ff3e20c89039709a06a270fd44db7fa65792bd20ec3c4be6f0c0bb7fd9c6a53c39743077eab87ccaad1a6babe612cd5ee154f8f165092a0d895df9a163a5a78c5a5eb369903720d3455a9b1b60c1833af97fb8b73d5426659b070b7fcda253a87134e59bb642130ea636ed5b4036e1961433d602cb90bb904b40d0b319e95b0088d3e034c75cafc60e224077e269e8f6fcd01451b71b87efd62073c5253bbe4d3e6d445be5164c5655bc5429f80e85d7a4abe56020a36b385ba9f6f06cd9e42e621b17124b501dc495b29cc09c4800618f3d6a05d7985827518277ef7e04a076a6ce837efb88f595f02b3bc63bce1b73c4d293d64a798e56096eef9a2ace2292173e7c6b09dbb60364f4d592dbc16cd9c469db7f7d262f00d961ad7ac2f26f77f1a7cdde7222549a96ce4b9743e9ca534ebf94d6c7ee660ec2d19d86ec7c87d86d0ccdb4f21ff09fb6efdbb11227227eea19b528ab34ccff308dd7b4467fcba6836eb164317257d9b245ada3833eeabc516ce8acd90fd6f3333ca2921c8ac568da4931b02a5f64d6c6c78c326c65f05ab604c11e03e9ccbc8caf923a6a113ed6761e39291112eb94effc6d81e878e4f1b3422044341c54e0a48d19e9cd81d90651a762326ed0b52f0dddbf3567cc88d56550e9eab53611591224ad482d56aed982aa2d1bcf0f5613e709f52f28f74c6b1eada6ffe31e7622fa6f7a7babda7d79cd06ff5ceec5d1e3a2a334c2a455acbc7846edd6049aee4c3154e36e848580c88d84246ce8df7af8a356e14f7f898887fbe7bca7ab4b26ff89bf839b0926caf9d73d4d538c4c70b6788bd69fa972b91421642f27857bdb01837e59cc83cc5d21bd0be245611cced3a2a18a1b90c5252239408e9da17d58479a6dc58669297a233182e4d26556da840e9ee789a4eae9a6bdd23b96b9546cee33c068f0d714f24bb9696d525524bc121727cbf2fced4c38562ed6777d3877879bfa7c3a233b21562598ddd787472bfb1692e95a1fae17ee3927a92ec22a600070dd91d91fc3cc10a84585b04664fc207b529b90b2154caba997fce43757fe2d345acf1a6ae7458ad862098c153075cbdf4e99728931b12125b26720ff5afd2c8c9994a09c89830fd88f583827215f84fecd157fb785e60f06f889fb044106cc7a1b465f531f002e567e65b72fa1e1162bc586bf6a259a8fcb6a1497cd1aa37a246825016ecb04d0539dcf38023b7e40f65911358defa5218b988b606c911ca8344f1b4d0e003c17ca071e01c0f618ef16e505086f347dc9e2c658abc1cb649d55ab25d4062bc356b38a872eb6a9f323dd0e727a17f993dd646e9219862223ed9feedc1171c793cfa7089308e9d51229cc499e00790df873c30d45b7e65e3b5e37b92406e5e517f1376bd8d38d270027c7fc0ffe3f101d83156a63899a132189cf0e8d06a2f1ecc2cae3c00df722ebee29a1dbb7934fd8f8cdf9a73da869101959f93766f3633803c887e5d5f0b4890a0a4ccefb6d245ee85fc1790e6f397a71a8ac1642d5665f68ba3314590b5a55eed5704a6e579f8b1edcfc7d48d6a6c4db86a5403199e79e6895cbc6025c9efd461e592aca561b887d174174d4d3f187b094d9c895bb0eb733a5af04733fe689c0fe159f9bd6968738fe86aeca4de7f5a1af99810f2f392d54072f19e4f83181dd282c4bce46bf40e4bbe2b20daa92ab77a237dbf547741b50e847b4f33554f5c68e29096dd697e9cd1036a63586411dac9791cf0829f43029f5a7dfaa0dc1e249fd1f43c9f0ce8bd4c473029128fa1633e730ece712315bd7ed82bcb8ad562538b09b0089f3ef2a43f1a15a3e466eaa87e9a6dcfff3b5a5fd91abd02e85d46526ac425357150b51712b72b5a8ff51b5f9e89b25eebf3935072de572c0736c59f6c4443dc857221108ffb6184bb00a878948a48ab4559c2a6381e58993784b71a42a1f18ca634a08c31bfdecc65c5acb8adfb2fac653d92a600c707a9bf53275867da959801ba21ebe2c2fab09b546b304db4475", 0x1000}, {&(0x7f00000004c0)="c5deb6633ede6c2efe20663558eb34c9c8f9be1bc7e6ff9baca6454d2db99a4b9093818b1bb54829d2a1d1b36d69e4ec96a6e974a7208452fd2a15aa77186d13aeb3d42f37662b9e3133929d9a3e3ca7bd13f04e52a075725e37f522f449f5b4253f5e4ca2b93b1c1df34259ab04e1a60ec0457f9b42dbd043c5268dad725187bed14b84a94414589876d087a6550cec28680ad662b78cc1329ce0d149383c2cfc89dd034643d000787df6f89a64feddbd4a71916e0cd394f52904524ae0ba44e4dbecc0c40f6e9cf8b12a245c1e032d95f85c282331fc", 0xd7}, {&(0x7f00000005c0)="9d62860c2d9b4ed14b00d3dd7be664d5d6aeae67ebb2c28a22867ee9d570a41e3393ec2fe67a0bd8f14089b6630a35887425b3cd9245f5a1da34ac1484300a85c6a767f1d2d3315ec5851e2485fde1caff701883d523c9a7d5f65fefa6d0d9677a9a4928779c203c55eee8e7070e12fc3fb4454daef54bac3a82f9844d2040e0cd13adc9786afbc44309334ad2f74f866441f13b093598e02210594c4be694bf2b1d4ff278fcf7f708f972d197d097d2ef30fa830a3b54cf08f2b9308532052f08a090d04a3d161e0fea", 0xca}], 0x9}, 0xc080)

05:53:28 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2, 0x3f00})

[ 2754.372699][T32247] usb 6-1: can't set config #0, error -71
[ 2754.395483][T32247] usb 6-1: USB disconnect, device number 82
05:53:28 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x5], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2754.496781][T13209] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2754.531123][T13194] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:28 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5500000018007f5f00fe01b2a4a2909302", 0x11}], 0x1}, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xffb8)
unshare(0x2a040600)
r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r4, &(0x7f0000000100)=""/4096, 0x1000, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0)

05:53:28 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xfffffffe}, 0x0)

[ 2754.590015][T13208] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:28 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x6], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:28 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x110, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x94100, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000400)={0x0, 0x2710}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000240)=0x54)
r3 = gettid()
ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000003c0)={0x0, 0x400, 0x1})
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x22)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r3, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
clone3(&(0x7f00000002c0)={0x42040800, &(0x7f0000000000), &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080), {0x4e}, &(0x7f00000000c0)=""/25, 0x19, &(0x7f0000000100)=""/161, &(0x7f0000000280)=[r3], 0x1, {r4}}, 0x58)
capset(&(0x7f0000000340)={0x20080522, r5}, &(0x7f0000000380)={0x3, 0x1ff, 0x5, 0x0, 0x3f80000, 0xfffffff8})

[ 2754.673812][T13230] xt_CT: You must specify a L4 protocol and not use inversions on it
05:53:28 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c)
getcwd(&(0x7f0000000040)=""/62, 0x3e)

[ 2754.760333][T13233] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2754.787015][T13245] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2754.806950][T13246] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2754.844231][T13247] IPVS: ftp: loaded support on port[0] = 21
[ 2754.867566][T23720] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 2754.927677][T32247] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 2754.976442][  T108] tipc: TX() has been purged, node left!
[ 2755.288009][T32247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2755.304521][T32247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2755.314542][T32247] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2755.317938][T23720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2755.337544][T23720] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2755.408055][T32247] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2755.417194][T32247] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2755.425719][T32247] usb 6-1: Manufacturer: syz
[ 2755.428018][T23720] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2755.441538][T32247] usb 6-1: config 0 descriptor??
[ 2755.462404][T23720] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2755.477076][T23720] usb 3-1: Manufacturer: syz
[ 2755.502900][T23720] usb 3-1: config 0 descriptor??
[ 2755.782276][ T9868] usb 3-1: USB disconnect, device number 41
[ 2755.909723][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2755.917137][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2755.944361][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2755.965174][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2755.986150][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.007858][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.015247][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.043094][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.063568][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.079394][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.086782][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.107406][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.124640][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.132244][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.147492][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.154880][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.177537][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.184926][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.223540][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.243518][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.257447][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.264835][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.287526][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.294913][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.330804][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.351984][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.373930][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.393592][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.409526][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.416917][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.447542][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.454938][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.482603][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.503693][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.524329][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.538727][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.546116][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.567478][T32247] plantronics 0003:047F:FFFF.0075: unknown main item tag 0x0
[ 2756.575201][T32247] plantronics 0003:047F:FFFF.0075: No inputs registered, leaving
[ 2756.599998][T32247] plantronics 0003:047F:FFFF.0075: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2757.017427][ T9868] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 2757.377507][ T9868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2757.387757][ T9868] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2757.447624][ T9868] usb 3-1: string descriptor 0 read error: -71
[ 2757.453837][ T9868] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2757.470683][ T9868] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2757.484597][ T9868] usb 3-1: config 0 descriptor??
[ 2757.507492][ T9868] usb 3-1: can't set config #0, error -71
[ 2757.514711][ T9868] usb 3-1: USB disconnect, device number 42
05:53:31 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x4020ae46, &(0x7f0000000100)={0x2})

05:53:31 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x1000000000000}, 0x0)

05:53:31 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x7], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:31 executing program 1:
clone(0x2120100ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x83003, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x88], 0x0, 0x130, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x3, 0x0, 0x20000000, 0x800, 0x7}}}, @common=@unspec=@rateest={{0x68, 'rateest\x00'}, {'geneve0\x00', 'ip6tnl0\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x348)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0)

05:53:31 executing program 4:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x284a14, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x1, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x349}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4804)
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x8, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}}, 0xa0)
fallocate(r1, 0x0, 0x0, 0x8800000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000004780)='batadv\x00')
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000017c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fbdbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c0099f7feffffff0000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x2010)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x24008080)

05:53:31 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2, 0x3f000000})

[ 2757.830510][T23720] usb 6-1: USB disconnect, device number 83
[ 2757.936440][T13331] __nla_validate_parse: 11 callbacks suppressed
[ 2757.936451][T13331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2757.942538][T13335] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2757.995961][T13342] xt_CT: You must specify a L4 protocol and not use inversions on it
05:53:32 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x8], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2758.116865][T13346] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2758.144864][T13351] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2758.166397][T13346] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2758.188127][ T9868] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 2758.192457][T13331] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
05:53:32 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, 0x0, 0x4240a2a0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x9}}, 0x18)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
splice(r0, 0x0, r4, 0x0, 0x200000040, 0x0)

05:53:32 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0xa], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2758.209656][T13346] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2758.230294][T13363] xt_CT: You must specify a L4 protocol and not use inversions on it
05:53:32 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x2000000000000}, 0x0)

05:53:32 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x48], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2758.305558][T13369] xt_CT: You must specify a L4 protocol and not use inversions on it
05:53:32 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0xe000, 0x1, 0x5, 0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)

[ 2758.414273][T13376] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2758.437898][T23720] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 2758.489930][T13379] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2758.538680][T13378] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2758.549538][ T9868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2758.570591][T13383] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2758.581701][ T9868] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2758.597904][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2758.622942][T13376] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2758.622986][   T29] audit: type=1326 audit(1594014812.601:76): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13384 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0
[ 2758.643586][T13378] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2758.697998][ T9868] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2758.707040][ T9868] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2758.749821][ T9868] usb 3-1: Manufacturer: syz
[ 2758.793466][ T9868] usb 3-1: config 0 descriptor??
[ 2758.891985][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2758.906461][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2758.921342][T23720] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2759.007584][T23720] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2759.016751][T23720] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2759.026125][T23720] usb 6-1: Manufacturer: syz
[ 2759.037848][T23720] usb 6-1: config 0 descriptor??
[ 2759.043355][ T9868] usb 3-1: USB disconnect, device number 43
[ 2759.371632][   T29] audit: type=1326 audit(1594014813.351:77): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13384 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0
[ 2759.539176][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.546588][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.579261][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.586664][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.609651][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.617058][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.636914][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.644466][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.652166][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.659637][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.667022][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.674496][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.681963][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.689414][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.696795][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.704266][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.711814][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.719365][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.726852][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.734509][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.742105][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.749651][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.757138][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.764725][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.772383][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.780280][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.787981][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.795608][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.803292][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.810993][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.818670][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.826279][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.833968][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.841640][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.849344][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.856944][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.864627][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.872362][T23720] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0
[ 2759.880387][T23720] plantronics 0003:047F:FFFF.0076: No inputs registered, leaving
[ 2759.905159][T23720] plantronics 0003:047F:FFFF.0076: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2760.187634][T28063] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 2760.587530][T28063] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2760.598346][T28063] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2760.709088][T28063] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2760.718383][T28063] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2760.726487][T28063] usb 3-1: Manufacturer: syz
[ 2760.734103][T28063] usb 3-1: config 0 descriptor??
[ 2760.885344][ T9868] usb 3-1: USB disconnect, device number 44
[ 2761.267521][T28063] usb 6-1: reset high-speed USB device number 84 using dummy_hcd
[ 2762.257405][T28063] usb 6-1: device descriptor read/64, error -71
05:53:36 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x4090ae82, &(0x7f0000000100)={0x2})

05:53:36 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x4000000000000}, 0x0)

05:53:36 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x4c], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:36 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x52)
sendto$inet(r0, 0x0, 0xffffffffffffffe2, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000140)=""/124)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0)

05:53:36 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x0, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0xa2800, 0x0)
getsockname$netlink(r3, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x27)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040))
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup(r4)
ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000080)=""/143)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x42b52a2e)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000380)=0x20)
dup3(r0, r1, 0x0)
ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f00000003c0))
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r7, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x8, 0x7ff}, &(0x7f0000000180)=0x10)

05:53:36 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2762.845479][ T2230] usb 6-1: USB disconnect, device number 84
[ 2762.954570][T13459] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2762.969107][T13461] xt_CT: You must specify a L4 protocol and not use inversions on it
05:53:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x68], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2763.083007][T13468] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2763.120032][T13473] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2763.142443][T13468] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2763.153018][T13459] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
05:53:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x6c], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2763.187756][T13468] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2763.197858][ T9868] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 2763.222054][T13482] xt_CT: You must specify a L4 protocol and not use inversions on it
05:53:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x74], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:37 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1015, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4)
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0x81, &(0x7f0000000040)=<r1=>0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x40000)
io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}])

[ 2763.241216][T13483] xt_CT: You must specify a L4 protocol and not use inversions on it
05:53:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0)

05:53:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x7a], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2763.347737][ T2230] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 2763.358058][T13489] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2763.375911][T13491] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2763.419099][T13493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2763.512952][T13496] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2763.545869][T13503] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2763.554539][T13502] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2763.558104][ T9868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2763.585505][T13496] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2763.586790][ T9868] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2763.621826][T13493] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2763.688762][ T9868] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2763.710391][ T9868] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2763.748031][ T2230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2763.766198][ T9868] usb 3-1: Manufacturer: syz
[ 2763.776511][ T2230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2763.805408][ T9868] usb 3-1: config 0 descriptor??
[ 2763.815332][ T2230] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2763.907533][ T2230] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2763.916591][ T2230] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2763.925709][ T2230] usb 6-1: Manufacturer: syz
[ 2763.931994][ T2230] usb 6-1: config 0 descriptor??
[ 2764.053564][T23720] usb 3-1: USB disconnect, device number 45
[ 2764.408922][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.416337][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.436484][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.444442][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.452319][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.460221][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.468064][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.475598][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.483713][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.491618][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.499548][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.507081][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.515695][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.523549][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.531417][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.539274][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.546809][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.554707][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.575789][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.591654][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.609002][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.620974][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.628905][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.636458][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.644615][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.652673][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.660532][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.670140][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.680131][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.691991][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.702017][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.714080][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.723983][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.736031][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.746613][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.755440][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.763312][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.771174][ T2230] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0
[ 2764.783299][ T2230] plantronics 0003:047F:FFFF.0077: No inputs registered, leaving
[ 2764.815362][ T2230] plantronics 0003:047F:FFFF.0077: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2765.117477][ T2230] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 2765.477466][ T2230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2765.487797][ T2230] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2765.567980][ T2230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2765.577119][ T2230] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2765.585705][ T2230] usb 3-1: Manufacturer: syz
[ 2765.592848][ T2230] usb 3-1: config 0 descriptor??
[ 2765.847821][T23720] usb 3-1: USB disconnect, device number 46
[ 2766.207410][ T2230] usb 6-1: reset high-speed USB device number 85 using dummy_hcd
[ 2767.197476][ T2230] usb 6-1: device descriptor read/64, error -71
05:53:41 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x4138ae84, &(0x7f0000000100)={0x2})

05:53:41 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x100000000000000}, 0x0)

05:53:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0xe8], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:41 executing program 4:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_uring_setup(0x20087, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x396})
r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080)=0x1)
prctl$PR_SET_DUMPABLE(0x4, 0x0)

05:53:41 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0})
dup3(r2, r0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})

05:53:41 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2, 0x0, 0x3f00})

[ 2767.784879][ T9868] usb 6-1: USB disconnect, device number 85
[ 2767.869316][T13565] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2767.894562][T13566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:53:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2767.919744][T13569] xt_CT: You must specify a L4 protocol and not use inversions on it
05:53:42 executing program 4:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000240)=0x10000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x6, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000002c0))
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0xa, 0x0, 0x0)
socket(0x0, 0xa, 0x0)
r3 = socket(0xa, 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000340)={0x80000001, @random="11630d04a48b"})
r4 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='&\x00', r4)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x828, 0x2, 0x9, 0x860e, 0x7, 0x7})
ptrace(0x10, 0x0)
fcntl$lock(r3, 0x2, &(0x7f0000000380)={0x1, 0x1, 0xfffffffffffffffb, 0xfffffffffffffffe, r1})
sendmmsg$inet6(r3, &(0x7f0000000dc0), 0x0, 0x0)

[ 2768.050779][T13578] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2768.071344][T13582] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:42 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x2], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:42 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
uselib(&(0x7f0000000000)='./file0\x00')
r2 = socket$inet6(0xa, 0x80003, 0x7)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, [], 0x4}, 0x582dc945}}, 0x0, 0x0, 0x2f, 0x0, "bfc20474ce151c2fbba30c74d28bb93644f994ef4c95b3cda309baa3626bdf41788ca77739eac86bd6b73f67d18c2d5e7f2ef703d71a73f6075377cadcdedc1158e392e06c35812e03218dd797881c8b"}, 0xd8)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x2149, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x3f00, 0x0)

[ 2768.105658][T13590] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2768.106964][T13578] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2768.147666][T23720] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 2768.151218][T13595] IPVS: ftp: loaded support on port[0] = 21
[ 2768.155550][T13566] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2768.204992][T13578] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:42 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x3], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:42 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x200000000000000}, 0x0)

[ 2768.259864][T13604] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2768.404746][T13624] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2768.419585][T13628] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2768.433218][ T9868] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 2768.534767][T13637] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2768.548463][T23720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2768.575944][T13642] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2768.586427][T13638] IPVS: ftp: loaded support on port[0] = 21
[ 2768.594470][T23720] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2768.610895][T13637] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2768.646987][T13628] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2768.716631][T23720] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2768.731695][T23720] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2768.748514][T23720] usb 3-1: Manufacturer: syz
[ 2768.766379][T23720] usb 3-1: config 0 descriptor??
[ 2768.833046][ T9868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2768.847159][ T9868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2768.866797][ T9868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2768.968153][ T9868] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2768.982909][ T9868] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2769.003169][ T9868] usb 6-1: Manufacturer: syz
[ 2769.017909][T23720] usb 3-1: USB disconnect, device number 47
[ 2769.022963][ T9868] usb 6-1: config 0 descriptor??
[ 2769.498948][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.506419][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.547383][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.554854][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.576680][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.584608][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.592643][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.600749][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.608678][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.616275][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.624602][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.632718][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.640682][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.648669][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.656341][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.664503][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.672595][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.680669][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.688747][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.696400][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.705880][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.714112][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.728320][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.736018][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.750785][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.761774][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.772572][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.783452][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.792183][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.797743][T23720] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 2769.800050][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.814930][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.822732][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.830456][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.838939][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.846341][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.854147][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.861956][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.869769][ T9868] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0
[ 2769.877908][ T9868] plantronics 0003:047F:FFFF.0078: No inputs registered, leaving
[ 2769.898961][ T9868] plantronics 0003:047F:FFFF.0078: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2770.157832][T23720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2770.171967][T23720] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2770.257949][T23720] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2770.267120][T23720] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2770.275362][T23720] usb 3-1: Manufacturer: syz
[ 2770.282220][T23720] usb 3-1: config 0 descriptor??
[ 2770.522957][ T9868] usb 3-1: USB disconnect, device number 48
[ 2771.237489][ T9868] usb 6-1: reset high-speed USB device number 86 using dummy_hcd
[ 2772.257426][ T9868] usb 6-1: device descriptor read/64, error -71
05:53:46 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x501c4814, &(0x7f0000000100)={0x2})

05:53:46 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x300000000000000}, 0x0)

05:53:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x4], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:46 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x5)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @private}})
write$tun(r0, &(0x7f0000002640)={@void, @val={0x0, 0x0, 0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0xf98, 0x6, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "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"}}}}}, 0xfca)

05:53:46 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
splice(r0, 0x0, r1, 0x0, 0x18102, 0x0)
ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000180)=0x100000)
gettid()
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00')
readv(0xffffffffffffffff, &(0x7f0000000080), 0x0)
flistxattr(r2, &(0x7f00000017c0)=""/4096, 0x1000)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000000)={0xc025, 0x3})
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000001c0)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff020000000000000000000000000021000000000000009d91409707a79498161c761a92f8f2e08d4af9a4f4ef306152c4355570b2", 0x4e}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0)

05:53:46 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2, 0x0, 0x3f000000})

[ 2772.812566][T32247] usb 6-1: USB disconnect, device number 86
[ 2772.869292][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2772.949612][T13744] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2772.966805][T13731] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:47 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2773.014777][T13756] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:53:47 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x400000000000000}, 0x0)

[ 2773.058618][T13731] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2773.076746][T13744] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2773.167555][ T9868] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 2773.206530][T13770] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:53:47 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x6], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2773.257000][T13777] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2773.294966][T13770] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:47 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00')
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="abe39cf309403e831244425cc5d0747a9aaa933f1839fe36ae4aab186f7305c1d900d68c0398c43459eaa2cc21aef66e447bc97935c459f27fc5d67876d74babeee3649241eddd80e45491329460beba87007de549db681425162e701a7b46b351da5d1db2f953b6df43"], 0xac}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000040), &(0x7f0000000080))
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000200)={0x0}, 0x8}, 0x0)

[ 2773.317479][T32247] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 2773.340926][T13783] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2773.364497][T13770] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2773.384861][T13777] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:47 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x7], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:47 executing program 4:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000200001000000000400000a0080"], 0x1c}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00')
r5 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={0x1c, r4, 0x27, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r7 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0)

[ 2773.558234][ T9868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2773.576104][ T9868] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2773.658392][ T9868] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2773.671269][ T9868] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2773.681083][ T9868] usb 3-1: Manufacturer: syz
[ 2773.687156][ T9868] usb 3-1: config 0 descriptor??
[ 2773.707536][T32247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2773.727969][T32247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2773.745734][T32247] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2773.848157][T32247] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2773.857470][T32247] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2773.865616][T32247] usb 6-1: Manufacturer: syz
[ 2773.872489][T32247] usb 6-1: config 0 descriptor??
[ 2773.984035][T28063] usb 3-1: USB disconnect, device number 49
[ 2774.352830][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.364927][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.384932][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.399360][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.406781][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.426989][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.435154][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.442768][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.450467][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.458164][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.465790][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.473645][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.481334][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.489998][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.501851][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.511988][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.529399][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.543811][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.557993][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.565598][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.573403][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.581135][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.589005][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.596719][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.604424][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.612375][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.620148][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.627854][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.635477][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.646183][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.660707][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.671646][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.682630][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.693732][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.704800][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.715427][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.726411][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.735890][T32247] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0
[ 2774.743765][T32247] plantronics 0003:047F:FFFF.0079: No inputs registered, leaving
[ 2774.754491][T32247] plantronics 0003:047F:FFFF.0079: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2775.047441][ T2230] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 2775.407565][ T2230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2775.418939][ T2230] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2775.508126][ T2230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2775.518414][ T2230] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2775.526997][ T2230] usb 3-1: Manufacturer: syz
[ 2775.538493][ T2230] usb 3-1: config 0 descriptor??
[ 2775.785316][ T2230] usb 3-1: USB disconnect, device number 50
[ 2776.167444][T32247] usb 6-1: reset high-speed USB device number 87 using dummy_hcd
[ 2777.197438][T32247] usb 6-1: device descriptor read/64, error -71
05:53:51 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2777.755874][ T2230] usb 6-1: USB disconnect, device number 87
05:53:51 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x500000000000000}, 0x0)

05:53:51 executing program 4:
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x4, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}]}]}, 0x28}}, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x3dc, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbdd0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbc39}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x228, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2df}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "d9acbae1c3f7c952668985e64d5205bbca21fb57026b6c18c3f8c74f9d2e678bdc427f909cdb81bcef162cd45f8ec1f441c949b6b054d7e20ca842f3deff7edcb76f8ab6b2fd83ce834c353a6c17984e13e0c7b266c1015cb424f804ea66139aa7d2b2fde59ff7ff17501f67c05044c32fc8dbab98b7b2890bb1328299da96bdf3ba4b52f8c0d0650e1ddb823e93c5231b7844a849479b9933e9500279d493fb4a62beec6fc588b2b509215fa8724ad84f4757e50d25bf506dfd1668efab5f5a03b71ab9eda6ed3b001889081571b870710a3f2a64bf0d1d093185ab1b8c8d4042295b9d15"}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "ca03062772a0b7c39d617e717c6c64479745ca111cb5ae451167daf7735e6a747ddf6c2eca3775959d9c2363f4fcd102dacbf3a0d973d2f46827c4d7eb901b1a187b3662bcb3cca36dfe77ee0981d50c25855467c1f9bcc3dee40192aaaa5647a822d9ba601c750130b9a3add5d6e8fce05685acebfc5fb57ca30d2aa09e2aeac63abfbac2ebe0d3c9166f97df734fc9b30d7c9decac033914e1fd6e4271a39b2d96b47c2d9d9e8ee2248a4b219976a8c7a1da2aeeed17815be34a4c4e969d90ce9e5ed19dfca8c98c491640d29482fe6e23bdc5e90574b0b2231c774e989c7c09d7"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "de2e1c6681e5b119f0ac6cea0ea285a8a9d218521a8ce9"}}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x8000}, 0x44)

05:53:51 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/227, 0x20000223}], 0x1)
write(r1, &(0x7f00000001c0), 0xfffffef3)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00')
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

05:53:51 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000030004c545bbcc09fd5bf0d8f33a4de715d0ffff000009000001090224000100195e8c2e06169f582786f4d92474c1ad087634c67e303ff1944cb8040124a93d2a7ec7737178769a27936941d7371286727651e3e8115571ec3b71bbbe8ceb49dcedc5f7e7e333f2ab2f218bcd24a4c6a936"], 0x0)
ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000140)=0x4)
timerfd_create(0x7, 0x80800)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x1, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x3)
syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x819, 0x100)

05:53:51 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x80044801, &(0x7f0000000100)={0x2})

[ 2777.851908][T13852] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2777.965597][T13860] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2777.991611][T13857] vxcan1: MTU too low for tipc bearer
05:53:52 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xa], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2778.025761][T13857] tipc: Enabling of bearer <ib:vxcan1> rejected, failed to enable media
[ 2778.039962][T13869] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2778.064469][T13860] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:53:52 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x600000000000000}, 0x0)

05:53:52 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x48], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2778.079949][T13873] vxcan1: MTU too low for tipc bearer
[ 2778.086707][T13873] tipc: Enabling of bearer <ib:vxcan1> rejected, failed to enable media
[ 2778.096881][T13852] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
05:53:52 executing program 4:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c, 0x100000)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8008551c, &(0x7f0000000340)=@urb_type_iso={0x0, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, [{}]})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x24040, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x2})

[ 2778.167519][ T9868] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 2778.187163][T13880] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2778.276354][T13884] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2778.287788][ T2230] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 2778.302347][T13880] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:52 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x4c], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:52 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x700000000000000}, 0x0)

[ 2778.326871][T13892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2778.341325][T13880] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2778.353041][T13884] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:52 executing program 4:
socket$kcm(0x10, 0x2, 0x4)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = inotify_init()
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = dup2(r1, r0)
sendto$inet6(r2, &(0x7f0000000100)="14516c01c2ad12b4123f857fcb67d913806a97e761aa9c9e4f029f3c373a3486a9ed7f3afa893070c4f7804ed90f92526df71f9d6e01b48b39a3066e0de61739c16a1be6c1b2dcf77735315bbad269a010b44e54c0184c7150f49e23a08e81235a59d796838b5861569cd253d6b7908da5def4fcdb6dd64702dc40ced14f735eb2c3c4a55eacb827a8e02b262a90dddc1031f5867d042a8a7a45f4da3bc3f301d5a2c2a2faa8c6ce573be9c94a4c4480643b6a53fe5ad1a474474255106af0e9a34d443b1e", 0xc5, 0x10, &(0x7f0000000200)={0xa, 0x4e20, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f}, 0x1c)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x80000, 0x5)
ioctl$VT_SETMODE(r4, 0x5602, &(0x7f00000000c0)={0x9, 0xff, 0x101, 0x1f, 0xfc00})
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x490100, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e702095f9f95274b0a0002845865400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x4000000)

05:53:52 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x68], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2778.428528][T13901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2778.447538][ T9868] usb 3-1: device descriptor read/64, error 18
[ 2778.511050][T13902] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2778.526557][T13910] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:52 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x6c], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2778.560975][T13902] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2778.583071][T13901] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
05:53:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0)
getrusage(0xffffffffffffffff, &(0x7f00000000c0))
shmget(0x1, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil)
socket$inet6_sctp(0xa, 0x801, 0x84)
getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
openat$cgroup_subtree(r1, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000038000505d25a80308c63940d0324fc60100010400a000000053582c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

[ 2778.658619][ T2230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2778.705856][ T2230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2778.723909][ T2230] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2778.769551][T13921] netlink: zone id is out of range
[ 2778.775440][T13921] netlink: zone id is out of range
[ 2778.781154][T13921] netlink: zone id is out of range
[ 2778.786558][T13921] netlink: zone id is out of range
[ 2778.792505][T13921] netlink: zone id is out of range
[ 2778.798416][T13921] netlink: zone id is out of range
[ 2778.803565][T13921] netlink: zone id is out of range
[ 2778.812013][T13921] netlink: zone id is out of range
[ 2778.817230][T13921] netlink: zone id is out of range
[ 2778.818225][ T2230] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2778.823286][T13921] netlink: zone id is out of range
[ 2778.851755][ T2230] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2778.863926][ T2230] usb 6-1: Manufacturer: syz
[ 2778.872220][ T9868] usb 3-1: device descriptor read/64, error 18
[ 2778.904810][ T2230] usb 6-1: config 0 descriptor??
[ 2779.177497][ T9868] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 2779.389211][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.396638][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.424383][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.438572][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.445967][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.458715][ T9868] usb 3-1: device descriptor read/64, error 18
[ 2779.464979][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.476926][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.486330][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.494193][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.502010][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.509763][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.518427][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.525816][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.533590][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.541353][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.549056][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.556557][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.564528][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.572523][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.580460][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.588195][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.595588][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.604107][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.611874][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.620487][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.628269][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.636389][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.645023][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.655017][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.669801][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.677202][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.691900][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.701731][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.715547][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.732622][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.740548][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.754466][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.762312][ T2230] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0
[ 2779.776620][ T2230] plantronics 0003:047F:FFFF.007A: No inputs registered, leaving
[ 2779.796757][ T2230] plantronics 0003:047F:FFFF.007A: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2779.857557][ T9868] usb 3-1: device descriptor read/64, error 18
[ 2779.977631][ T9868] usb usb3-port1: attempt power cycle
[ 2780.687471][ T9868] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 2780.777579][ T9868] usb 3-1: Invalid ep0 maxpacket: 3
05:53:54 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2781.187404][ T6144] usb 6-1: reset high-speed USB device number 88 using dummy_hcd
[ 2781.257573][ T9868] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 2781.427510][ T9868] usb 3-1: device descriptor read/8, error -61
[ 2781.697585][ T9868] usb 3-1: device descriptor read/8, error -61
[ 2781.817630][ T9868] usb usb3-port1: unable to enumerate USB device
[ 2782.207518][ T6144] usb 6-1: device descriptor read/64, error -71
05:53:56 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x8004480e, &(0x7f0000000100)={0x2})

05:53:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="b89c000f00d00fc75ffe3ef30f1268000f20d86635080000000f22d82e26f031230f323e660fc771c50f79e5f30f1efc640f0fe8a7"}], 0x1, 0x0, 0x0, 0x29)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$inet_udplite(0x2, 0x2, 0x88)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$KVM_GET_TSC_KHZ(r6, 0xaea3)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0)

05:53:56 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x74], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:53:56 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x800000000000000}, 0x0)

05:53:56 executing program 1:
r0 = socket(0x2, 0x803, 0xff)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10)
r1 = dup(r0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000001c0)={<r2=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r2, 0x3, &(0x7f0000000200)=[0x800, 0x2, 0xffffff7f], &(0x7f0000000240)=[0x8], 0x30, 0x8, 0xfff, &(0x7f0000000280)=[0x5, 0x7e5, 0x0, 0x101, 0xfffffff9, 0x377f, 0x0, 0x8000], &(0x7f00000002c0)=[0xffffffff, 0x100, 0xffffffff, 0x8f, 0x1ff, 0x9bb, 0xffff80c5, 0x3ff]})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000140)={r2, 0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bond0\x00', 0x10)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$CAPI_GET_FLAGS(r4, 0x80044323, &(0x7f0000000000))
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000180)=0x2, 0x4)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)

[ 2782.784649][T23720] usb 6-1: USB disconnect, device number 88
[ 2782.872391][T13975] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:53:56 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x7a], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2783.023513][T13986] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:53:57 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xe8], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2783.127422][T13987] syz-executor.4: page allocation failure: order:0, mode:0x400cc4(GFP_KERNEL_ACCOUNT|GFP_DMA32), nodemask=(null),cpuset=/,mems_allowed=0-1
05:53:57 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x900000000000000}, 0x0)

[ 2783.213197][T13987] CPU: 1 PID: 13987 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0
[ 2783.221889][T13987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2783.231951][T13987] Call Trace:
[ 2783.235281][T13987]  dump_stack+0x18f/0x20d
[ 2783.239642][T13987]  warn_alloc.cold+0x87/0x17a
[ 2783.244329][T13987]  ? zone_watermark_ok_safe+0x260/0x260
[ 2783.249887][T13987]  ? wait_for_completion+0x260/0x260
[ 2783.255183][T13987]  __alloc_pages_slowpath.constprop.0+0x2197/0x2780
[ 2783.261794][T13987]  ? warn_alloc+0x120/0x120
[ 2783.266321][T13987]  ? __alloc_pages_nodemask+0x3e5/0x930
[ 2783.271882][T13987]  ? lock_is_held_type+0xb0/0xe0
[ 2783.276825][T13987]  ? find_held_lock+0x2d/0x110
[ 2783.281597][T13987]  __alloc_pages_nodemask+0x68f/0x930
[ 2783.286980][T13987]  ? __zone_watermark_ok+0x370/0x370
[ 2783.292279][T13987]  ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780
[ 2783.299042][T13987]  ? lock_is_held_type+0xb0/0xe0
[ 2783.303989][T13987]  ? rcu_read_lock_sched_held+0x3a/0xb0
[ 2783.309560][T13987]  ? __alloc_pages_nodemask+0x6b1/0x930
[ 2783.315110][T13987]  alloc_pages_current+0x187/0x280
[ 2783.320229][T13987]  alloc_mmu_pages+0x7f/0x170
[ 2783.321377][T23720] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 2783.324914][T13987]  kvm_mmu_create+0x3cb/0x560
[ 2783.337116][T13987]  kvm_arch_vcpu_create+0x16d/0xb70
[ 2783.342351][T13987]  kvm_vm_ioctl+0x1547/0x23c0
[ 2783.347045][T13987]  ? lock_downgrade+0x820/0x820
[ 2783.351891][T13987]  ? kvm_unregister_device_ops+0x60/0x60
[ 2783.357616][T13987]  ? trace_hardirqs_on+0x5f/0x220
[ 2783.362647][T13987]  ? lockdep_hardirqs_on+0x6a/0xe0
[ 2783.367769][T13987]  ? tomoyo_path_number_perm+0x244/0x4d0
[ 2783.373407][T13987]  ? tomoyo_execute_permission+0x470/0x470
[ 2783.379230][T13987]  ? __might_fault+0x11f/0x1d0
[ 2783.384014][T13987]  ? __sanitizer_cov_trace_switch+0x45/0x70
[ 2783.389919][T13987]  ? do_vfs_ioctl+0x27d/0x1090
[ 2783.394693][T13987]  ? generic_block_fiemap+0x60/0x60
[ 2783.396059][T14006] __nla_validate_parse: 3 callbacks suppressed
[ 2783.396070][T14006] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2783.399896][T13987]  ? __might_fault+0x190/0x1d0
[ 2783.399913][T13987]  ? _copy_to_user+0x126/0x160
[ 2783.399934][T13987]  ? __fget_files+0x294/0x400
[ 2783.399957][T13987]  ? kvm_unregister_device_ops+0x60/0x60
[ 2783.399970][T13987]  ksys_ioctl+0x11a/0x180
[ 2783.399986][T13987]  __x64_sys_ioctl+0x6f/0xb0
[ 2783.400003][T13987]  ? lockdep_hardirqs_on+0x6a/0xe0
[ 2783.400017][T13987]  do_syscall_64+0x60/0xe0
[ 2783.400033][T13987]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2783.400046][T13987] RIP: 0033:0x45cb29
[ 2783.400057][T13987] Code: Bad RIP value.
[ 2783.467570][T13987] RSP: 002b:00007fe72f79dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2783.476503][T13987] RAX: ffffffffffffffda RBX: 00000000004e7f20 RCX: 000000000045cb29
[ 2783.479486][T14007] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2783.484468][T13987] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[ 2783.484478][T13987] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000
05:53:57 executing program 1:
ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000000)={0x0, "25a7a1268c210b121bc5a7f9a5831a69e587a32d8b5be9760a67bebf2a139489", 0x2, 0x40, 0x400, 0x1f, 0x0, 0x2, 0x3, 0xd47d})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/ip_vs_stats_percpu\x00')
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x100, 0x0)
getsockname$inet(r2, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x10)
getdents(r1, &(0x7f0000000100)=""/16, 0xfe0b)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0xc9, 0x7, 0x88, 0x7, 0x1, 0x5, 0x1, 0xfd, 0x3f, 0x6, 0xf8, 0xf9, 0x1f, 0x28}, 0xe)

05:53:57 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2783.484487][T13987] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 2783.484496][T13987] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fe72f79e6d4
[ 2783.519224][T13987] Mem-Info:
[ 2783.556339][T14005] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2783.572003][T13987] active_anon:424494 inactive_anon:7053 isolated_anon:0
[ 2783.572003][T13987]  active_file:4178 inactive_file:29248 isolated_file:0
[ 2783.572003][T13987]  unevictable:0 dirty:36 writeback:1
[ 2783.572003][T13987]  slab_reclaimable:27294 slab_unreclaimable:215102
[ 2783.572003][T13987]  mapped:60568 shmem:7310 pagetables:76722 bounce:0
[ 2783.572003][T13987]  free:645547 free_pcp:685 free_cma:0
[ 2783.622503][T14006] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2783.641410][T14005] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2783.698134][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
05:53:57 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xa00000000000000}, 0x0)

[ 2783.741029][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2783.786368][T13987] Node 0 active_anon:1397912kB inactive_anon:16480kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216968kB dirty:4kB writeback:0kB shmem:17340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1122304kB writeback_tmp:0kB all_unreclaimable? yes
[ 2783.824032][T23720] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
05:53:57 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x2], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2783.901242][T14026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2783.957590][T13987] Node 1 active_anon:303764kB inactive_anon:11732kB active_file:16696kB inactive_file:116976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25304kB dirty:140kB writeback:4kB shmem:11900kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? no
[ 2783.968211][T23720] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2784.075358][T14038] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2784.076737][T14030] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2784.105015][T13987] Node 0 DMA free:10164kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:4308kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:76kB pagetables:288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2784.129475][T23720] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2784.151622][T14031] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2784.159244][T23720] usb 6-1: Manufacturer: syz
[ 2784.177483][T14030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2784.198538][T14026] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2784.200223][T23720] usb 6-1: config 0 descriptor??
[ 2784.225315][T14030] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2784.289455][T13987] lowmem_reserve[]: 0 2515 2515 2515 2515
[ 2784.295763][T13987] Node 0 DMA32 free:39772kB min:74828kB low:83804kB high:92780kB reserved_highatomic:2048KB active_anon:1393604kB inactive_anon:16480kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:4kB present:3129332kB managed:2578196kB mlocked:0kB kernel_stack:43928kB pagetables:88260kB bounce:0kB free_pcp:608kB local_pcp:188kB free_cma:0kB
[ 2784.332321][T13987] lowmem_reserve[]: 0 0 0 0 0
[ 2784.337176][T13987] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2784.366833][T13987] lowmem_reserve[]: 0 0 0 0 0
[ 2784.372431][T13987] Node 1 Normal free:2530444kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:300064kB inactive_anon:11732kB active_file:16696kB inactive_file:116976kB unevictable:0kB writepending:144kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:78768kB pagetables:218340kB bounce:0kB free_pcp:2932kB local_pcp:1472kB free_cma:0kB
[ 2784.407628][T13987] lowmem_reserve[]: 0 0 0 0 0
[ 2784.412307][T13987] Node 0 DMA: 1*4kB (M) 6*8kB (UME) 4*16kB (UE) 4*32kB (UM) 3*64kB (UE) 0*128kB 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10164kB
[ 2784.429458][T13987] Node 0 DMA32: 2277*4kB (MH) 703*8kB (UMEH) 383*16kB (UMH) 204*32kB (UMH) 85*64kB (UMH) 37*128kB (UMH) 9*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39868kB
[ 2784.445805][T13987] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2784.457446][T13987] Node 1 Normal: 186*4kB (UME) 35*8kB (UM) 19*16kB (UM) 14*32kB (UM) 12*64kB (UM) 17*128kB (UME) 1*256kB (M) 167*512kB (UME) 99*1024kB (UM) 48*2048kB (UE) 547*4096kB (UM) = 2530672kB
[ 2784.475815][T13987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2784.485446][T13987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2784.495076][T13987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2784.504884][T13987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2784.515255][T13987] 19171 total pagecache pages
[ 2784.521017][T13987] 0 pages in swap cache
[ 2784.525199][T13987] Swap cache stats: add 0, delete 0, find 0/0
[ 2784.531874][T13987] Free swap  = 0kB
[ 2784.535611][T13987] Total swap = 0kB
[ 2784.540373][T13987] 1965979 pages RAM
[ 2784.544194][T13987] 0 pages HighMem/MovableOnly
[ 2784.549965][T13987] 349903 pages reserved
[ 2784.554122][T13987] 0 pages cma reserved
[ 2784.729223][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.736682][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.745056][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.753228][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.761498][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.769579][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.777745][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.785484][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.793680][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.801845][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.810055][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.818182][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.825955][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.834268][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.842424][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.850508][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.858572][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.866285][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.874599][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.882694][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.890864][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.899295][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.907081][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.915338][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.924519][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.932779][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.942388][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.952116][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.960306][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.968912][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.976724][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.985016][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2784.993376][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2785.001766][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2785.010013][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2785.021432][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2785.029714][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2785.043368][T23720] plantronics 0003:047F:FFFF.007B: unknown main item tag 0x0
[ 2785.053088][T23720] plantronics 0003:047F:FFFF.007B: No inputs registered, leaving
[ 2785.085035][T23720] plantronics 0003:047F:FFFF.007B: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2786.547474][ T5840] usb 6-1: reset high-speed USB device number 89 using dummy_hcd
[ 2787.537458][ T5840] usb 6-1: device descriptor read/64, error -71
05:54:01 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x80086301, &(0x7f0000000100)={0x2})

05:54:01 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x24180, 0x0)
ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000240)={0x5, 0x6, &(0x7f0000000140)=[0x6, 0xa1, 0xddd, 0x5, 0x1, 0x40], &(0x7f0000000180)=[0xa49, 0x400, 0xc69, 0x1], &(0x7f00000001c0)=[0x7, 0x20, 0x100, 0x0, 0x0, 0x20, 0x7]})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000005090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8800, 0x0)
r5 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="1a614beab760000036c64b2f76922aa4741ca6dd052100000000ffff2e41bac8d1e83ecf8c0d0879d30a8efc06850000ffffffe9"]})
r6 = syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRESOCT=r6, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1)
sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="030476", @ANYRES16=r6, @ANYBLOB="00022abd7000fddbdf253fcc642f0200000008000600ed00000088000500030000004400035f31000000000600040007000000060007004e2200000500080001000000140006050000000000000000000000000000000020000380080005007f000001140002006d61637365633000000000000000000008ba7200a80a0000"], 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r6, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0xd0)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r6, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000000)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x4000000)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r6, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffc829}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa3c4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x802}, 0x4004800)
ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000100)={0x2})

05:54:01 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x3], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:54:01 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000040))
io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

05:54:01 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xc00000000000000}, 0x0)

05:54:01 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$TIOCNOTTY(r1, 0x5422)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0xb8}}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x4800000000000000}, 0x0)

[ 2787.934519][T14075] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:54:02 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{&(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
exit(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
faccessat(r0, &(0x7f0000000100)='./file0\x00', 0x84)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f00000000c0)={0x7}, 0x7)

[ 2788.002483][T14082] xt_CT: You must specify a L4 protocol and not use inversions on it
05:54:02 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x4], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2788.074358][T14081] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2788.093397][T14088] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2788.115151][T14081] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:54:02 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000003280)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422006000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/58, 0x5c}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/120, 0x78}], 0x3)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0), 0x4)
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={r7}, &(0x7f0000000100)=0xc)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r8, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000240)={r7, 0x40}, 0xc)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e21, 0x6, @mcast2}}}, 0x84)
getegid()
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:02 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0xe00000000000000}, 0x0)

[ 2788.187984][T32247] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 2788.248631][T14100] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2788.260773][T14107] xt_CT: You must specify a L4 protocol and not use inversions on it
05:54:02 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x5], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2788.293775][T14110] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2788.308790][T14119] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:54:02 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x1000000000000000}, 0x0)

[ 2788.338151][ T5840] usb 6-1: device not accepting address 89, error -71
[ 2788.412905][T14123] __nla_validate_parse: 6 callbacks suppressed
[ 2788.412918][T14123] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2788.536575][T14130] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2788.584928][T14125] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2788.596923][T32247] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2788.626655][T32247] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2788.643897][T14127] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2788.705509][T14125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2788.720322][ T5840] usb 6-1: reset high-speed USB device number 89 using dummy_hcd
[ 2788.729972][T14123] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2788.758103][T32247] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2788.789269][T32247] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2788.938192][T32247] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2788.956208][T32247] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2789.048805][T32247] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2789.064866][T32247] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2789.178272][T32247] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2789.195262][T32247] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2789.293875][T32247] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2789.308694][T32247] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2789.327272][T32247] usb 3-1: Manufacturer: syz
[ 2789.365354][T32247] usb 3-1: config 0 descriptor??
[ 2789.755558][T32247] usb 3-1: USB disconnect, device number 55
[ 2790.527544][ T5840] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 2790.877538][T28063] usb 6-1: reset high-speed USB device number 89 using dummy_hcd
[ 2790.917615][ T5840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2790.928225][ T5840] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2791.027876][ T5840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2791.039528][ T5840] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2791.139203][ T5840] usb 3-1: unable to read config index 2 descriptor/start: -71
[ 2791.146981][ T5840] usb 3-1: can't read configurations, error -71
[ 2791.887495][T28063] usb 6-1: device descriptor read/64, error -71
05:54:06 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x801c4803, &(0x7f0000000100)={0x2})

05:54:06 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:54:06 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x2000000000000000}, 0x0)

05:54:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@loopback})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack\x00')
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x8, 0x1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0xe80})
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xc0fe}, 0x1c)
syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
readv(r1, &(0x7f0000001400)=[{&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000001240)=""/177, 0xb1}, {&(0x7f0000001300)=""/79, 0x4f}, {&(0x7f0000001440)=""/100, 0x64}], 0x4)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000001140)={0x0, 0xe0, 0x1231594c, 0x0, 0x1, 0x400, 0x0, 0x101, 0xffffffff, 0x6d, 0xf0, 0xba4a})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)

05:54:06 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000003280)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422006000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/58, 0x5c}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/120, 0x78}], 0x3)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0), 0x4)
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={r7}, &(0x7f0000000100)=0xc)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r8, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000240)={r7, 0x40}, 0xc)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e21, 0x6, @mcast2}}}, 0x84)
getegid()
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:06 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0xc4800)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x1, @mcast1, 0x10001}, @in6={0xa, 0x4e21, 0x2b, @private2={0xfc, 0x2, [], 0x1}, 0x4}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x7f, @private1={0xfc, 0x1, [], 0x1}, 0x101}, @in={0x2, 0x4e24, @empty}], 0x94)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})

[ 2792.427640][T28063] usb 6-1: can't restore configuration #0 (error=-71)
[ 2792.466498][T14163] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2792.473072][T23720] usb 6-1: USB disconnect, device number 89
[ 2792.553092][T14179] xt_CT: You must specify a L4 protocol and not use inversions on it
05:54:06 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x7], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2792.697494][T14171] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2792.735380][T14185] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2792.760455][T14171] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2792.781177][T14163] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2792.797511][T28063] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 2792.799059][T14171] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:54:06 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x8], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:54:06 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000003280)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422006000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/58, 0x5c}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/120, 0x78}], 0x3)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0), 0x4)
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={r7}, &(0x7f0000000100)=0xc)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r8, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000240)={r7, 0x40}, 0xc)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e21, 0x6, @mcast2}}}, 0x84)
getegid()
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:06 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x29a1a7bc00000000}, 0x0)

[ 2792.845909][T14199] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2792.942845][T14208] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:54:07 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xa], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2793.003618][T14211] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2793.016019][T14207] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2793.038219][T14208] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2793.067456][T23720] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 2793.070830][T14211] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
05:54:07 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x3801000000000000}, 0x0)

[ 2793.162283][T14218] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2793.198299][T28063] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2793.223144][T28063] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2793.328288][T28063] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2793.363270][T28063] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2793.401643][T28063] usb 3-1: Manufacturer: syz
[ 2793.407136][T14228] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2793.426838][T28063] usb 3-1: config 0 descriptor??
[ 2793.446862][T14224] __nla_validate_parse: 4 callbacks suppressed
[ 2793.446873][T14224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2793.462926][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2793.496707][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2793.521028][T23720] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2793.534675][T14224] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2793.558560][T14225] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2793.618193][T23720] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2793.627285][T23720] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2793.652316][T23720] usb 6-1: Manufacturer: syz
[ 2793.675227][T23720] usb 6-1: config 0 descriptor??
[ 2793.751209][ T2230] usb 3-1: USB disconnect, device number 58
[ 2794.169287][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.176738][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.217509][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.225142][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.248362][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.255977][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.297426][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.304890][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.326840][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.342701][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.357411][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.365599][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.387562][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.395796][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.417424][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.426582][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.447460][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.454906][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.477428][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.484875][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.521103][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.531503][ T2230] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 2794.537223][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.554318][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.568406][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.575850][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.597571][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.605306][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.631634][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.647813][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.655540][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.678708][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.686168][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.707531][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.715852][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.737766][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.757433][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.765047][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.787424][T23720] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0
[ 2794.795385][T23720] plantronics 0003:047F:FFFF.007C: No inputs registered, leaving
[ 2794.836854][T23720] plantronics 0003:047F:FFFF.007C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2794.897510][ T2230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2794.908430][ T2230] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2795.007769][ T2230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2795.018536][ T2230] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2795.026544][ T2230] usb 3-1: Manufacturer: syz
[ 2795.034383][ T2230] usb 3-1: config 0 descriptor??
[ 2795.286982][ T2230] usb 3-1: USB disconnect, device number 59
05:54:10 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff00000900000109022400010000000009040000090300020009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003b4000000b403e100e4ed6eb07e1f7f117b0e15dab9aff5926f0df0d888dfdbfc8002802d512f9de5b4e31a229a145a39c3491a55d81a0f6ba855f689b15526e450d45df9b11123187c0d0fe59f6699531f2618b7cd3667c9206ec7862a89fdf9a18d4087dffa8ed7b39a7cd563f9b29404a900ff5e3b408a6537acb4f3aef0a20e769a4c9fd4c9eff871955c907d0906f86520c4c40eb810c320d28ba7308572f1cbf7c99a2b59588aa00a4ac5f17c718e4ebce9336b"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x81044802, &(0x7f0000000100)={0x2})

05:54:10 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

05:54:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x3f00000000000000}, 0x0)

05:54:10 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000003280)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422006000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/58, 0x5c}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/120, 0x78}], 0x3)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0), 0x4)
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={r7}, &(0x7f0000000100)=0xc)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r8, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000240)={r7, 0x40}, 0xc)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e21, 0x6, @mcast2}}}, 0x84)
getegid()
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

05:54:10 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000034000511d25a80648c63940d0324fc601003d0400a0002000200000037153e370a00088004000000d1bd", 0x33fe0}], 0x1}, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x80000000, 0x4)

05:54:10 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000407f04ffff000009000001090224000100"], 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x81044804, &(0x7f0000000100)={0x2})
socket$rds(0x15, 0x5, 0x0)

[ 2796.105046][T23720] usb 6-1: USB disconnect, device number 90
[ 2796.225433][T14298] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2796.226559][T14301] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[ 2796.263435][T14303] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:54:10 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x4c], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2796.287796][T14301] netlink: 'syz-executor.1': attribute type 8 has an invalid length.
05:54:10 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x11, 0x5e, 0xa, 0x20, 0x839, 0xa, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x60, 0x17, 0xe5}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000180)=@string={0x2}}]})
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'vxcan1\x00', {0x2, 0x4e22, @multicast2}})

[ 2796.374464][T14301] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[ 2796.399095][T14301] netlink: 'syz-executor.1': attribute type 8 has an invalid length.
05:54:10 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x22)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r2, 0x0, 0x0)
timer_create(0x1, &(0x7f0000000040)={0x0, 0x1d, 0x0, @tid=r2}, &(0x7f00000000c0))
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1)
getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[r3, r0], 0x2)
sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="14000bd5de00000000000029000000080000230000000000"], 0x18}}], 0x1, 0x0)

05:54:10 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0xe8, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68], 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

[ 2796.457724][ T6144] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 2796.469342][T14310] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2796.471725][T14321] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2796.496490][T14312] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2796.525132][T14312] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
05:54:10 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = shmget(0x2, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil)
shmctl$IPC_INFO(r0, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0, 0x0)
exit(0x0)
dup(0xffffffffffffffff)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x280, 0x0, 0x0, 0x30, 0x200, 0x0, 0x4, 0x0, {}, {}, {0x0, 0x3}})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000000380)=[{&(0x7f00000000c0)=0x1}, {&(0x7f0000000100)}, {&(0x7f0000000140)=0x1, 0x1}, {&(0x7f00000001c0)=0x2, 0x2}, {&(0x7f0000000200)=0x1, 0x1}, {&(0x7f0000000240)}, {&(0x7f0000000280)=0x2, 0x3f}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=0x1, 0x1}, {&(0x7f0000000340)=0x1, 0x1}], 0xd, 0xa, &(0x7f0000000440)={0x77359400}, 0x0, 0x0)

[ 2796.565429][T14310] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2796.589293][T14303] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2796.607538][T23720] usb 6-1: new high-speed USB device number 91 using dummy_hcd
05:54:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x4000000000000000}, 0x0)

[ 2796.642491][T14330] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2796.774088][T14338] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2796.811004][T14338] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2796.811632][T14338] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2796.817015][T14343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2796.817464][T14338] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2796.820667][T14343] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 2796.848794][ T6144] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2796.848818][ T6144] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2796.850520][T27826] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 2796.952852][ T6144] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2796.952876][ T6144] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2796.952893][ T6144] usb 3-1: Manufacturer: syz
[ 2796.954652][ T6144] usb 3-1: config 0 descriptor??
[ 2796.988190][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2796.988216][T23720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2796.988246][T23720] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2797.069356][T23720] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2797.119938][T27826] usb 5-1: Using ep0 maxpacket: 32
[ 2797.120083][T23720] usb 6-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0
[ 2797.120098][T23720] usb 6-1: Manufacturer: syz
[ 2797.126919][T23720] usb 6-1: config 0 descriptor??
[ 2797.215015][ T6144] usb 3-1: USB disconnect, device number 60
[ 2797.237519][ T6924] BUG: unable to handle page fault for address: ffffffffffffff6c
[ 2797.237530][ T6924] #PF: supervisor read access in kernel mode
[ 2797.237536][ T6924] #PF: error_code(0x0000) - not-present page
[ 2797.237541][ T6924] PGD 9a7c067 P4D 9a7c067 PUD 9a7e067 PMD 0 
[ 2797.237561][ T6924] Oops: 0000 [#1] PREEMPT SMP KASAN
[ 2797.237575][ T6924] CPU: 1 PID: 6924 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0
[ 2797.237581][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2797.237599][ T6924] RIP: 0010:wait_consider_task+0xa9/0x3b20
[ 2797.237611][ T6924] Code: 00 00 00 31 c0 e8 67 ea 2d 00 4c 89 f8 48 c1 e8 03 0f b6 14 28 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 40 1d 00 00 <45> 8b a6 74 04 00 00 bf 10 00 00 00 44 89 e6 e8 b3 e6 2d 00 41 83
[ 2797.237616][ T6924] RSP: 0018:ffffc90003d5fb18 EFLAGS: 00010246
[ 2797.237623][ T6924] RAX: 0000000000000007 RBX: 0000000000000000 RCX: ffffffff81460b06
[ 2797.237629][ T6924] RDX: 0000000000000000 RSI: ffffffff8145ccf9 RDI: ffffc90003d5fd18
[ 2797.237635][ T6924] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff89a09083
[ 2797.237641][ T6924] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003d5fd18
[ 2797.237647][ T6924] R13: ffff888063618000 R14: fffffffffffffaf8 R15: ffffffffffffff6c
[ 2797.237655][ T6924] FS:  0000000001957940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
[ 2797.237661][ T6924] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2797.237667][ T6924] CR2: ffffffffffffff6c CR3: 000000006358a000 CR4: 00000000001426e0
[ 2797.237684][ T6924] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2797.237690][ T6924] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[ 2797.237693][ T6924] Call Trace:
[ 2797.237710][ T6924]  ? lock_release+0x8d0/0x8d0
[ 2797.237720][ T6924]  ? lock_downgrade+0x820/0x820
[ 2797.237729][ T6924]  ? release_task+0x14c0/0x14c0
[ 2797.237740][ T6924]  ? _raw_spin_unlock_irqrestore+0x62/0xe0
[ 2797.237754][ T6924]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[ 2797.237767][ T6924]  do_wait+0x36a/0x9e0
[ 2797.237782][ T6924]  ? wait_consider_task+0x3b20/0x3b20
[ 2797.237794][ T6924]  ? lock_acquire+0x1f1/0xad0
[ 2797.237807][ T6924]  ? __might_fault+0xef/0x1d0
[ 2797.237820][ T6924]  kernel_wait4+0x14c/0x260
[ 2797.237832][ T6924]  ? __ia32_sys_waitid+0x150/0x150
[ 2797.237846][ T6924]  ? kill_orphaned_pgrp+0x320/0x320
[ 2797.237863][ T6924]  __do_sys_wait4+0x13f/0x150
[ 2797.237874][ T6924]  ? kernel_wait4+0x260/0x260
[ 2797.237890][ T6924]  ? put_timespec64+0xcb/0x120
[ 2797.237903][ T6924]  ? ns_to_timespec64+0xc0/0xc0
[ 2797.237919][ T6924]  ? lock_is_held_type+0xb0/0xe0
[ 2797.237934][ T6924]  ? __x64_sys_clock_gettime+0x165/0x240
[ 2797.237948][ T6924]  ? lock_is_held_type+0xb0/0xe0
[ 2797.237961][ T6924]  ? do_syscall_64+0x1c/0xe0
[ 2797.237974][ T6924]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[ 2797.237988][ T6924]  do_syscall_64+0x60/0xe0
[ 2797.238000][ T6924]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2797.238010][ T6924] RIP: 0033:0x4169ca
[ 2797.238014][ T6924] Code: Bad RIP value.
[ 2797.238021][ T6924] RSP: 002b:0000000000c9fda8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[ 2797.238033][ T6924] RAX: ffffffffffffffda RBX: 00000000002aae23 RCX: 00000000004169ca
[ 2797.238041][ T6924] RDX: 0000000040000001 RSI: 0000000000c9fde0 RDI: ffffffffffffffff
[ 2797.238049][ T6924] RBP: 0000000000002cdc R08: 0000000000000001 R09: 0000000001957940
[ 2797.238056][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b
[ 2797.238064][ T6924] R13: 0000000000c9fde0 R14: 00000000002aac7a R15: 0000000000c9fdf0
[ 2797.238074][ T6924] Modules linked in:
[ 2797.238083][ T6924] CR2: ffffffffffffff6c
[ 2797.238097][ T6924] ---[ end trace d8e1925fc0e7898a ]---
[ 2797.238109][ T6924] RIP: 0010:wait_consider_task+0xa9/0x3b20
[ 2797.238119][ T6924] Code: 00 00 00 31 c0 e8 67 ea 2d 00 4c 89 f8 48 c1 e8 03 0f b6 14 28 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 40 1d 00 00 <45> 8b a6 74 04 00 00 bf 10 00 00 00 44 89 e6 e8 b3 e6 2d 00 41 83
[ 2797.238125][ T6924] RSP: 0018:ffffc90003d5fb18 EFLAGS: 00010246
[ 2797.238133][ T6924] RAX: 0000000000000007 RBX: 0000000000000000 RCX: ffffffff81460b06
[ 2797.238140][ T6924] RDX: 0000000000000000 RSI: ffffffff8145ccf9 RDI: ffffc90003d5fd18
[ 2797.238147][ T6924] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff89a09083
[ 2797.238154][ T6924] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003d5fd18
[ 2797.238161][ T6924] R13: ffff888063618000 R14: fffffffffffffaf8 R15: ffffffffffffff6c
[ 2797.238170][ T6924] FS:  0000000001957940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
[ 2797.238178][ T6924] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2797.238185][ T6924] CR2: ffffffffffffff6c CR3: 000000006358a000 CR4: 00000000001426e0
[ 2797.238195][ T6924] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2797.238202][ T6924] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[ 2797.238208][ T6924] Kernel panic - not syncing: Fatal exception
[ 2797.239336][ T6924] Kernel Offset: disabled
[ 2797.736860][ T6924] Rebooting in 86400 seconds..