f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffff, @empty, 0x2}, {0xa, 0x4e24, 0xf4, @remote, 0x80000001}, r2, 0x5}}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="92"], 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000380)=0x2) open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0) [ 349.924827][T12611] chnl_net:caif_netlink_parms(): no params data found [ 349.974649][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 349.974756][ T31] audit: type=1804 audit(1570075541.024:31): pid=12633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/newroot/19/file0/bus" dev="ramfs" ino=28300 res=1 [ 350.058288][T12611] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.065896][T12611] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.075388][T12611] device bridge_slave_0 entered promiscuous mode [ 350.122602][T12611] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.130300][T12611] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.139322][T12611] device bridge_slave_1 entered promiscuous mode 04:05:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="79da45a4c41740011d77fffa1e81fd452052b6043a35243e1a687947beace7eade6b8c745d4c7e0f841e63def1fe11cb9eff97128bdb6da553ac0356de585ddf70e07e9997cf01cd52a307bb59ae83de15c1bfef0e834def1f88b09778d73704f4812273b0cc55c8eb25db421a542efe576d3d011e38f192a7b91a5d4d371c0dee75d58cbe98882c3eb8180443b2f8ef4898ed0007e72c25c1d4d1df9df71f35ad1330c0fd6929afbf23bb7dc5644b87329d040463d5913b034def32aa269e1f02a03edcbcb48909eb1505dabaaf809e0954a2ffb99001b165cb1950785e3333804a9981eda2360d39c227c1", 0xec, 0x20004000, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @ipv4={[], [], @loopback}, 0x1}, 0x1c) 04:05:41 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x0, 0xa}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000080)={0x9, 0x0, 0x2}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt(r0, 0x0, 0x4040, &(0x7f0000000000), 0x0) [ 350.245482][T12611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.291367][T12611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.397891][T12611] team0: Port device team_slave_0 added [ 350.426886][T12611] team0: Port device team_slave_1 added [ 350.537321][T12611] device hsr_slave_0 entered promiscuous mode [ 350.593751][T12611] device hsr_slave_1 entered promiscuous mode [ 350.632966][T12611] debugfs: Directory 'hsr0' with parent '/' already present! [ 350.893019][T12611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.937724][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 350.946892][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.964185][T12611] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.984176][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 350.995227][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.004578][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.011873][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.059254][T12269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 351.068403][T12269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.078273][T12269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.087436][T12269] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.094964][T12269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.104993][T12269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 351.135705][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 351.146309][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 351.156432][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 351.166148][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 351.176159][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 351.239636][T12611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.250546][T12611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.284046][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 351.293353][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 351.302931][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.312679][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 351.322974][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.416513][T12611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.442424][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 04:05:42 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaac2aaaaffffffffffff0800e000d9cdf8e36e3861e50000"], 0x0) r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) 04:05:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "5573da78"}]}}, 0x0}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, 0x0, 0x2, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'vcan0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1800004}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xf5fa6f6353892bb8}, 0x400) 04:05:42 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x8, 0x5, 0x1}) r1 = socket(0x10, 0x802, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4000, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0xffffffffffffff81) 04:05:43 executing program 4: ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000140)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7], 0xd1}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000080)) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r6) ptrace(0x4208, r6) timer_create(0x7, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=r6}, &(0x7f0000000040)=0x0) timer_getoverrun(r7) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 04:05:43 executing program 1: syz_usb_connect$hid(0x0, 0x1, &(0x7f0000001140)=ANY=[@ANYBLOB="1201000000000040d80472f340000000008109032400010000008009040900000000000000000005000000010009058103000000000474eb78c506cb54c30302132462775387f05552eb767b9808411d208cfeb21a92da45901fcaf7d55da6234a8d562169003fe23fa90603e93acd6b2430262683d3ceabd3d67947c8aeb1024e2b830aecc2a18a3c4ca544ee"], 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x121042, 0x0) mq_timedsend(r0, &(0x7f0000000100)="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", 0x1000, 0x800, &(0x7f0000001100)={0x0, 0x1c9c380}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104800) write$P9_RLERRORu(r1, &(0x7f0000000040)={0xe, 0x7, 0x2, {{0x1, '!'}, 0x1000}}, 0xe) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) write$P9_RMKNOD(r4, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x0, 0x3, 0x4}}, 0x14) [ 352.141678][T12669] x86/PAT: syz-executor.1:12669 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back [ 352.177237][T12670] x86/PAT: syz-executor.4:12670 map pfn RAM range req write-combining for [mem 0x3780e000-0x3780efff], got write-back [ 352.197440][ T12] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 352.574997][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.586304][ T12] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 352.595635][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.646721][ T12] usb 3-1: config 0 descriptor?? [ 352.674265][T12672] x86/PAT: syz-executor.1:12672 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back 04:05:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000000)={0xfffff801, "1b06b595b1f60942006a3318ba5c8f9d7d15d05060d57e4a1dce4f4894227319", 0xa90fe884d3e19fd8, 0xff, 0x5, 0x2000, 0x4000004, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) [ 353.118150][ T12] ryos 0003:1E7D:3232.0001: item fetching failed at offset 634506161 [ 353.127033][ T12] ryos 0003:1E7D:3232.0001: parse failed [ 353.133072][ T12] ryos: probe of 0003:1E7D:3232.0001 failed with error -22 [ 353.315768][T12660] x86/PAT: syz-executor.2:12660 map pfn RAM range req write-combining for [mem 0x1c7df000-0x1c7dffff], got write-back 04:05:44 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f00000009c0)={0x3, 0x18e, [{0x6, 0x0, 0x9}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x2}]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000900)='/dev/hwrng\x00', 0x127000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000940)=0x280000) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb1, 0xa8, 0x3c, 0x8, 0x2400, 0x4200, 0x42ef, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0x0, 0x1, 0x2, 0x9, 0xad, 0x0, [], [{{0x7, 0x5, 0x1, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0xe, 0x1c, {0x1c, 0x24, "95f47e24f53f115f3e809f5d3aa901080d6c96907307c4f75735"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f00000000c0)={0x0, 0xf, 0xe2, {0x5, 0xf, 0xe2, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "9247294d1da83f13573439a46b7fb789"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "cc9749b6f38334e91a290bda4449988a"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0x1, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc5, 0x0, 0x2, 0x7, 0x57}, @generic={0xa3, 0x10, 0x1, "9bb0a9feaa59c1eb8bdc6e903b7d93636f7cb56179ea3dbcbdb5713f04f8f2d72c976a4e766bf8bbcf229bba4128afca0de2b49175296bd0a7dcc4b54d658b62d30b40672138597da45153de8ee2e7efab54120e0bd055181f0d147a6f67e39fdfeb8856d8132d40b7f3a03b20a529cf56011e82deb971d76741587e98cf3de4a0f015af9273e5e68247117c20473eae8b258c15e34f4cdaa654b2327c86a52d"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x18, 0x8, 0xff, "2516420e", "5f5ef463"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf7, 0x1, 0x3f, 0x1f, 0x20, 0xf800, 0xffff}}}, &(0x7f0000000840)={0xac, &(0x7f0000000280)={0xa2e04c1054e545c7, 0x6, 0xae, "be3200892656452f793e1083087659bbba51416e7c953de476ae7f9220ce126fd938019d7ac48d7170e4659df45b7dad10971e3602fa338420c46eb5007222db9e741076b141c72dac0407a630cd8e1f81479322642c188c59003a073564248a3b0a9cc60a589710e2f89f1a3800b90e93aa1bfa647deecb8fd4914ff2150926b3db7051a1fa5210d6194c0c44192320417643efec388d9cec98b1966ae4b5e108ce23bf72e74dc718f5886629ef"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfa}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "089ad2"}, &(0x7f0000000400)={0x20, 0x82, 0x1, "c8"}, &(0x7f0000000440)={0x20, 0x83, 0x1, "c1"}, &(0x7f0000000480)={0x20, 0x84, 0x1, "a7"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "619417"}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x0, 0x20, [0xf0f0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000600)={0x40, 0xb, 0x2, "8ebe"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0xdb70}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={[], 0x20}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000700)={0x40, 0x19, 0x2, ';s'}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x1c, 0x0, 0x7}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x7f}}) [ 353.378746][ T12] usb 3-1: USB disconnect, device number 4 04:05:44 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r2) dup3(r1, r0, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\xbc\xf6', 0x0) write(r3, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r4 = socket$inet(0x2, 0x3, 0x80000000002) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) ioctl$sock_bt_cmtp_CMTPCONNADD(r7, 0x400443c8, &(0x7f0000000040)={r4, 0x1}) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1f464216ff6df4c3, 0x148) [ 353.605314][T12684] x86/PAT: syz-executor.4:12684 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 353.668277][T12686] x86/PAT: syz-executor.4:12686 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 353.763051][T12269] usb 2-1: new high-speed USB device number 5 using dummy_hcd 04:05:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@mcast2, @loopback, @rand_addr="183a82dc8af63a8874ea8d3b5574db7c", 0xfffffc00, 0x8, 0x2, 0x400, 0x1, 0x80000100}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000d80)={0x11, 0x10, 0xfa00, {&(0x7f0000000d40)}}, 0x18) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$key(0xf, 0x3, 0x2) prctl$PR_CAPBSET_READ(0x17, 0x8) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) r6 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r6, 0x0, 0xc8, &(0x7f0000000080), 0x4) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000140)="5ef5cb51deb6ac085628f06fe24f35270a87164ffe29afdaee5378a4f479fbb17a6dbfd90d1b7d4437ff3a9fd1afd6ad63bef32e226ee76fbf3424c6ae662b8305f0a1e24e0200e0c4897bc98df445a0d516ffc54c52013fb0e6453fa4d8f1eca4f2a6dc9a62f02dd7798f786b7283bb4d9289768e74093b5feb07a4488de732f275298d59c890f1850688ba535228ce3000ad078ce885ba78ae8f58d53d910b309406f58784b3f420f56c73309cdcbe9e53c04c40083fb4d806a69a61594d326760ab2af6c219d91dda9eb187418f", 0xcf}, {&(0x7f0000000b40)="a5215a33e28eecfa8f7abc3529e46b615d2afeac776666a2519753a5a6761c12c834570d18f6cf021045b705d54b0c326d9a6dfe497909c7df3b7d2a0f3006ea687a10c896183ce53e1551a36422d5737d17d4d544e4ca1d847501907ab59193f751dac4cd6a5318da4d77027b01d6e532914b8d0647aabf33322b7a8b69b17a6f592bbc733c1e7578d8ebb21d736dbb11d6eea078a680fb422a11a7d4215cd96d6a5532f128f0416bd3ade384f856ad01c1cd489e0cd9e6a86c99ca0067738d157ea4", 0xc3}], 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000c40), &(0x7f0000000c80)=0x30) r7 = syz_open_dev$audion(&(0x7f0000000cc0)='/dev/audio#\x00', 0x5, 0x400000) ioctl$VFIO_IOMMU_GET_INFO(r7, 0x3b70, &(0x7f0000000d00)={0x10}) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2157], 0x875) sendto$inet(r2, 0x0, 0x0, 0x20008fbd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) [ 353.945377][T12689] x86/PAT: syz-executor.4:12689 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back [ 354.023142][T12269] usb 2-1: Using ep0 maxpacket: 8 [ 354.153244][T12269] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 354.161616][T12269] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.171904][T12269] usb 2-1: config 0 has no interface number 0 [ 354.178306][T12269] usb 2-1: config 0 interface 222 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 354.190157][T12269] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef 04:05:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="390000001000090468fe07002b00e8ff4000ff07140000a8e44cfd0a03a2881419001200120001000300"/57, 0x39}], 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x100) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080)=0x5, 0xffffffffffffff4e) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x1, @empty, 0x5305}, @in={0x2, 0x4e23, @empty}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r6, 0x20, 0x20}, 0xc) [ 354.199394][T12269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.208423][ T12] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 354.240678][T12693] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 354.297620][T12693] x86/PAT: syz-executor.4:12693 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 354.316071][T12269] usb 2-1: config 0 descriptor?? [ 354.339800][T12693] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 354.356856][T12269] cdc_wdm: probe of 2-1:0.222 failed with error -22 [ 354.367389][T12269] usbvision_probe: Hauppauge WinTv-USB found [ 354.373618][T12269] usbvision 2-1:0.222: interface 222 is invalid, max is 0 [ 354.406960][T12698] x86/PAT: syz-executor.4:12698 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back 04:05:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) write$UHID_INPUT2(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c000000e8005347454e68c9dabbb2ced7dadf357ab5c1b1a9e1097b43f6c2c4f84cb39598b1d6802c562ace080000001a816f470ee7af0014bd0e4e0b4b1aa43d5c12439806e27dc29049177361b6ecb67a28b4455ede49006e96f40a52d6adafa138a125af98b280bd946a7275cc117e798cbf2135963d2cd063382f9c285b93c8d6f3ef8aa85961b6292d64d3f2600deb69f80d2450bc6a7ee7667b105817bb47c69285d238c43f4f2747ff418f33f554d472624b31a0fc248541b9379975d1cb9e2e89f12a645f7f18cfbc788df4b0cbd3986fc20417852b8861bd0c0741c1952b8bd21deb3d98b8c813290d"], 0xee) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) signalfd4(r3, &(0x7f0000000080)={0x1f}, 0x8, 0x80000) [ 354.633336][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.644618][ T12] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 354.653918][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:05:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xe0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080)=0xd0, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 354.728184][ T12] usb 3-1: config 0 descriptor?? 04:05:46 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00', 0x0) write(r0, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0xa00002) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000180)={0x4, 0x80000000}) sendfile(r0, r0, &(0x7f0000000140), 0xff9) symlink(&(0x7f0000000040)='./bus\x00', &(0x7f0000000000)='./bus\x00') [ 355.054280][ T12] usbhid 3-1:0.0: can't add hid device: -71 [ 355.060535][ T12] usbhid: probe of 3-1:0.0 failed with error -71 [ 355.124910][ T12] usb 3-1: USB disconnect, device number 5 04:05:46 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2a6102, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg$inet6(r3, &(0x7f0000005a00)=[{{&(0x7f0000000140)={0x2, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000006b40)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @local}, r5}}}], 0x28}}], 0x1, 0x0) 04:05:46 executing program 2: r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="4fea224f9a5f8d84792a4750a1d9ca38aa3abfc5551f7720bdedc52cacda889371b60a4bfce604a880dd6ddf3ddd4a573a129cb9f2785abbf8e9de870ea04824c6ac8ac084aa7f7a8fb48b0079d94bc5bf846f9d43ea65e401b21a461b164cdc7e69c804b4fbb31f020e5e3e6582aff433b2b954fc09d069e2"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000640)=0x10) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x0, 0x27, 0x92, {0x92, 0x5, "ca0fed50e6e0c7b1eae8b7d0c1ed56f00bc2dab3a2c7f72dffedb997b9580a4229a0f96332cbab043463a0222c4215bb5c92aa46da2e3ab0432e65e2b88b702141f26c68eb0ca381ed08340e3dc0c414a7f97a8c14cd4b7b681c40d5533138b74b4b1b84a41bb179e20b4a53b6f75b8107e25cbc2ad6da33b38f91bac5c754997e99df5dcc626adf4b117f0a08cda86a"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}, &(0x7f00000001c0)={0x0, 0x22, 0x13, {[@main=@item_012={0x1, 0x0, 0xc, "a1"}, @main=@item_4={0x3, 0x0, 0x9, "1bbf86ea"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "0053f051"}, @local=@item_012={0x0, 0x2, 0x3}, @main=@item_4={0x3, 0x0, 0xa, "9c28511f"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0xc84}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x0, 0x12, 0x1d, "b6b8778454e5fa358a955fdd8053741e96e712c727660500fc2424e1c2"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000480)={0x20, 0x1, 0xae, "2382a8348a0f02d6fa6266962e16ca126c93f09288784dff86729db930373c2ea916656b9fd5af277ec53e9f6b7eb23f9026e90f8501027169fe27f19b46941e8d1e69d3078a789a64fbb544b17093c27794bebd55435d22a2ad80daa328124634535c5d33e8c395445177d998b1a534a3a23bb4803a54e56ef249b8bf170aae1af39b93ff4e35afb42bc6afd253e69c7c4ea4768b8bacd136c4b1c82b04bdcba50ab84913bf18457063c3bbb901"}, &(0x7f0000000540)={0x20, 0x3, 0x1}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 355.355999][T12716] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:05:46 executing program 4: r0 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) [ 355.693489][ T4006] usb 3-1: new high-speed USB device number 6 using dummy_hcd 04:05:46 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x40096101, &(0x7f0000000040)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) r5 = open(&(0x7f0000000180)='./file0\x00', 0x234a02, 0x84) write$P9_RREADDIR(r5, &(0x7f00000001c0)={0x49, 0x29, 0x2, {0x3, [{{0x10}, 0x2, 0x3, 0x7, './file0'}, {{0x100, 0x0, 0x8}, 0x5, 0x8, 0x7, './file0'}]}}, 0x49) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x28}, 0x10) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x800, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000140)={0x101, 0xda, 0x22a}) [ 355.908312][T12725] QAT: Stopping all acceleration devices. [ 355.930702][T12725] x86/PAT: syz-executor.4:12725 map pfn RAM range req write-combining for [mem 0x3780e000-0x3780efff], got write-back [ 355.933363][ T4006] usb 3-1: Using ep0 maxpacket: 16 [ 355.987752][T12725] QAT: Stopping all acceleration devices. [ 356.004387][T12725] x86/PAT: syz-executor.4:12725 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back [ 356.063556][ T4006] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 356.071874][ T4006] usb 3-1: config 0 has no interface number 0 [ 356.078203][ T4006] usb 3-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 356.087407][ T4006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.153878][ T4006] usb 3-1: config 0 descriptor?? 04:05:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000)={0x0, 0x7530}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000019000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000000c0)={0xffffff81, 0x5f}) [ 356.495846][ T12] usb 2-1: USB disconnect, device number 5 04:05:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x29f, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 04:05:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockname(r1, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000000c0)=0x80) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@setlink={0x30, 0x13, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IF_NETNSID={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}}, 0x0) 04:05:47 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x11100, 0x0) sched_yield() write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x5, {0x7, 0x1f, 0x9, 0x10000, 0x9, 0x6, 0x4, 0x8}}, 0x50) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x7fff, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000000c0)=0x10) 04:05:47 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) write$input_event(r0, &(0x7f0000000100)={{0x77359400}, 0x0, 0x7, 0x5}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r2, 0x100000000000012) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) ioctl$KDSETMODE(r5, 0x4b3a, 0x4) connect$packet(r5, &(0x7f0000000000)={0x11, 0xd1, 0x0, 0x1, 0x3, 0x6, @random="0000fb00"}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) [ 356.886916][T12747] x86/PAT: syz-executor.1:12747 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back 04:05:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r2, 0x2000) ioctl$RTC_AIE_OFF(r2, 0x7002) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0xb}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x9}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x5, 0x2}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x60}}, 0x0) [ 357.008650][T12750] x86/PAT: syz-executor.4:12750 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 357.073302][ T4006] smscufx: error -5 resetting device [ 357.074178][ T4006] smscufx: probe of 3-1:0.122 failed with error -5 04:05:48 executing program 4: syz_usb_connect(0x5, 0xfffffd0e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd4, 0x89, 0xda, 0x10, 0x5dc, 0xb002, 0x2f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x73, 0x0, 0x0, [{{0x9, 0x4, 0x34, 0x0, 0x1, 0x61, 0xe0, 0x51, 0x0, [], [{{0x9, 0x5, 0x4, 0x8, 0x0, 0x3, 0x3}}]}}]}}]}}, 0x0) [ 357.276869][T12718] x86/PAT: syz-executor.2:12718 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 357.483089][ T4006] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 357.666646][T12758] x86/PAT: syz-executor.1:12758 map pfn RAM range req write-combining for [mem 0x1c7df000-0x1c7dffff], got write-back [ 357.722967][ T4006] usb 5-1: Using ep0 maxpacket: 16 04:05:48 executing program 5: io_setup(0x200, &(0x7f0000000000)=0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040)='/dev/zero\x00', 0x18100, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/btrfs-control\x00', 0x5edc7, 0x0) r4 = syz_open_dev$mice(&(0x7f0000001200)='/dev/input/mice\x00', 0x0, 0x181000) io_submit(r0, 0x3, &(0x7f0000001280)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x45, r1, &(0x7f0000000040)="1a8e62410a906614a4d7deebfe388475464af7e6c30417c1670005e75b2ada8411307dd3e73f775289b76a7c73593f201a6f431e9d76b37778e6768f9daa8896d754047c8ab56c118fc9711b1aaed665acc868c1284654af9b88bb27775160081d352263f061ca43526cbc26cf75afa6fb377b0ee7898c0f93fd1bb52eca1a22453f91883ef70700a19408965a58a3978e822a7bdb50bb795114bf6b127b58af6066770c745368297457a871fb601e77777ca7a567767aee4acc85d2eef41fab5d58a99c4e404dba86a34bfe1961448eea78f21a6e7200e648f45ef1b1065dc719d60b6367a6643ee58115ddf06586cdb5618eac2a0183b4afe9754eb2ec42d3f93da5c42ac9f71eb4d0b5d76bf911f57fb8a0c375bdc2ba56bf05c0c43d94bfa95147a814e2d3f039e2152b46c450132dca4e5987619dc6e989762a42a668ed8e1fafef705ada3b45dcc37f4c10d162ed1989eaa2a090b5870d8081494ac0f0d2d74e9fdf32d061224e7a8c967b1e87a2599949563f0097607e86123bc251cca5377dc36ce131d526dc9f22c7fa80960613ecdbb3223388d2426f33edaa9685c394c4ef62ffd99f4ae4a55e4a806940966996440af660ad73df2c77be496c907ab5e8c6ee81821170ced284fb22625d0bd03b37f6d103358ab8d54a6bc8726e7b5199e6c0bb13f6d81f252d9a181ca82c28813650e087f54b43cf9203e4061fef3a883a9fa6c28ce4e06db2e2e369beaac0472db9f309f95925fd888603590eab5b7cfbd55b4a9a099ef73cf9f9c4e4d470c8ad6aa2d57b6439b291e7b19441793cba114086b41383fc8a1ac17fc445d9c7b119810b970e19eb553357b76aebf14f5b937a09b5358d66f87fbacec0063bcabd11a3f6f437612735d5b771ff2fb7202d8089ce92894ecafbfa6c7be36c3ce8551a391f58a9bb9c6c3ccd509158eb0a8f76912033c251435d89e1c310434e2c55ec36b6af7528050c1db0ab888776b8cd87a5d43ab3193005fced6eef67c8f5c4d04f7b90160f8b83014f1545a89c9c587a2efed2a5c9934e30a20e6001f1a5cc75377c34640a988a38a9f3c77c0fa435f68ab90afc4cf4b5caf3225c7d9c97dfefb019950c586ab25ba6028ec617535d966e07ad8f9da52417eacb9143879e75eb6dd642928e688fa94256c1debbe0d43053cfe1bbfd7916a2f76d7f49a207e9e412c43b63fcf94b3c060452bd837e8cdce2792a4bdecec2c02c68ade9a49213d0503dc40cf49326bdbc4e8d69578272d1f477e72e1976527b9a07852cfa0579b4e127957c12c5f43da0d468728becd8c675145a9e867f1cb84d9eb27f7174f5321721d6bbd0d2c5a7d4a2b4e31a9ccb351f0618d1c3a292a298ce322be10f0123c6a56b9a32a04241bf3e3a959f45b830b28150b6f2afad4afcd0ac4bbb88780c9c6287a4e838c63cdb39942495b5952e74101b7f49b0f6d5b812345de5a6e83feceb667edb796c73145fb2d633855dce70332b05da2beead7e085f9a96528b5368723c384872ef8fdf5c390d95208536a680cc1ab1b4952ac15effed073c172411dbc42dffcc0c1a87fd8d6e842a42888bd55020446aab2d206fc3fd7ecaac45cfec728471db5649c386765945208de92c9ad7cdaaeccf1fb6813361da202fdd74c9f34c67cc08392d2e49fe69b516ba3b963a18789cdfb6bc651a423a3d055ad20c237389dbb2736fb78aa4cfcd08703bcd566321c851807594a9efadd8ad6f2b143d7af9f878491398fee94c0e8f8af1582eba652e9aaebca2aa777ef560f2500a2b0c535fec7a9a8e2898564bff092dd025d9e846c2a8ffeb7ce250eba2cbe52486438555cda6804099aa16b32d8d13269e80aee07559e103c67accf756ac4901493b905e2c3ec3c3b1fc36efccba523a1805cc97a3929e405d2ab36195bdb2dbe5d7b23cec3e1d89db0e923c32a1dd1bd71022b497ff3ce37a2905631af3a220e2a98af7c6512faf36da50db611b4c7d7c0f2995f2411455cafdf7bb0bfabf6e2c66353a961176775fee41ae5183ac5685f0c67e6effa6ad78eb065299297e76fa3611c3d9e6bb0f239ec1c619e8d3fc5701424b9bdfdc1ca12e36e29e59ad00da4bf648860ecf02fd01711faaa2e7134257f14b74125198c5f8efc5c271b186d4417f5a6b3b832415366357bbd507aaa9b18b6f1739194d0d9a0d4c7d172b038cf5abaded974ab3cf977e1c20c2d2fdf549e617f86675b26c7aba17d6f3337ec0d120f02235981c9966bf8428082d9ab73cea3ea9290e700f6d85affb691cd9de003e92d37ecb3364f3e048900acece5b2e87a911a45051e7c0b47b7b1f8c4499b38a8e28ab5fefb9aeaf63328a27cd25bdd479a5445a8e49cc2ddc2fc98e89b6c4821925d29d4e625f1e7df2b27b8c89de1acb6558707565662a58d3625e718484bdd398f5fc341bfc1548db24fece973fa1bcf0f9567e0ca2686e0ce9d44580c9dc99945f655276e74ec4cccbf384ce8538c6673d8f0264d721a1fd1e6bda5fa923f985a2409a972ead067ffd07ec9f4ddd5e1128a09e674f7368b18de12a1e328c3ee386f1a3f2dc6715bcb9e58267aebefd2e622bf3a37c6f2c8c4cd60f77ee425e600cfe739cb8894aa2c84c613826ffba9fded84294185b2077781359a60a9bd6b944b7360965b884b9293a41b2c646013ad36a4816b4de8214752e5412e084555092e5eafbfd74e1098e452bc44794ffe80aaf256985a5050f7c8b7008b61b01b769080c8b80bcfa968203a68f825b25acc412fb7916c1b43aa48e61633c1a060982e14b83f8a25dfab17d3682a63954d2d5d8775d21602f3b7d45e1772136670e20a88c595d7eca8a59675055aa5ecfdaa9b52f506ea25abf8c3a20eb03c0ced7ddb4eff0a5867224aa75f1cb252792f92c4fb9859d81472ffe740223b011b645cc38c33c28168c51848a392c617e281dbfa393d129bf066e69b9bfcd5ef6440bfd6529f4159c19ce735f1867693ab770b2a5c36b8b7e4bbb544f21a2b8806af52303ed78f77017f57f22bc0a327ab30fd292c4d016b1359ce42cc6375e743398848639df94d1fe44e673249df8f77cbcc5455165b6154ad53c0d06fce538b6358027498c290acd0e3d1643adf3f4c42ac5da1879102fb863b25be2a7cd152ea478f776ee595f51bf0873e990ebe62cab5ad4c80c38731e7d86f517e90c35620031c492250d8492ba624b6a9e4c9adcac68aff1598639ae9318e31d14d8c483a177f7188f6feb940d3a18c3ff05cf252648521a551bfe59d4831bf97688f8bf88f6606bb59be65c6c2ecc0b41c46d01b09b4b4566a597237625ca0b0208fa138883121a7a1fed8bd162ee874406245d829bffc90116b699383a4ebec18b62c059b14c3cf21991fe48c340ee6f8016929396c26a3dec6021a4d7a941ee97705e3a017584a1382c6eef81679374f55ba296c4782ab54fc15d4a1af6eb13df565889ba39e109ee00b713229e462cfb9fd8940dc3bb61e74a82452196bd4e49c9ae08e1fbe37d3195e9e19ef40ea8edcf4f010ec00d2bccdb73c6ed5c85c9144136bf9044d0c6801a7dadc2b2ba5e7e0c1d6cb0572e17cb12940e46d35421b94e5245b4743a711581d03097be72a070fd7048b473702e502326399b9c7c001a0cd8a70894d612f879f80b52b99da0afddcb94616dbe8d16cb22dab10f442c782b7b225827a4a2e470217cdd761fb561d8d4bc3eb363881c7aad180b83d98b04d4fc3b368aef6f8788db43ae2b19e4e91e5ceca96ad2da7360c1fcbcc5639f80375b5ecb5aff935379b1a62f11d5a26dbf8e1edd9446ae603e9bd7a84035f26a3a679ffced6c3f516990d1aa325e544d96c70b2e7ea56d8739bb0c634440fead6695fc98fa3cb2d2fe400168dea1f0c8fcd9809aa6ccfa2f6631ce0e642c6c1d2167d48847a0a2fdcb205a3a12fa7ec191fdfc04e2aa86dbcbefb9bac8ae9f9734419e93fae458229821d2258a8147167e78171fccee4aa1cee4838c796540b59ea2e83f2b61ca8da1e22eac852c67e747b7327cd1a00e8616f67f0069a3a9d511ddfd59f393cb12a88585251cae91c754d7e4d14a812bdc9203395ffb8bf77ae57a4cb45642d273b187e830cf83df5a29fb448e51e00b6ee15d5e5fa7a1a1dda8a6524c15206dc1cfcdf0c9c807270c82e7f7a911c0a42a76efd6703a14de9d80481231f70e669cec10fec630853b16c8bc029fc5ee83f6eba2ca1f69f4e9b70ef078576a70beff85827f4c51b3c1153ffa2cbe03372813f3a317abaacd38612737daf51f4704269d55b235a2d921c7bfb82b4cb2fcf0645a163a502525d9d41a1ab835e6eb988693df125800f5aa3f70c94e624f5ccba2a4de4269e3d8cb11c4865a13034a1fe08baf83779a21530f04a0b0a94d572ea50168d08b324f41a81d0648774c97212903c3b831bbc822b6f37e8e55870b5edea7b7cc59793d67df199a8c590bbb96acadc29af8d29bfbf5eb2d2fbf248593f699ea2384acd09deb33d103d86463d98467ecb018fd47517ea93d07c00ba33739e3aa7e000df47f5287a43f1f4db4a4144bf3cd4d90ef75b7713c86c694802ae149041c82a0bc890f1203f38d8e35760bd12f50f6394ddd0713fa9ae32a45e41fc1823f45b0f134f8719dc686bd968ba1c49ad229814c3af8f045146e3ccea843c275fef36a94435c2f5fb418b9f24e59f42cc06dae7a73709b264937db5473d2429f425699ffa211d56c61489e022ecae2a547200ad4a1c8ea442101dffd7a861159bee7a3073e7576d929f849f054f9c65ba2e385b010d2a61a0b2a21d273ed19bd7e81e05a6056f791128839df2df7ff79dd56dac154e55831b95847565d6491304e145e12519a98d36d5a21ef1334d8c897a8b014b7e4a3664dd47973e9f07ae6ec1abca61d635ca796fa53d7b5e0bf69cf9bae9fbcd42a6b758aa0789037188453c8d8886a5a31bef0dd0967f3dc683135ec057f17b30b5691446e99a45769308ef897da2b86ae6547af049806b4ecb14b074cd8fdb6e06847d74762c101919b0b0c3d5fe9ba4102760c7ca36a9553c13c2f78a5aa0c1831fe7a073ce839fcbe4c296298318161147eb3a89954f955c1ec940a5a14e20b012a6480c715216efa50f1ed4335c8ffc43a4149e42418dcc48e60c1c5cffe2da226dcf53954af0f01abc8095f852bed5e50f216ba5806cc2b157f768b99d01f45f361e40582d1d542e2c12ea6d2186cb245bda36636e81414a8e936b121553b487cbab24f95149da954c9f7f1bcd5ebecdd996c9b9cedb33318a8e3de5c10e2ebfc1e05b2b65c978bc249d8157ed66eb6c4814537253df9b37d2564d37e5587607e15639c5d8dc68bb6e2bca26a4a840f2ff6a8471e0b4319498b40e959d4c3b52652523bd1ea5e6ab159fccc2a855a2087958bec770cf55ee89bfcb3175bf7c8c90b8ca784b49a7043dceb02b5bc0f0cbf8db07d48ba684cb485773fa0447cfcf8a8f98cb8157b95069d853e538680d188e8fb0b69dabc4023d13e283b250d1433770ff127e78edbb8f9f50421fe5de1badfce439348dbd06e5a427cd0205136952b47898d9aa60f82ae7e199c6f3c818e926412d064761c63ed95cf6ebd5d8db425ba1dec4841d2fb4cf07526982f6440c6ab06485b70408cda7908c463f0f717ff6cdf88b5aa32b4f902433554a2f47336fe32a9b6d675e19d0b2dfbd708280f0cd8a39cb66e48c7db38b56d1629f4bb9f0477d136565d3466f674870eb0d2e3a969923798f2303406325d4cb67c5ab0792a081b90", 0x1000, 0x238, 0x0, 0x1, r2}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x4, 0x480, r3, &(0x7f0000001100)="cfea3ec59b83e25b93a38c0993fba87067e60e5979343e5fc70e5030cb986e8298cefd09df36c90cd033bc11bf73543a55403500ff", 0x35, 0x7, 0x0, 0x2}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000001180)="999556583c80047ff8b8361043dd4667894de5b2720f8bb0ca1632fd8c5a0ba95fa5af6dee998c6edfaa272b58b34972fa8e6c5044067febcb0ad817e58f6d2fa27979b52ce065b31c1677de75778f0e0bb552ef5f", 0x55, 0x2, 0x0, 0x1, r4}]) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f00000012c0), &(0x7f0000001300)=0xc) getuid() ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000001340)={0x0, @bt={0xc0e, 0x9, 0x0, 0x2, 0x7, 0x6, 0x6, 0x7, 0x7, 0x0, 0x100, 0x80000001, 0x3f, 0xc08, 0x11, 0x7}}) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000001400)={0x6, "774b120b1f85e8586c30b7465f8c64646f3043200b50d62828ba6b0ce57b9c5b", 0x3, 0xdd4, 0x8, 0xff0000, 0x2}) signalfd(0xffffffffffffffff, &(0x7f0000001480)={0x2}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000014c0)={r4}) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f0000001500)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001540)='/dev/full\x00', 0x402, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000015c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0xa8, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x73}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x46343dbf792b5408}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004010}, 0x40040) r8 = syz_open_dev$media(&(0x7f0000001740)='/dev/media#\x00', 0x6, 0x2000) ioctl$RTC_VL_READ(r8, 0x80047013, &(0x7f0000001780)) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000017c0)=r4) r9 = accept4$tipc(r3, 0x0, &(0x7f0000001800), 0x800) fgetxattr(r9, &(0x7f0000001840)=@known='system.posix_acl_access\x00', &(0x7f0000001880), 0x0) syz_open_dev$vivid(&(0x7f00000018c0)='/dev/video#\x00', 0x1, 0x2) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001900)='/proc/self/net/pfkey\x00', 0x104000, 0x0) getdents64(r10, &(0x7f0000001940)=""/247, 0xf7) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000001a40)={0xffffff81, 0x1000, 0x3, 0x4, 0x8}) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000001b40)={&(0x7f0000001a80), 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, r7, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4029044) r12 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$HIDIOCSREPORT(r12, 0x400c4808, &(0x7f0000001bc0)={0x2, 0x3, 0x2f3}) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000001c00)) 04:05:48 executing program 1: [ 357.883573][ T4006] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 357.891813][ T4006] usb 5-1: can't read configurations, error -22 [ 358.073006][ T4006] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 358.323027][ T4006] usb 5-1: Using ep0 maxpacket: 16 [ 358.385841][T12766] IPVS: ftp: loaded support on port[0] = 21 [ 358.493375][ T4006] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 358.501435][ T4006] usb 5-1: can't read configurations, error -22 [ 358.525872][ T4006] usb usb5-port1: attempt power cycle [ 358.580709][T12766] chnl_net:caif_netlink_parms(): no params data found [ 358.673516][T12766] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.680765][T12766] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.689595][T12766] device bridge_slave_0 entered promiscuous mode [ 358.699955][T12766] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.707786][T12766] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.716622][T12766] device bridge_slave_1 entered promiscuous mode [ 358.748396][T12766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.761894][T12766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.792734][T12766] team0: Port device team_slave_0 added [ 358.802681][T12766] team0: Port device team_slave_1 added [ 358.877545][T12766] device hsr_slave_0 entered promiscuous mode [ 358.923565][T12766] device hsr_slave_1 entered promiscuous mode [ 358.962948][T12766] debugfs: Directory 'hsr0' with parent '/' already present! [ 359.006633][T12766] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.013924][T12766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.021635][T12766] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.028963][T12766] bridge0: port 1(bridge_slave_0) entered forwarding state 04:05:50 executing program 2: 04:05:50 executing program 1: [ 359.079092][T12368] usb 3-1: USB disconnect, device number 6 04:05:50 executing program 1: 04:05:50 executing program 2: [ 359.243162][ T4006] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 359.311905][T12766] 8021q: adding VLAN 0 to HW filter on device bond0 04:05:50 executing program 1: 04:05:50 executing program 2: [ 359.405623][T12368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.437567][T12368] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.465690][T12368] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.505182][ T4006] usb 5-1: Using ep0 maxpacket: 16 04:05:50 executing program 1: [ 359.521579][T12368] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 04:05:50 executing program 2: [ 359.597720][T12766] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.663335][ T4006] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 359.664921][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.671436][ T4006] usb 5-1: can't read configurations, error -22 [ 359.680693][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.694970][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.702144][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state 04:05:50 executing program 2: [ 359.836659][T12766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.847455][T12766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.874940][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.884600][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.893564][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.900705][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.904931][ T4006] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 359.909865][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.927698][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.937696][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.947544][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.957055][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.967474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.976946][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.986130][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.995655][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 360.004897][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 360.057061][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 360.066136][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 360.086202][T12766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.153001][ T4006] usb 5-1: Using ep0 maxpacket: 16 04:05:51 executing program 4: syz_usb_connect(0x1, 0x236, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa4, 0x48, 0x44, 0x40, 0x1066, 0x500, 0x3155, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x224, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x85, 0x0, 0x5, 0x8b, 0x9e, 0x85, 0x1, [], [{{0x9, 0x5, 0xa, 0x18, 0x20f, 0x8, 0x1f, 0x3}}, {{0x9, 0x5, 0x80, 0x1, 0x265, 0x1, 0x81, 0x1, [@generic={0xf5, 0x23, "d9177fd144c654ad1d5d39f0090ba8eebfec3fe34c66ee91c396d778a8141e46f7e7b409382e56ea177def48e487c56d86c3765955bd9dc220eaf14d46c4e65e69e84bd4b9a2d8714f13594ec605a63dd642e39e0a81089fbeb49fb487b81ee783bc560e467be8d1106a9aab0c81687489483a6d8fa31dda91f7c54f377fbaa0a1666f0080bedcaa22aa48216f1ff53f67c0415ab51570d8b78a718819b60fa3a34fe063c4ce2b6d2d0eb86de105110afd75115b2d5cf16703029fd03fab3ba2cb493b895bd222e1670f610b569a847a99d5375cd69958f85473e8f7678223cfde0e150a1cb62f06ab46f6243330d997be669c"}, @generic={0x6c, 0x309150ac97742afe, "a88718572d61604d42bd372a9adce3f8955460279e3f465b65b3f3967e2224e2a342fa555099abd0ec5b007d458e18d7c62e241cb2906219cb749f2d9e4893fb6261899fad2ed16cc59f48db1653be64e9e6d11f1b3544da50ff2c5953eb8e364289308f0fd7a23e5ab2"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x179, 0x0, 0xfd, 0x8, [@generic={0x84, 0xb, "4551adfdeff469f9eebeb89aed3f8d40eb28cc3eda4f00c99d0d670a8ac0c0364d5e648cbba4a9fca03f56a19c5067a67e1f95a661617a684fb1af6f4cfe1dca923731f0ad6cb8ee42f4096ea60c20953ef858b96ff55b50c1d942a7f3193496ec45a5fb22a5bd074fc4c46b082dc97163744a4e7cc3861b21004981d0e45ae4a815"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x343, 0x4, 0x8, 0x9}}, {{0x9, 0x5, 0x4, 0x1, 0x3ea, 0x9, 0x8, 0x67}}]}}]}}]}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x0, 0x801) r0 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fffffff, 0x684200) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) [ 360.313376][ T4006] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 360.321093][ T4006] usb 5-1: can't read configurations, error -71 [ 360.347764][ T4006] usb usb5-port1: unable to enumerate USB device 04:05:51 executing program 2: 04:05:51 executing program 1: 04:05:51 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000e40)=ANY=[@ANYBLOB="120100004c196710cd0c420091590000000109022400010000000009a2cb0002aeb72d0009050500000000000009058f000000000000"], 0x0) r0 = semget(0x3, 0x3, 0x308) semop(r0, &(0x7f0000000000)=[{0x4, 0x9, 0x400}, {0xaf09df44536a9723, 0x6, 0x3400}, {0x3, 0xfffe}], 0x3) [ 360.714271][ T4006] usb 5-1: new low-speed USB device number 6 using dummy_hcd 04:05:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x5, 0x8809, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/104, 0x68) 04:05:52 executing program 2: r0 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @local}) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @random="dbaa11bf7475"}) [ 360.953127][ T4006] usb 5-1: Invalid ep0 maxpacket: 64 04:05:52 executing program 0: unshare(0x2000400) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x7ff, 0x0, 0x10001, 0x800}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x60a5, 0x0, 0x0, 0x66a}) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000100)={r6, 0x100}) socket$nl_generic(0x10, 0x3, 0x10) close(r1) getpeername$netlink(r1, 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r9, 0x2000) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000006c0)={0x1d, r10}, 0x10) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r12 = dup(r11) r13 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r13, 0x0, 0xc8, &(0x7f0000000080), 0x4) r14 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r14, 0x0, 0xc8, &(0x7f0000000080), 0x4) r15 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x810, r15, 0xfffffffffffffff9) inotify_add_watch(r12, &(0x7f0000000040)='./file0\x00', 0x0) [ 361.083384][T12368] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 361.103797][ T4006] usb 5-1: new low-speed USB device number 7 using dummy_hcd 04:05:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3f, 0x44401) write$capi20_data(r2, &(0x7f00000001c0)={{0x10, 0x8000, 0x3, 0x0, 0x3ff, 0x5}, 0xe4, "3fb8e6bd4e9041f1d506a7966fbabcd4114905cafce08343aee0052bd61cb046a57b3f5472683e47296678536c45127c02741599695214843689818580f897cb1bf0d3730ece77cf2deb4395fd74e30cb1763b44631213369302860c10f7210cbc6d7a2b190e0cc0be2edb5f55a4f732bd0d5fbc12f9774fcd3cf27525eaa45886873ff280f6dadd8b428016f89e6af3aac1d7d15c22713abf98074baeb48a055d42cf6691aeef0caf4754d64a45baa917937d1b20e2bc6f55e7b1ea650b01ee2141cb6db775caf468b8832bb05bf5e4778f9be9fb7de4602e01434031f94c69f8112c75"}, 0xf6) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001400000466bd7000ffdbdf2502830487", @ANYRES32=r1, @ANYBLOB="08000400ac14141c080001007f00000108000200ffffffff08000400ac1414bb"], 0x38}}, 0x0) [ 361.208454][T12816] x86/PAT: syz-executor.0:12816 map pfn RAM range req write-combining for [mem 0x3780e000-0x3780efff], got write-back [ 361.245264][T12816] x86/PAT: syz-executor.0:12816 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back [ 361.324475][T12368] usb 2-1: Using ep0 maxpacket: 16 [ 361.344781][ T4006] usb 5-1: Invalid ep0 maxpacket: 64 [ 361.356661][ T4006] usb usb5-port1: attempt power cycle 04:05:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(r0, 0x0, &(0x7f0000001540), 0x0) getgid() add_key(0x0, 0x0, &(0x7f0000001640)="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", 0x3bd, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000008a80)=[{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000840)}, {&(0x7f0000000340)}, {&(0x7f00000001c0)="fad76de70400000000000000d3b23afb5d70bd7b480b12803b9538baf825d57ddaf1fd82a452c5255921940494f7755e942b138b1af5d8ffff000087fc9d6f0a52dd47e18bca3ccfbcd42eb3ff51f44fb1b34de72038dd391a47dc43b1e77db180689001a54844bd778e554493812c0a8f7c3dd482881a5ee4701048c939653daeda5d1cd05ebc826195af9129896f6ba1415ba5ff3120e7e2f9ca8c64b868273732a4cbe9fdd45ced5fad45cae3ba40", 0xb0}, {&(0x7f0000000940)="2c13b7b8380dbcd55055cfff564a00e1be867182a1a4d71b8f976aecae7d2e09e78835a5b7f018fc93fca127b56013dd1c7a2cc2d9b989a92185c5073fe7e36267f7cce4ec254ee27fe37f52ba71a8f367d64265bf403d58382fd0f88d16b3deea119fd3c9bb8334639d4f42eb01823f5c0ea3ca381e8fb48f932fb73dd12d784f84aa18a0f32bed31ebdae0eac282978fd493b84711bdc97793a56c76c28c658d0e63c75df8fb3462c26c49c3bab48760", 0xb1}, {&(0x7f0000000a00)="2b97d56eb688d20be8d899f15b3645a030c56af572576a06e975fe840acbf7ab3084bd4a391c7c2b78b82cdaad5627965fcb1ce26539367a9ccc6fff62114134e3eec345a773", 0x46}, {&(0x7f0000000100)="4c507dcb8ee4c2a0b6000657041829a717131ca84a2af0b93b7f1a65cda025b9e866f264e619aa34dc756940ec35", 0x2e}, {&(0x7f00000005c0)="20cc291c2864ba8faf74c2761761c32f912aab2206242f69308c7c4c8961de1a19a47dd3", 0x24}], 0x7}, {0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b40)="78fb2a68a678e9c1cf", 0x9}, {0x0}], 0x2, 0x0, 0x0, 0x50}, {0x0, 0x0, &(0x7f0000000f00)=[{0x0}, {0x0}], 0x2, &(0x7f0000000f40)=[@iv={0xe0, 0x117, 0x2, 0xcb, "acdc09e5786fd870df5a6e4eaa50086a007de7ee8e545ffd49febc1dc461275a0b76a30404b032c9562d8ee95582d3bb56410c00538736ef6eb736377fd9460523f10f4ac476adca7f0c162654efa17783c2700d6240901d5dc71dc9572fcd71c29493fe90a0f6e337fec17bdcdc98fbda669c690b18c5d756700d4245f73341c5b0ee31dd540e64f2c0b31850f6d14b494c64ccaecaf1a50e18486e4317778d61b76b25efd6875fd72841e3e345d505b52ed5da260e71a44dab8adbdcc3c2bf5183bb7432791e50214357"}, @iv={0xb0, 0x117, 0x2, 0x95, "5edeff12e0934c54bd93a4d494b63aab0e7cf4f0160a264c24a72ac0a07c2fd4689a6e8caa952efea8bf9cc755454a5f708ce9fc1b88a6dc37550bd7fcc43cab9049a040b841a516c842c74bcf2520e843c94ea9aeae294d8b5c12ce35cf55718ec99e22ae06e391e2e810e749ac6a135512129bf7bc8a7d38a8aed1f390990570e69506168a36faa4e5f317bebce8a9faf52443d3"}, @op={0x18}, @assoc={0x18}, @assoc={0x18}], 0x1d8}], 0x3, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setxattr$security_evm(0x0, &(0x7f0000000700)='security.evm\x00', &(0x7f0000002640)=@v2={0x0, 0x2, 0x13, 0x28000000000, 0xfff, "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"}, 0x1009, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000280)=0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)=0x0) timer_gettime(r5, &(0x7f0000000040)) timer_getoverrun(r5) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f00000002c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x2, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000067000000000000009500000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r6, 0x4) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xffffff55, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00'}) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x462300}, 0xc, &(0x7f0000000640)={&(0x7f0000008d00)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB], 0x3}}, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) [ 361.444462][T12368] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 361.454590][T12368] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0042, bcdDevice=59.91 [ 361.463825][T12368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:05:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x1, 0x0, @pic={0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x7aed}}) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) r5 = dup3(r3, r4, 0xfc46e30c56bccb33) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000140)={r7, 0x6a, "b14b040447801e1da9ea597003a8fce930f5e8a3fd264618f39f361443e35889da2dcb0485c5ee8634b2282a5bd915569f133e78ecbe1c27c1664d0341aab519b0d87c823cb9a9a4afd1ffa126977a4f725a596f57d67dcd5ecee5728f7329bc78718579c312bf4cf3b9"}, &(0x7f00000001c0)=0x72) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 361.490318][T12823] device lo entered promiscuous mode [ 361.492115][T12368] usb 2-1: config 0 descriptor?? [ 361.552475][T12826] x86/PAT: syz-executor.2:12826 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 361.637576][T12827] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 361.688897][T12826] device lo left promiscuous mode [ 361.740851][T12368] usb 2-1: USB disconnect, device number 6 [ 361.858812][T12823] device lo entered promiscuous mode [ 361.998765][T12828] device lo left promiscuous mode [ 362.113419][ T4006] usb 5-1: new low-speed USB device number 8 using dummy_hcd 04:05:53 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000440)={0x0, 0x0, 0x0, 'queue0\x00'}) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'trusted.', 'wlan1bdevkeyring#-\x00'}, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crct10dif\x00'}}) r2 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) [ 362.203214][ T4006] usb 5-1: Invalid ep0 maxpacket: 64 [ 362.363693][ T4006] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 362.389949][T12827] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 362.455225][ T4006] usb 5-1: Invalid ep0 maxpacket: 64 [ 362.461720][ T4006] usb usb5-port1: unable to enumerate USB device 04:05:53 executing program 0: set_mempolicy(0x4003, &(0x7f0000000040)=0x10003, 0x101) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x90300, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000140)=""/16, 0x10}, &(0x7f0000000180), 0x14fc95590938d04c}, 0x20) r3 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) write$capi20(r3, &(0x7f0000000000)={0x10, 0x3, 0x3, 0x0, 0xe6, 0x8}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0002000023000400"/20], 0x14}}, 0x0) [ 362.523293][T12319] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 362.563494][T12837] x86/PAT: syz-executor.0:12837 map pfn RAM range req write-combining for [mem 0x1c7df000-0x1c7dffff], got write-back [ 362.579996][T12838] x86/PAT: syz-executor.0:12838 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 362.764662][T12319] usb 2-1: Using ep0 maxpacket: 16 [ 362.884855][T12319] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 362.894264][T12319] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0042, bcdDevice=59.91 [ 362.903569][T12319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.937894][T12319] usb 2-1: config 0 descriptor?? [ 363.186306][ T12] usb 2-1: USB disconnect, device number 7 04:05:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x8944) 04:05:54 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009061af10d1054142c2b9000000010902120001000000000904690100020e00004b6fa3e17779857b00f0fa2d4582b5a34490d075790abc20d5a690c3241346cfdcfb78fda1a669c3eb732d82ae3c56847aa02de03d7ae051d0beb756814f5b78baf269612ac74173"], 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req={0x7, 0x21, 0x6, 0x8}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r3, 0x41, 0xf8, 0x7, 0x5, 0x1f}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r4, 0xfff}, &(0x7f0000000140)=0x8) syz_usb_control_io(r0, 0x0, 0x0) 04:05:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x8000a0ffffffff, 0x3, 0x7}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 04:05:54 executing program 1: r0 = socket$kcm(0x11, 0x100000000003, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000000c0)={'ip_vti0\x00', 0x8}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r6, 0x2000) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000140)={[0x1000, 0xb60505cb8612a6af, 0x0, 0xf000], 0x10000, 0x10, 0x8}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@sco={0x1f, {0x608}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301003e00000000320000ac14140ce0000001", 0x14}], 0x1}, 0x0) 04:05:54 executing program 0: syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201ee8ed2b5056fe34e9b817d1200000001090229000100000000090400000002060000052406000005240000000f01000000000000000000"], 0x0) 04:05:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x8944) [ 363.823232][T12368] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 363.839164][T12853] x86/PAT: syz-executor.1:12853 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back [ 363.861171][T12853] x86/PAT: syz-executor.1:12853 map pfn RAM range req write-combining for [mem 0x3780e000-0x3780efff], got write-back 04:05:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, '7H'}}, 0x0, 0x0}, &(0x7f0000000940)={0x2c, &(0x7f0000000680), 0x0, &(0x7f0000000800)={0x0, 0x8, 0x1}, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r6, 0x2000) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xd221ba4d63e298f1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x6, @rand_addr="086f2982f6ea9ece9edf441d523f89cd", 0x2}}, 0x6ae3ef1f, 0x3, 0x101, 0x7d, 0x64}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={r8, 0xfffffffe}, &(0x7f0000000180)=0x8) openat$cgroup_procs(r7, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000480)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc43c8f5448aa69bb}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r9, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2c01c904}, 0x2000010) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc040050}, 0x20040810) 04:05:55 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000000)={0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x01\xac\x0f\x00\x06\xac\x0f\x00\f\xac\x0f\x00'}]}, 0x269}}, 0x0) [ 364.063283][T12368] usb 3-1: Using ep0 maxpacket: 16 [ 364.163088][ T12] usb 1-1: new high-speed USB device number 12 using dummy_hcd 04:05:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x111000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2800004, 0x10, r0, 0x10000000) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) socket$kcm(0xa, 0x5, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='\xe3-\xc9\x91S') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r2, @ANYBLOB="000100000000fedbdf250b00000034000200080006002231000008000400fca34a7a08000900ff07000008000b0000000000080009000000008008000e004e20000014000100080006006c63000008000600727200003c000100080001000a000000080004004e2400001c000700090000002400000014000300ffffffff00000000000000000000000008000b0073693dbd7000080005000900000008000400ff070000080004000000"], 0xb0}}, 0x8081) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000340)={0x2, 'veth0\x00', 0x1f7}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x47, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fsync(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r11, 0x2000) ioctl$VT_GETSTATE(r11, 0x5603, &(0x7f00000004c0)={0x5a, 0x9, 0x5}) ioctl$VIDIOC_SUBDEV_G_CROP(r8, 0xc038563b, &(0x7f0000000480)={0x0, 0x0, {0x6, 0x1, 0x5, 0x200}}) [ 364.203786][T12368] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 364.212193][T12368] usb 3-1: config 0 has no interface number 0 [ 364.218527][T12368] usb 3-1: config 0 interface 105 has no altsetting 0 [ 364.225492][T12368] usb 3-1: New USB device found, idVendor=05d1, idProduct=4241, bcdDevice=b9.c2 [ 364.234745][T12368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:05:55 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x1, 0x1, "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"}) r1 = socket(0x10, 0x800000000080002, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x2e6, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000019008306f5c840e12296105d010000000800030006000000000020000000000000000000000000000000000000f8294d70cdcfa55e1613eaa3fbe77829246692c02bef2b9174ab0a"], 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000000140), 0x49249249249266b, 0x0) [ 364.313163][T12269] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 364.319387][T12368] usb 3-1: config 0 descriptor?? [ 364.390462][ C0] sd 0:0:1:0: [sg0] tag#961 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 364.400136][ C0] sd 0:0:1:0: [sg0] tag#961 CDB: Test Unit Ready [ 364.406710][ C0] sd 0:0:1:0: [sg0] tag#961 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.416385][ C0] sd 0:0:1:0: [sg0] tag#961 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.426120][ C0] sd 0:0:1:0: [sg0] tag#961 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.435860][ C0] sd 0:0:1:0: [sg0] tag#961 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.445592][ C0] sd 0:0:1:0: [sg0] tag#961 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.455349][ C0] sd 0:0:1:0: [sg0] tag#961 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.465011][ C0] sd 0:0:1:0: [sg0] tag#961 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.474726][ C0] sd 0:0:1:0: [sg0] tag#961 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.484391][ C0] sd 0:0:1:0: [sg0] tag#961 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.494034][ C0] sd 0:0:1:0: [sg0] tag#961 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.503669][ C0] sd 0:0:1:0: [sg0] tag#961 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.513411][ C0] sd 0:0:1:0: [sg0] tag#961 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.523438][ C0] sd 0:0:1:0: [sg0] tag#961 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.533368][ C0] sd 0:0:1:0: [sg0] tag#961 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.543020][ C0] sd 0:0:1:0: [sg0] tag#961 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.557569][T12876] x86/PAT: syz-executor.1:12876 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back [ 364.577077][ T12] usb 1-1: device descriptor read/64, error 18 04:05:55 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000004780)=0x5) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) sendmsg$kcm(r0, &(0x7f0000004740)={&(0x7f0000000180)=@nfc_llcp={0x27, 0x1, 0x1, 0x1, 0x6, 0x0, "6fa4f0b50888bffdd6a0ea29766de49d236ee89b3f9f7d6e87baf68660b8e6f9d9892e9dd3c177df49034b4f7ad03c290b3d04d3e2c4449c72ecd09d775f71", 0x2d}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000200)="a994f8fd4f0fc27828326d50ee3a4d51854239f5478eab5e17db88b1d2a9221614f70f3d1c55f2d8c9470081ac955ee2ca6e33e06b839f105c9598eff9d37d2cb00596512b416efa93de20232c05a765b9b40f28a2d695736223c44e", 0x5c}, {&(0x7f0000000280)="773e55e25d0c8c333d88e003a7c5ff8c4c7019172babfe426e98c413744cbbe5083262b77b786ee29e91e61be06f787cf3ad337e126960ebf1e0a0a740f239db5f2ad1224f97a5605f0ca19e1343cee5b417d2a823541eb08a4bed855d0817dac676c613249447d7ecca0fc34c0bc118570158cf247443a91b5232f9d253d1d96ee78290ab8d03c781373df4b55cef1300c93ee27c37dd33de", 0x99}, {&(0x7f0000000340)="bba7c4b99a89ee2f15101a43d2f74a9436105dccd37ea226d9d932f135bcbf4309b519dbde3bedb755b2ebc95c45251d34a298a4fee9a0982ce374a59b759debc1339e7a9ba6b10e3993e6cff026f2304cd3881efd51c37aa4cae4a977708dc3a3a3f3f842857e71863bd14b1df7925c1339e18d38440980cf3f76fe55e484dc657de58164dcadb66d66b31d58447570aa499ed9ef57b283c00b325c38c644bd30348b55a87c5f3d0b8e8e9567d34fca51530b981622cce1ad5d87dc32c60286aaea7bcfb49b6e998ded88943503a7c3bcf6ce5f5b72c7a48bce2a3ebb380bcab02357cce368379f9ab6b8532c78298ddea3a9704c4fc728515dc43d74b2928718b163626aefe215c2c39ecf64491f52b1393503ab597b14e16480be338800d35333e6feb6fcf5100b76fda0dad1fc5fc0773cd4d2659ca69e4e8c75f8f919e69513eb9cf04e6371d456eeb2aa6e5762305da68b4b391e107fe3ef93012ecd0229374ae5c79249c1c9b38d5cd1a9dedeb1ddf1447d84be73b815e63062f880432ebc5cf8a12f54469c24314ec89ce40689fbdbc84bd2108d21f006c379eddd646a7ec7ca89f4ed03af017a2df016e668ea35dcf10f5d8b88e0e22402f88a979e113fed82d76c0429ee3990c56412c9a94ba977c83fceb39a458b30f72dfa171b1078dbd692be29431dfab1c8cfa154ec3929a04b7917e74a09faa2aa34cd20697f177f099a1d7116bff7bd244a1550a5cae697187a3c980569e173281b51cf7d5ac914fc7a716c9fa8293b6d88424b4ddf154c3eff0fcc1a844f2018f20ccacfb29251abbb54f54733a1150eac35eece438526ec652e31e0a8b289cdec198b1309f4164014396833219a26c18b4cc2031286041d646ab8229afba5c21991ece893cbb9cf806b3b1426a3de42768816b4e5c7615ae142c8812a11cacdc36588a5392776776efce1492107c0f7e96c1e2a38f29cc41c4d6f92ce93abf19d7dda890bdd2e1e778dce11c3b22d41fa8ae7abd8f2cd25c7e0ecd4696437e6a9e9ef2e27312bdba5ec842001f8a8883ba26ac265ae52cb2e4441e94f5056e98f145f8421c57e48c7d955f2d8988f0a7d849771bd8baf952b66ff1e7446d3f0ea4d9bfa9046b64bb3e8d625f2f275a92bc2158b7329296f6e4216f86ed368f6a6940dfc7037e130a637ae66d03da24c911c9aa8725c029dfb827c46a4f8de8ac03fbc0780a6e790dc4744f4a34681ed160b6b3c4c3ff8c19a904e4a97a2585a4a8b1f1637f884ba195a7bc499989c7f9315f0ad5fd09f8b341d11da62b219d63c8f6eacc7d16451a945b39cd719c3743c1bc7b802e0b3c1b08d0d612d109bc225b76e476282d86457650e38465bf07c9b7c5c8b66fc22aba235018626a9e28f3a7ace166834eb6e551b2789f99bb3ff838df0782902f976aeb57aa61107bc22751907d5402c79dcc01b48f0ebc97d4600757c49bafdb78da6536135d4fc9a87951422a9b1aa0d87023090ee58040c3803b3f7e7a4080ef51a67821bb022e9a2a443de25044f00bc2d988533f21f9c3798fa81462510825a478e81b86073e7d61ab1851ac0f2669cbb6d993b3e621c299f10e587ed17bf61cd744daed5176e9c3fe588c606613b7233062ff774d310e19c95d8fe2b833784cae6740013b9b18f8b5ee4a33fb07c5adf2a65457b78c0c50c2b5eb232eebeca80da255c4f61e7af8dc72fd1ac1921c7fb19c02ffb54d2260ee8ba80cd66a03cce1088a934eb1e090d8864f0561fcca317de49282a05ec5918512eb4dec98fccb11d9c529ac36977650b3329a09f7a68738fff9caed1ffa58e944440c8dcf195292fae168496bb1bc4dbff8827e81b2e1a746424e7013e95127cc0fa9b7ed0d567ee05fa5390ebb521f2e21e18cfe4b3e29f88831459ab25450f0544d4561a2e006f81d58348092b4cf77ea20ca3594a339c805a50f07d645ab12343a570889103bb8b0d82115306763b0b75cda463734aa4993fa04bc19a5f5471fcf030d0a9b44afe9ecadccab676a99248360db3debb784c443db50642ab26065700414e77dd5c71093e5a028104c932de59197e9a12c4cec9a3d04efdbbf9047c10a4dabb57496358d254ae1cb12dfff1795221ba964ad42242d16ab11ffe35c4c1f6aa00c029b8acdb43dc29e987fdf685421a381264ba746b5e37a5932dc3350a53612bf581f12dac4994255cfddba6c3a04048fb3868f47275135697206665854994be641cfb8bceca91780fe093282e86ed25f08f78fe9506906e43126a0b21124692695d45998bd07c213e4de446704d32da4948606d9f018e0aa1c941389fc331ff9d95d25557eb7712797d5bd5eeb3f78ac294a9e4128e4956ba6d23b07edc997edacdbf496289ee65de3d7a754bf0ecfe413a7df1be671462b0f7f0b859b867fb6c3d31acb7258c20f43140c64a66de09e47697af6c5a83a292ea5120f6187b4c0e5f73a3e1126d8ee344bf0bdd4c160ec28741d72ce3364ab2892c2b75b0d7eba00a4ae7dbf361f60f04a275743d508a2b256f34259c09e854473930e4440c9a1237c109d5520ec46dc2ff6f4f2b1b5c44b6b1ec817e6fa20d177da90d63dc0f5884e29cdf907e21dffb11bd8551ecab9dae442590ba23a9c93e9471f1be539e438de113c2fe7df679763b0aab9c7aba2269f9f36b8a760bb5838dac2262e35c0af85fe4045a1c53e5a0516820bbf24c7401b9b95795808a8f3a77f654be885e79c78efc75fd446b489c8c3c7f628f7c1d6251d4a30eaf3374e3824ecc661eed6ec3100139c792605a2f9afd5cb2039b97ed97819c358ae6d21875e536d2f8e2c470831ac0bf60f9de9d601ec45a8bc6f0a89f13eea2adcce25540b03baef5cb58c0260cb4f699acf444d26238288f9264ed4f889de2350c1c165ba2b7c3b52de69c2fad8e281d0eb28726934963df1f5fe10064da2450cabd723f10132ae672a6a80e8440309b20cf0d09f7fc2e1d73592da6246e49429d2015bfd2b33052acd4555b1f696de40c30c7341ab30cf66503fe014d71f9a411233cac465e0dc7703c1396a63cffafd308902a504c63abde9572ecd15917b1b3734c06d6b2b57a56686f8d8784e90d8f6a2262a67d42e479eef1c62402056b877db3a8ad4ec6f5f9da62fcdca41f2fed805929f39cff416836ce31af02c8d233299c673ac08db2a0306a42ee6c144804642ded63992d5cba776d5496a80a161b67024ddefa5ed86693b0f2029ddd088b0a5ccb8ca028ad3706d6b2e473c8584aa4e5fd2b1ba023fbd0959907ad29032a3e5cdda50895cc99a47e4b9b0711cbaff803a71dabc5afed7ed284e27747b2340e7d7d1c5c2a38a8fae87f3a67767a4da9fc387fa8d31abe7da4148218cf4052a2c28a340f04ba7dd2438980bb725538546af7195fc0a6099dc507d79f80be12d322acfb71796a0b26ed001825aba1bdeb863a37b329730462780fcb61d83990af84098b279e601704ad951e42a793d7cdff945364d1e02706cf04882380fbe5fdb9be5449c9811863d35668671b2ae5710e054c55805c4b6095b3350a1e1bb7d37b0488f5b3d926a2ea249a84ec9fd73edb244122218cd582066aca93ed755fb7f33ecd408adbf5c8e48495104c107d6f8dab97f2bf151bfb17d7ebac0529b3793ee259de1e3cbbe96817363c3810d642b34214770078910928980c5b680baa4c58226c77378ca0961ee67384241495894f2db9cb52f6906920f4343101236f927b5e71a837657eabcd2cb2644edb5c68fd6441f8c432a11901f018a8d88007c07bfd417c3ee006ea9e2ae1fbf04a7b841233bf2557ec11b435724048c0cc71caf57d3666d19ccd31089d7d15a37659a56f57bdbc794b346d5fccfe8b26b4c39f021a48605b37e426081d7681c8911f22a9ff1c611139bd2bfa7a926717ee33769b5e52b0015ff2bd4c670d4dbbd28f04d951b73d700a42962f71a883927c09faa082a283069a7bc7482a6dcfff74f21260a18c943684b558c5c129b5403a91d69980489734274be92cc6dab47e39534fe178a3e790bf6d262c57834b843c74043017dc42d4bbf0fe5ebe4116728373ac9a361dca4f9d1f50882084508db01ff154dccee1788afd671b0567fc8a4cc8548fa77a11cc33361445d4d9dc68781ab946a36dd7c45ed61f649df82a7487780b6798a9072c2c5fd86f80a129ae2459f9022f8fea5d00e7f9336fd9b7c30e766d03742509818f1971468ab54c55f6181c30a466c277f61e78f7e08871e05f092e961b79080664d4aa2ddfbcf73fda6542cea57096cb1d5faa2b129f3e09d4d9b9b0d3127b2405c26acd18c9e5874c81130e6579569e880ef02b4db45016694a098ef4e774642ea14accd04eedcbe471acd0b4eb55154ee789ae2d2844e025ac9fdce6d5c9f37f88e19d62d0f9cf360dce54696e56c1b761574ac6db70ea5c7a50297239fdceaa3df66928512e8bd13b66ea6877a7a5456604d51d30d0610a1fac9deccf8ef69385143e07b16d263dc50636e985994e871c9e2b7b1111ed3fbbcefc5a1b6e505668feb870f961361ed4d02dd40fe093ccc27dbee305c63e43aea927bcfae1e1ee6907ed68a0dbdb33a0f2cc741c5c6fff3ae69ef8ef0328b25e1681729c2bf418101f690f8961f2e81f842cd898b7e90d4f73d40fdbad42bb5f78758ecac882dcd1941d6c5b5f0b7b9fce36e73ae417f236cb084a2d6d5ce1f2f16bcc21f3a1d2f56ebd2ad9da05da084d23d65442ab4954a9674351167fea061babed16fc8ed27ae10340943f32139b48fe2e97d628e63dd548aab08ccb5e3ae7200ba7de60044d91c9f24a6decf4561bd3cbf6409849718521d6f851a27ee39b0876fdad2c5b9d2bc6fed2710bf3e1b82ce68403b6427db2da19bb30a7798da67ed9d01658bbad49f5afc7964e6143ebe6d89cef2a4055c7bdf9876be4a9ca6f074a9e5f7eb31d4a9d423492765d350285f69d726cde55850c55642a27a38730994685e88fa51480bb77d5587c436ba4b9ef4a618acb3774bd613afde96af3871cd5dfc4e448e5bff376398ad19bb561a8047828c969d50404f6241f6e81e8a2425bf0bb7330637c56bd96836374fd2295d18e99e9c04bed4e459cb9390e099f689ddf5ba780f38289243a91f1e52cd4c11c83e119ee7da6f4a27f9e140ccc4c1b11a9bbdcea510aee119037d94d72494d996145676ff479df7d4261d736fde410ba3f5b6f3a943d5570c4c335142bb450f3cc12fc13e44b58ee43b296b793bd9f02af78833e231a15ab128a66b448e110ed3092ceba12f810d01fb2f2c9b26d5e20d66b9a6737bef00f28123c2010b4d87ef244a5e4b8f267ce13959d950ad3ef55849406f1f2948cbec38b68eca9be1a1fdfd370ac443ffbcc89c297371168ffd55d9ab7f2caf0e5b6c2701bbe3b215b2cb67291a6c5a4a2f83c77cd8045dc1da2e659173271c36da5d2ff520f73b5165fb860bbae17017545c1be35c18b7e9532fd83b1f9dfb4fdd7a68ea2589335770154c868f7f3c89265d27c4c505ea1638be505beea839a124f028a19b4da033356f5c0ad12b559541b7eec18cb3edd156f8c03185cddb1a4b857483be08321ba64fdeba4c4e3fc81a78644ad3c30d6a166ef5ae576f5e78ced2e76c632ff91eb36d9d75ec0146bc4c538dde9a19c68edb8cc90961b4cdcea5a3e0ca648e4853854616fb40bed5994e860cb9120bc182ad52c1e9f42107ef13a3f1f897e4e37b973583ad783a4cdae47ee6a04f5932898eb36388f1ef539efc362d824db23f8409bc5", 0x1000}, {&(0x7f0000001340)="b987ea6d21a71ae52d436bfa", 0xc}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="f2c4d98e2f903f0c45082857517e0dd2e63cb7abed2c8d392e21e191f18e1aa9589a017160bff74911459c15cb81bb602b5709ba6da7ab74ada964166a7f9076cc7091c571d7b96e7aa818138a76", 0x4e}, {&(0x7f0000003400)="912eb6f7279f10a6b326424254a32e3129aa12ec1934b6ea09e120c5234f411f1f5ae3", 0x23}, {&(0x7f0000003440)="704f80f0791cce8ddcf4f805f6b8447435318aa236e4152edf252061e03ad043eb73e1596c8af50b915cba2fe104d7f6d54f567286de7e6e02f76a8796096e714e20078dfe984790456e45bf8a27a7e653cd48d1c9093d433331a9b91b2a2b871aafef7f09833f5954612b3332edbc2f7ed803672f10a6a656857e4e4b99df763ea75742d197ead145267b59b7364b33d74f2644c0d0606026a05fe1e4", 0x9d}, {&(0x7f0000003500)="abec8fff7abcfab6a7a458d9391b9aeb5a054b6470630e3070c3aa35e2e23a96358bd25365357c800022cfda6d7be79e923c9279723054b7c4169a9e8a49aea72b3fdb392d783ad4069adb6b8c14e7778ae5602bbd52b38c9eb576229305d66cdb2da1193b7942466d70354b3ab51e0c97a993f6ee8670147d19c1b1fbd64fad52cbf9cd600d4c4828e7bf15b8ed9b6fa1b5bab718b46a82a979ac5b2bb682e007df6f400358d4f2791bc91974fadb91b918de1ea65e289889bd24308db7688653219b52b38704ea83d521f95e24239d", 0xd0}], 0xa, &(0x7f00000036c0)=[{0x1010, 0x10f, 0x1, "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"}, {0x68, 0x0, 0x4, "f69a3f1c3499fcf99a6afa3694003a74be08f5b00ad78c11822b210179d7b98be8282315f8a3f4f1b433a558303ec2771e8ecdc9ecf8129965bcd282403c71ccf08d10fc887694d7c944f232fdd5df1cc7e5715c"}], 0x1078}, 0x8000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x10000, 0x4) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000047c0), &(0x7f0000004800)=0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000140)) sendfile(r0, r4, 0x0, 0x80000002) [ 364.704550][T12368] cdc_mbim 3-1:0.105: bind() failure [ 364.723782][T12869] x86/PAT: syz-executor.1:12869 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back 04:05:55 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r6, 0x2000) ioctl$PPPIOCGMRU(r6, 0x80047453, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$ppp(r7, &(0x7f0000000280)="de72e40fe4cd63a524b0514999d5dc7a82ddd1da3fe395270de5a925ad66cb5ccd48bb3acc798a319706ff7c9d4c2cc72c179b675d0697035a352ea3f6c880acb495eb9df61a0da4b652f07acf82124cf55090ea96f7fb9d95b743e2b586e8eeff55de5bb6f46becd41a8945e1", 0x6d) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r8, 0xeb, "ed6121", "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"}}, 0x110) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000300), 0x4, r8, 0x34, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0xa0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) [ 364.843586][T12269] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.932542][T12885] x86/PAT: syz-executor.1:12885 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back [ 364.959499][T12885] x86/PAT: syz-executor.1:12885 map pfn RAM range req write-combining for [mem 0x3780e000-0x3780efff], got write-back [ 365.051944][T12885] IPVS: ftp: loaded support on port[0] = 21 [ 365.106136][ T12] usb 1-1: device descriptor read/64, error 18 [ 365.143444][T12269] usb 6-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.40 [ 365.152640][T12269] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.160870][T12269] usb 6-1: Product: syz [ 365.165230][T12269] usb 6-1: Manufacturer: syz [ 365.169923][T12269] usb 6-1: SerialNumber: syz [ 365.386790][ T12] usb 1-1: new high-speed USB device number 13 using dummy_hcd 04:05:56 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) [ 365.574227][T12888] x86/PAT: syz-executor.1:12888 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back [ 365.589251][T12888] x86/PAT: syz-executor.1:12888 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 365.673549][ T12] usb 1-1: device descriptor read/64, error 18 [ 365.739441][T12861] x86/PAT: syz-executor.5:12861 map pfn RAM range req write-combining for [mem 0x1c7df000-0x1c7dffff], got write-back [ 365.824051][T12269] usbhid 6-1:1.0: can't add hid device: -22 [ 365.830349][T12269] usbhid: probe of 6-1:1.0 failed with error -22 [ 365.887872][T12269] usb 6-1: USB disconnect, device number 2 [ 366.094892][ T12] usb 1-1: device descriptor read/64, error 18 [ 366.183388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 366.189581][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 366.215745][ T12] usb usb1-port1: attempt power cycle [ 366.263442][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 366.269872][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 366.343156][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 366.349403][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 366.573170][T12368] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 366.606819][T12319] usb 3-1: USB disconnect, device number 7 04:05:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000200)=""/211) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x20000000}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x11, &(0x7f0000000040)={@remote}, 0x20) 04:05:57 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="cd390b081bf2aaaaaaaaaaaa99dd6002290f00384000000000000000000000000000001c0001040290780000000060d5cae20000290001000047000000006000000000000000ff000000000000000001f60128a9644c915913332c72831bc619a3929f106531aa779019007102aac0cc1d7800"/130], 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x106}}, 0x20) socket$vsock_dgram(0x28, 0x2, 0x0) 04:05:58 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffd4, 0xa0520) pwrite64(r1, &(0x7f0000000080)="c8db", 0x2, 0x0) clock_gettime(0x3, &(0x7f0000000040)) [ 366.923055][ T12] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 366.933379][T12368] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:05:58 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r2, 0x2000) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f00000001c0)={0x4, "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"}) add_key(&(0x7f0000000180)='big_key\x00', 0x0, &(0x7f0000000040)="f9", 0x1, 0xfffffffffffffffc) openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x10c00, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000300)={0xb3, 0x3, 0x4, 0x400000, {}, {0x5, 0x8, 0x8, 0x0, 0x7f, 0xe0, "c980068b"}, 0xfffff6a4, 0x1, @userptr=0x7ff, 0xfffffeb4}) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendfile(0xffffffffffffffff, r3, &(0x7f0000000140), 0x1) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r6, 0x2000) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, 0xffffffffffffffff, 0x2000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000003c0)=0x1, r8, 0x0, 0x2, 0x4}}, 0x20) r9 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) fchmodat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100) getsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) 04:05:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f00000002c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8920, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 367.040745][T12909] x86/PAT: syz-executor.4:12909 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back [ 367.113750][T12368] usb 6-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.40 [ 367.123155][T12368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.131609][T12368] usb 6-1: Product: syz [ 367.135993][T12368] usb 6-1: Manufacturer: syz [ 367.140682][T12368] usb 6-1: SerialNumber: syz [ 367.165955][T12909] x86/PAT: syz-executor.4:12909 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back 04:05:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0xffffffff}, 0x28, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)='X\x00\x00\x00', 0x4}], 0x1) socket$netlink(0x10, 0x3, 0xf) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x2) 04:05:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$CAPI_NCCI_OPENCOUNT(r3, 0x80044326, &(0x7f0000000040)=0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0090facab94ce07892b29647721f50200010000158e400"/34, @ANYRES32=0x0, @ANYBLOB="0000000000eadd246b2d170c7f3de00800"/37], 0x2c}}, 0x0) 04:05:58 executing program 0: r0 = epoll_create(0x7fff) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}], 0x2, 0x2) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x203, r1) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000080)=""/44) r3 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000068008109e00f80ecdb4cb92e0a48240b5a44fe0be8bd6efb080008000100000001000000060005001200", 0x2e}], 0x1}, 0x0) [ 367.446257][T12368] usbhid 6-1:1.0: can't add hid device: -22 [ 367.452550][T12368] usbhid: probe of 6-1:1.0 failed with error -22 04:05:58 executing program 1: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x440000, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000240)=0x4) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000200)={0x7, 0x1, 0x7f, 0x7fffffff}) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) syz_usb_connect(0x1, 0x7, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYBLOB="402e7cb625599c3b8975d7c0007caf4f87b85efa270656e76a26037f8790c716d3b6687eb697caa5d90c4e", @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRESOCT], @ANYRESHEX=r3, @ANYRES32=r3, @ANYRES16=r3], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001140)='/dev/sequencer2\x00', 0x20082, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x3ff, 0x12) 04:05:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff30}, 0x48) [ 367.493514][T12924] x86/PAT: syz-executor.4:12924 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 367.547379][T12368] usb 6-1: USB disconnect, device number 3 [ 367.573810][T12932] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.0'. [ 367.621058][T12924] x86/PAT: syz-executor.4:12924 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back 04:05:58 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$KDGETLED(r3, 0x4b31, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x4, 0x6558}, @IFLA_BOND_MODE={0x8, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 04:05:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffff7ffbbfffffff, 0x21, 0x0, @buffer={0x0, 0x7a, &(0x7f0000000280)=""/122}, &(0x7f0000000180)="000000000000125ef6c60790e8f6eb9e6ea301d8c3121cf93ab06737290845188a", 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000000c0)=""/16) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = accept4$packet(r4, 0x0, &(0x7f0000000100), 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x11, &(0x7f00000001c0)) ptrace(0x4208, r7) r8 = syz_open_procfs$namespace(r7, &(0x7f0000000140)='ns/mnt\x00') r9 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r9, 0x0, 0xc8, &(0x7f0000000080), 0x4) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000001c0)={0x101, 0x7, 0x3, 0x0, 0x0, [{r6, 0x0, 0xfffffffffffffffe}, {r8, 0x0, 0x8000}, {r9, 0x0, 0x9}]}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read(r0, &(0x7f0000000380)=""/42, 0xf0) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0xffff8000, 0x1ff, 0x2, 0x7ff, 0x7ae, 0x1ff, 0x5, {0x0, @in6={{0xa, 0x4e21, 0x0, @mcast2, 0x1ff}}, 0x7f, 0x7, 0xfffffffb, 0x8, 0x3ff}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000480)={r11, 0x8}, 0xc) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000040)={0x0, 0xfffffff8}) [ 367.872266][T12943] x86/PAT: syz-executor.4:12943 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back [ 367.918783][T12943] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 367.927775][T12943] (unnamed net_device) (uninitialized): up delay (25944) is not a multiple of miimon (100), value rounded to 25900 ms [ 367.972165][T12949] x86/PAT: syz-executor.4:12949 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back [ 367.988251][T12943] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 367.996833][T12943] (unnamed net_device) (uninitialized): up delay (25944) is not a multiple of miimon (100), value rounded to 25900 ms 04:05:59 executing program 4: unshare(0x400) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000001300)={0x0, 0x989680}, 0x0, 0x0) 04:05:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f00000000c0)=""/116) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x16, 0x0, 0x77fffb, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xffffffffffffffff, 0x400000}, 0x3c) r6 = dup2(r4, r0) r7 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r7, 0x0, 0xc8, &(0x7f0000000080), 0x4) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x80000, 0x0) r10 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r10, 0x0, 0xc8, &(0x7f0000000080), 0x4) r11 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r11, 0x0, 0xc8, &(0x7f0000000080), 0x4) r12 = syz_open_dev$sndpcmc(&(0x7f00000015c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x21101) r13 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r13, 0x0, 0xc8, &(0x7f0000000080), 0x4) r14 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/cachefiles\x00', 0x5000, 0x0) r15 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r15, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r17 = dup(r16) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r17, 0x2000) r18 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r18, 0x0, 0xc8, &(0x7f0000000080), 0x4) r19 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r19, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r21 = dup(r20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r21, 0x2000) r22 = syz_open_dev$sndpcmc(&(0x7f0000001940)='/dev/snd/pcmC#D#c\x00', 0x81, 0x1010c1) r23 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r23, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r25 = dup(r24) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r25, 0x2000) io_submit(r2, 0xa, &(0x7f00000019c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6, r4, &(0x7f0000000140)="0367bfbb1b3ccffd00f6d1799fef", 0xe, 0x8, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x8f8, r5, &(0x7f00000001c0)="0eeaa6779961dee858d59c9ba68f000cc51d3d1ec39c2e", 0x17, 0xe9ed, 0x0, 0x0, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x27f, r7, &(0x7f0000000240)="c52ddb2f26ee47b3ad9db1c1c15c162e35012435ec1784bcf9a3d5bf32c4802fc92a06f8f56740873732fd1027d1667bb0f31d98574ecd407ded0f24a10d9959549929cb43ab5b3c18f5b42919f37d0ccbe657336a653ad5e3838d5a5fd3f74e4e3682724f", 0x65, 0x5, 0x0, 0x2, r8}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0xae, 0xffffffffffffffff, &(0x7f00000003c0)="837f155af813fda115c3fcee5bad01218df03618b048bbceabc802bac21d6c91b6d060160b1f172e818f7cef349ba76b31a751d5ba1e0e06815b08a01ba909ca638569bd34e5745ad1f9a19cbde223eec20420afc76de73a75fb2497ff7254e6f4083a002f7626bee159fe726a876d3a74999246c08c7a8d19ad406a8fca5fb49fd51cbc2fbf4e66671fa983031a9775", 0xffffffffffffff00, 0x6, 0x0, 0x1, r9}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x3, 0xfff8, r10, &(0x7f0000000540)="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", 0x1000, 0x3, 0x0, 0x1, r6}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x7, 0x4, r11, &(0x7f0000001580)="d74e1f", 0x3, 0xb, 0x0, 0x1, r12}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0x2, r13, &(0x7f0000001640)="b4db62f78e0cf9fa0e6a951ee84de6b5148e710f21d5682f13d19e69e1cc2b4158c1da092a1ae4deea18438ba8d05a3cb7724fc02496bc02cc791ce2c6d45acd10fd71051510c29147a816cb5202b253cb5c37df01afeaa0ef6251c12e8aa1f70fac7ea8abc04b", 0xffffffffffffff2a, 0xffffffffffffffff, 0x0, 0x1, r14}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x9, r4, &(0x7f0000001740)="6a3003f38d541d02fa366fa6f09a8259baabce2ed379950020b24d9b53ce5b3205739c3c3bda345ae118aa473b2bdd72417b32dd6da747f00000000000004085389644d9bbc96b350d466b516e36692323d5f1680af90d982e330d287fc21adbc47c648aa12ffa4cb4176137d191cecbb736427208d8430e4d56c67e94963dc8c8cdd473be", 0x85, 0x7875, 0x0, 0x3, r25}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x8, r18, &(0x7f0000001840)="b0d2c2fb76beb4538c71404a0f3914e8703b7ec85e3ef2146f2b311583c6f22aa0e74f59e4a9c48ee3f80f24e4352500e007d99e4da9453650986668c5b8e7743f78fe83f8b3af8014e838b695e08a0239a25c9a7330c4dccec2ba99d70049f8873fcbca1b305b94584727406ccbd58a796c4f6b34d9e5a6565ca2c4fae4", 0x7e, 0x400, 0x0, 0x0, r21}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x3, 0x1ff, r1, &(0x7f0000001900)="98aabc2d59192d7c41da46214629c7b657c5e9123e5b348e9da866bd8bd2353f8da08a072a6cd3500bf35cbd6033214fd5ac637274b312e246117aa1f2", 0x3d, 0x2, 0x0, 0x2, r22}]) r26 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r26, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r28 = dup(r27) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r28, 0x2000) ioctl$TUNSETGROUP(r28, 0x400454ce, 0xee01) 04:05:59 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)={0x7fffffff}) r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0xc5f, 0x5, 0x6, 0xca800000, 0xfffffff9, 0x7, 0x770f}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) 04:05:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[], &(0x7f0000000840)=""/200, 0x0, 0xc8, 0x1}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0xa9c9e31490aff747) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x17}], &(0x7f0000000040)='syzkaller\x00', 0x200, 0xfffffffffffffed8, &(0x7f0000000080)=""/208, 0x0, 0xc, [], 0x0, 0x8, r0, 0x8, &(0x7f0000000240)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x6, 0x5, 0x9}, 0x10}, 0x70) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbcq\x9a\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98q\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00', 0x2761, 0x0) write$cgroup_pid(r1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = gettid() pipe(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x2) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x82c3}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x10}], 0x5, 0x4) io_setup(0xc32f, &(0x7f0000000440)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_open_procfs(r2, &(0x7f0000000480)='net/udp6\x00') 04:05:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5500000018007f5300fe01b2a4a280930a", 0x11}], 0x1}, 0x0) r1 = socket(0x5, 0x800000000080002, 0x10) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x92000, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000300)={r0}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r9, 0x2000) ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f0000000180)={0x0, 0x8, 0x4, &(0x7f0000000080)=0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000340)={0xfffffce0, 0x40000000000013, 0xfffffffffffffffb, 0xfffffffd, 0x0, {0x1}, [@generic="a525257ff805eee8818e232206e355057eafc776fa25b7e2bb885229040c6fa1af1e0ae72f019fdd61ffdc60e6d249865030d1f1a67955e0049a93f76624d68e627660c4017588c35f428b943464e4677aac9e729dff11a956d19eb250d45b5a999ff9d3db26afe997ab0e83c17c1e24f8cff405c5934fd1b93af7f3b414c86a0e0142e3210c381750d32f031bd8ce7298c6564e4ba33e8b5d2a586a7f87091cdb7ba31aa0b07fb1cb6dc61a75d509d636242a3a70ad01e6155d84eb1c0e9254be8c667332cf26739e5989f6e76ef37554b2d3cce899", @nested={0x0, 0x6d, [@typed={0x0, 0x91, @u32=0x80000001}, @generic="ec85e10348680fba9d45cfd27c7e41ea3aeeb09f85e9a9c21055f8d83cee5be7552c2492d37014d199d3c60f6069229879803ffb947a6018c9cd3e80e259bf58eb2d448732", @typed={0x0, 0x4e, @ipv6=@empty}, @generic="9e93f4cb3dde36ec276d753db56e89db8fa681f775047fcc4b28e3fc7b812747198b68d5fd783ad6afd6a37a4dff8caaa07f55d21138179ad4a24b7f", @generic="02aa44954a75809e15cf2c2bfb591972c8b023d29a41d47ad298f5307ecde6ee899530cacb50e6966e901306838ca7ca5c8378a2e03d", @generic="e9701bf3bc59158309d3a376ffefb3358a59a8a43bc9493dd67b064c3d7b16df2d768ecdc62b48e92521d0be1c1aa2a3623f49e0a258ec8255d99414f0bff22ae5148d1d3abeb8ca7195a892619cbb0f4374af86bdb906a913bddbe7cd0882c595cba4bc6613b39980231a621b97a0843bf0afe36a88111e4c60964e3e641109dc0adc324f566cf69848b19d0279408c0ec32aa4ae0c", @generic="3b9f20e96b3c5f7dfe129a6334678fc978270f1a970a622250a792c3f17c4dfefc47f028267d46465185c285352f8d4a7ee154af721ee9e45bf27c514257b0578a482fdd6ce6c2ec5d8fa25b1d1be75173831426d609deb7006fdc1d4084ed9b3f879c6a02366ac9eaaca67c6082f00c6c0f4eefc07ad5b50d68ebe8c11ea9d3db8ddd6df2a4c8fef567aae71eea5575eeccd97b4197efad9f0e54241577ec28b17ffa16869a2aac7e1ac484bdf99d0107a501da0b35c833bc4bb148752e66cc57ab05164cb8c9a298323cec30ecd5cf875b3471c4eff0b80a20579033fb4c7cfca0e64aec9bd194e2814abe44"]}, @generic="66073db9dea4dffd3a4fc8b73059b45fa8024ee2d24cbd0b50ae65935fac686997fdaf76e143794dd9e568c787c73a00de4ac1e3e1a66bcc44e8201303ed10c85f1411bd66a65f9f05aa70f0cabd6164d5503875ec6026f67ff604602b7ef5444c56860d14590e2f629b4410e5f9aa8ed2", @nested={0x0, 0x4b}, @generic="45879e7903148514a4d8e6416d65faa5090a2370613f2186065b4e77008db99c1ec4c9ee6825025d0b0873f42af0c1c359e79b7947890daef6142fe4de1edc3b129f0c1cf27dd0e1adf52b3db301a76c4e1a7c15a4e7e2ba32a11e384fb0", @generic="f9383a6fcdaaf5ca8242234b3c6d05366ec351d6d499b087a41d6646d8e682d81c216e4dbbbc01ed8ffd11ddc224a3aac6634f057af7fdab088af48a578a8670fbca4a073a63eb9ee18f31bbd66c1e9908c026447ecbb8f8a7d944f296"]}, 0x14}, 0x1, 0x68}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 368.507357][T12961] IPVS: ftp: loaded support on port[0] = 21 [ 368.528957][T12967] x86/PAT: syz-executor.2:12967 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back [ 368.570111][T12968] x86/PAT: syz-executor.5:12968 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back 04:05:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000034a3e00db"], 0x8) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1000, 0x10000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040), 0xa808) 04:05:59 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @rand_addr="1a2131e494b168d978469f9bbc25e200", 0x2f}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) [ 369.183259][T12970] x86/PAT: syz-executor.5:12970 map pfn RAM range req write-combining for [mem 0x1c7df000-0x1c7dffff], got write-back 04:06:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) pidfd_send_signal(r1, 0x27, &(0x7f0000000140)={0x15, 0x2, 0x2}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x109000, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x2, 0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/112], 0xb8}}, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x32, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) 04:06:00 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @rand_addr="1a2131e494b168d978469f9bbc25e200", 0x2f}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 04:06:00 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x4, r1}) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000013001707ed128064d20010000be6a5dd80000000010880000000000300f87f0000640000000000000000", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) [ 369.339317][T12962] IPVS: ftp: loaded support on port[0] = 21 04:06:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$CAPI_SET_FLAGS(0xffffffffffffffff, 0x80044324, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) write$cgroup_type(r4, &(0x7f0000000040)='threaded\x00', 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) shutdown(r1, 0x1) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) 04:06:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[], &(0x7f0000000840)=""/200, 0x0, 0xc8, 0x1}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0xa9c9e31490aff747) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x17}], &(0x7f0000000040)='syzkaller\x00', 0x200, 0xfffffffffffffed8, &(0x7f0000000080)=""/208, 0x0, 0xc, [], 0x0, 0x8, r0, 0x8, &(0x7f0000000240)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x6, 0x5, 0x9}, 0x10}, 0x70) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbcq\x9a\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98q\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00', 0x2761, 0x0) write$cgroup_pid(r1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = gettid() pipe(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x2) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x82c3}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x10}], 0x5, 0x4) io_setup(0xc32f, &(0x7f0000000440)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_open_procfs(r2, &(0x7f0000000480)='net/udp6\x00') 04:06:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000034a3e00db"], 0x8) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1000, 0x10000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040), 0xa808) 04:06:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[], &(0x7f0000000840)=""/200, 0x0, 0xc8, 0x1}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0xa9c9e31490aff747) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x17}], &(0x7f0000000040)='syzkaller\x00', 0x200, 0xfffffffffffffed8, &(0x7f0000000080)=""/208, 0x0, 0xc, [], 0x0, 0x8, r0, 0x8, &(0x7f0000000240)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x6, 0x5, 0x9}, 0x10}, 0x70) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbcq\x9a\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98q\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00', 0x2761, 0x0) write$cgroup_pid(r1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = gettid() pipe(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x2) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x82c3}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x10}], 0x5, 0x4) io_setup(0xc32f, &(0x7f0000000440)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_open_procfs(r2, &(0x7f0000000480)='net/udp6\x00') 04:06:00 executing program 0: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\x01', @ifru_flags=0x14}) socketpair(0x11, 0x800, 0x3, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0xc0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x150, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@TCA_STAB={0x28, 0x8, [{{0x1c, 0x1, {0x1, 0x7, 0x0, 0x98, 0x3, 0x3, 0x0, 0x1}}, {0x8, 0x2, [0x1]}}]}, @TCA_STAB={0xac, 0x8, [{{0x1c, 0x1, {0x6, 0x6, 0x9, 0x0, 0x0, 0x2, 0x4, 0x2}}, {0x8, 0x2, [0x5, 0x1000]}}, {{0x1c, 0x1, {0x2, 0x7f, 0x4, 0xfffffffa, 0x2, 0x7, 0x8, 0x2}}, {0x8, 0x2, [0x3f, 0x8001]}}, {{0x1c, 0x1, {0x0, 0x1, 0x2, 0x6b, 0x3, 0xfffffffe, 0x3ff, 0x5}}, {0x10, 0x2, [0x7f, 0x7, 0x8, 0xd3c, 0x8]}}, {{0x1c, 0x1, {0x7f, 0x8, 0xfff7, 0x81, 0x0, 0x8, 0x1, 0xa}}, {0x18, 0x2, [0xf61c, 0xb48, 0x0, 0xfff8, 0xea, 0x7f, 0x80, 0x81, 0x72, 0x4a2]}}]}, @qdisc_kind_options=@q_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x8, 0x1, 0x18}, @TCA_DSMARK_INDICES={0x8, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8, 0x2, 0x156}}]}, 0x150}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x429, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 369.689489][T13001] x86/PAT: syz-executor.5:13001 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 370.022675][T13011] x86/PAT: syz-executor.2:13011 map pfn RAM range req write-combining for [mem 0x3780e000-0x3780efff], got write-back [ 370.028899][T13010] x86/PAT: syz-executor.4:13010 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back 04:06:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0xffbd, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f13fe050400080008001e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 370.361520][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 04:06:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0xb144) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffef4, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xe0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="66b8ad008ed00f8d0808417b2c020f3548b800000100000000000f23c00f21f835010008000f23740fc778fc0f350fd8060f30", 0x33}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r4) r5 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r5) r6 = request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='wlan1\xfa\x00', r5) keyctl$negate(0xd, r4, 0x1000000000000, r6) r7 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r10, 0x2000) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r10, 0x4008ae48, &(0x7f0000000100)=0x2000) 04:06:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[], &(0x7f0000000840)=""/200, 0x0, 0xc8, 0x1}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0xa9c9e31490aff747) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x17}], &(0x7f0000000040)='syzkaller\x00', 0x200, 0xfffffffffffffed8, &(0x7f0000000080)=""/208, 0x0, 0xc, [], 0x0, 0x8, r0, 0x8, &(0x7f0000000240)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x6, 0x5, 0x9}, 0x10}, 0x70) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbcq\x9a\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98q\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00', 0x2761, 0x0) write$cgroup_pid(r1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = gettid() pipe(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x2) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x82c3}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x10}], 0x5, 0x4) io_setup(0xc32f, &(0x7f0000000440)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_open_procfs(r2, &(0x7f0000000480)='net/udp6\x00') 04:06:01 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x19, 0x8, 0x7f}}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8400, 0x0) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x1}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0x3}}, 0x20) 04:06:01 executing program 2: syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') r0 = memfd_create(&(0x7f0000000240)='mime_type\x00', 0x0) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000400000000400000000000000000000035570007efa973c914f53b3800020000000000000003000000"], 0x44) write$P9_RREAD(r0, &(0x7f00000001c0)=ANY=[], 0x148) execveat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1000) [ 370.712527][T13034] x86/PAT: syz-executor.0:13034 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 370.728292][T13033] x86/PAT: syz-executor.5:13033 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back [ 370.759070][T13036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 370.807849][T13036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 370.846737][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 04:06:02 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=0x0) ptrace$getregs(0xc, r3, 0x20e4, &(0x7f0000000080)=""/188) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000640)="1c00000019002551075c016bff0ffc028020008befb1fb803ef3e938", 0x1c) 04:06:02 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r2, 0xeb, "ed6121", "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"}}, 0x110) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280)='/dev/udmabuf\x00', 0x2) unshare(0x40000000) 04:06:02 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0)=0x40, &(0x7f0000000140)) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fe6276aebc05e5d3f2f850e2b98b5a9f06d23582e9a27d2dfe669ec9ad49c49851fd51c2c69cc479d25569e135789cd9f3caf2fceeef0170a144d51dc57b69cceb8c7d986f130079e454fe5f0f60c328702a26d0"], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) r5 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r6 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, r6) keyctl$unlink(0x9, r5, r7) ftruncate(r4, 0x100000000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x5b, 0x7f, 0x20, 0x9, 0x6, 0x4, 0x6f, 0x4, 0x2, 0x7, 0x7, 0x3, 0x9, 0xa7, 0x1f, 0xff}}) sendfile(r0, r4, 0x0, 0x88000fc000000) 04:06:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/\x84ea>V\xbam\x00', 0x0, 0x0) move_pages(0x0, 0x5, &(0x7f0000000000)=[&(0x7f0000001000/0x4000)=nil, &(0x7f000000d000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfd77e4ef05f7e1, 0x0, 0x0, 0x35a) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r5, 0x0, 0xc8, &(0x7f0000000080), 0x4) fstat(r5, &(0x7f0000000000)) [ 371.371022][T13054] IPVS: ftp: loaded support on port[0] = 21 04:06:02 executing program 5: r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x6, 0x80000) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="eb52354f9017b03c8d5d0b1b8656845638b64c6bd52c2aec8dd4d09e7a762de4fc450280a396d37f4c2edc5e97577a4eecffe36fdd57cba584d524e519b42788cb5ca16e87d19c03a4a042d8bf1259e9da4458050a6ae80011de83f8d15991b28f58e9eb3a51f980a0b063e16dbf7192e42cf9fc96bd76fd5ca12c94f451ba0a28909801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:06:02 executing program 4: mknod(&(0x7f0000000140)='./file0\x00', 0x53, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) 04:06:02 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x1d, r4}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x0, 0xc00, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "22f8a6fc75823c17b0a3af400d07275040bf045fd699200e3105ddd2bb2f547936806a5c46c79ebd57ca99b8780f07a64b04f236289108dfbf1ccdd12225b0c5"}}, 0x80}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_getroute={0xcc, 0x1a, 0x108, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x14, 0x56, 0x2, 0x3, 0x0, 0x8, 0x2a00}, [@RTA_METRICS={0xc, 0x8, "ad0468554aab9003"}, @RTA_EXPIRES={0x8, 0x17, 0x7}, @RTA_METRICS={0x9c, 0x8, "0f00fba0667023fa585ff1021b2aa32d6b9240e8006aeab611cfd7dddc41c35ad18d0acc991f2c8c10d218aaa58f60317603de7f08d632541972570862748906b553c21b159b7441b7519ff2bd2032cf34eb5831de0e527c8b64ab1af60d61ffd597f7aece98d1b9e6a086f063fdacf19ec81a06fb409557bf028e2af258d8498f0e2345753e5cc3656559940f990fe71919178a0385"}]}, 0xcc}}, 0x0) 04:06:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x77}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000100)=""/161, &(0x7f00000001c0)=0xa1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x5482, 0x40, 0x2, 0x800}, {0x4, 0xff, 0xb7, 0x1ff}, {0xa1, 0x2}, {0x1, 0x8, 0x8, 0x8}]}) 04:06:03 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000280)={0x0, 0x2}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) [ 372.173125][T12319] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 372.287953][T13086] x86/PAT: syz-executor.4:13086 map pfn RAM range req write-combining for [mem 0x1c7df000-0x1c7dffff], got write-back 04:06:03 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r2, 0xeb, "ed6121", "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"}}, 0x110) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280)='/dev/udmabuf\x00', 0x2) unshare(0x40000000) 04:06:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX], 0x3}}, 0x0) [ 372.384760][T13089] x86/PAT: syz-executor.4:13089 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 372.413159][T12319] usb 6-1: Using ep0 maxpacket: 16 04:06:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x8000010, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x21e}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x40) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 372.533560][T12319] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 372.542157][T12319] usb 6-1: config 0 has no interface number 0 [ 372.548685][T12319] usb 6-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 372.559507][T12319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:06:03 executing program 4: pidfd_send_signal(0xffffffffffffffff, 0x23, &(0x7f0000000080)={0x6, 0xffffffc0, 0x1ff}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_STATS_ENABLED={0x8, 0x29, 0x20}]}}}]}, 0x3c}}, 0x0) [ 372.670597][T12319] usb 6-1: config 0 descriptor?? [ 372.719324][T13100] x86/PAT: syz-executor.0:13100 map pfn RAM range req write-combining for [mem 0x3780e000-0x3780efff], got write-back [ 372.829408][T13092] IPVS: ftp: loaded support on port[0] = 21 [ 372.876273][T13104] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 373.308392][T13106] netlink: 'syz-executor.4': attribute type 41 has an invalid length. 04:06:04 executing program 2: ioctl(0xffffffffffffffff, 0x1000008911, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setrlimit(0x9, &(0x7f0000000000)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/126) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x84800) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x78, 0x4, 0x9}) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6) 04:06:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d530bcfe47bf070") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/ddv/vga_a\xe7biter\x00', 0x180, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e24, 0x20, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, 0x1c) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00faffff0a070000000000", @ANYRES32=0x6, @ANYBLOB="1c0012000c0001006772917de2d200000c00020008000100", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4004008}, 0x28804) 04:06:04 executing program 4: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) syz_usb_connect(0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES64=r1, @ANYRES16], 0x0) [ 373.707474][T13115] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 374.383275][T12319] smscufx: Failed to write register index 0x00007010 with value 0x00000000 [ 374.392177][T12319] smscufx: error writing 0x7010 [ 374.392202][T12319] smscufx: error -71 configuring system clock [ 374.398472][T12319] smscufx: probe of 6-1:0.122 failed with error -71 [ 374.427871][T12319] usb 6-1: USB disconnect, device number 4 [ 375.134739][ T4006] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 375.373187][ T4006] usb 6-1: Using ep0 maxpacket: 16 [ 375.513192][ T4006] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 375.521688][ T4006] usb 6-1: config 0 has no interface number 0 [ 375.528183][ T4006] usb 6-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 375.537593][ T4006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.548542][ T4006] usb 6-1: config 0 descriptor?? 04:06:06 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5500000018007f0d12fe01b2a4a280930a06000000a84306910000000b000f003502000006f002001900094006000001d40000dc1338d54400009b84136ef75afb83de44110016000d0003000000060cec4faba7d4", 0x55}], 0x1}, 0x0) delete_module(&(0x7f0000000080)='systemcgroupnodev-vmnet0#\x88wlan0\x00', 0x200) 04:06:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x1) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)=r5) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000d5a5ccd3000a00", @ANYRES32=0x6, @ANYBLOB="180012000c00010069706970000000000800020004001300"], 0x40}, 0x1, 0x0, 0x0, 0x4004008}, 0x28804) 04:06:06 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fed000/0x11000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f00000001c0)="7cffed08e25d6f9f026a8da2f001e771a285a7f329e18d4a84b8c0af6320cea8917fc2fe31ad2b4128d4a6fbf8f605d9df5ce0d80f35d4f97cd26923d545dd1edff6658cd86741c58bdb38ea1c6777e2ac8b0905b5e2ac61e0529ff54d9cd3a0b17a3279c59d6fecf4260457967b9479c7ac45d5a88533e9227431137f2017f3cc87af5fb79471fa7152158209d262ebf5fcd8ee6f9f13306c8bd34442b9fb524fd63731f56f", 0xa6, r0}, 0x68) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'syzkaller0\x00'}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000190007041dfffd946f61050002000300fe02000000020800050012000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 04:06:06 executing program 1: syz_usb_connect(0x6, 0x0, &(0x7f00000001c0)=ANY=[], 0x0) 04:06:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) getpgid(0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x7, 0xa, 0x4, 0x0, {}, {0x3, 0x2, 0x10, 0xce, 0xff, 0x20, "456fe6ea"}, 0x4, 0x0, @fd=0xffffffffffffffff, 0x4}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) getresgid(0x0, &(0x7f00000008c0), 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) lstat(0x0, &(0x7f0000000c00)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80), 0x0) getpgrp(0x0) getuid() getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}, {&(0x7f0000001a80)=@abs, 0x6e, 0x0}], 0x2, 0x20000000) getgroups(0x0, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000280)=0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='threaded\x00', 0x9) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 04:06:06 executing program 3: setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x210000, 0x4) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x5, @ipv4={[], [], @local}, 0xfffffffc}, 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/\x04on\x00', 0x200083, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000140)={0x0, 0x0}) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r11, 0x2000) r12 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r12, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r14 = dup(r13) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r14, 0x2000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f0000000180)={0x0, 0x80000, r14}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000000)={r8, 0x0, 0x80000000000000}) r15 = dup2(r0, 0xffffffffffffffff) r16 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r16, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r18 = dup(r17) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r18, 0x2000) ioctl$KVM_GET_LAPIC(r18, 0x8400ae8e, &(0x7f0000000340)={"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"}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r15}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) r19 = socket$inet6(0xa, 0x1, 0x8010000000000084) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r19, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r19, 0x5) r20 = socket$inet6_sctp(0xa, 0x5, 0x84) r21 = accept4(r19, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r20, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r21, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) [ 375.914951][ T4006] smscufx: Failed to write register index 0x00003008 with value 0x00000001 [ 375.923985][ T4006] smscufx: ufx_lite_reset error writing 0x3008 [ 375.924009][ T4006] smscufx: error -71 resetting device [ 375.931477][ T4006] smscufx: probe of 6-1:0.122 failed with error -71 [ 375.954467][T13129] x86/PAT: syz-executor.2:13129 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back [ 375.978531][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 376.048494][ T4006] usb 6-1: USB disconnect, device number 5 [ 376.070788][T13136] x86/PAT: syz-executor.3:13136 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back 04:06:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0xe, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2e8d07de"}, 0x0, 0x0, @fd=r3, 0x4}) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r4) ptrace(0x4208, r4) syz_open_procfs(r4, &(0x7f00000000c0)='net/igmp6\x00') [ 376.102422][T13136] x86/PAT: syz-executor.3:13136 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back [ 376.132130][T13136] x86/PAT: syz-executor.3:13136 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 376.224388][T13145] x86/PAT: syz-executor.2:13145 map pfn RAM range req write-combining for [mem 0x1c7df000-0x1c7dffff], got write-back 04:06:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x800001000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x0, 0x0, 0x0, 0x8100000055}, 0x98) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x727d6d44b97bcaf8, 0x30, r4, 0x0) [ 376.466288][T13140] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 376.500485][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:06:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x23, 0x1, 0x0, 0x0, {0x20000000006, 0xe00000000000000}, [@typed={0x8, 0xa, @ipv4=@multicast2=0x1000000}]}, 0x1c}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000140)=""/65, &(0x7f0000000000)=0x41) [ 376.522925][T13140] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 376.579992][T13154] x86/PAT: syz-executor.2:13154 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back 04:06:07 executing program 3: setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x210000, 0x4) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x5, @ipv4={[], [], @local}, 0xfffffffc}, 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/\x04on\x00', 0x200083, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000140)={0x0, 0x0}) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r11, 0x2000) r12 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r12, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r14 = dup(r13) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r14, 0x2000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f0000000180)={0x0, 0x80000, r14}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000000)={r8, 0x0, 0x80000000000000}) r15 = dup2(r0, 0xffffffffffffffff) r16 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r16, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r18 = dup(r17) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r18, 0x2000) ioctl$KVM_GET_LAPIC(r18, 0x8400ae8e, &(0x7f0000000340)={"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"}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r15}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) r19 = socket$inet6(0xa, 0x1, 0x8010000000000084) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r19, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r19, 0x5) r20 = socket$inet6_sctp(0xa, 0x5, 0x84) r21 = accept4(r19, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r20, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r21, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) [ 376.681024][T13157] IPVS: length: 65 != 24 [ 376.730651][T13160] IPVS: length: 65 != 24 [ 376.800499][T13163] x86/PAT: syz-executor.3:13163 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back 04:06:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="afaa0f5f35c8d1ba028b77909a9e6a5aef157b13a1a5fd59c6be3b8c7236d0dd1cb796a052c01bac61bae0f555d007f892a08024f6a4b80644005fd748ab009f55a11b0bcd03b8e9f0a021407986a1a1be0c709b791472d7cc0743d09fb888cf4d371f5901500ef5baee5f08adb9498372feed5a5aef809b053c6d721eca0e8c5efde70c0f081e8690241ccea0d2a71cd10514c5a433463dc2fd4d533f1e61c67788e281cdce2a74763c2f8392bcd2e824fc4736aa"], 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000400)=""/178, &(0x7f00000000c0)=0xb2) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000004c0)={{0x1, 0x3}, 0x0, 0x400, 0x3, {0xdc, 0x2}, 0x21, 0x7}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@remote, @mcast1, @remote, 0xfffffff8, 0x1000, 0x9a07, 0x800, 0x3, 0x4000040}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400000}}}) 04:06:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) getpgid(0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x7, 0xa, 0x4, 0x0, {}, {0x3, 0x2, 0x10, 0xce, 0xff, 0x20, "456fe6ea"}, 0x4, 0x0, @fd=0xffffffffffffffff, 0x4}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) getresgid(0x0, &(0x7f00000008c0), 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) lstat(0x0, &(0x7f0000000c00)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80), 0x0) getpgrp(0x0) getuid() getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}, {&(0x7f0000001a80)=@abs, 0x6e, 0x0}], 0x2, 0x20000000) getgroups(0x0, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000280)=0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='threaded\x00', 0x9) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendfile(r1, r3, 0x0, 0x80001d00c0d0) [ 376.847558][T13163] x86/PAT: syz-executor.3:13163 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back 04:06:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) fadvise64(r1, 0x0, 0x1ff, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r3, 0x205, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc0080800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x21}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x72010000, 0x700000000000700}, @random="d6de8e219d55", [], {@ipv6={0x86dd, {0x0, 0x6, "08de06", 0x38, 0x3a, 0x0, @ipv4={[], [], @empty}, @mcast2, {[], @icmpv6=@pkt_toobig={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x3a, 0x0, @loopback, @loopback, [], "fca967e17f791010"}}}}}}}, 0x0) [ 376.932743][T13163] x86/PAT: syz-executor.3:13163 map pfn RAM range req write-combining for [mem 0x1c7df000-0x1c7dffff], got write-back [ 377.002324][T13173] use of bytesused == 0 is deprecated and will be removed in the future, [ 377.011316][T13173] use the actual size instead. 04:06:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b00001609000000000000000000000000000000e0000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff01000000050000000b000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000e800000000016275d959da58cf980000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaa9ffe98c8700000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) 04:06:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000480)='x', 0x1, 0xfffffffffffffffe) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r3, r4, r3}, &(0x7f0000000600)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'md4-generic\x00'}}) sendto$inet6(r0, &(0x7f0000000100)="0503000000083e0000000200c52cf7c25975e605b02f08067f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x3fb2, 0x0, 0x0, 0x0) 04:06:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x7, 0x210000) ioctl(r0, 0x1000008911, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x8, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r5, 0x4) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000340)={0x5}, 0x8) r8 = socket$inet(0x2, 0x3, 0x80000000002) socket$xdp(0x2c, 0x3, 0x0) pread64(r3, &(0x7f0000000280)=""/182, 0xb6, 0x0) setsockopt$inet_int(r8, 0x0, 0xc8, &(0x7f0000000080), 0x4) r9 = dup3(r3, r2, 0x1c0000) r10 = openat(r9, &(0x7f0000000400)='./file0\x00', 0x440200, 0x40) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x3ff, 0x8003ff}) r11 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) getsockopt$inet6_buf(r11, 0x29, 0xd3, &(0x7f0000000200)=""/86, &(0x7f0000000100)=0x56) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, &(0x7f00000003c0)={{0x1, 0x0, @reserved="3788e40a5ee68b9147af1561adab28504f76648c68a4a356230a0869ba499b23"}}) ioctl$UFFDIO_UNREGISTER(r10, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 04:06:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'team0\x00\n\xfa\xff\xff\xff\xff\xae\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'team0\x00\xfd\xff\xfd\xff\xc0\x00\a\x00\"\xff', 0xb04512a9f336ccb}) 04:06:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) getpgid(0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x7, 0xa, 0x4, 0x0, {}, {0x3, 0x2, 0x10, 0xce, 0xff, 0x20, "456fe6ea"}, 0x4, 0x0, @fd=0xffffffffffffffff, 0x4}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) getresgid(0x0, &(0x7f00000008c0), 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) lstat(0x0, &(0x7f0000000c00)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80), 0x0) getpgrp(0x0) getuid() getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}, {&(0x7f0000001a80)=@abs, 0x6e, 0x0}], 0x2, 0x20000000) getgroups(0x0, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000280)=0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='threaded\x00', 0x9) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendfile(r1, r3, 0x0, 0x80001d00c0d0) [ 377.320230][T13187] ion_mmap: failure mapping buffer to userspace [ 377.340866][T13159] x86/PAT: syz-executor.2:13159 map pfn RAM range req write-combining for [mem 0x3780e000-0x3780efff], got write-back 04:06:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x5, 0x0, 0xff, 0x6, 0x7f, 0x9}) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000340)={0x2, 0x1e0310312dacf00b, &(0x7f0000000280)="44d98ae65ce4b37fa9", &(0x7f00000002c0)="682952a2f651d6d67b070d8be97e9228c5ea012ca865f2cfe219b4c0cee83dd632f3fd4bcc027611254347f97a82e21d64ae7648a68684375268be3c84faa4d6dde8f500cfc0fbe2097173bcb195946e918576cfbfcc7e988a2ada8d37214c798fde20842d67c858beaf1b120e", 0x9, 0x6d}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f0000000140)={0x9, 0xfc000000, 0x152, 0x80000001}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000e5c0cc92fb64bd430000000000ef000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c000200180002000300"/48], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="24ff00"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000"], 0x24}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f00000003c0)={{0x1, 0x0, @reserved="2d119a553f675e82feab9fd48134aee8caa5fd39d37298ed2f3ebcf29b572e5a"}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @remote}}, [0x9, 0x0, 0x40, 0x7, 0x7, 0x3, 0x20, 0x0, 0x6, 0x7fffffff, 0x7, 0x1bb5, 0x0, 0x674, 0x6]}, &(0x7f0000000500)=0x100) r10 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r10, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f0000000540)={0x0, 0x1000, "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"}, &(0x7f0000001580)=0x1008) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000015c0)={r9, 0xfffffffa, 0x0, 0x800, 0x8001, 0xfb, 0x4, 0x0, {r11, @in6={{0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, [], 0x12}, 0x2}}, 0xffffffff, 0x101, 0xffffffff, 0x2, 0x4}}, &(0x7f0000001680)=0xb0) r12 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r12, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) 04:06:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='\x00\x00\x9b\n\x00\x00\x00\x00\x00\x00\x89\xb2', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x9}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0xf99ea34f70f81928) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) ioctl$VT_ACTIVATE(r4, 0x5606, 0x57) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x26}, 0xfff}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="016f18cc00002b9a141ac512ccd800000c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={r6, 0xf2, "737e3a25a1fbad8565d82d669c9e05decd509606e7250178ea17871db2febffa1eb34c359995adccdc64ddbf15ac75784967e2ebe9388334719a055a9dbc2b849690970317550d38a14f87582d65af66516ce86558a51080b2416b987b4f8917d15a026cdd1b8671b922dac234b7cbcfc6db8b05b4ae17df16e97c837455176f4b3e3bacb3b44a7a830844de87ced7e6f800f25043e8d4096e3319d40fe9654a4d137a253f509f71ae3e47af71c4be6efa7a177fdf0b22b4c0370e5041524ed9ed5c3f611bb5653940fa0605a1afba01e3df01825188111ec46081b3ca7d0b4afce742e8faced95951a7fb57e06fe496f975"}, &(0x7f00000001c0)=0xfa) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r8 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r8, 0x0, 0xc8, &(0x7f0000000080), 0x4) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000040)={r10}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000200)={r10, 0x8d, "87a3a9cfd6d9341febf9a6525d6e9f28d50da04d0ef3aabb3e56d399acece02391e64e762cfa7504fbeb823966ef73dba09645208bd5d57f15f10f0ecb2308fc5c5ac034e3767566ede38a221d42900a8ecf6917f0a313004bdc04415d826dcfff1ecd6f831f035095ee0d909f6c4d0841f261d9297cc0f4c1831827d3ab0360a19948694de525c24cd7e4ab3e"}, &(0x7f00000002c0)=0x95) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000300)={r7, 0x6, 0x6, 0x8000, 0x7ff, 0x1, 0x60, 0x1, {r11, @in6={{0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xf7cd}}, 0x800, 0x1, 0x9, 0x4, 0x6}}, &(0x7f00000003c0)=0xb0) r12 = syz_open_dev$swradio(&(0x7f0000000480)='/dev/swradio#\x00', 0x0, 0x2) connect$vsock_stream(r12, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) [ 377.599213][T13204] x86/PAT: syz-executor.5:13204 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back [ 377.641725][T13205] x86/PAT: syz-executor.2:13205 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 377.687820][T13194] 8021q: adding VLAN 0 to HW filter on device team0 04:06:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890f, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r2, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x1322, 0x6, '9P2000'}, 0x13) 04:06:08 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r2, 0x2000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r2, &(0x7f00000000c0)=[{{r3, r4/1000+30000}, 0x1f, 0xda0, 0x1f}], 0x18) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 377.945569][T13217] debugfs: File 'dropped' in directory 'loop0' already present! [ 377.953501][T13217] debugfs: File 'msg' in directory 'loop0' already present! [ 377.973469][T13217] debugfs: File 'trace0' in directory 'loop0' already present! 04:06:09 executing program 0: setgroups(0x0, &(0x7f0000000480)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpgid(r0) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0xfffffffffffffd79) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffc}, 0x0, 0x4, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x1c48963f684a34b5) unshare(0x60020000) [ 378.001221][T13219] x86/PAT: syz-executor.2:13219 map pfn RAM range req write-combining for [mem 0x3780e000-0x3780efff], got write-back 04:06:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000998dc93eb410000000061101800000000002d0500000000d3609500"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 378.087784][T13187] ion_mmap: failure mapping buffer to userspace [ 378.136885][T13198] debugfs: File 'dropped' in directory 'loop0' already present! [ 378.145204][T13198] debugfs: File 'msg' in directory 'loop0' already present! 04:06:09 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080)=0x1, 0x189) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) r4 = dup2(r3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_connect(0x0, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f00000000c0)={{0x95, 0x9}, 'port0\x00', 0x1, 0x40, 0x8c61, 0x1, 0xfffffff9, 0x6, 0x8b, 0x0, 0x2, 0x6}) [ 378.185859][T13223] IPVS: ftp: loaded support on port[0] = 21 04:06:09 executing program 3: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000040)=0x9c0, 0x4) syz_usb_connect(0x0, 0xee, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x99, 0xf5, 0x62, 0x8, 0x6cd, 0x10c, 0xd355, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x1, 0xe0, 0x82, 0x14, 0x0, [], [{{0x9, 0x5, 0x84, 0x9b5a1c4223be0c76, 0x8}}]}}]}}]}}, 0x0) [ 378.307299][T13219] x86/PAT: syz-executor.2:13219 map pfn RAM range req write-combining for [mem 0x1c7df000-0x1c7dffff], got write-back 04:06:09 executing program 1: r0 = semget(0x1, 0x4, 0xf8) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/69) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x149, &(0x7f0000000080)=ANY=[@ANYBLOB="6400000000000000dd005ce1d22f40c249b8ae2ee7290e89470000000000009400000000000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x10}}, 0x48) 04:06:09 executing program 2: r0 = socket$inet(0x2, 0x3, 0x800008800000001) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c) [ 378.400012][T13204] x86/PAT: syz-executor.5:13204 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back 04:06:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='\x00\x00\x9b\n\x00\x00\x00\x00\x00\x00\x89\xb2', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x9}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0xf99ea34f70f81928) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) ioctl$VT_ACTIVATE(r4, 0x5606, 0x57) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x26}, 0xfff}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="016f18cc00002b9a141ac512ccd800000c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={r6, 0xf2, "737e3a25a1fbad8565d82d669c9e05decd509606e7250178ea17871db2febffa1eb34c359995adccdc64ddbf15ac75784967e2ebe9388334719a055a9dbc2b849690970317550d38a14f87582d65af66516ce86558a51080b2416b987b4f8917d15a026cdd1b8671b922dac234b7cbcfc6db8b05b4ae17df16e97c837455176f4b3e3bacb3b44a7a830844de87ced7e6f800f25043e8d4096e3319d40fe9654a4d137a253f509f71ae3e47af71c4be6efa7a177fdf0b22b4c0370e5041524ed9ed5c3f611bb5653940fa0605a1afba01e3df01825188111ec46081b3ca7d0b4afce742e8faced95951a7fb57e06fe496f975"}, &(0x7f00000001c0)=0xfa) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r8 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r8, 0x0, 0xc8, &(0x7f0000000080), 0x4) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000040)={r10}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000200)={r10, 0x8d, "87a3a9cfd6d9341febf9a6525d6e9f28d50da04d0ef3aabb3e56d399acece02391e64e762cfa7504fbeb823966ef73dba09645208bd5d57f15f10f0ecb2308fc5c5ac034e3767566ede38a221d42900a8ecf6917f0a313004bdc04415d826dcfff1ecd6f831f035095ee0d909f6c4d0841f261d9297cc0f4c1831827d3ab0360a19948694de525c24cd7e4ab3e"}, &(0x7f00000002c0)=0x95) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000300)={r7, 0x6, 0x6, 0x8000, 0x7ff, 0x1, 0x60, 0x1, {r11, @in6={{0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xf7cd}}, 0x800, 0x1, 0x9, 0x4, 0x6}}, &(0x7f00000003c0)=0xb0) r12 = syz_open_dev$swradio(&(0x7f0000000480)='/dev/swradio#\x00', 0x0, 0x2) connect$vsock_stream(r12, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) 04:06:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0xffffffffffffffe4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x1, 0x0) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000480)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) ptrace$peekuser(0x3, r1, 0x0) r2 = socket$inet6(0xa, 0x0, 0x7ffffffa) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)) dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000140)=0xd63e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180), 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x121, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000000000, 0x0, 0x0, 0x80000000, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp, 0x2080, 0x0, 0x0, 0x0, 0x2, 0x1, 0x400000000}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r5 = socket$inet6(0xa, 0x0, 0x100004) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setflags(r4, 0x2, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000340)) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_bond\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) ftruncate(r8, 0x2007fff) sendfile(r7, r8, &(0x7f0000d83ff8), 0x8000fffffffe) 04:06:09 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24}}, 0x0, 0x0, 0x80000000, 0x0, 0x12}, 0xfffffd0d) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffea, &(0x7f0000000200)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, r5}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x1050) [ 378.636676][T12319] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 378.636922][T13250] x86/PAT: syz-executor.5:13250 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 378.753161][ T2922] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 378.765626][T13254] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 378.869518][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 378.923584][T12319] usb 5-1: Using ep0 maxpacket: 16 [ 379.003244][ T2922] usb 4-1: Using ep0 maxpacket: 8 [ 379.063269][T12319] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 379.071838][T12319] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 379.082416][T12319] usb 5-1: config 0 has no interface number 0 [ 379.088663][T12319] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 379.100160][T12319] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 [ 379.111602][T12319] usb 5-1: config 0 interface 101 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 379.124900][T12319] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=a5.c1 [ 379.134144][T12319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.144125][T12319] usb 5-1: config 0 descriptor?? [ 379.163355][ T2922] usb 4-1: config 0 has an invalid interface number: 206 but max is 0 [ 379.171779][ T2922] usb 4-1: config 0 has no interface number 0 [ 379.178204][ T2922] usb 4-1: config 0 interface 206 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 8 [ 379.188313][ T2922] usb 4-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=d3.55 [ 379.197670][ T2922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.208755][ T2922] usb 4-1: config 0 descriptor?? [ 379.232999][ C1] yurex 5-1:0.101: yurex_interrupt - unknown status received: -71 [ 379.248473][T12319] yurex 5-1:0.101: USB YUREX device now attached to Yurex #0 [ 379.256213][ C1] yurex 5-1:0.101: yurex_interrupt - unknown status received: -71 [ 379.257044][ T2922] keyspan 4-1:0.206: Keyspan 1 port adapter converter detected [ 379.273986][ T2922] keyspan 4-1:0.206: found no endpoint descriptor for endpoint 81 [ 379.281966][ T2922] keyspan 4-1:0.206: found no endpoint descriptor for endpoint 82 [ 379.289886][ C1] yurex 5-1:0.101: yurex_interrupt - unknown status received: -71 [ 379.298060][ T2922] keyspan 4-1:0.206: found no endpoint descriptor for endpoint 1 [ 379.305987][ T2922] keyspan 4-1:0.206: found no endpoint descriptor for endpoint 2 [ 379.314669][ C1] yurex 5-1:0.101: yurex_interrupt - unknown status received: -71 [ 379.314802][ T2922] keyspan 4-1:0.206: found no endpoint descriptor for endpoint 83 [ 379.330600][ T2922] keyspan 4-1:0.206: found no endpoint descriptor for endpoint 3 [ 379.342428][ T2922] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 379.351359][ C1] yurex 5-1:0.101: yurex_interrupt - unknown status received: -71 [ 379.373045][ C1] yurex 5-1:0.101: yurex_interrupt - unknown status received: -71 [ 379.393001][ C1] yurex 5-1:0.101: yurex_interrupt - unknown status received: -71 [ 379.420920][T13232] x86/PAT: syz-executor.4:13232 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back [ 379.433386][ C1] yurex 5-1:0.101: yurex_interrupt - unknown status received: -71 [ 379.457568][ T2922] usb 4-1: USB disconnect, device number 4 [ 379.463497][ C1] yurex 5-1:0.101: yurex_interrupt - unknown status received: -71 [ 379.482600][ T2922] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 379.492980][ C1] yurex 5-1:0.101: yurex_interrupt - unknown status received: -71 [ 379.493537][ T2922] keyspan 4-1:0.206: device disconnected 04:06:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1000, 0x0) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000140)={@multicast2, @remote, 0x0}, &(0x7f00000000c0)=0xc) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r4}, 0x10) socket$inet(0x2, 0xf86ed8f48ec7e737, 0x20) r5 = socket$inet(0x10, 0x3, 0x4) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 379.513090][ C1] yurex 5-1:0.101: yurex_interrupt - unknown status received: -71 [ 379.543012][ C1] yurex 5-1:0.101: yurex_interrupt - unknown status received: -71 04:06:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x93a, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x22, 0x27, {[@global=@item_012={0x2, 0x1, 0x0, "a313"}, @global=@item_4={0x3, 0x1, 0x1, "39b037dd"}, @global=@item_4={0x3, 0x1, 0x0, "7fe52845"}, @local=@item_4={0x3, 0x2, 0x0, "8c0a56e4"}, @main=@item_012={0x0, 0x0, 0x0, '&'}, @local=@item_4={0x3, 0x2, 0x0, "8794f101"}, @local=@item_012={0x2, 0x2, 0x0, "f434"}, @global=@item_012={0xfffffffffffffd7e, 0x1, 0x0, "f965"}, @main=@item_4={0x3, 0x0, 0x0, "9f5d2d3f"}]}}, 0x0}, 0x0) [ 379.562987][ C1] yurex 5-1:0.101: yurex_interrupt - unknown status received: -71 [ 379.582958][ C1] yurex 5-1:0.101: yurex_interrupt - unknown status received: -71 [ 379.592095][T12319] usb 5-1: USB disconnect, device number 10 04:06:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0xffffffffffffffe4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x1, 0x0) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000480)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) ptrace$peekuser(0x3, r1, 0x0) r2 = socket$inet6(0xa, 0x0, 0x7ffffffa) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)) dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000140)=0xd63e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180), 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x121, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000000000, 0x0, 0x0, 0x80000000, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp, 0x2080, 0x0, 0x0, 0x0, 0x2, 0x1, 0x400000000}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r5 = socket$inet6(0xa, 0x0, 0x100004) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setflags(r4, 0x2, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000340)) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_bond\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) ftruncate(r8, 0x2007fff) sendfile(r7, r8, &(0x7f0000d83ff8), 0x8000fffffffe) [ 379.614873][T12319] yurex 5-1:0.101: USB YUREX #0 now disconnected [ 379.688255][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 04:06:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000000000000000fce285"], 0x14}}, 0x0) [ 379.945059][ T4006] usb 3-1: new high-speed USB device number 8 using dummy_hcd 04:06:11 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r2) ptrace(0x4208, r2) getpgid(r2) r3 = getpid() syz_open_procfs(r3, &(0x7f0000000200)='ns\x00') r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f00000000c0)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000180)={{0x7fff, 0xa}, {}, 0xfdfdffff, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x6, 0xc0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r8, 0x2000) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r11, 0x2000) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000040)={0x3, r11, 0x1}) r12 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r12, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r14 = dup(r13) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r14, 0x2000) bind$isdn_base(r14, &(0x7f0000000140)={0x22, 0x20, 0x4, 0x80, 0x8}, 0x6) [ 380.165274][T13287] x86/PAT: syz-executor.0:13287 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 380.201669][T13287] x86/PAT: syz-executor.0:13287 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back [ 380.224936][ T4006] usb 3-1: Using ep0 maxpacket: 8 [ 380.235569][T13287] x86/PAT: syz-executor.0:13287 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 380.263537][ T2922] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 380.282164][T13287] x86/PAT: syz-executor.0:13287 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back [ 380.363994][T12270] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 380.383482][ T4006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.394950][ T4006] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 380.409133][ T4006] usb 3-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 380.418411][ T4006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.431414][ T4006] usb 3-1: config 0 descriptor?? 04:06:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x8000000000001}, 0x10) write(r0, &(0x7f00000001c0)="240000005a001f0800000007000904fcffffff1010000200feffffff0800000008000000", 0x24) socket$packet(0x11, 0x3, 0x300) 04:06:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r2, 0x2000) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee0000000007000000ff0700000000000000000000440700000000000002000000000000000b0000000000000000000000000000000000000000000000000000000000000002000000080000000100010000000000200400000000000007000000000000000100000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005b755f6a00"/320]) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="ba487c2681de871f09200fab8b7fa338"}, 0x1c) 04:06:11 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x109c02, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r1, 0xec) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000140)={0x159cd17a}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000011c0)=@buf={0x1000, &(0x7f00000001c0)="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"}) syz_emit_ethernet(0x5a, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d8652b00240600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90020000907800000202ff04f98d22084eae3df7cf810000ce64bbc2f97d3bb716653ac5a69cbf921f89b4d26ba1b65662bd34b4ccfd606ab3283979e8a9376c0c10ea916f0319cd29d29a2309b34bac1efa2aa2cc50cf0464eb0ad3bd41617cc9a001c2b77b7b526791e5cf7dad17037373bb43719d0b57b3043c1dfb62de6c656a9920d6ce2aaedbcfc8b59912bd9e5d00130b44863e7adbed5558"], 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) write$P9_RSETATTR(r5, &(0x7f0000000100)={0x7, 0x1b, 0x1}, 0x7) 04:06:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00007fe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xc377fdf061a39fde) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) connect$vsock_dgram(r4, &(0x7f0000000200)={0x28, 0x0, 0x928cb3a591661ae8, @hyper}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r6 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r6, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x80}, @sack_perm, @mss={0x2, 0xe1bd}, @sack_perm], 0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f00000000c0)={0x6, 0x2, 0x10001, 0x0, 0x0, [], [], [], 0x7fff}) sendfile(r0, r5, &(0x7f0000000040)=0x100060, 0xa808) socket(0x10, 0x5, 0x7) 04:06:11 executing program 3: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000040)=0x9c0, 0x4) syz_usb_connect(0x0, 0xee, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x99, 0xf5, 0x62, 0x8, 0x6cd, 0x10c, 0xd355, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x1, 0xe0, 0x82, 0x14, 0x0, [], [{{0x9, 0x5, 0x84, 0x9b5a1c4223be0c76, 0x8}}]}}]}}]}}, 0x0) [ 380.684107][T13302] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 380.688181][T13296] x86/PAT: syz-executor.5:13296 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 380.695791][T13298] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 380.739810][T13306] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 380.740962][T13307] RDS: rds_bind could not find a transport for ba48:7c26:81de:871f:920:fab:8b7f:a338, load rds_tcp or rds_rdma? [ 380.751862][T13305] mmap: syz-executor.4 (13305) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 380.768338][T13296] x86/PAT: syz-executor.5:13296 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back 04:06:11 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000720715206d04923bcc648d1350260e02127dc7150b82d50c5633fc49047bf800010000000009041a0000af0db20001a244c022cdaa7f1f59861ceb11c9f61118aad65719ad9479548b171cb38ec1aebba57eac07cb4842df32787ee2f84ecb72f00bba24b2eb8a077554213c60b8dfbb906c5fb02f6982fd96564149c62f3caa66481e8858eaa642733660ffc4880b4c9e7caf3f4604bd1df1c52d9e94bafb01fb13ada693cd39b1fd23881420ab5ad423bc04035b071ad68a1a290579c1ad94a8b55f3e90aef4eca278d4a64293f5fbbb6e6fea354bb21190dd2b002b8fec1b5da1b69d57db0bac9cf0ae97fa1a261648b05897"], 0x0) 04:06:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xf30, 0x111, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ef22064b0000e624cf9d0dea"], 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xc9208a208a472c94, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x537b, @mcast1, 0x18000}}, 0x1ff, 0x5, 0x0, 0x4, 0x1}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x90, &(0x7f0000000240)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e21, 0xfffff825, @empty, 0x9}, @in6={0xa, 0x4e24, 0x800000, @empty, 0xae}, @in6={0xa, 0x4e20, 0x9, @ipv4={[], [], @multicast2}, 0x2}, @in6={0xa, 0x4e24, 0x101, @mcast2, 0x8000}]}, &(0x7f0000000300)=0x10) [ 380.820882][T13298] x86/PAT: syz-executor.0:13298 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 380.953440][ T2922] usb 4-1: device not accepting address 5, error -71 04:06:12 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000000)={0x5e3dd4ee, 0x80000000, 0x401, 0x20}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r1, &(0x7f00000000c0)="2400000022001f020400000100eeffef000000000001040000003ba9f3af000000000000", 0x24) [ 381.074535][ T4006] usbhid 3-1:0.0: can't add hid device: -71 [ 381.080977][ T4006] usbhid: probe of 3-1:0.0 failed with error -71 [ 381.095585][ T4006] usb 3-1: USB disconnect, device number 8 [ 381.273079][T12269] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 381.281588][ T12] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 381.353069][ T2922] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 381.513245][T12269] usb 6-1: Using ep0 maxpacket: 8 [ 381.523138][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 381.563602][ T12] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 381.593324][ T2922] usb 4-1: Using ep0 maxpacket: 8 [ 381.633224][T12269] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.644689][T12269] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 381.658104][T12269] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.40 [ 381.667571][T12269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.677002][ T12] usb 2-1: config index 0 descriptor too short (expected 32018, got 18) [ 381.685598][ T12] usb 2-1: config 21 has too many interfaces: 199, using maximum allowed: 32 [ 381.694752][ T12] usb 2-1: config 21 has 0 interfaces, different from the descriptor's value: 199 [ 381.705523][T12269] usb 6-1: config 0 descriptor?? [ 381.753228][ T2922] usb 4-1: config 0 has an invalid interface number: 206 but max is 0 [ 381.761732][ T2922] usb 4-1: config 0 has no interface number 0 [ 381.768536][ T2922] usb 4-1: config 0 interface 206 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 8 [ 381.778743][ T2922] usb 4-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=d3.55 [ 381.788164][ T2922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.797335][T12270] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 381.805216][ T12] usb 2-1: config index 1 descriptor too short (expected 32018, got 18) [ 381.813736][ T12] usb 2-1: config 21 has too many interfaces: 199, using maximum allowed: 32 [ 381.823263][ T12] usb 2-1: config 21 has 0 interfaces, different from the descriptor's value: 199 [ 381.836481][ T2922] usb 4-1: config 0 descriptor?? [ 381.880596][ T2922] keyspan 4-1:0.206: Keyspan 1 port adapter converter detected [ 381.889977][ T2922] keyspan 4-1:0.206: found no endpoint descriptor for endpoint 81 [ 381.898242][ T2922] keyspan 4-1:0.206: found no endpoint descriptor for endpoint 82 [ 381.906503][ T2922] keyspan 4-1:0.206: found no endpoint descriptor for endpoint 1 [ 381.914752][ T2922] keyspan 4-1:0.206: found no endpoint descriptor for endpoint 2 [ 381.923519][ T2922] keyspan 4-1:0.206: found no endpoint descriptor for endpoint 83 [ 381.931722][ T2922] keyspan 4-1:0.206: found no endpoint descriptor for endpoint 3 [ 381.940685][ T12] usb 2-1: config index 2 descriptor too short (expected 32018, got 18) [ 381.949377][ T12] usb 2-1: config 21 has too many interfaces: 199, using maximum allowed: 32 [ 381.958287][ T12] usb 2-1: config 21 has 0 interfaces, different from the descriptor's value: 199 [ 381.970057][ T2922] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 382.043400][ T12] usb 2-1: config index 3 descriptor too short (expected 32018, got 18) [ 382.053981][ T12] usb 2-1: config 21 has too many interfaces: 199, using maximum allowed: 32 [ 382.065505][ T12] usb 2-1: config 21 has 0 interfaces, different from the descriptor's value: 199 [ 382.088699][ T2922] usb 4-1: USB disconnect, device number 6 [ 382.098209][ T2922] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 382.109258][ T2922] keyspan 4-1:0.206: device disconnected [ 382.116731][T12270] usb 3-1: Using ep0 maxpacket: 8 [ 382.153689][ T12] usb 2-1: config index 4 descriptor too short (expected 32018, got 18) [ 382.162235][ T12] usb 2-1: config 21 has too many interfaces: 199, using maximum allowed: 32 [ 382.172499][ T12] usb 2-1: config 21 has 0 interfaces, different from the descriptor's value: 199 [ 382.243675][T12269] usbhid 6-1:0.0: can't add hid device: -71 [ 382.250100][T12269] usbhid: probe of 6-1:0.0 failed with error -71 [ 382.258757][T12270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.271443][T12270] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 382.289475][T12270] usb 3-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 382.299566][T12270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.308843][ T12] usb 2-1: config index 5 descriptor too short (expected 32018, got 18) [ 382.317459][ T12] usb 2-1: config 21 has too many interfaces: 199, using maximum allowed: 32 [ 382.326410][ T12] usb 2-1: config 21 has 0 interfaces, different from the descriptor's value: 199 [ 382.336432][T12269] usb 6-1: USB disconnect, device number 6 [ 382.344577][T12270] usb 3-1: config 0 descriptor?? [ 382.414454][ T12] usb 2-1: config index 6 descriptor too short (expected 32018, got 18) [ 382.423132][ T12] usb 2-1: config 21 has too many interfaces: 199, using maximum allowed: 32 [ 382.432119][ T12] usb 2-1: config 21 has 0 interfaces, different from the descriptor's value: 199 [ 382.513415][ T12] usb 2-1: config index 7 descriptor too short (expected 32018, got 18) [ 382.522042][ T12] usb 2-1: config 21 has too many interfaces: 199, using maximum allowed: 32 [ 382.531439][ T12] usb 2-1: config 21 has 0 interfaces, different from the descriptor's value: 199 04:06:13 executing program 0: r0 = syz_usb_connect(0x6, 0xfffffffffffffd6d, &(0x7f0000006a40)={{0x12, 0x1, 0x0, 0x4f, 0xe, 0xba, 0x8, 0x10c4, 0x8341, 0xb3bd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x27d6, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0xc8, 0xfc, 0xb, 0xfc, 0xc, 0xaf, 0x0, [], [{{0x9, 0x5, 0x7, 0xc, 0x30b, 0x81, 0x4, 0x3b, [@generic={0xf4, 0x21, "3d937ea9d76b59beea4d11b7970e8fccb59ecabc6bf31a06bceaf433b04bcf3525e4c93806bf39fb99fe50cdce3986f1239a0fc93e76644d7e8f30b00d7fd3f2d4c90b3e51f0f5f48754d180132d7429f386e044751df856c33dec102a50f4685ef9900f5784dd6da613e8b02caf036c84676e1587ac50c1386f49b816da2726703f39e7635e0e78c686b245dfa5a9837853a3c8dc5c1421c89be881a1b2b6fa382563214dbadc5982ac225c8b70c7dac41fc8ec17b634cfcf8f00d9e54608e3827d2c25031277613593bd55cfff65c7b783f6a97f62b921dda4040fe5f466671b43d00dcd68e6649bb1dc3c0374b11012b4"}, @generic={0xdf, 0x21, "c9399d8aec289a71ad0408b7b385eccf5bbcbb21fda2f77d8653319bfdf8625aace596dae896f37cc7c6969e241730b4e4a5affe091071bc9969b2ffba2a18483816754498537e87d3baa7fcde76a8ee42f488cff1a749f5bdc31aee0825ef616c35b0ca9438c9f52a9f9066b45ea0d2d3baa80b95d0fac403257d35981f7b9bc071f7bf5da2a3df37749f66a9a03812fb047702d3ee1df4d5fafce1e09ac68f2cc178ec7c653ca2020875347d126b8386cf9d4e9f1321ad615edd09f6f149669296b4cb8f89940496baebf6ca01e0eec9b9a2a535150d476d87ffe344"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x230, 0x7, 0x8, 0x0, [@generic={0xcc, 0x0, "054bfc13d19e5fece27c16b8b9cf9e97dedc44e2102ba2765f035de1a2e9776b1b893eb00488899df4836bdc2718ea997d6f7c2345f118035b6ee44a5a60af3a93115f8760a6d4d78274cccaba496cc9cb45c82e65fe2057e0a9a47c8333f4e52f24f3f9f9e3e4dc73669a8547c6103c7224cdbe5961ee68bfe70b8480bb1a8ac7066bf4dacbf5df8e3c2c3c6e94b979eb8e3f30464ec63eef00b216caf71fc842ab11f6d5c5c2e700134cecd7d4211a60add4a560a558c283467d932dd4d5a87097f9ee4207721a3e71"}, @generic={0x1002, 0xe, "63cffc0dfc72ac4298478c394f3781d07ccc5b864c8155ea5ef2bd3a7add1a7425b7cef30bd11145213b4d42587dd200fa367d37e27f41cda8e589c8feec62d76cdaac627fb4cf93cdec889e2d98b7c18aeaf4ad20a285066f58031e0a2870583e16cc3f0c949e03ce9549f58e9e8d55708aad0d5cd4693b4d30bffc6116d015d33971b88838a01bdecaf426360268cfb557ff70ce5be86157016f024fa2ea45f09cf1616b2fa502987daa21bc2208feb5554dddb62f5685309cb06fff30770574044c878f49413be66786dcf29060d2d884c5d69af896fd918c73e562bccb7a039e1ebb7fab1a015412c6358e50107768de299b836214ac32f1cda7a96318a28fbe3dcc7540bca64e8162ff59ce4503210572db45711212ec397f9e3454af84a36bea505b477d36caf8b84c663b5506f08af371f5134746c234a7d1c9271b20a00d572b99415c4ac49a2fef5b95a02e67f66fb0f93aa0c55ececc7668e73b5cf7a0f73c1ba7a2684be24d2ef49fa87ea3b9cefa887459c6304852de46ede60dd86f48c82ddcc2726b94838902ad13e3e772985d9b054f58d5ae688b0513474ae0e1fa76cfd1b8c9034178da1dd9e19b4a79268e56ef9b8129b067449e2c9e2c44a66d51392413a0df914ceb031090ff651ad9230903150bf62fd34fa737598f37d6a51cb6439c1280c481591586afc574e783fb2ee6459f491a2203a8b31dcfd1c9cc925b6a6e982ded0c586fb0ce0d7d5ab41c5ab26cf915e23bdceae70e76496fcbb1ca452429dde35847e1e066a65a692dd2506f936a0d9f1ad3ac130ffa6796e3b5f43c90db73970a4f4160210963a77f72690af7be3128328c3e9e5804fd63046b23a57c390cea071baeeab8b729532644bd7092015a091dc70b0f13ce3572add9cc99b97b027e8bab5c19eee04455a72b476fa96b58f45d8275648580be93d418126a991c445e4c9624bcd5d234d48e1a1954d82722065f83038e321fb116b83222f5f3691773a6f6e22c810eb6f1b4c925a25f61d19e8dad02d3266338d7d3615baa1ff4d5ea56095210060ee6374673779ea4f413efc6d0fb00cca0626549ee2bd4e8dd1cf43bdf25b1b2d2241ea783c1b2f09e34dd5c0b88e6b54212c9e143659bed52609bbf2d6c4bb9e6fa0f4566aa6142b5b551c9ba03ad5a69447924ad7d6b71e77cd4d4a923bd8b78d99132661809e8c2cc413fb3b25a03b0c8a174f5b325b0464094288b5b83a2790a703e49dd36b868728b893c705e6e5b2313a3828b3ba75df9125583036016045828e3a2ed13df7cb0a95054d2773a8eee9c80406da4ba6d0587e4b8171692ec762d44ce52b32ff7ea11d5b57d5f19cc722c10a9c2bcbd240a70345423ac0dd5d8801140a67cbb23b16a51ede4c93a597effb9e2a5e814caf655288f5b15b70dd6d0356f67ab02f5a23d765b1c9a5ae7efe1ae16452f68a7358cc9e4aadc9b171988f39fdec655128e8438da0bc4ddf679916fe0a7d553cf2f80c85f1c18e61b5debeceb477ba6e48233eb6665c5daf1bda02bfca94773c27936aade41b373cf51c7745394c30abb029fd87d5c408c5c41a6238dd086a215b0d999ae638167800b7dbdcea71f1ec5297b7113726afaece9d621098f015f954ccbd26b1cd604c9c550e5f4f11fa6b5fc14e50297135b7d9a3bded8df7eee5314baf891b4f4819e366d0fea4a6463ec96371422576f1b8f4f7a996873cfec3be1f22d849f351742209971ce1a55bd172d27373f63367a42478559ddda60f7bda23d15ae06d3a97eae252a01514e536cbf53d79df4e09575a0abe947d900c74753efd49a17f16d8fbb7efbc76b1e578bad9510cc73dcfc4d2dd2ba1694d1306d86347b1b078dd394e72d5b95830736246ebc2eca33427c1ef2314c4895676f7cced83d3e766bd4c1290413a39b4d3b87b24007a6df0d53d5349ab69f277da127af3d7ffe2e0e12b07ae829e43fc024d7f30ce4229519c4794aedc1226a95727e61e8a9de5e2c51f4fb2f3ccb6bd2b615e61586d61877404842e9fe635f63062389d1bd09bf228b340ecca1f6e1c741bb94536dabecb8a4493faa63c20ffbaba481bec36fa6f9e925008ec4769e2b385fc76a2f9de20e913a55c41bfd0ac1b2b72a83ab3ba0793bd36a2b2847f1b9dca866f291e7254162971b2f6597a60cbc58f4a40ceeb486cc0ca3e5793bfa08f7b25829a451fa30bee0bccc28be83284262fbe1e9337880b1d4cd3f12619250f5e2d7d8215fe541e65193a10f007d97d22c79964c89e0eb4f52ef27a0b3f4975d11ba443359d9d153c4a3d71a59d304f571147b25b1827b256c5e273a94667d902face8188bc20b058b42eac9d1b992905358bc6c003b7b34226537d8089d1179f5b24d4f0ea4391e0e94272be512df95304c91f4c7898c469110b73d92266a1e08c3624e1a494c7ecdda315a727c83ddf1942e02d12d5438b0c6fc790be22ec0d41ff2d135daa0e6d3fb21985378fdc1842a9ad64b73e6d7568a3bb90d1cb176afcb1085424ffbf6d60e480307c5e00cf0625f8346dca7df98052a19affc09f8529008c7645ecf161b863c4ded0be744d9a586ad44861173df792d9b4213413f6f8933214c6af3c3f95a271cecc28a0e971fec8628338ec09576bea2604fd0049280513440697561effdd86f79b4bbdfb0008edf4b4b46600e429e9f85772b90a2062548998d7ec9523f193ecf6696ea166427041f1895a0edb99d7f4cd9f0b7ff108687a042b79a2753b1806d700c8d48cdef8cc67a78fb4712a8cac7334e6647715337d4d5dd617a2cc657640fc792cd4642607c285cfcf9b603169a33a05ad1fe795097eaf1ce839d871fe3a055ad22bdc8d02f622b95e10237ed03252e12a79ab171eec3b32f1a40899f197122d4008089194564db3005a3b03fe4cf069ca144d00b70fe80f01e4369ed29aba7ae791053786d5e48f416aa4bb3eb1843460c44d4238f52184bc9a3952aa504c5f86af2346fc2c5a6c62e24826e0ea69f327589b0d4ac6a9526dbc4dc56496d0b29f8368c3fe9c7358104d577146a82ac6e38d9a4dfd97c0a261cdb6b5d22adb98d8b84ef59c01a3f539691517bd1205b79c1ee8687e960fee7348ec89dfce4ab1c31965d10678b920a894ff4657405cd1e478d01496598cd3d9e1f2d029ecb28bf7bc29605b94ffa4ac0a2675bbee19ff73eb65fcd23882ee73ee37fd5cf2dc4f4b38d6a7a8b131f1333ba7590bdf51a4a5f6f0dd67469803a2a082e1d00e2bb5f5f388e79fa7b0a453fd27d1bc6838f2b9762cfa36391e3a80a37fd23bb68adf831cf46a239c43731b71bbc74cf576b7ccd6be289520e441bf038429e2be9dac771a61a2096762a6fd6045ca346567b75c47b7877bebdbc7cd476288a34efb38f95d40df7b053492e2b06de8c5253655dba01fef09eb9de51084022641f51c78513be87e966ebefe9a04a76ae7063ed2917bfa63cc4b3dd39adbeae3e3d5c2ef298ad75aeba7820935df23129edcde83e9d82cb9e7added820862be6e1a30e57e1ed56c4d95abf8db7f3dbeb27ac95bcbc6a10b2f9338184d89d9e136c155ccb55b66ba7fe5b8281ba1dc63ccaec0e4c40539150abc43ad4667e53ae301c98262184efbd450ed64c84dd3d3f5504e4902d0b270634ed7dc84710629e22a8d165d72d9c34cccbf8edc5e0e4d98565cc37ef6aa1fde8d2a93bace3e3aa01524048e3a963c12ec7ea4251e272645c45afc8261221709e34aa545af5fa47514692a7bf64d94bedb99eec12085b60d593b8b54d465e07df53144687194f30737fa01de6e0e796b4ee6adf5fb54f40e7d6297d3cae8e2163b7e36b88d36741bb2365c581c4c2e68026a7a0b5e302dbde4dc8fa37c49822119509efc583a487a96f8f7e17529c2b465b05ff1577f7628f0c69e1d58c3b546c99fd215b7eb9ae1603356e750b5facb49d28cafdfda54b2561dce8da4e1eda4dfe4a05ca9697a60b059dd165a624a7c964e4d37965b4bafe8cfe8caf01a98616c1e2a02e87ad671c1780ec5c567b82ab249219d27d961e7c4ca845413d1a7e6d4faa7cdc0dee41dc51b51760c6024abf2ac3ec67543cff795306f64fd486db17b6cb9cf2e4d4426287fb95bbbf09b1284ed8fe5172d7b6af9a394c2dec5f0f750be42f9f81ea871750633bc241a0719422d62fb842d09c25fa277ce4a5198cc7a93019e2d3df21ff7572a087ae408788c66ed0dbde9d9bb722dab20d394c3ed26bee74e8286bb61ac986c247889403275627eca0236c69bcdfb56b1e2731a606d4401683279e3957ab84cb2dcdfac1c31b889735f2d990b454e5d6ea6f6f2be7f270c3a6d8e19920e8410673b1990a81c0077fd4fdb92672d99977a992500c45a83d1559955c965dfcd4d06a05d672d0d65f9aa3fa72d503b1d43d466d0964b62ca97aa760810223c9080e0bace508c9ffd1548a924ab92ddaadf56b0216be1eea0f3a6acaf26d0c1189287b3f91cbe9fdf3506a2014395757282890e2b53eaea617201eb4110a6f80f01069ca111bcb7df9ba10846b6ffce3985296743f99444d5e8303abfce1ee76431b2658763844b1eb820c65483b779f3d98c2a92eeecc332ab9d6c615fee249da9a16d67539f87148007d43894149c38ec408a58073663b9cbef5ff53dfd95cedac5c05bde69471b39fdbc268860f8118c169abef6e89b687116a9d4484b41a1a679bad55ff429f9326b6b9a4bfe6e9d288cb0bd3ba9f8bafdcf379855295f257a0da35cda6675ba7528d40f7dba2c7eeba6ca55a330cddf7ab196da888e839104938a609ce01eef7a7685cbbb66400b1e25c1a87330713f59bfb123845cecbbc13ab9fb9e02303bd78902f75f0f9fa9e283a14b5a88dccae11e817873040d833748f1c65506340cfe9ada4c28d4707d6415d84387e6b65eac5c80ec647c1b1fb0918a8beeeb41839c5d7409b7634e56c82efad339def104ede76d0b7aac37324f947dc6a573da5217c3cbe8cb5992b95f87675e5fa35dca0e79267caa091bd0f4105b92724964c5b4501d68b89d9f0d9d2516582859fc48b9673baf457fb8221906fba237834e89752eff8390bb79edc2790e7dc385b21148b5f126fcf896dbc2a015f1efb10c7784ff06fe332324b6d65d80bebc47aa7722a7a2b8a5f8727830c7867671d5e95652dade2fe5cedce100ab8a7c1f1c082b29e7059f5dcaeb5072593f52518f31e83da99a448bb2f584355a60babff885019170decc5d3eddedb082e0097867edd67521c5afc8ae2151579d188811b8d1cbb675a3ea6f6565f15d1fe428d027e3cca656802b7e4226fa7661b3f66ddc8b352a480d9ada797be1de7b281691d8bd270b90e9b0a0ef1ebabc5dbfd1b08fd44d530204db8ec36893bffb29781a1682f96b16bfdc7c7843a1fa5b545427b71f4cf6ee0feb869f01d0bf03ad79dc7378b5697fbbbf66be7392ae4499e98ffab5fa26e2905f71b458228e30e1611c4b9a33191ced853b9930831b4cf81d28536ad866e4f543fbc9f1ff7b96b85f270362e374decd2a199d09ff8ecb857d5e0c3e5a6cfcaf277b266f825aba81e97049153b969482519dcc6714dc23177afb4a4a2eb87541f06dead77091d9b63a2135b2fa2965805c8689bcc8947ad88439464768870bfb4d3d4c4026e5e1feb56930a74b423c405f51af7083161fc7575841663d8b587a04886afde7352f5c51f89e1862bf2c406caa7a235e6480c7839f6da29f458d095cb4ae735602ad2315d7e49bd3e72d4f2db0fe40cca8973fb15fd1752f55eb02"}]}}, {{0x9, 0x5, 0x370fd6f40640b829, 0x2, 0x12, 0xbc, 0x1, 0x1, [@generic={0xfff8, 0x22, "3e5d694cccbef1ca5bb8"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x289, 0x3, 0x5, 0xa2, [@generic={0xba, 0x688d77919228270e, "244c1c4ab08e13aad1c02305896ebd00ad95b3896c7f3fe2f41432fc6938446f235a5ef087bb7f4933a72ab4f214072b08c1cf2dbe73741392a1aecd11977381cbacd5a2cc1e2654f901ed901bf14a59239c9a43653ae11c1a2e40d16f5d1ed1715bd13347db9d293dffe3dd557119e6892aa3e6269d05b77eee324295ea1c497e9fa9d39df89dab8768d3e145893fea8d4317c10a3dd20bd6ffcaf31b3535cda8b052488b18be9215ef9eeb8cc00fd8429d1c86d5178166"}, @generic={0x837, 0x7, "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"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x347, 0x20, 0x2, 0x3, [@generic={0x6f, 0x21, "2ca462d8929849477d4054ae5d058067b105f5f194d4519dba616203d321c899e3298d9f6e1974b1e517a1a30fafbce1dcba77d1456fa73c2fdd803adecfb69a0bbb2d501d9367a25514fe0dd6db73b37ca5e1147e08064f4e02797aa47d381eb4cbbc133465a289f594d40bba"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x2a7, 0x2, 0x9, 0x81}}, {{0x9, 0x5, 0x1, 0x3, 0x21e, 0x8, 0x9, 0x7}}, {{0x9, 0x5, 0xf, 0x0, 0x22f, 0x8, 0x6, 0x7, [@generic={0x35, 0x21, "0fb2175c38eb8dc8c20f1300c02ed5d3b7d3a6be584f58801fb82fda23df24574e09e7f989f564981480db86d1b37dfdc15c51"}, @generic={0xcb, 0x22, "6b0d930aaea5547c158d372a956b18415ba33a21733e21eff8ef5e95514d3ef93dabd9a0b1fe3af3d6adef2612aa017def63c75ef7db565bf9bfec4bc047ec0f0e82016a047bf6c4d9f4668e1bb8103b49c13ddcdd991de6b6488b233332c80b694b492236fc83c2420f45b2a572de04622ea7c801caf9d982b2d15611fd623628e077a1384be28f4cdc48ae05b974247ecec589c341b28d94b4a09f0177d0febc8d0c5727c8ea007116a8d586b850bf8fa1ea89f182ac4c201ef525fc65bde3e0714f6ea5da771b07"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x33b, 0x5, 0x81, 0x2, [@generic={0xd4, 0x22, "f181cfbc49fdd056313d419109ba543ef20e3b7faa09efde59236af60f6f6b9c46ee9cfa55e2e5879beb80f361992cb6478fbfaa595161697215d7dc6638780fca72ebd9ed4f9335c166e35aaadb98a46683938ad74027298ffe871bc9b0518797e2981aeef27364f72cc4b7eea3525ae6a06c34b9c105c7b06be7c035085c569c9f0cb8d7e3506c5ea23570ceba3f03427ed8f723e4e8ac738542148740529d4fee70dd9d1e8d4692564daac1d715849e8c021eded93ae9bbf9b6ac998dc9f3fe4f519b077d10ec28fa694bceed471bf70b"}]}}, {{0x9, 0x5, 0x3, 0xd, 0x4c, 0xfa, 0x6c, 0x0, [@generic={0x44, 0x9, "489592c4268797ae3eb767008d08f8bf9c1288050d1266a82f8b8db2ee09aa0b261f9bcdd4906b879facf805f8334070ae4aaafe81b4906f006d1a367e02a9a9e288"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x5c, 0x6, 0x1, 0xa5, [@generic={0xde, 0xf, "14f726511888df7c388867f21016907cd6985b934f135305a9a89299d5b95a918f75baa8fef5fa6edc9298372db21a599e7798e46fa530998393c415f144cd9314c865442b3a4557cd9f0fe79db5aea285434aa9010c6cb1c76302f6bcc3c676c19260e0b92282ca2d5d98f296ef1115d08ea945789c4881876f9074b841a767943efb156353b2abae910263aa2f84b4bbbefc6125310025235f819cb62b16e79f734a4d4661fb9855226511118930eb04881e832df42559f669775d810c82a6a79512b814c33fe8ec6ae081e92ef66d63169584761a3a5ef3269804"}, @generic={0x50, 0x31, "6c94a74468af40999200194e512c90a3e23339e46a8cd34b23809d4ca4a2427fafeae94978904f79041a70a4e5780f4c0937a023cafd2cea011fc65e203c80f2adf5b88569dd860ecb12e484cd7d"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x30, 0x778448c1ad13e03e, 0xac, {0xac, 0x22, "526728684171b3fdb4b6cedda16fa0eb5028e197ba4fb2c69043796021d309afa0f5f33fb3611857f566c1ce6e259d2683e8d3a4811c1f569331f3963c3324f87bfd8f4115771660c4087d393dcfca17808cd913bf279ce0c770a79b77d0ab5c5ab4b5971373e69b2433d48e83783aff9966d15e8f327a3c8095c572e82e8b089f6eee207506c7d09388ce84c2e137e58faa8120feb1f6e8d8abf2f0399e89a3df279c8148d3990bfefa"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, &(0x7f0000000280)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x0, 0x3f, 0x1000, 0x5}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x10, 0x40, 0x3, ' \x00', "ef0ba9cc"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0x3, 0x2a, 0xa3, 0x0, 0x1, 0x9, 0x3f, 0x8, 0x1}}}, &(0x7f0000000a80)={0xac, &(0x7f0000000380)={0xa0, 0x16, 0xffffffffffffff4c, "4f1604aeba2ea15204617ab2b0fce023490be42a956e42c94478ab2b6e311915a142f945e2eb0f3fa58176418961ef6443e36292ad890b3debb89d7218fbb9cd9b5ba7f7331ba3484b6361fffd4448f31b3cae6580b0f9422aa2378d1a74d9e20bf4767d54d051b289269157e087bd659ed70866c63889790f80686b42f5e4b6977b44eea61c49a6c0a419ec1b1885fcb50e39c44a06613b13dce4a7e47284b9ff33e8090645d6dd816d5c855639e9251fcf8de30cb7996744ae88f180af95b82446c78438662c38f3954d"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000540)={0x20, 0x81, 0x3, "d46a9b"}, &(0x7f0000000580)={0x20, 0x82, 0x3, "8eb70f"}, &(0x7f00000005c0)={0x20, 0x83, 0x3, "9e74d6"}, &(0x7f0000000600)={0x20, 0x84, 0x4, "e01dd600"}, &(0x7f0000000640)={0x20, 0x85, 0x1, "c68cab"}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000b40)=ANY=[@ANYBLOB="200104a6b5b0771f334c6757981bc12800000000000000"], &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000840)={0x40, 0xb, 0x2, "b340"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @random="7fe469e6ce3c"}, &(0x7f0000000900)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000940)={0x40, 0x19, 0x2, "f132"}, &(0x7f0000000980)={0x40, 0x1a, 0x0, 0x2378}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0xd8}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000100)={{0x3c, @local, 0x4e20, 0x4, 'fo\x00', 0x8, 0x0, 0x1e}, {@local, 0x4e21, 0x2, 0x6, 0x2b73, 0x8}}, 0x44) r4 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000000)={0x6, 0x361, 0x55d8, 0x4, 0x8}) msgget(0x1, 0x413) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) fspick(r7, &(0x7f00000006c0)='./file0\x00', 0x1) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) accept$inet6(r8, &(0x7f0000000b80), &(0x7f0000000bc0)=0x1c) 04:06:13 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000200)={0x5, 0x1, 0x1, 'queue0\x00', 0x80000001}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xa100, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x4f7280bb3a0cf8c1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 04:06:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) bind$rxrpc(r3, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) r4 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="1f000000190081ace4051cecff091ffa1c1499a61cfe7084bce26a23480b0e", 0x1f}], 0x1}, 0x0) [ 382.683527][T12270] usbhid 3-1:0.0: can't add hid device: -71 [ 382.689741][T12270] usbhid: probe of 3-1:0.0 failed with error -71 [ 382.703820][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=3b92, bcdDevice=64.cc [ 382.713163][ T12] usb 2-1: New USB device strings: Mfr=141, Product=19, SerialNumber=80 [ 382.721642][ T12] usb 2-1: Product: syz [ 382.725987][ T12] usb 2-1: Manufacturer: syz 04:06:13 executing program 3: msgget$private(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0xc, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r2, 0x2000) write$FUSE_DIRENT(r2, &(0x7f0000000100)={0xc8, 0x0, 0x3, [{0x3, 0x0, 0x31, 0x7d59, '&selinuxcpusetposix_acl_access{ppp0)GPL(vboxnet1/'}, {0x3, 0x7, 0x8, 0x0, '$selinux'}, {0x5, 0xddd, 0x10, 0x0, 'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff'}, {0x4, 0x9, 0x1, 0x8, '#'}]}, 0xc8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x19b04, &(0x7f0000000240)={'bcsh0\x00', @ifru_flags=0x5802}) syslog(0x4, &(0x7f0000000000)=""/147, 0xfecf) [ 382.730708][ T12] usb 2-1: SerialNumber: syz [ 382.758427][T12270] usb 3-1: USB disconnect, device number 9 [ 382.782605][T13332] bond0: (slave bond_slave_1): Releasing backup interface [ 382.853766][T13340] x86/PAT: syz-executor.2:13340 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back [ 382.921770][T13334] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.963131][ T4006] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 383.004172][T13334] device bridge_slave_0 left promiscuous mode [ 383.012275][T13334] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.043180][T12368] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 383.059904][T13334] device bridge_slave_1 left promiscuous mode [ 383.062142][ T12] usb 2-1: USB disconnect, device number 8 [ 383.067081][T13334] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.118258][T13334] bond0: (slave bond_slave_0): Releasing backup interface [ 383.193468][T13334] bond0: (slave bond_slave_1): Releasing backup interface [ 383.215214][ T4006] usb 6-1: Using ep0 maxpacket: 8 [ 383.283162][T12368] usb 1-1: Using ep0 maxpacket: 8 [ 383.333595][ T4006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.345559][ T4006] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 383.359208][ T4006] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.40 [ 383.368579][ T4006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.383863][ T4006] usb 6-1: config 0 descriptor?? [ 383.463929][T12368] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 383.472178][T12368] usb 1-1: can't read configurations, error -22 [ 383.612377][T13334] team0: Port device team_slave_0 removed [ 383.628206][T13345] x86/PAT: syz-executor.2:13345 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back [ 383.645774][T12368] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 383.692880][T13334] team0: Port device team_slave_1 removed [ 383.724084][T13340] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.748068][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 383.775167][T13347] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 04:06:14 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x140) pread64(r0, &(0x7f0000000040)=""/172, 0xac, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="fffbffff35c8d19a02bc27"], 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x3, @sliced={0x0, [0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x8, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc058560f, &(0x7f0000000300)={0x0, 0x0, 0x4, {0x9, @raw_data="66e0db2343569497fb0cba2112fcfff9306b2fbc2114a7c892bb5d017a642f54646578c36699eb1d049af30291edc9650f722c622613898a974ca7776a5059158fad36b5659c418d7af821f18c0f099e0f97714826c81592835077c53c6874587517b2eb2ecc3611863b58e7a537be3f6d3894af84be52be4b8de9e5fb8e492bbdf5efa0a94048b492449dac62542bb09b2544ed4184cd86d6372f5fa329f61dcb7178d645f8e858ea11b6abe2e50de20c7bacce318ff40324cbe59253968cfdeaaa19b0960ae79b"}}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) accept$alg(r4, 0x0, 0x0) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000200)={0xffffffff, 0x8, 0x4, 0x4, {}, {0x4, 0x0, 0x9, 0x6, 0x2, 0xc1, "fd4b7bba"}, 0xfdb5, 0x5, @fd=r7, 0x4}) 04:06:14 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012000c000100626f6e64000000002c00020008001b0000000000080001000500000008000200", @ANYRES32, @ANYBLOB="e5ff0400bddd00000800160005000000"], 0x5c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="f694b1373ace908d5b26d32ddbb52590169f564af8cc57a9465b0c9156fba7bc855682453030255b55ef9bfa45d8be6f48b245da3692353398423ad7a04df0418a953ab673fb1d4fe2800115082ff517a8e85568c561e9df13c066e93fd4344c01d038e56f5d01e280987c9804d320eccac58ecb7db6841c691fa447543f723938524928b5c727e98af0c3dc5bfa1d33697b21484ba769c7ea37a96864b2029fb1d059e2d4df6606152b091ca3b39a4aeee098c61eff4984bc262308", 0xbc}, {&(0x7f0000000040)="a707365d5c03c30710525f46f12b772daf6a33da36cc8974eb36bd9f6fb746ad4b8cbda84c66f09d2ab887c690daeddb0cc0b1b0646ae7c2ef", 0x39}], 0x2, &(0x7f0000000100), 0x0, 0x49000}], 0x1, 0x8000) [ 383.814878][ T12] usb 2-1: new high-speed USB device number 9 using dummy_hcd 04:06:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa08020004000000000000f3540105000600200000000a00d05a396461e838ae00e50000050000001f000000000000250000000000000200010000000000102000020000627c05000500000000000a000000000102000000000000000000000000000000011700000200000000007bac4215ca0f64de563b72381fcbed"], 0x80}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0x400000000000238, 0x0) [ 383.902543][T13352] x86/PAT: syz-executor.3:13352 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 383.919359][T12368] usb 1-1: Using ep0 maxpacket: 8 [ 383.933985][ T4006] usbhid 6-1:0.0: can't add hid device: -71 [ 383.940237][ T4006] usbhid: probe of 6-1:0.0 failed with error -71 04:06:15 executing program 4: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000700)={'yam0\x00', {0x2, 0x4e23, @remote}}) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000e80), 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799d52eca54b91ef4a19"], 0x13, 0x2) read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x48) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) clone(0x1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() wait4(r3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setxattr$security_ima(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@sha1={0x1, "034932f5749bd3bb8a79dc5a9e98ea4d42c16af9"}, 0x15, 0x1) [ 383.966476][T13352] x86/PAT: syz-executor.3:13352 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back [ 383.990338][ T4006] usb 6-1: USB disconnect, device number 7 [ 384.073252][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 384.083861][T12368] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 384.091984][T12368] usb 1-1: can't read configurations, error -22 04:06:15 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000200)={{0x3, 0x1, 0x1, 0x1, 0x3}, 0xa06, 0x7, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r6, 0x2000) accept4$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000001c0)=r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xd, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 384.120411][ T12] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 384.128827][T12368] usb usb1-port1: attempt power cycle [ 384.160140][T13367] IPVS: ftp: loaded support on port[0] = 21 [ 384.187367][T13369] x86/PAT: syz-executor.5:13369 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back [ 384.205581][ T12] usb 2-1: config index 0 descriptor too short (expected 32018, got 18) [ 384.215159][ T12] usb 2-1: config 21 has too many interfaces: 199, using maximum allowed: 32 [ 384.224162][ T12] usb 2-1: config 21 has 0 interfaces, different from the descriptor's value: 199 [ 384.263401][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 384.270586][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 384.282180][T13369] x86/PAT: syz-executor.5:13369 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 384.306484][T13369] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 384.318208][T13369] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (255) [ 384.341885][ T12] usb 2-1: config index 1 descriptor too short (expected 32018, got 18) [ 384.351035][ T12] usb 2-1: config 21 has too many interfaces: 199, using maximum allowed: 32 [ 384.360176][ T12] usb 2-1: config 21 has 0 interfaces, different from the descriptor's value: 199 [ 384.435519][T13369] x86/PAT: syz-executor.5:13369 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 384.463452][ T12] usb 2-1: config index 2 descriptor too short (expected 32018, got 18) [ 384.472076][ T12] usb 2-1: config 21 has too many interfaces: 199, using maximum allowed: 32 [ 384.481246][ T12] usb 2-1: config 21 has 0 interfaces, different from the descriptor's value: 199 [ 384.505927][T13375] x86/PAT: syz-executor.5:13375 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back 04:06:15 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x140) pread64(r0, &(0x7f0000000040)=""/172, 0xac, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="fffbffff35c8d19a02bc27"], 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x3, @sliced={0x0, [0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x8, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc058560f, &(0x7f0000000300)={0x0, 0x0, 0x4, {0x9, @raw_data="66e0db2343569497fb0cba2112fcfff9306b2fbc2114a7c892bb5d017a642f54646578c36699eb1d049af30291edc9650f722c622613898a974ca7776a5059158fad36b5659c418d7af821f18c0f099e0f97714826c81592835077c53c6874587517b2eb2ecc3611863b58e7a537be3f6d3894af84be52be4b8de9e5fb8e492bbdf5efa0a94048b492449dac62542bb09b2544ed4184cd86d6372f5fa329f61dcb7178d645f8e858ea11b6abe2e50de20c7bacce318ff40324cbe59253968cfdeaaa19b0960ae79b"}}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) accept$alg(r4, 0x0, 0x0) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000200)={0xffffffff, 0x8, 0x4, 0x4, {}, {0x4, 0x0, 0x9, 0x6, 0x2, 0xc1, "fd4b7bba"}, 0xfdb5, 0x5, @fd=r7, 0x4}) 04:06:15 executing program 2: socket$inet(0x2b, 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x4e22, 0xfd4, 0x4e22, 0x0, 0xd, 0xa0, 0x80, 0x87, 0x0, r2}, {0x200, 0x2, 0x400, 0x0, 0x7fff, 0x100000000, 0x800000000, 0x1f}, {0xfffffffffffffffd, 0x9, 0x20}, 0x6, 0x6e6bbd, 0x6, 0x0, 0x2c5c1de9cf648c36}, {{@in6=@mcast1, 0x4d3, 0x32}, 0xa, @in6=@rand_addr="8a26127ce46a1920472e9170987108c1", 0x3502, 0x1, 0x2, 0x9f, 0x0, 0x0, 0x100}}, 0xe8) r3 = syz_open_dev$dspn(0x0, 0x5, 0x0) r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000180)={r5, @in6={{0xa, 0x4e22, 0x7cde, @local, 0x9}}}, &(0x7f0000000240)=0x84) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r3, 0x0, 0xc2a7bc1cfb27eb58, &(0x7f0000000080)=0x9, 0x4) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r7 = socket$netlink(0x10, 0x3, 0x0) dup2(r7, r6) 04:06:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, 0x0, 0x2, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'vcan0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x51004021}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) mlockall(0x3) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r6, 0x2000) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000040)={0x0, 0x100, 0x7ff, &(0x7f0000000000)=0xfffffffffffffbff}) [ 384.623329][ T12] usb 2-1: unable to read config index 3 descriptor/all [ 384.630591][ T12] usb 2-1: can't read configurations, error -71 [ 384.631760][T13383] x86/PAT: syz-executor.3:13383 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 384.734832][T13383] x86/PAT: syz-executor.3:13383 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back [ 384.789361][T13391] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000 [ 384.814766][T13391] x86/PAT: syz-executor.0:13391 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back [ 384.834659][T13392] x86/PAT: syz-executor.1:13392 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back [ 384.850099][T13391] x86/PAT: syz-executor.0:13391 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 384.874330][T12368] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 384.903567][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 384.909981][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 384.967350][T13395] IPVS: ftp: loaded support on port[0] = 21 [ 384.983323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 384.989700][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 385.064958][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 385.071545][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 385.133367][T12368] usb 1-1: Using ep0 maxpacket: 8 [ 385.313221][T12368] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 385.321368][T12368] usb 1-1: can't read configurations, error -22 [ 385.334957][T13392] x86/PAT: syz-executor.1:13392 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 385.383529][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 385.389865][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 385.473641][T12368] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 385.733053][T12368] usb 1-1: Using ep0 maxpacket: 8 [ 385.903094][T12368] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 385.911183][T12368] usb 1-1: can't read configurations, error -22 [ 385.918667][T12368] usb usb1-port1: unable to enumerate USB device 04:06:17 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00001de000/0x3000)=nil, &(0x7f00006f6000/0x1000)=nil, 0x3000}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000017c0)={{&(0x7f00005e3000/0x800000)=nil, 0x760006}, 0x200000}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x4000, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000003, 0x156c90e384423c7f, 0xffffffffffffffff, 0x4002000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x6, 0x401, 0x5, 'queue0\x00'}) 04:06:17 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x22000, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @dev}, 0x10) r2 = syz_open_dev$radio(&(0x7f0000001200)='/dev/radio#\x00', 0x2, 0x2) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000001380)) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) r3 = socket$kcm(0x10, 0x800000000002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r5, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000001280)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x80, 0x0, "4cbe0824c8b26acb2a259699343ab3c0dc7ce0a9813789154beb2ede53b2baeaf3ee718a70a0ebfb082885ef10fca24605c56733ac2448e248a65e2b6395d31b80f3fca0694a81c82e76acadb64941a9"}, 0xd8) r6 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x611c, 0x41) r7 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r7, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f00000013c0), &(0x7f0000001400)=0x4) ioctl$HIDIOCGUSAGES(r6, 0xd01c4813, &(0x7f00000001c0)={{0x1, 0x100, 0x4, 0x800, 0x1000, 0x4}, 0xbf, [0x5, 0x20fdb5e8, 0x8000, 0x3, 0x2, 0x6, 0x1, 0x0, 0x4, 0x8001, 0x6373, 0x6a46, 0x1ff, 0x6, 0x7e, 0x8, 0x1, 0x401, 0x9, 0x7, 0x4, 0x1, 0x5cca51b1, 0x8000, 0xc10, 0x3, 0xfffffff7, 0x200, 0xfffff36a, 0x9, 0x3, 0x2, 0x2, 0x7, 0x1, 0x0, 0xdaba, 0x3, 0x7ff, 0x7f, 0x7, 0x8000, 0x9, 0x0, 0x3, 0x40, 0x56, 0x8, 0x69f, 0x9432, 0x4, 0x5332, 0x0, 0x2, 0x6, 0x0, 0x5f, 0x800, 0x7, 0x3, 0x2, 0x1, 0xde, 0x101, 0x0, 0x1, 0x8, 0x200, 0x101, 0x9, 0x7fff, 0x9, 0x5, 0x1, 0x1, 0xf42, 0xffffff93, 0x0, 0x0, 0x548, 0x8, 0xff, 0x8, 0xff, 0x1000, 0x80000001, 0x0, 0xffffff0e, 0xfff, 0x80000001, 0x1, 0xffffffff, 0x4, 0x7ff, 0x1c, 0x401, 0x200, 0xffff0001, 0x20, 0x100, 0x7, 0x2, 0x8, 0x6, 0x0, 0x7fff, 0x2, 0x1, 0x3f, 0x81, 0x0, 0x5, 0x9, 0x7, 0x9, 0x4, 0x1, 0x4, 0x2, 0x1, 0x7, 0x5, 0x0, 0xd9, 0x1, 0x401, 0x101, 0x81, 0x3, 0x4, 0x101, 0x6, 0x3ff, 0xb2dd, 0x8001, 0x6, 0x3ff, 0xffff, 0x6, 0x7f, 0xfff, 0x8, 0x9, 0x7ff, 0x7ff, 0x6, 0x1, 0x6, 0x1f, 0xfffffff9, 0x3, 0x54, 0x2, 0x954e, 0x2, 0x6, 0xffffff80, 0x3, 0xd8, 0x4, 0x3, 0x80000001, 0xff, 0xfff, 0x4, 0x0, 0x4, 0x80000000, 0x1, 0x20, 0x8, 0x8, 0x6, 0x7, 0x40, 0x7f, 0x69, 0x6, 0x1, 0x3, 0x5, 0x1f, 0x40, 0x3, 0x0, 0xffff7989, 0x3, 0x20, 0x9, 0x7, 0x2, 0x0, 0x9, 0x7, 0xc15, 0x3, 0x7f, 0x0, 0x9, 0x200, 0x8, 0x200, 0x9, 0x5, 0x5, 0x5, 0x0, 0x1, 0x1, 0x8000, 0x6, 0x30, 0x9, 0x5ecf, 0x0, 0x8, 0xedf, 0x200, 0x20, 0x1, 0x0, 0x0, 0x2, 0x2, 0x6, 0x81, 0x2, 0x4, 0x8, 0x2, 0x8, 0x2, 0x3, 0x3ff, 0x7, 0x81, 0xb5, 0x1, 0x74, 0x7fffffff, 0x800, 0x2, 0x36d, 0x1ff, 0x20c0, 0x9, 0x2, 0x4, 0x81, 0xffffff01, 0xffff90c1, 0x6, 0x4, 0x80000000, 0x7ff, 0x200, 0x1, 0x0, 0x7ff, 0x1f9, 0xe3b0, 0x9, 0x5, 0x4, 0x3, 0x80000000, 0x0, 0x89, 0x81, 0x5, 0x7fff, 0x7f, 0x5, 0x401, 0x2, 0x100, 0x1, 0x0, 0x5, 0xffffffff, 0x9, 0x9, 0x4, 0x7, 0x71, 0x2a1d, 0xfffff27c, 0x4, 0xedc, 0xfffffffc, 0xffff, 0x3, 0x3, 0x3, 0x8, 0x10000, 0xffffffff, 0x5a864676, 0x7, 0xfffffffb, 0x47, 0x2, 0x6, 0x3, 0x80000001, 0x2, 0x4, 0xfffffff8, 0xff, 0x1, 0x3, 0x6, 0x3, 0xd7, 0x401, 0x2, 0x7, 0xd3, 0x2, 0x94c, 0xfffffffd, 0x7, 0x3, 0x1, 0x7fff, 0x2, 0x7, 0x1, 0x3, 0x7, 0x8000, 0x10000, 0x2, 0x9, 0x5, 0x5, 0x3, 0xca89, 0x5, 0x9, 0x0, 0x3, 0x7, 0x100, 0x8, 0x9, 0x6, 0xffffffff, 0x0, 0x2, 0x401, 0x0, 0xfff, 0x72, 0x9, 0x8, 0x665, 0xfff, 0x76, 0x4, 0xffffffff, 0xa6, 0x5, 0x7, 0x10000, 0x9e8, 0x9, 0x0, 0x5, 0x9, 0x8, 0x6, 0xfffffff8, 0x58, 0x80, 0x3, 0x20, 0x7, 0x7, 0x4, 0x4, 0x3f, 0x20, 0x8, 0x6, 0x1, 0x0, 0x5, 0x7, 0x5, 0x7, 0x5, 0x1f, 0xd0, 0x1f, 0x10001, 0x10001, 0x7, 0x8001, 0x4, 0xe54, 0x8, 0x200, 0x401, 0x9, 0xfff, 0x81, 0x200, 0x8, 0x22, 0x5, 0xfffffffc, 0x92, 0x1, 0x4, 0x800, 0x6, 0x7fffffff, 0x9, 0x7f, 0x3, 0x4, 0x7, 0xa0000000, 0x1, 0x6, 0x101, 0x6, 0x3, 0xf29e, 0x0, 0x4, 0x20, 0x96df2f, 0x0, 0x2, 0x8, 0xa7, 0x1, 0x0, 0x8001, 0x10001, 0x8, 0x0, 0x4, 0xff, 0x40000000, 0x8000, 0xffffffff, 0x10000, 0x7, 0x400, 0x4, 0xc4, 0xae, 0x1ff, 0x0, 0x2, 0x10001, 0x59df, 0xc3ca, 0x1, 0x6, 0xef, 0xa9e, 0x43, 0x0, 0x1e, 0x1, 0x1000, 0xd3bc, 0x3, 0x1, 0x10001, 0x800, 0xf0, 0x7, 0xffffffff, 0x8000, 0x2, 0x8, 0x9, 0x1, 0x10000, 0x6, 0x28bac89, 0x5, 0x5, 0x3, 0x4, 0x6, 0x7ff, 0x4, 0xa5, 0xffffffff, 0x3, 0x3, 0x5, 0x9, 0x8001, 0x400, 0x40, 0x884f, 0x5, 0x3, 0x24, 0x1, 0x4451, 0x81, 0x20, 0x2, 0x5, 0xffffffe1, 0x7f, 0x80000000, 0x80000000, 0x5, 0x6, 0x7fff, 0x1, 0x1, 0x8001, 0x4, 0x5, 0x5, 0x1, 0x1, 0x4, 0x1f, 0x6, 0x5, 0xff, 0x9, 0x7, 0x1, 0x0, 0xfff, 0x5, 0x4, 0x3, 0x10001, 0x0, 0x6, 0x2, 0x400, 0x80000001, 0xffff, 0x10000, 0x7ff, 0x0, 0x9f, 0x1, 0xff, 0x9, 0x5, 0x0, 0x7, 0x40, 0x9, 0x0, 0x1000, 0x1ff00000, 0x6e, 0x0, 0x8000, 0xfff, 0x0, 0x5, 0x45b, 0x9, 0xfffff800, 0x1000, 0x9fd, 0x80000001, 0x2c, 0x3, 0x1, 0x4, 0x5, 0x9, 0x6, 0x7, 0x10001, 0x7, 0x4, 0xfffffffb, 0x7, 0x80000001, 0xae21, 0x9e1b, 0x3f0, 0x4, 0x1, 0x2, 0x1000, 0x7, 0x7, 0x4, 0x6, 0x0, 0xfffff001, 0x0, 0x100, 0x9, 0x1, 0x8, 0x20, 0x38, 0x7ff, 0x0, 0x7, 0x2, 0x8000, 0x8, 0x200, 0xf7, 0x3f8000, 0x80000000, 0x0, 0x40, 0x4, 0x80, 0x4, 0xd0c, 0x2, 0x2, 0x1, 0x20, 0x3a07, 0x4, 0x1, 0x401, 0x1ff, 0x3, 0x0, 0x4, 0x0, 0x33a, 0x8, 0x9, 0x3ff, 0x8, 0xf0000000, 0x7, 0x93, 0x7, 0x8, 0x9, 0xc6a9, 0xfff, 0x291d, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, 0x6d5, 0x210b0540, 0xfffff800, 0x80000000, 0x1, 0xc16d, 0xff, 0x80000001, 0x2a, 0x5, 0x34, 0x81, 0x9, 0x6, 0x2, 0x2, 0x6, 0x800, 0x5, 0x4, 0x40, 0x101, 0xf6, 0x3, 0x60ad, 0x3ff, 0x40, 0x0, 0x3, 0x3, 0x8, 0x3, 0x2, 0x80000001, 0x0, 0x3, 0xaa6, 0x9, 0x4, 0x10001, 0x8, 0x0, 0xa2, 0x7f, 0x6, 0x9, 0xfff, 0xff, 0x2, 0x8, 0x8, 0x4, 0x5, 0x400, 0x9, 0x1, 0xfb6, 0x5, 0x3ff, 0x5, 0xff, 0x9, 0x74d, 0x4, 0x0, 0x80, 0x0, 0x3, 0xb6e, 0x9, 0x1, 0x6, 0x1000, 0x3, 0x3, 0x98e, 0x9, 0x200, 0x46f, 0x8, 0x9, 0x3, 0x7, 0x3, 0x2, 0xffff, 0x6, 0xffff, 0x3, 0x40, 0x3, 0x80, 0x200, 0x2, 0xffffffff, 0x91, 0x8, 0x9, 0x1f, 0x32fa, 0x0, 0x8253, 0x3f, 0x9, 0x9, 0x4, 0x8, 0x7f, 0x8, 0x7, 0x1, 0x1, 0x5, 0x3, 0x1ff, 0x4, 0x0, 0x7, 0x5c3, 0x3, 0x200, 0x1000, 0x20, 0x8c000, 0x6, 0x6, 0x1, 0x2, 0x3, 0xd652, 0x9, 0xfffffffe, 0x3, 0x10000, 0xfffffffb, 0x1, 0x1, 0x5, 0x8, 0x6, 0x2, 0xfffffffd, 0x101, 0xffffffff, 0x6, 0x8, 0x9, 0x88, 0x1f, 0x6, 0x6, 0x0, 0x2, 0x9, 0x1, 0x2360, 0x0, 0x1ff, 0x4, 0x1f, 0x3f9, 0x3, 0x9, 0xfff, 0x6, 0x800, 0x1000, 0xfff, 0xfffffffd, 0x4, 0x7, 0xac46, 0x4, 0x8001, 0x2, 0x5, 0x9c, 0xa1, 0x10001, 0x8, 0x80, 0x7cf2, 0x7, 0x7fffffff, 0xffff, 0x9, 0x6e09, 0x8, 0x3, 0x6, 0x7, 0x10000, 0x6, 0x5, 0x63e1, 0x4, 0x5, 0x2, 0x1, 0xffff, 0x0, 0x4, 0x1, 0x8, 0x8000, 0x1ff, 0x80, 0x52eb, 0x6, 0x0, 0x6, 0x7, 0x6, 0x7, 0x5, 0x4, 0x7f, 0x2, 0x20, 0x8, 0x10000, 0x39, 0x1000, 0x2, 0x80000000, 0x200, 0xffffffff, 0xfff, 0x4, 0x7fff, 0x0, 0x9, 0x7, 0x3, 0x3ff, 0x418, 0x40, 0x4, 0x0, 0x3, 0x4f, 0x9, 0x7ad9, 0x0, 0xfffffffa, 0xffff7fff, 0x10000, 0x20, 0x8, 0x1ab, 0x8001, 0x0, 0x9, 0x1, 0xc23, 0x1, 0x8001, 0x9, 0x0, 0x8c1c, 0x3ff, 0x1f, 0x1f, 0x4, 0x80, 0x2, 0x135, 0xed, 0x9, 0x8, 0x5, 0x80000000, 0x1, 0x0, 0x1, 0x1, 0x5, 0x9ba, 0x1ff, 0x9, 0x0, 0x2, 0x69, 0x400, 0x751e, 0x9, 0x5, 0x8, 0x4, 0xffff, 0x1, 0x400, 0xc8, 0x9, 0xb2134b3, 0x4000000, 0x2, 0xe0, 0x10001, 0x3, 0x0, 0x9, 0x0, 0x1, 0xfffff441, 0x2, 0xb13, 0x2, 0x3, 0x20, 0x52f, 0xfffffffa, 0x8, 0x4, 0x1ff, 0x0, 0x3, 0x7ff, 0xfffffff7, 0x10000, 0x101, 0x2, 0x7ff, 0x32729085, 0x3, 0x4, 0x9, 0x5, 0x7, 0x0, 0x401, 0x6, 0x5, 0x0, 0xb95a, 0x8001, 0x9, 0x2, 0x5, 0x8, 0x112d43a3, 0x747, 0x0, 0xffff4835, 0x0, 0x10000, 0x4, 0xfff, 0x6, 0x8001, 0x9, 0xfffffff9, 0x9, 0x9, 0x200, 0x4bda, 0x39a5, 0xffe0000, 0x3, 0x9, 0x7, 0xffffc4b7]}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="2e000000130081c5e4050cecdb4cb9040a485e431d00000081fffffff08ef9000600b0ebb06ac40006001400f9ff", 0x2e}], 0x1}, 0x0) sendmmsg(r0, &(0x7f0000001540), 0x24c, 0x0) 04:06:17 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mremap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 04:06:17 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x132, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) 04:06:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00, 0x400000000000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000000)={0x28, 0x14, 0x207, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@nested={0x14, 0x0, [@generic="2820537ed2298aab4f64135760"]}]}, 0x28}}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 04:06:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0xfffe, @initdev}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0xffffffffffffff01, 0x0, 0x0, 0x0) connect(r1, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80) [ 386.071807][T13413] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 04:06:17 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x2) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000ffffffffffffffdf00e5000000000020380003"], 0x39) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 386.114909][T13413] x86/PAT: syz-executor.4:13413 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back 04:06:17 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000340)=""/13) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x38) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r4) ptrace(0x4208, r4) ptrace$getsig(0x4202, r4, 0x5, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x10, 0x3, 0x1ff}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={r5, @in={{0x2, 0x4e24, @remote}}, 0x7fff, 0x2}, &(0x7f0000000300)=0x90) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 386.261673][T13413] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 04:06:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r5, 0x2}}, 0x18) r6 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r6, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x4) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 04:06:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000070d00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012000c000100667265746170003de64ccea43881f3fb68634ef7a5de59001c000200080016000100000008001800215a354b0f6be68000000008000700ac1e00010c00030007"], 0x58}}, 0x0) 04:06:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0xca600) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000000c0)="1800000069000104ffffff0e00"/24, 0x18}], 0x1}, 0x0) 04:06:17 executing program 0: clone(0x40000000040007fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r2, 0x2000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)=0x0) process_vm_readv(r3, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/121, 0x79}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/102, 0x66}, {&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/150, 0x96}, {&(0x7f0000001480)=""/55, 0x37}, {&(0x7f00000014c0)=""/255, 0xff}, {&(0x7f00000015c0)=""/241, 0xf1}], 0xa, &(0x7f0000002940)=[{&(0x7f0000001780)=""/125, 0x7d}, {&(0x7f0000001800)=""/254, 0xfe}, {&(0x7f0000001900)=""/32, 0x20}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x4, 0x0) unshare(0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, 0xffffffffffffffff, 0x15, &(0x7f0000000000)={0x3, 0x2157, 0x8}) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)={0x1}) [ 386.503027][T13441] x86/PAT: syz-executor.1:13441 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back [ 386.544735][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 386.554238][T13445] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 04:06:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0x29d, 0xfa00, {&(0x7f0000000180), r4, 0x4}}, 0x335) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x0, {0xa, 0x4e21, 0x7, @empty, 0x4}, r4}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) r6 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r6, r1, 0x0, 0xffd) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000380)=ANY=[@ANYBLOB="450000000000000000000000000000000000000000000000000000000000000000001300"/70]) 04:06:17 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xd7, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f00000000c0)=0x5000) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0xffff3c4f, 0x3, 0x9}, 0x7f, 0x7}) r7 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000080)={{0x6}, 0xff, 0xff, 0x18, 0x3, &(0x7f0000000040)="9856a00b908152c1930ab1fa37b06925b70804747c47a627"}) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xf6e940e2db80cc71, 0xffffffffffffffff, 0x0) 04:06:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000000)=r5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7, 0x30040) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x99, 0xc0, 0xbf, 0x40, 0xc72, 0xc, 0xcd27, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1c, 0x0, 0x0, 0x9f, 0xc4, 0x95}}]}}]}}, 0x0) [ 386.748749][T13460] x86/PAT: syz-executor.3:13460 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back 04:06:17 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x400081, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r6, 0x2000) write$FUSE_BMAP(r6, &(0x7f00000001c0)={0xfffffffffffffc7e, 0xffffffffffffffda, 0x6, {0x8f}}, 0xfddf) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000100)=0xff, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r10 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="33a450d36f7089e17339e34fc17254a31a07235027fefd5afcb8a29e66d95d14f17d6341185459d0ec53d0c320c67b0605da0bdbb87fedc4fc548d6e628aa7951191d508ebe5f1596de28350af6d2d76aaba5f692508df461ff274eab997bb17aded82aece22168686e3f8b46876024a7041e11a91d7971017c229d6cba57430df90a213bad0ee501a86", 0x8a}, {&(0x7f00000002c0)="e0992cf8b0af6f4511845501934a5b7dba6160da5bcd4502dda9968c6035b7694746f40ff341bdb41695f22895ea9473831147dbf963992cc922025a4a692c56b95027816c1d06ca1896a3275f9354a23b7138937b6ba39ac1139ea7342f3350938dea3ddc46ec85099e9cf6905e8af7e7dd2bfeb854cde684146d229eaa8edac2a79fcbdae93299879e721b07d3ae85a0d88510fe3b2baf2dddc03a1801768a8f981d81026aa180b30e38cf77a50da16b4d8ea147518588dabc4d4d2e5fa7d581724bb68f8a5f564c750bb27265576c", 0xd0}], 0x2, 0xc) ftruncate(r10, 0x200004) sendfile(r0, r10, 0x0, 0x80001d00c0d0) 04:06:17 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0x10000000006) perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x10000}, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140), 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, "b13e1c20d1764d052a4289a71186ca1abfa7f39eb694f4602948f6585c2842ac42cb2f94b098e98f2bcd6128dab4a71d544e96e01e3a9a3548ee5f554c06d963346edb9d133e86fdd31c21e9aaffeb52f7cd63297b1fd0db1845e12bda3ce00f0cca0e6ac9c42a61e687c24c0553b408359c86c7bfd7a30944ac327f982b011258e85ee00f050c38e73199d07b72b225a96ab0fb5a9ea944a233e46cd4c25aaa0fe04bd9b3203f61a06c8f094563ffa0078e50248ce1acebc03c75069eb1cb20ebbe30ec063f9ebc45290dc4f8b56ebb08d32e4df04785fd385029f766a0b96db6a1b6615de63393fe97082c076a7170d2b1c06ce0627d6acae850c2b95f38b079a352f27bf6f5460078b8e597c1d3bdb5cf9e73f42eec5aea224ab44b94e18e812864faeaf770ba7471f99b07d41d573d1d4c3833fb4410ea36d710bfa66ccdb14a1927a678f873b023e82c341a43704adb37242a67b2a46d02ab7aee23cf3030a2f3dd58eece667b6e9393ee8d36649e37e83b1c73c0ef65b4df6173c1c25324fbb9afa1361dc4275f152deb03d7138a688eb9dc66e7845ce1be5647bf740b0e1dd038120ef1e3e1cf420cf8b723bef771376e433935e4f9096a10c4a969aceaac4791c41f365b274dab49bddf51b22a24c05ceaedcbf45febc927e98f410d38247d7679cee7b0d3041eaebd7821924ad31e7c5137bf87ce1ec537a981779f0a4c57bbbb5c641cfd02e1e3904f48b0be96fc9851b6bc8c4260168eea9d9d111e2777f78a9021d5eb0166e39410bf279656770263ca2fb7ac0e30d5e168f8cf4bc5665d057da939b770568e41d0fcec5d6aac0bf4ae66fb099b786cdce7f6a9bc00b83d8ed72440a9724d4ef8af71c7efbc31397930cdcb99d30502ecbcc7ddb9161ade16a1badbd7ea3c6c65b387b46234c4660c816506a2f76264bba07ecb685532116bd971464b58e3ea0a29c2fa1d49d9c6308806db01326e9a1b6bbb556f6479b29f48718e211d75f08d0fb477ad8dae5aeaad7e176b2c5ae331ef78212e9dd7e506549dc74ffd940dc91d74aee2fa7f28855919c163f443804e2a072ad8add2be84df87e414afcab0f8e6f67d3ebb1778a6798d50233da09d29b95c0da97304b7a025e50a7c89e614c63bc69477bfe0e5ae2c468332d134f9e22b19eb2f01c8e8d5148b9b980f8b9aa0cab9ba89aafe16d6a8cf9cb5ae659d8fba88e2841f3d6ac0c44dd9f03787d357fe31a4f551e247bfb73b1f2aa1e208c36aa90dcfc4da8877967c05fe951716ec2293d79c6083e79061bbe18150e2af1d889bb4e87c7735b0e7b88a3109a906d1bd4bf9b98c2462420ecc4e9f3a274a6678bc56e9aa7f3d64677141f874f35d00d04a1dc83126ccd69a0221305a3a5418ec24e163b165c1e4533c38f3d213de4012aece68ed11e2f42325d6da5eef78ee985f81a7991e3d1ff69188059c292779579418ef81177fa94b43cdd0fbf92d31f0fb592a864ddc98ddd5b49ece865e7c7a6c873169d0eea46c1a44f645b1cfa40849ffb9f5355ab396dc1a875180f17103be63be4e7d1920949c59ba5d47341c176ac307e165b9733ac5cd9e9691f5ecd76b467881b78f217d50903a06c57270f4104fd26d496dd7e08c27209185761882923f6447c73d53a74e28132e6bf97ee4f2df9d03be88653a9a7251d8df247f1a75f91f95886ce317e3c125aa7686eec86708fa72c9b33a664e76c0ed891ff9d840ac121ae3f96d32330a14fd76df19c7ae0434e2103d6e9175da0b6cc7a007a0a18615271771434959de305636cf7fbfdd16239bff7dbc656a702ebd48f9a2b1937cca80604ec525d292bb7337459235ad047c6933b6c81bd966ea60ec863de568a9e6d8e0378916f441e0f8b2b74df49b9b24094fd643413469428a537aed19b72bf9381ebab4cd57400ecad1cf1b792e9610910d02f9a779b009840e3f1a1395a87f1e590c33018be80a3f34bbaf49e415ba7d3858b40788cd19211b8cad3789870fb252f8991d64bff9558a67a2316ec2402c2f9c52de42e6389fc90bc4379f7b899b1a943035d64f20b7766edf08fdfa185d00493031f0d3f9ad7dce841f725c5adcba896a76857918a2f54c8aa2e50f71eda35b8fea3732a02c146201ad9f4b65b7caa09e2a73f72aee1ce428a35489038d5cc859fbd48be8da5d088ccab897a248fe418b89b409ab5507af725f077d264abec5b53667ca06aed03815dd537535a3360a50ca3d09c025b5057362c7cb5a4b99c58ac64fe813f4d7f2cafbc3048835ec43fa68170ec7310342134c9b5ec417763db145555cdd37f24b27b0911d172710b74d3c754aac02b24030166cbf2eccfaf1e909b629b7919db1351cd0167e8b6bddc5ce4b7e13cbf0c095f636427d440d058e7637eb117947fc6a60942d10bd455030ee38fc447fd3e6232efba65def558dcff60274e6b2ad62464b4f767bcfec22c681c12bdabf1fedc3946f45c9a34a9169f79ea60a9d190dcf1ce14957382af602dd134b610b269247f38c3d4e233f2fda399dc4cf09139cff9e9c731f8bf940df3cbdf9355f604bd0f3d3b20a6cfc39a7d9ff74f734750187b30c1a970a432bf7e9417cc87d8dea00c4e1885845e1a59bc6a5487687c5bca514e9dcf372bcdc0fe4a47f3e4ac456b1a812e69f88b2a8a964d946cc102ba6f3a7c965df24653c6384d810cf157c8581d4b40e874aded8d227a25fab9889f02698bf52980f048408de4a96226949eba5d1b7f41fce61ae1ff9388e096646ddda4c222f7b9bffc1d3e5b645b6e248637698f6a5be1dc03ff7aa9f418153beeef9b9d67ac5b6fc888e5adf0db41a6d5cac2b600af3b428a1294f4fdb4cf64ccc254c1c7ef71b9be3afceb797fc9504bc3f3dde217687d47cd445c44bea2b16eacae76f16d868b77065b189bd7c4678f3a5fc99b4d020d42972d010b7a6b22de46b434f2d8ec4f567af2d531817ec81ffa36cc27d073a66d2152f1be2a8dce08e98a00f473f22e680cf0ebdcf37936cee60f99eec69503a15d8e36f8d599b535021693fb52f9dc93e315d6e849bd4bf9d05fb25f0b09de91b73ca4edfbfa04d9262d449eab2be542ea30f316384609efc52ed641a9e32d48e4a57c65e8bfa5c13e769d5402a0b125c17360800bf0da8592a75abe647f1d9b1072942947da82e701308b60ecdcfd40d7b6cf44b443493ef0466790547c0a8e5914484969e52cba3787c41df965f91ed7074cd62a63db7e1c35b8f9ac30521295ae7b9c81143926f1dd36aefdfbcd7056b0d4209cabe113a18c58ecc062df687666725707029a8be3ef5721484bd429bab33fceb76c6a0f079da8819d0d9565f5e4ed45eb531f9501b85b619b5323169b0297b7cedcf6f288225dd5e6a7f52c1b96cd38dd94b2f6b8cfc6dbd7862901a5295dca5ecbae72344f41c4a222bd6711831d265b910d547501116bcfbf3c9e104b446175c4c8a4e56445ca22f9363f0f54858a8eb4a1c43103bca578c5b0ee372efd705a950510dbbfa4f74c8ddb4bbc1f07dd410ebb39c01f4da8a0bad2d3d35df3a12a9fa2daf44c8163d59aba8a7351ecc9fe4cd25b987dba700e73d7174307161adf70db0e7a802d7c9ec1b912ee58b0a35c2c6f40f112d70ab5aa708071379280c9ffbceaf0a4ec45c89ac0bf3ef40538302b685e24574da8bde8654e99eff66c9ad5e6beafa0e48e1c293c53d955980346cbc052d15e5d1f3baed388dfaa72ca089af06ae757466a704b93a0ff13cb5c722f0b872432a4fd4513ed56825b13ddd4d8c02eb624c8358199f52679421ab0e1792869f6b4aea523a1079b3138f1ef761c6df102096eff43ddb23ee668b9cc5161433feb318903b58387c3dae2833a8c770e7c6e27c31a1fca07377fbb07f11911be6192f7518a8d089b89826e48b28f5c8a00784bef9b2f68c90838eb2c9fcaeda4bb76782510082c977a7ecdd5743e9da8f088a3b67a25cfb25db4a709b6cbf5425e7efa8c2e472464606d9ccd2fc0f73cd1d51a5aa19d9caba10be2147f8e1ad763ba45693f9f078b0716cf588142be847ca67dc132c5782fed12b7d95c55a9bcfdfb85cb48698a45621cc2f1c85559617ece7def71486290b0cf8e987e8788e1a13f17e3f24b93ed2009ebe42e3bea9571f98b39b787c107dcada3a36fa1fe93736e74ec34af80a182cf0adf2846577f1d474c9ff1b4b8a2cfe6a2d445029ca77088b9c84be63655d48cbc5f61b18d7cda0d141f2db6bc3c479aa6ca19638e2c37da38768eb8820e5679345d2abe8033318eb952e297e17dacaaee3df7ef1d6cd554e9b1b453c44e3d4e030e25c5f9ed094100f6d9b1dc5dab371436ab252cc4d7fdf8fe4b7f36ab71f2bbe3878217b151664c3b9ae970e473ae164d77f294ca8ad58634ea446880e8327fc7af2a088e39508443a601eaa00742a7d0ad459dcac24a60edcfa6ac9f72f428c2b8dd30b8278e28f25a1a129d23cacd765de4c4aa52819578951bb8e311e8621f627e3463e2562b6dbc8d1c431c240f1424599438b9c94723f79ffd1fa1bc94104e4598bd43244302f86ddbe47ad8671e25f406aa507ba45bdba09841827a697cece002f79ec7cf14488789d754f84818d180bd04a11cb2115441a402bea2be749ef233bcd26ca27df828ada877a893e54ea3e6ea29e62d6e7693af7cbee59ccdb4045d0e6eeec3d8f59205f324a5f7cf5f871929c83ada04bc5d3990288dca5eb312339933ffb1031e05866e1b2d0aad0ca940795458b7d6c8a3750a76e1e6c8ccd48ca542d6c51164431d70c9d35f0f828cdec404a175a44bc2a9651ec5281c0f3aee9e4375f0eb139f58fa4419fddf9ebe2f8f37121a57397e7e830ac097ed375521a68f7cdc471621b769fef40cd19d8d55a82e27bf5b0cc4182359db7c9066e2ee10df279a89e96fcfea225995f065f7f286b8c8ef9b6c82a34df14dda2f737f557578ce5b15944e3149110102d80465c1b436b6bbb16fdc64a9d130ec7644bc162f0e2c5669a9254970a062561e269d85b72b4748d71d88ca20778287bc3b9613043166862f133f366f6361b9e1d040bbcd9728a70fcf3be7ea8fe0f55980ed03f336ec49f7cb6899813acf47d3b2413e7b637b764fcb9003ece75f8a255b9cdc71f80dbbaa7eaa2111b5551feeb7ea31620a2c88897538915abedcd184d57c79d81505985f561820449c330bc3412bffb68c4c743c5a5a3acafcf00d7561a66f70e5835da530ba62f221211e1fefdc1fbc8c05b1b68b7eb2afac6ebbbc0b961b8ef8b27b555ce7641f6601ac19d5f4adb06b40155a2085ff32de5b2c5edd96a01a14d1bb49b58f1fd718bec428043819b8070e46f0215d2153318320754638d9b40a5214784e7c1f80dde05500cfe8e4dff855504e099634fb3d44829453cf4ac8db7e5a4144f96d4508de90ada04240637fd5b261cfbb80c8d9ccdea6c1d3485a85663cff9749133002c7f9c6ea4de1b50fe90dae397f6b5833e943e6c5f60e10d805e97e6869488b857b44d8c94276f668257c223e2e26dff75222d3f304f8a040ce058e1b7b3bc5f0b69c310beea64212ef0a54bc9fb858c25681cee574c532b64d4f8241e0b855f7f79d0a1ea22fc3d9ad5a1658b5c4d9d417e9eae47c81628341172609a8ef8c72fb6e4e48da6a10207e56b727f65c82d49e2dbb44b492e1265c2b28f98980334ccc3abb0cfd15d73c2f38f4c824022aa7a0ac0b7d35eea934d3455d21e8c710474e54bdf29be107ebc00", 0xa943708f26830065}, 0x1006) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x47) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"]) 04:06:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0x29d, 0xfa00, {&(0x7f0000000180), r4, 0x4}}, 0x335) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x0, {0xa, 0x4e21, 0x7, @empty, 0x4}, r4}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) r6 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r6, r1, 0x0, 0xffd) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000380)=ANY=[@ANYBLOB="450000000000000000000000000000000000000000000000000000000000000000001300"/70]) [ 386.824839][T13460] x86/PAT: syz-executor.3:13460 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back [ 386.861994][T13467] x86/PAT: syz-executor.0:13467 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 386.953340][T13474] x86/PAT: syz-executor.5:13474 map pfn RAM range req write-combining for [mem 0x1d3953000-0x1d3953fff], got write-back 04:06:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x10001, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)={0x53, 0xce4, 0x7, "5efedd8b881a50ec609fa33adc3adfcc73836488a16541b404c5dd8f0c373a9dbd6fc5c9440aaf9520039977028f1ca8e3b9641d12b107415d54afb22e0ad49df89acb29a0f83822286529a588f24da6e532b1"}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r4) r5 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1c) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r6, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0x12f}]) 04:06:18 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffc77, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010006b5d27483a26e6bd8812c15a3601040000009c820057ff14eec51e0000c5b02a3d312e54a7c32321078d6315874aef5c4251df6d81489bb5f952f83a85ea688f320c26304dec91dc133408806f3d7e7d3764d386ff8fa6a8fd8166efbd3dffbdeb86e1b1d3c4", @ANYRES32=0x0, @ANYBLOB="000000000000000d3db2f0736974185fc1c700"], 0x30}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 387.025147][T13474] x86/PAT: syz-executor.5:13474 map pfn RAM range req write-combining for [mem 0x1d393a000-0x1d393afff], got write-back [ 387.074671][T13482] x86/PAT: syz-executor.2:13482 map pfn RAM range req write-combining for [mem 0x1d3992000-0x1d3992fff], got write-back [ 387.132114][T13478] x86/PAT: syz-executor.5:13478 map pfn RAM range req write-combining for [mem 0x1d36fe000-0x1d36fefff], got write-back 04:06:18 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce3ad20012009335e8a000000010902240001000000000904b300020cc1470009058d02000000000009050f000000000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0xac, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001440)={0x34, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESHEX=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) 04:06:18 executing program 4: add_key(&(0x7f0000000280)='big_key\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="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", 0xffb2, 0xfffffffffffffffe) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r2, 0x2000) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000000)) [ 387.172584][T13490] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 04:06:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xf7) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 387.303376][T13497] x86/PAT: syz-executor.4:13497 map pfn RAM range req write-combining for [mem 0x1d6ec5000-0x1d6ec5fff], got write-back 04:06:18 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) syz_usb_connect(0x2, 0x2, &(0x7f00000010c0)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x0) [ 387.420741][T13502] input: syz1 as /devices/virtual/input/input7 04:06:18 executing program 0: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) syz_usb_connect(0x0, 0x27, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe7, 0x42, 0x78, 0x40, 0x5050, 0x106, 0xc912, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x100, 0x1, 0x7f, 0x5, 0x0, 0xfd, [{{0x9, 0x4, 0xb4, 0xfe, 0x0, 0x34, 0x60, 0x83, 0x0, [@generic={0x7, 0x311d03fbc72c1d53, "4b119083f2"}, @generic={0xe7, 0x0, "8c56bf303bfdef5a766edfff34d48360d1238b10d89365abfc5256e64ed0a8d7563f12e943d3a3a8837191420b22b4293c50697940983f5d6ae1116fb95482333b3a2db691bc27b34c433037d67370ed61719437a2bcd7ce86cd56c42c717b9cde0302f8682b207b52649c38ddd05ced7c46f62ef78c2daf0d1be7447101a896559188fedb5da268aefae3433a71b4266fffeb1e8cc81f40c2ad9a3afb8c157554cc187f7871e14af1d1a232d5405b21fd1ca152ea0dbeb264c4837c97412350bea68f87b555d54b745212d9d900e295e1dd118394ed2043244b618f3f52eb1717ac8a52fa"}]}}]}}]}}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r2, 0x2000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) [ 387.593173][ T4006] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 387.617052][T13509] input: syz1 as /devices/virtual/input/input8 [ 387.656137][T13500] x86/PAT: syz-executor.4:13500 map pfn RAM range req write-combining for [mem 0x1d36fe000-0x1d36fefff], got write-back 04:06:18 executing program 4: add_key(&(0x7f0000000280)='big_key\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="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", 0xffb2, 0xfffffffffffffffe) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r2, 0x2000) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000000)) [ 387.727282][T13482] x86/PAT: syz-executor.2:13482 map pfn RAM range req write-combining for [mem 0x1d393a000-0x1d393afff], got write-back 04:06:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x400100, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000100)={0xfff, "68bf7697794e13e3352fe62ee52c259ae893d0903059832f77896d0237fcdedb", 0x1, 0x9, 0x9, 0x10, 0x2}) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) creat(&(0x7f0000000180)='./file0\x00', 0x100) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000280)={0x0, 0x2}, 0x8) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000012c0)='*', 0x1}], 0x1}, 0x0) sendto$inet(r2, &(0x7f00000002c0)="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", 0x1000, 0x54a034c4af9bb4b3, &(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) [ 387.844763][ T4006] usb 2-1: Using ep0 maxpacket: 32 04:06:18 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) recvfrom(r0, &(0x7f0000000000)=""/31, 0x1f, 0x0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x2, 0x4, 0x1, {0xa, 0x4e20, 0x1, @remote, 0x1}}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) [ 387.885374][T13521] x86/PAT: syz-executor.4:13521 map pfn RAM range req write-combining for [mem 0x1d42ef000-0x1d42effff], got write-back [ 387.966549][ T4006] usb 2-1: config 0 has an invalid interface number: 179 but max is 0 [ 387.975017][ T4006] usb 2-1: config 0 has no interface number 0 [ 387.981316][ T4006] usb 2-1: config 0 interface 179 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 387.991679][ T4006] usb 2-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 388.000877][ T4006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.009795][T12368] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 388.020923][ T4006] usb 2-1: config 0 descriptor?? 04:06:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000140)=0x4) ftruncate(r3, 0x200004) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000000c0)="06bb39d041b7d394bfff48b7f2a62f6111f3b1fabd6d56218dcb96a401077e5ab136cb9342eac9e1377af6ba49d008fae2507859f322cefe77b833ea89fa7b2f7b010610904e0802bef8c8a5e9c42df82f3d") sendfile(r1, r3, 0x0, 0x80001d00c0d0) 04:06:19 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000046300e087c2c12052d88000000010902120001000000000904c80000ffffff00161a799458c567cdcbb37eb170017e2c220e62123b307e67cf4cbee170c63996a45107aba2d36b52494a379bf149d82d9700b9e3fabbf2b26edcdc1794e59e02ab92883702a2db3f0ec2a39b456c812ae0fb143d07eaef1433c34d6a417285b30246"], 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) eventfd2(0x400, 0x800) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r2, 0x20}, &(0x7f0000000140)=0x8) [ 388.283240][ T4006] rtl8192cu: Chip version 0x10 [ 388.373391][T12368] usb 1-1: config index 0 descriptor too short (expected 256, got 21) [ 388.381828][T12368] usb 1-1: config 127 has an invalid interface number: 180 but max is 0 [ 388.390596][T12368] usb 1-1: config 127 has an invalid descriptor of length 7, skipping remainder of the config [ 388.401226][T12368] usb 1-1: config 127 has no interface number 0 [ 388.407668][T12368] usb 1-1: config 127 interface 180 has no altsetting 0 [ 388.414914][T12368] usb 1-1: New USB device found, idVendor=5050, idProduct=0106, bcdDevice=c9.12 [ 388.425503][T12368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.433075][T12270] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 388.435826][T12368] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 388.450227][T12368] usb 1-1: no configuration chosen from 1 choice 04:06:19 executing program 3: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000032, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e7c66b08cd06040174ba000000010902240001000000000904590002afdf9c0009050112080000000009058c070000000000"], 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 388.683157][T12270] usb 5-1: Using ep0 maxpacket: 8 [ 388.803197][T12270] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 388.811804][T12270] usb 5-1: config 0 has no interface number 0 [ 388.818328][T12270] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=88.2d [ 388.827667][T12270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:06:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x20, 0x40) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) fcntl$addseals(r1, 0x409, 0x8) fchmod(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup3(r3, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000140)={r7, 0x10, "87886c35c5ab2e8e8e243be6a8ce251e"}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={r8, 0xe, "3f957cf649d1e0179aafa5e51ad9"}, &(0x7f0000000200)=0x16) [ 388.853680][T12270] usb 5-1: config 0 descriptor?? [ 388.926500][ T4006] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 389.128717][ T4006] usb 2-1: USB disconnect, device number 11 [ 389.545444][ C0] net_ratelimit: 22 callbacks suppressed [ 389.545466][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 389.557531][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 389.633335][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 389.639525][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 389.728674][T13554] x86/PAT: syz-executor.0:13554 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back [ 389.912997][ T12] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 390.152999][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 390.273110][ T12] usb 2-1: config 0 has an invalid interface number: 179 but max is 0 [ 390.281846][ T12] usb 2-1: config 0 has no interface number 0 [ 390.288150][ T12] usb 2-1: config 0 interface 179 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 390.298214][ T12] usb 2-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 390.307425][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.316879][ T12] usb 2-1: config 0 descriptor?? [ 390.503423][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 390.509718][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 390.573187][ T12] rtl8192cu: Chip version 0x10 04:06:21 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000dccd5e08cb060900be5c000000010902240001000000000904340102d46de70009058acfe2368f7d940000000071222cbe0e00411fe50fa89e3f4392f6f1d11ba5b30000008000dbfb344205ba17c1d93ed7bd10a8b6d7adba06000000000000004e74a5a700828dc85041107a89c023591f4ccf82642ba5f0c233e0a3ce0a0f321a20d461a0cc78006ba18d00bd9a006c7d44edc6e040cf780c14fc3a792bc4d9f2bcda0fcbdb3a7aa60275ab8f2832eb58bf50564798930c"], 0x0) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x40) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) io_setup(0x5, &(0x7f0000000100)=0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x400, 0xffffffffffffffff, &(0x7f0000000280)="78ae592a1a6b9a18ce520aec3a89e656f7b7f4d9d4896368b7134a9a35774397f4d564485c5f6c6370af6fdb3632058c75669a08d424951881505d8b4f50ae0ab0b4b913aaec77e545233ae03bfda49cb3e1a9c6acd1ef81ce29e1e5c1cfeb3835236464c4862350334b11165b0767a49905c459ebf5e9c4ae6390d9ca9ce98eb0fadfab70dbfa83078eb541379419b5f4a2accf6ef8279c8674e63b8fc13b1e9f78b6a87205c050c21d8de7d132238107a08021b21f27208465828eb4c0f8fe", 0xc0, 0x9, 0x0, 0x1, r0}, &(0x7f0000000180)) 04:06:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000140)=0x4) ftruncate(r3, 0x200004) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000000c0)="06bb39d041b7d394bfff48b7f2a62f6111f3b1fabd6d56218dcb96a401077e5ab136cb9342eac9e1377af6ba49d008fae2507859f322cefe77b833ea89fa7b2f7b010610904e0802bef8c8a5e9c42df82f3d") sendfile(r1, r3, 0x0, 0x80001d00c0d0) 04:06:21 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x25, 0x5, 0x41, 0x20, 0x5ac, 0x236, 0xaab3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x91, 0x0, 0x0, 0x3, 0x18, 0x2}}]}}]}}, 0x0) 04:06:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0xc, 0x16, [@generic="fe65b73f53"]}]}, 0x20}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e21, 0x3b, @remote, 0x3}, {0xa, 0x4e24, 0x55, @ipv4={[], [], @remote}, 0x1}, 0x10b8, [0x5, 0x8, 0x3, 0x40, 0x1000, 0x20, 0x8]}, 0x5c) 04:06:21 executing program 0: r0 = socket$inet6(0xa, 0x80805, 0x0) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="8a5eff487343a5b580df2dc7c18cd3b2"}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000100)="18", 0x33c00}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="8f", 0x1}], 0x1}}], 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x2) [ 390.809402][T12269] usb 1-1: USB disconnect, device number 19 [ 390.863412][ T12] rtl_usb: reg 0xfe66, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 04:06:22 executing program 2: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/dlm-monitor\x00', 0x28040, 0x0) getsockopt$inet_buf(r1, 0x0, 0x28, &(0x7f0000004480)=""/16, &(0x7f00000044c0)=0x10) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f0000000000)=@x25={0x9, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/196, 0xc4}, {&(0x7f0000001200)=""/248, 0xf8}, {&(0x7f0000001300)=""/79, 0x4f}, {&(0x7f0000001380)=""/224, 0xe0}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/104, 0x68}, {&(0x7f00000015c0)}], 0x8, &(0x7f0000001680)=""/227, 0xe3}, 0x800}, {{&(0x7f0000001780)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001800)=""/190, 0xbe}, {&(0x7f00000018c0)=""/38, 0x26}], 0x2, &(0x7f0000001940)=""/203, 0xcb}, 0x31da2f91}, {{&(0x7f0000001a40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001ac0)=""/124, 0x7c}], 0x1}, 0x84}, {{&(0x7f0000001b80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001c00)=""/14, 0xe}, {&(0x7f0000001c40)=""/119, 0x77}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d00)=""/155, 0x9b}, {&(0x7f0000002dc0)=""/253, 0xfd}, {&(0x7f0000002ec0)=""/147, 0x93}, {&(0x7f0000002f80)=""/32, 0x20}], 0x8, &(0x7f0000003040)=""/4, 0x4}, 0x7}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/62, 0x3e}], 0x1, &(0x7f0000003100)=""/84, 0x54}, 0x7fffffff}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003180)=""/169, 0xa9}, {&(0x7f0000003240)=""/50, 0x32}, {&(0x7f0000003280)=""/37, 0x25}], 0x3, &(0x7f0000003300)=""/4096, 0x1000}, 0x9}], 0x6, 0x20, 0x0) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x41424344, @ANYRESDEC=r0, @ANYBLOB="0a009078bc70"], 0x0) 04:06:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r3) ptrace(0x4208, r3) getpid() r4 = getpid() r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r5) ptrace(0x4208, r5) r6 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2ba2c3) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x8, 0x7, 0x4, 0x0, 0x0, 0x2, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000000), 0x6c71ddcdcfb2e0ce}, 0x20023, 0x0, 0xf55, 0x7, 0x0, 0x400, 0x1000}, r5, 0x0, r6, 0x0) rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r4) ptrace(0x4208, r4) syz_open_procfs(r4, &(0x7f0000000100)='net/unix\x00') [ 391.083348][ T12] rtl_usb: reg 0xfe67, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 391.092605][ T12] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 391.103254][ T4006] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 391.113683][ T12] usb 2-1: USB disconnect, device number 12 04:06:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x141000, 0x0) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f0000000180)=""/4096) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x4) bind(r2, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x80) close(r2) [ 391.143430][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 391.149810][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:06:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) syz_open_dev$vbi(&(0x7f0000002ec0)='/dev/vbi#\x00', 0x3, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xbf, 0x10000) getsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000002f00), &(0x7f0000002f40)=0xfffffffffffffdd7) listen(r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000100)=0x20000005, 0x4) [ 391.193415][T12270] qmi_wwan: probe of 5-1:0.200 failed with error -22 [ 391.223648][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 391.229940][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 391.230557][T12270] usb 5-1: USB disconnect, device number 12 04:06:22 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e4957440811738099297020000010902240001000000e60e414b00026c6e840009050403e3ffffff16f8ffdf00e8371653106064fe5408fffb5d0000841c9b72bf8455a5ca20b44f1bbf5a58e61cfaa9bf88cba89712143f8eda2160bd82044f1aa7807445fe141c5de3978e42d9706430974b2770a3a68fce54716ffb72360fecca8011c8a9b92bbfbb4a6162435fe753b9eabb9a80113e2a0985b16f9f2aa6023305c59e13efb726fb42776d59fcf2486e73a7345529219c60af00008aa01cc19e5d4edf"], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x4800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r2, 0x2000) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x5f) [ 391.306246][T13589] x86/PAT: syz-executor.0:13589 map pfn RAM range req write-combining for [mem 0x1d3953000-0x1d3953fff], got write-back [ 391.340635][T13590] x86/PAT: syz-executor.0:13590 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back 04:06:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x4000000080002, 0x0) connect$inet6(r0, &(0x7f0000005d00)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r1 = socket$inet6(0xa, 0x4000000080002, 0x0) connect$inet6(r1, &(0x7f0000005d00)={0xa, 0x0, 0x0, @mcast1}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r2 = socket$inet6(0xa, 0x4000000080002, 0x0) connect$inet6(r2, &(0x7f0000005d00)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x2, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140), 0xfffffc73}}], 0x40001ab, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000001440)) r4 = socket$inet(0x2, 0x0, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001400)={0x0, 0x0}, &(0x7f0000001440)=0xc) setreuid(0x0, r5) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200140001000000000488aeeb3e00b3fb20d110a000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r8, @ANYBLOB="0000003893b0051cbb429300"], 0x24}}, 0x0) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x2, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140), 0xfffffc73}}], 0x40001ab, 0x0) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)="09715d2bcc4b8f8825821d8ac08c363cb10a51635e7ce22c0cec5e651d7e869b29b7bd0e8c418603b18cc970595d89006b56d90c7a358b7f80b821b150d1465222871e9c4acdf686061036f8658623cee38e18ea6ace88b0ef11f8bbcad1f7db52278588a42ff287497999c990dbb396e659a54f396021cd7b7a7b6a9042eee2332c969650ff48629dbbecebf96a11c12f5a2364fb20c6cea7365aa94fc28ab1ca7a85", 0xa3}, {&(0x7f0000000380)="81fee209fc8cbead71bd5cd8e96baaeb6aedf17404f198ce51242ddac12304f9e9ec2d1d9edc3d26307b3db0def80b8ed40b358b0d7db4a00678d447177718ad78152555f7dd8330e593dd4923dfcb6df18676e3b46803b98a8a0c29220154efdc4335fbd3964fe73778e3f520c9bbea45c7fb0b87f6c3b47e130ff4712aa563acd595c6f5547b0f8c8a77bdae984aa904b2d654f7316428860fc9270324ad1b65db9eb64a23c7be2277da68d7f2be1d9c9cd55c9808d57483a0db", 0xbb}, {&(0x7f0000000440)="ec14b7c7388b742b1432d848d20b53a2b11d892f84df9f5d3762825a3607cb5663c987c5886535f316d3b95a0d4862eaa6968bfe649a4b0dddc0ebf8df97345691e466f64b205459496f75e3f342192cf2b52778f44318c8403fdb6ad5bfd5e38ef8778ba0c2a82df26f4e8a996677d66b187669e5aecaa8f1f3248b231c51b3f3e63217e5ba07256b7fc0872f9e9e7748add3dd8aea6b95f6c052d902165051e3bb9d685e6ab2ea575c3e50608ba8745442709b771adadd62cf0177c8dd44259d64882aad231ade2d62d114", 0xcc}, {&(0x7f0000000540)="879a7235f691d85977aa2b7b2850810003077dbe22211a7e362415ffdecd941bc1e9a7941186fc0f792119622ce83894a33e4ea6c21ef2e659950bb034ab2c6d7548ce41c3b496f092aa9ace02ff9019dfe437203abc4e4ff8bac163eeb01014468bee49077da91786c55c26dbe22be4adb89c1c910e9a92b194008ecf87f8829e241994560744db1f2a414bc70b79cabd5ce53c71f28d0da8a3f3d5c1c47b0f0e43b0c6f2051c2c3970e05281b730fdc7d5b47a1324d199c41302b553e547", 0xbf}, {&(0x7f0000000600)="b9b5da4d406357e7f6308b01b453e833caabb5e686762943677dafb2eb81fa3d4da98edd625c4bb9a9816c2b21aeac6d3e2e9db916f61704934a3e27a7d650b4726fbeb6bba0cf7f34dba65b3a40d83512875b4b89b5dda78fbf59717360cc71f8033406d58281f0af9f0b08ef966fb1c6ebc90d59925f615892452109014f8e8316a1cea6e9a90d141fc0291c5613d8f5a4d789a9eb6ca1372546bfae286489e8eaf78fb37fb42040d02c16b434c261f1cae8bdc7cdde44e7d30144b91ea3ca5439f1eda7a3682517a169d99dc46eb3dce0cde1", 0xd4}, {&(0x7f0000000700)="5102891ed25e1c7bdae515c15091eb440a254e0cc98fd172d8ca754e583b0f420c293b5fc91a1aa35e61b2deae70de7684fefb95eb1a9d12313bb000faa299adc75dda23ce1be1469d5b439ff9fe4eb6691fd2536e87cf10f3b4d84a5085904eba07341ad2a2f71ac4e4a8134c83bee80b281e6e5b795bc937e7895578bde00c4e40bb0a44f9b2888509f01245b61fab9efa69c16fc2c543880e61629fb9c0dade2fffff97b164ebb1226162e3e737f52f63cf5a22662f9fb417aec4c5e885170cdf284289e8a4f1860eec36afe32096981c5f75c7c0b22fe1470b0b110de9a4ca1f1e9ec131761e69f60350e4cd41ee", 0xf0}, {&(0x7f0000000800)="bc39d95d5cf2701657e4d3013974d54c4c954713", 0x14}], 0x7}}, {{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)}}], 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r9 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) socket$inet(0x2, 0x803, 0x4) [ 391.393286][ T4006] usb 4-1: Using ep0 maxpacket: 32 [ 391.503093][ T12] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 391.525238][ T4006] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 391.533712][ T4006] usb 4-1: config 0 has no interface number 0 [ 391.539945][ T4006] usb 4-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=aa.b3 04:06:22 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xda, 0x9, 0x6a, 0x8, 0x4e6, 0x3, 0x74ec, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf2, 0x0, 0x2, 0x39, 0x6b, 0x34, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x8a, 0x2}}]}}]}}]}}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x0, 0x3}) [ 391.549652][ T4006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.584995][T13598] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.593033][T13598] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.603520][ T4006] usb 4-1: config 0 descriptor?? [ 391.651434][ T4006] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.145/input/input9 [ 391.743129][ T12] usb 2-1: Using ep0 maxpacket: 8 [ 391.776471][T12270] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 391.863419][ T12] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 391.871755][ T12] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.882204][ T12] usb 2-1: config 0 has no interface number 0 [ 391.888603][ T12] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 143, changing to 11 [ 391.900154][ T12] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 1762, setting to 1024 [ 391.911778][ T12] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 391.925242][ T12] usb 2-1: config 0 interface 52 has no altsetting 0 [ 391.932172][ T12] usb 2-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice=5c.be [ 391.942019][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.966636][ T12] usb 2-1: config 0 descriptor?? [ 392.010688][ T4006] usb 4-1: USB disconnect, device number 7 [ 392.033449][T12269] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 392.203232][T12270] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 392.213964][T12270] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.243470][ T12] usb 2-1: Can not set alternate setting to 1, error: -71 [ 392.253169][ T12] synaptics_usb: probe of 2-1:0.52 failed with error -71 [ 392.264860][ T12] usb 2-1: USB disconnect, device number 13 [ 392.293018][T12269] usb 6-1: Using ep0 maxpacket: 8 [ 392.303513][T12270] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=97.92 [ 392.312822][T12270] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 392.321130][T12270] usb 5-1: Manufacturer: syz [ 392.327704][T12270] usb 5-1: config 0 descriptor?? [ 392.413223][T12269] usb 6-1: config 0 has an invalid interface number: 242 but max is 0 [ 392.422694][T12269] usb 6-1: config 0 has no interface number 0 [ 392.429163][T12269] usb 6-1: config 0 interface 242 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 392.439164][T12269] usb 6-1: config 0 interface 242 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 392.449329][T12269] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice=74.ec [ 392.458648][T12269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.468498][T12269] usb 6-1: config 0 descriptor?? [ 392.519250][T12269] ums-sddr09 6-1:0.242: USB Mass Storage device detected [ 392.576846][T12269] ums-sddr09: probe of 6-1:0.242 failed with error -22 [ 392.586602][ T4006] usb 5-1: USB disconnect, device number 13 [ 392.725882][T12269] usb 6-1: USB disconnect, device number 8 [ 392.783398][T12270] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 393.013073][ T12] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 393.026559][T12270] usb 4-1: Using ep0 maxpacket: 32 [ 393.083271][T12270] usb 4-1: device descriptor read/all, error -71 [ 393.253108][ T12] usb 2-1: Using ep0 maxpacket: 8 [ 393.373138][ T4006] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 393.385495][ T12] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 393.393895][ T12] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.404163][ T12] usb 2-1: config 0 has no interface number 0 [ 393.410348][ T12] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 143, changing to 11 [ 393.421748][ T12] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 1762, setting to 1024 [ 393.433305][ T12] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.446511][ T12] usb 2-1: config 0 interface 52 has no altsetting 0 [ 393.453446][ T12] usb 2-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice=5c.be [ 393.462684][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.472961][ T12] usb 2-1: config 0 descriptor?? [ 393.533188][T12269] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 393.733135][ T4006] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 393.733362][ T12] usb 2-1: Can not set alternate setting to 1, error: -71 [ 393.743745][ T4006] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 393.760248][ T12] synaptics_usb: probe of 2-1:0.52 failed with error -71 [ 393.771215][ T12] usb 2-1: USB disconnect, device number 14 [ 393.793144][T12269] usb 6-1: Using ep0 maxpacket: 8 04:06:24 executing program 0: setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x3) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000007600), 0x0, 0x40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) stat(0x0, &(0x7f0000000840)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x2, 0x6, 0x20}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000000c0)=""/64) shutdown(r1, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) recvmsg(r1, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 04:06:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4, 0x444082) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)={0x14, 0x23, 0x829, 0x0, 0x0, {0x4}}, 0x14}}, 0x891) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.impure\x00') 04:06:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x4, r7}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0xfffffed7, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x34}}, 0x0) 04:06:24 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r3, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_usb_disconnect(r3) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) lseek(r1, 0x0, 0x1) accept(r0, &(0x7f00000005c0)=@alg, &(0x7f00000004c0)=0xffffffffffffff31) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() tkill(r5, 0x1000000000016) sendto$inet6(r0, 0x0, 0x184, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) [ 393.853226][ T4006] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=97.92 [ 393.862425][ T4006] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 393.871199][ T4006] usb 5-1: Manufacturer: syz [ 393.914730][T12269] usb 6-1: config 0 has an invalid interface number: 242 but max is 0 [ 393.923118][T12269] usb 6-1: config 0 has no interface number 0 [ 393.929331][T12269] usb 6-1: config 0 interface 242 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 393.939384][T12269] usb 6-1: config 0 interface 242 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 393.949518][T12269] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice=74.ec [ 393.958750][T12269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.981121][T12269] usb 6-1: config 0 descriptor?? [ 393.989839][ T4006] usb 5-1: config 0 descriptor?? [ 394.017523][T13629] x86/PAT: syz-executor.1:13629 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back [ 394.039307][T12269] ums-sddr09 6-1:0.242: USB Mass Storage device detected 04:06:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc4c00, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000080)=""/104) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = socket$inet_udplite(0x2, 0x2, 0x88) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x10000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000190000000a00000000156e727000000000000000000000000000626f6e643000000000000000000000007465616d5f736c6176655f310000000062637366300000000000000000000000ffffffffffffffff00ffffff0180c2000000ffffffffffff0000e0000000500100008801000073747000000000000000000000000000000000000000000000000000000000004800000000000000020000000200006e8700ffffffffffffffffffbc00000000000000003b0a000002000900efb5b7059b3fffffffff00004e234e21040071ac0600ff7f382803000500070000080100736e6174000000000000000000000000000000000000000000000000000000001000000000000000d1f9c15dee9e0000ffffffff000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa0f0000feffffff00000000736e6174000000000000000000000001000000000000000000000000000000001000000000000000aaaaaaaaaa1a0000feffffff00000000030000004000000000117465616d3000000000000000000000006772657461703000000000000000000076657468315f746f5f626f6e64000000626f6e6430000000000000000000000052a1927247eaffff470000006a72dd4b319d0000ff3400000000e8000000500100008801000069703600000000000000000000000000000000000000000000000000000000005000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000ff00000000ffffffff00000000ffffffffff000000ffffffff00000000093b14044e204e234e214e24000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c20000010000feffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000fcffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff02000000090000004a00000000020000000000000000000000000000000073797a5f74756e000000000000000000626f6e6430000000000000000000000069705f767469300000000000000000009f7f83bddffa0000ffffffffffffffffffffff0000ffffff0000c0000000c00000000801000068656c70657200000000000000000000000000000000000000000000000000002800000000000000010000006674702d32303030300000000000000000000000000000000000000000000000000000004552524f520000000000000000000000000000000000000000000000000000002000000000000000c3331f141f48b36a6e8a93c4f2796fab65c75e2fdab6f98342ae6b68a6b900000500000002000000e90d69705f76746930000000000000000000627269646765300000000000000000006966623000000000000000000000000076657468305f746f5f626f6e64000000aaaaaaaaaa11ff0000ffffffffffffffffffffff00ffffff0000b0000000b0000000e800000071756f746100000000000000000000000000000000000000000000000000000018000000000000000000000000000000010000000000000007000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000feffffff0000adcc"]}, 0x608) [ 394.066575][T13629] x86/PAT: syz-executor.1:13629 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back [ 394.102473][T12269] ums-sddr09: probe of 6-1:0.242 failed with error -22 [ 394.151980][T13637] x_tables: eb_tables: snat target: only valid in nat table, not nat [ 394.166446][T13639] x_tables: eb_tables: snat target: only valid in nat table, not nat 04:06:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x484, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x100, 0x4, 0x3ff, 0x1, 0x8000}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r1) ptrace(0x4208, r1) sched_rr_get_interval(r1, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x4d) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r3, 0x10d, 0x8f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 04:06:25 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000c060501ff0080fffdffff2e0a0005610c0001"], 0x17}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0x6, [@loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2, @broadcast]}, 0x28) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) [ 394.235388][T12368] usb 6-1: USB disconnect, device number 9 [ 394.254450][T12269] usb 5-1: USB disconnect, device number 14 04:06:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000003000000db"], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa808) [ 394.386640][T13649] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 394.395071][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 394.403153][T12270] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 394.643057][T12270] usb 4-1: Using ep0 maxpacket: 8 [ 394.663699][ C1] net_ratelimit: 18 callbacks suppressed [ 394.663721][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 394.675712][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:06:25 executing program 5: mount(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000a40)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x46981, 0x154) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'netdevsim0\x00', {0x2, 0x4e20, @local}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01e0ff00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r3, 0x9, 0x5}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r4, 0x80000001}, 0x8) [ 394.764177][T12270] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 394.772578][T12270] usb 4-1: config 0 has no interface number 0 [ 394.779020][T12270] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 394.790549][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 394.801972][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 04:06:25 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100303afffe8006437f050dff00000003000088ffff220000000000000000000000000001860090780007000060c5961e000000001801020091b844d6c1c3ee1224e59d99d8000000001803000005000001ff0500f1aa3fe196ce7e9612c09aa7dd667dbe002f0d88eb4bcf69cdce3ff8cde4e547d1eac07c04b5dcc62f83ecc1d795dc15c8037eccbdbf97e1e55330bed699bbe062131ba91cadf0bd0290319d3ec5fc0479845f9b2a21465dbf1a79d9fe3b88"], 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f00000000c0)=0x15) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x3, 0x3, @name="8c2328e47c11e1948eda53692b278e57a128e455bf10a9772da3468aec35c63a"}) [ 394.813633][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 394.824968][T12270] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 394.838488][T12270] usb 4-1: config 0 interface 164 has no altsetting 0 [ 394.987962][T12270] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 394.997968][T12270] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 395.006401][T12270] usb 4-1: Product: syz [ 395.019536][T12270] usb 4-1: config 0 descriptor?? [ 395.026752][T13661] x86/PAT: syz-executor.0:13661 map pfn RAM range req write-combining for [mem 0x1d6ec5000-0x1d6ec5fff], got write-back [ 395.090667][T13661] x86/PAT: syz-executor.0:13661 map pfn RAM range req write-combining for [mem 0x1d36fe000-0x1d36fefff], got write-back 04:06:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x7e54, &(0x7f0000000000)) chroot(&(0x7f0000000040)='./file0\x00') [ 395.185087][T12270] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 395.205351][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 04:06:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000100)={&(0x7f0000000040)=[0x27, 0x8, 0x306, 0x12, 0x5], 0x5, 0x7f, 0x7, 0x3ff, 0x0, 0x4, {0x3, 0x9, 0x6, 0x3, 0x0, 0x200, 0x5, 0x0, 0x0, 0x3, 0x6, 0xa76, 0xff, 0xff, "eb9cc578696d12d1f013e990acc32ad59341df64c75cd09e5d771a9b7537e7e4"}}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r6 = dup(0xffffffffffffffff) poll(&(0x7f00000005c0)=[{r6, 0x8000}, {r5}], 0x2, 0x0) [ 395.249235][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 395.281755][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 04:06:26 executing program 2: r0 = memfd_create(&(0x7f0000000680)='t!\xac\xba\a\x1b\x98\r\xb1\x13g\xa6\x05\x14!\x92\x8bTdQ\xc6: \xae\xd4\x8fZ!eU\xa7\xfbf\xc1\xfc-\x93\n~Y\xf1\xb9?\x18a|\xa9\xc4\xd4\xe2\x8eC\x9a\n$]f\x95a\x97\xe5\x1a\xc2\x948\xe2N\x97B\x12\x01_\xd3\f5\x14f\x02\x12\x17\x81\x0f$e\x95U\x86\xc7\xa0gr\x8a\x1d&\x17w\x92\x92\xc2\x99EF\x17\xeeL\x05\\\xd9ZB\x17\x87P\x1a\xf1\x1e\xa49\xea\x88\x87\x8a\xe4vgR\xc3\xe3Ee}T>\xc8#E\x1b6\x9b\xe9\x83\x06', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x2, &(0x7f0000000000)) io_submit(0x0, 0x2, &(0x7f0000000b00)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x4280, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000200)) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x400, 0x4e1}) r8 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) write$FUSE_DIRENT(r8, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0) [ 395.305190][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 395.312402][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 395.367255][T13669] x86/PAT: syz-executor.1:13669 map pfn RAM range req write-combining for [mem 0x1d3992000-0x1d3992fff], got write-back [ 395.383323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 395.389525][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 395.463428][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 395.469755][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 395.495523][T12270] iforce 4-1:0.164: usb_submit_urb failed: -110 04:06:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1f, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0xb, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x2b4, 0x0, "bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f523b546d3b9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x11, 0x80c04, 0x40, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) [ 395.518786][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 395.528169][T13674] x86/PAT: syz-executor.2:13674 map pfn RAM range req write-combining for [mem 0x1d393a000-0x1d393afff], got write-back [ 395.547236][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 395.559442][T13669] x86/PAT: syz-executor.1:13669 map pfn RAM range req write-combining for [mem 0x1d42ef000-0x1d42effff], got write-back [ 395.576610][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 395.603353][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 395.641405][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 395.663193][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 395.683301][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 395.691349][T12270] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input10 [ 395.783285][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 395.789481][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:06:26 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x5d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x0, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0x22, 0x2, 0x2, 0x6, 0x0, 0xf9, {{0x37}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x7, 0x31}, [@mbim_extended={0x8, 0x24, 0x1c, 0x35b, 0x4, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x17, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x82, 0xb8, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0xed, 0x81, 0x0, 0x3}}}}}]}}]}}, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0a06100300080820a400"], @ANYBLOB="4f00eb00", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="050f4f00061b10002433ec31b144d864623e7885fc3dbb33160ca800af2da8d6071002087d010003100b18100a03e30300000f0001041e0000007e0000000000000003100b0a100302080002090010"], @ANYBLOB="0400000004000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0403090c"], @ANYBLOB="04000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="04032008"], @ANYBLOB="05000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="0503d090af"], @ANYBLOB="04000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="04030a28"]]) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x0, 0x2e, 0xec, {0xec, 0x8, "672e82ae01c42791d8241f2b788ccda9256b16f0589ff79049bacd7f59ddbf0c66c02661301ab69d331221806add07766ece700d165c9130cf4a38c2dbf7681a008ba34dc792bb72613d0176c62bc0d5381f6a14909ac3636c63f1e8e4f17d417e4623f4a9607158f990e2c699f24efd0c4d16813f202e1c462305843ab4529dd255f8815a0dc3b5c89da3acde6ed6380137c4903d31edf400a4f78bdd9312f734df7346e477efb8adaad9e9451c5b274e0a85b18fe05a0b2f64b7b70777511594d2ab4481ef8a5f352e25a577516a43f0119ae77535781454815d7f8e1af641351a16de53251014c1d6"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000000580)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x472a3976a131f5a6, 0x80, 0x40, "6216eb16", "bd189f8b"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf9, 0x0, 0x3f, 0x2, 0x6, 0x7, 0x2}}}, &(0x7f0000000c00)={0xac, &(0x7f0000000680)={0x40, 0x2, 0x58, "e798a545c413ded274a23433ba6f59f5021c0e962fa7c489c7c5aaca2229fba3581e7dab8d18b38a5d33112731d9b3bcd5268930d532856430ac8929d0bd44d553175d548c7332cea5671dc0f6db647d4b44b6045442700c"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000780)={0x20, 0x81, 0x1, "02"}, &(0x7f00000007c0)={0x20, 0x82, 0x2, '\r+'}, &(0x7f0000000800)={0x20, 0x83, 0x1, '\a'}, &(0x7f0000000840)={0x20, 0x84, 0x1, "9a"}, &(0x7f0000000880)={0x20, 0x85, 0x3, "0cf9dc"}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0xa3}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "86f1"}, &(0x7f0000000a00)={0x40, 0xf, 0x2}, &(0x7f0000000a40)={0x40, 0x13, 0x6}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @dev={[], 0xa}}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "638d"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x80}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xc4c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x7, 0x20, 0x2, 0x7}, {0x1000, 0x5, 0x8, 0x8001}]}, 0x10) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xbe503a9f536fb0ed, 0x0, &(0x7f0000001880), 0xffffff1c) syz_open_dev$media(0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) shutdown(r2, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xffffffeb, 0x0, 0x0, 0x535e2f3003f56a5b) [ 396.023157][T12368] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 396.202944][T12270] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 396.272989][T12368] usb 1-1: Using ep0 maxpacket: 8 [ 396.393229][T12368] usb 1-1: config 0 interface 0 altsetting 31 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.404486][T12368] usb 1-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 396.417642][T12368] usb 1-1: config 0 interface 0 has no altsetting 0 [ 396.424428][T12368] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 396.433622][T12368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.443034][T12270] usb 2-1: Using ep0 maxpacket: 32 [ 396.488310][T12368] usb 1-1: config 0 descriptor?? [ 396.603117][T12270] usb 2-1: unable to get BOS descriptor or descriptor too short [ 396.683317][T12270] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.693799][T12270] usb 2-1: config 1 interface 0 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.706943][T12270] usb 2-1: config 1 interface 0 has no altsetting 0 [ 396.873380][T12270] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.882747][T12270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.891101][T12270] usb 2-1: Product: éƒ [ 396.895574][T12270] usb 2-1: Manufacturer: à   [ 396.900797][T12270] usb 2-1: SerialNumber: â Š [ 396.962136][T12368] hid-led 0003:04D8:F372.0002: global environment stack underflow [ 396.970350][T12368] hid-led 0003:04D8:F372.0002: item 0 0 1 11 parsing failed [ 396.978700][T12368] hid-led: probe of 0003:04D8:F372.0002 failed with error -22 [ 397.157118][T12269] usb 1-1: USB disconnect, device number 20 [ 397.166370][T12270] usb 2-1: bad CDC descriptors 04:06:28 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ddbfe908f8060400010000ed00010902240001000000000904a4e92319b875000905850b000d0000000905010341000000005b7481db4894cd501e42ffc9c7e69f4eacc71f2d60087793bb9db2c4c9e1830101e114d5c8956f42cf4d7c92f71ff0fb85abd1fd06671269ec4b3a4830a47e74aef28fbdde383db227b6f1a02e84847cfc0a3be4f07648913d73ae7e156c21cf44e1fda4d436b133991fecd3023bf386cb21ed85b695b2f579912e5eea4b2db0ee3bc2e645dcdcb82cb7732fce272a39e6922ffffc8243a06685e47356542838ec20f8d4ee9bd76a4c1477b44775dc4c2908b4f3e21de4c986d961d6bf574f81c2c7c0c559385a275f54336d317609e4ea205b5b6bb70c1a68509ee851572af4b5bb72964b121cebdc48519cc5c9c100d5bb10c71a1c2de1116a841eadc3990bfa24f1663c634615e4a64eb004a73e70d5e7349cdacb79a96654172ce8de333e4be6b3c51e4bb8688576653a6bf4025cb78bd0eaaf4e02d6cf382bbf4b1e6c413b06dae03fca569d136c2df9232707a8a8a2d6e7d9939b2e0a1d729d0133cde8cab589a8070eb40246a04ddd035561c975f960cc4c7be68fbfda551de187ba7ed9d55a5f2b95c0226b823f92f80fc0b414b3400b8b2874d47b680aec612798134a28e45738e682114de8c3b164de0f5ca83df813c7c35cba412fb85aefbae132dabca0916e246adc563692e41659faea685d8b59c21bfa9ec9a5b7a6fd87cad2966ec2af3330be"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r3, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_usb_disconnect(r3) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) lseek(r1, 0x0, 0x1) accept(r0, &(0x7f00000005c0)=@alg, &(0x7f00000004c0)=0xffffffffffffff31) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() tkill(r5, 0x1000000000016) sendto$inet6(r0, 0x0, 0x184, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 04:06:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x18, 0x0, 0x0) r4 = dup2(r1, r3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r6, 0x0, 0xc8, &(0x7f0000000080), 0x4) ioctl$sock_ifreq(r6, 0x8932, &(0x7f00000000c0)={'\x00', @ifru_ivalue=0x4}) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) r9 = getpid() rt_tgsigqueueinfo(r9, r9, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r9) ptrace(0x4208, r9) prctl$PR_SET_MM(0x23, 0x4, &(0x7f000000d000/0xc000)=nil) ptrace$cont(0x1f, r9, 0x10001, 0x4575) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x40000012, r7, 0x1ffe) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x2}) dup3(r4, r2, 0x0) 04:06:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_STATE={0xfffffffffffffde9}]}}}]}, 0x44}}, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x511100, 0x0) r4 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000300)=r5) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000080)=r5) [ 397.362441][T12270] usb 4-1: USB disconnect, device number 10 04:06:28 executing program 5: r0 = socket$inet(0x2, 0x3, 0x80000000002) r1 = syz_usb_connect(0x0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) 04:06:28 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x2e346d48b97fe446) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000b, 0x40000012, r4, 0x1ffe) r5 = request_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='lovmnet1\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r5, 0xb3, 0x20}, &(0x7f0000000200)={'enc=', 'raw', ' hash=', {'sha512\x00'}}, &(0x7f0000000440)="6624e5f794efd689047257fe22472be41590ea3420d1a3e22953d42ba6bc4ecc5b3ff28563aeaba3af29e08ea670ec8591a6f0ef2084fd372b3ebe341b4e5436b25bf6f2b075d64d4dfa498d6b24268c75d1efd1284b4a43c9a07282b9882b985ad91d16ed4c09aad25d4253261da6c67292f298a2950393f6d2f7155c7ef6d0e54ac7df96e9709edcf5678a5d67143c474e0753460f36622ee85dbe70d6b7fea4c771d195268e7fb900f6eb6655d37b2da42a", &(0x7f0000000280)=""/32) mq_timedreceive(r4, &(0x7f0000000080)=""/101, 0x65, 0x2441, 0x0) 04:06:28 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000007c0)={0x400000000000025, 0x2, 0x0, "37aa5adbf10100ffff188308007c87cc7619bf42c301003f924f73fca69401c6"}) r1 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x30000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0xfffffc00) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r7}]]}}}]}, 0x68}}, 0x0) 04:06:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0x55a1, 0x7ff, 0x7, 0x2}) r5 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r8, 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000180)={0x2, 0x7, 0x10001, 0x8001, 0xfffffffc, 0x8001}) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000140)={0xa, {0x0, 0x9, 0x6, 0x1}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="100002000000000002001200140001006272696467655f736c617665000000006cfe050008000c0000000000"], 0x44}}, 0x0) [ 397.762091][T13720] batman_adv: Cannot find parent device [ 397.796685][T13724] x86/PAT: syz-executor.2:13724 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back 04:06:28 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000000c0)=""/46, &(0x7f0000000100)=0x2e) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r6, 0x2000) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x40400, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000980)={0x9, 0x0, [{0x4, 0x46, &(0x7f0000000200)=""/70}, {0x5000, 0xfa, &(0x7f0000000280)=""/250}, {0x753d3d60df3d72f3, 0xdc, &(0x7f0000000380)=""/220}, {0x5000, 0x43, &(0x7f0000000480)=""/67}, {0x8efa4933b9acd2a6, 0xf6, &(0x7f0000000500)=""/246}, {0x6000, 0xed, &(0x7f0000000680)=""/237}, {0x0, 0xdd, &(0x7f0000000780)=""/221}, {0xd000, 0x5, &(0x7f0000000600)=""/5}, {0x1000, 0xf1, &(0x7f0000000880)=""/241}]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) sendmsg$sock(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="acb400c89893b6681ef12fd720c3b5e821ea1ba0223c8f73129a20d516af5580aaf5f892c3e42a331a6803658889105a242dfca7a738a94e2075216a377afbea4cf0c88203c7df6daae25ebb43b3459951134ebdf3648d07a6ec13e6ddf800b1ddcf110cb558ae5598ed629ecc5a19644c6886436d87fa5ad19704786ef74a242bc06b133ec759", 0x87}, {&(0x7f0000000b80)="b7671776676038a89de6b1", 0xb}, {&(0x7f0000000bc0)="f1f0fbb2a545588ecc2c7b9e82cae096a80d11210d3a88bd4d36286629fe625ac712aa9793eb41c0df8659600a0139c2be0861b46e6b8e65cb9fde0a175133401d502c883fb2e6a5ad821410b3ca2c69a551a05b890e6585c2b58a23722655fe18c06a401dacae6de140365f62696c14f2080bae71edf8869a148637dbcd6a17971b87ee75156dcaef915e67c1f96378c4cd7fe65ddc2b2496e1a473f7d920aad60601692649ae9fa7268260a22724a73fc721f295baac92acbdbe35c9f82861d40938fa940c360dee7c005f5b9ef89ec1284db196fafe4190", 0xd9}, {&(0x7f0000000cc0)="265c8474e584d5f555184db0f3755a956e9ca5a953d8d3fc935ce9d44cb71a90aaf0edeb773e2a4a0167d16ba8a7", 0x2e}], 0x4, &(0x7f0000000d40)=[@mark={{0x14, 0x1, 0x24, 0x2000000}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x30}, 0x50) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000180)={0x3, r8}) r9 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r9, 0x0, 0xc8, &(0x7f0000000080), 0x4) fcntl$setlease(r9, 0x400, 0x0) [ 397.816061][T13724] x86/PAT: syz-executor.2:13724 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back [ 397.855175][T13724] x86/PAT: syz-executor.2:13724 map pfn RAM range req write-combining for [mem 0x1d6ec5000-0x1d6ec5fff], got write-back [ 397.877609][T13725] x86/PAT: syz-executor.2:13725 map pfn RAM range req write-combining for [mem 0x1d36fe000-0x1d36fefff], got write-back 04:06:29 executing program 2: r0 = socket$inet(0x10, 0x800, 0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) pidfd_open(r1, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000d0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x218}], 0x4e8b9392086e84}, 0x200480c5) [ 397.915517][T12270] usb 4-1: new high-speed USB device number 11 using dummy_hcd 04:06:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmsg(r1, &(0x7f0000013000)={&(0x7f0000000040)=@in6={0xa, 0x4e27, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x28, 0x29, 0x5, "21020201cb009f00"/17}], 0x28}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x101400, 0x0) sendmsg$rds(r2, &(0x7f0000000fc0)={&(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000140)=""/212, 0xd4}, {&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)=""/57, 0x39}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000580)=""/90, 0x5a}, {&(0x7f0000000600)=""/194, 0xc2}, {&(0x7f0000000700)=""/74, 0x4a}], 0x9, &(0x7f0000000d80)=ANY=[@ANYBLOB="580000000000000014010000090000000600000000000080", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="0100008000000000"], @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="8000000000000000"], @ANYBLOB="080000000000000003000000000000006b44000000000000ff01000000000000cb000000000000000600000000000000580000000000000014010000080000000400000000000000", @ANYPTR=&(0x7f0000000880)=ANY=[@ANYBLOB="0400000000000000"], @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYBLOB="ce0d000000000000"], @ANYBLOB="0101000000000000050000000000000002000000000000000700000000000000400000000000000008000000000000001800000000000000140100000200000000000100ffffffff580000000000000014010000090000000700000081000000", @ANYPTR=&(0x7f0000000900)=ANY=[@ANYBLOB="0010000000000000"], @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="0101000000000000"], @ANYBLOB="08ab0000000000000100000001000000ff010000000000009a000000000000001000000000000000c802000000000000580000000000000014010000090000000400000001000000", @ANYPTR=&(0x7f0000000980)=ANY=[@ANYBLOB="0400000000000000"], @ANYPTR=&(0x7f00000009c0)=ANY=[@ANYBLOB="0200000000000000"], @ANYBLOB="080000000000000000080000000000000500000000000000ff7f00000000000001000000000000000000000000000000580000000000000014010000080000000900000001800000", @ANYPTR=&(0x7f0000000a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000a40)=ANY=[@ANYBLOB="0100000000000000"], @ANYBLOB="00020000000000000100010000000000060000000000000000000000000000001000000000000000ff010000000000004800000000000000140100000100000004000000dcc90000", @ANYPTR=&(0x7f0000000a80)=ANY=[@ANYBLOB='\x00'/72], @ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000d40)=ANY=[@ANYPTR=&(0x7f0000001000)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090d64a0f00000000000000"], @ANYBLOB="ab00000000000000", @ANYPTR=&(0x7f0000000bc0)=ANY=[@ANYBLOB='\x00'/125], @ANYBLOB='}\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000c40)=ANY=[@ANYBLOB='\x00'/86], @ANYBLOB='V\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000cc0)=ANY=[@ANYBLOB='\x00'/68], @ANYBLOB='D\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="040000000000000048000000000000009d09000000000000"], 0x218, 0x40400a1}, 0x40000) [ 397.963581][T12368] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 397.980591][T13730] x86/PAT: syz-executor.4:13730 map pfn RAM range req write-combining for [mem 0x1d3992000-0x1d3992fff], got write-back [ 398.007351][T13730] QAT: Invalid ioctl [ 398.140066][T13745] x86/PAT: syz-executor.4:13745 map pfn RAM range req write-combining for [mem 0x1d393a000-0x1d393afff], got write-back [ 398.157109][T13745] QAT: Invalid ioctl [ 398.193189][T12270] usb 4-1: Using ep0 maxpacket: 8 [ 398.334452][T12270] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 398.343360][T12270] usb 4-1: config 0 has no interface number 0 [ 398.349587][T12270] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 398.360980][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 398.372404][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 398.384025][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 398.395416][T12270] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 398.410365][T12270] usb 4-1: config 0 interface 164 has no altsetting 0 [ 398.500465][T12270] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 398.509879][T12270] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 398.518432][T12270] usb 4-1: Product: syz 04:06:29 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000092c0)=ANY=[@ANYBLOB="1213f8418e0000082505a8a4000000000109022400010100000009040000020701030000000102000000000009058202688c026dc71eba16de6746f5ba869fe1c7b5efbdedacbc9efd1b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) times(&(0x7f0000009280)) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000009340)=ANY=[@ANYBLOB="200004000000000000007a725e1a584a5f8fb118ade0b2d27d177cc3d6b6d4e1689c53c85fb690b0f5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket(0x8967265e6b474020, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000008d40)={{{@in=@loopback, @in6=@empty}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000008b80)=0xe8) recvmmsg(r2, &(0x7f0000008c00)=[{{&(0x7f0000000000)=@ax25={{0x3, @default}, [@rose, @netrom, @null, @null, @netrom, @rose, @remote, @rose]}, 0x49, &(0x7f0000000200)=[{&(0x7f0000000080)=""/52, 0x34}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/192, 0xc0}, {&(0x7f0000000180)=""/83, 0x53}], 0x5, &(0x7f0000002400)=""/4096, 0x122e}, 0x3}, {{&(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000076c0)=[{&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/230, 0xe6}, {&(0x7f0000004500)=""/92, 0x5c}, {&(0x7f0000004580)=""/154, 0x9a}, {&(0x7f000000c500)=""/4096, 0x1000}, {&(0x7f0000005640)=""/4096, 0x1000}, {&(0x7f0000006640)=""/4096, 0x1000}, {&(0x7f0000007640)=""/67, 0xfffffffffffffe61}], 0x8, &(0x7f0000007740)=""/213, 0xd5}}, {{0x0, 0x0, &(0x7f0000008a40)=[{&(0x7f0000007840)=""/41, 0x29}, {&(0x7f0000007880)=""/99, 0x63}, {&(0x7f0000007900)=""/83, 0x53}, {&(0x7f0000007980)=""/4096, 0x1000}, {&(0x7f0000008980)=""/166, 0xa6}], 0x5, &(0x7f0000008ac0)=""/53, 0x35}, 0x1d}, {{&(0x7f0000008b00)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f000000c480)=[{&(0x7f0000009380)=""/50}, {&(0x7f00000093c0)=""/4096, 0xd8}, {&(0x7f000000a3c0)=""/4096}, {&(0x7f000000b3c0)=""/4096}, {&(0x7f000000c3c0)=""/111}, {&(0x7f000000c440)=""/21}], 0x0, &(0x7f0000008bc0)=""/56, 0x38}, 0x3f}], 0x4, 0x40, &(0x7f0000008d00)) write(r1, &(0x7f0000000300)="fc0000004a000700ab092542e60007000aab8003000000000000369321000100000000feffffff00000000000000008656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214010000c80008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e2082038f4f8b29d3ef3d92c8334b3863032301748b6e4170e5bbab2ccd243f295ed94e0ad91bd0334babc7c3f2eeb57d43dd16b170083df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000109003fb8d38a873cf10000000000f7e25a", 0xfc) prctl$PR_SET_SECUREBITS(0x1c, 0x2b) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000008e40)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000008e80)={"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"}) [ 398.546953][T12270] usb 4-1: config 0 descriptor?? [ 398.723183][T12270] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 398.743553][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 398.763177][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 398.783195][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 398.803684][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 398.852995][ T4006] usb 3-1: new high-speed USB device number 10 using dummy_hcd 04:06:30 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@in={0x2, 0x4e20, @multicast2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="1b", 0x1}], 0x1}, 0x4) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280), 0x10) [ 398.947282][T12269] usb 2-1: USB disconnect, device number 15 [ 398.973357][T12270] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 399.000227][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 399.023217][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 399.043109][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 399.067130][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 399.093199][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 399.113494][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 399.123316][ T4006] usb 3-1: device descriptor read/64, error 18 [ 399.133891][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 399.141385][T12270] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input11 [ 399.366550][T12270] usb 4-1: USB disconnect, device number 11 [ 399.513062][ T4006] usb 3-1: device descriptor read/64, error 18 [ 399.784490][ T4006] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 399.943312][ C0] net_ratelimit: 22 callbacks suppressed [ 399.943327][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 399.955358][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 400.023590][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 400.029709][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 400.073278][ T4006] usb 3-1: device descriptor read/64, error 18 [ 400.473019][ T4006] usb 3-1: device descriptor read/64, error 18 04:06:31 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:06:31 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7000000ffffff806c000000000000002500"/32], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='\x9b\n\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) ioctl$VIDIOC_G_EDID(r7, 0xc0285628, &(0x7f0000000180)={0x0, 0x28, 0x2, [], &(0x7f0000000140)=0x1f}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000200)=""/160, &(0x7f00000002c0)=0xa0) r8 = dup(r3) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r11, 0x2000) ioctl$USBDEVFS_DISCSIGNAL(r11, 0x8010550e, &(0x7f00000001c0)={0x7, &(0x7f00000004c0)="2659af2d13dab8c05ea818dccbd22a169a3b5f6f30c3d80b714444ce039761161a7f90ffae919af5a0377374c0b54824418a5f10fb7bad71fae0a1d680df4b81e53d3b57db78b073bde810c344ff25837d4c10467b2d57c9fc3d98bc0948eabffce6d0a500"/116}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r8, 0x2000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r1, r8}) 04:06:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x28bd, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:06:31 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r3, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_usb_disconnect(r3) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) lseek(r1, 0x0, 0x1) accept(r0, &(0x7f00000005c0)=@alg, &(0x7f00000004c0)=0xffffffffffffff31) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() tkill(r5, 0x1000000000016) sendto$inet6(r0, 0x0, 0x184, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 04:06:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)) ioctl$sock_ifreq(r0, 0x89fa, &(0x7f0000000140)={'sit0\x00\x00\x00\x00\x00\x00\x00\x12\x00\x00\xed\x00', @ifru_ivalue}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000000000)) [ 400.593295][ T4006] usb usb3-port1: attempt power cycle [ 400.686546][T13764] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 400.711675][T13768] x86/PAT: syz-executor.1:13768 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back [ 400.726498][T13768] x86/PAT: syz-executor.1:13768 map pfn RAM range req write-combining for [mem 0x1d42ef000-0x1d42effff], got write-back [ 400.754554][T13764] x86/PAT: syz-executor.4:13764 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back [ 400.754874][T13768] x86/PAT: syz-executor.1:13768 map pfn RAM range req write-combining for [mem 0x1d3953000-0x1d3953fff], got write-back 04:06:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x300}) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) sendto$unix(0xffffffffffffffff, &(0x7f0000000440)="dc02fc9fd3d50b333d6b715baf25fba9161f", 0x12, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x28100) 04:06:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1ba0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) r0 = syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x0) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40010, r1, 0x0) [ 400.784221][T13774] x86/PAT: syz-executor.1:13774 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 400.903489][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 400.909850][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:06:32 executing program 1: r0 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300060000000000000000003800000000000000000000000000200002000000000000000000000000000000000000006dcc090000000000000000000000000000000000000000000000000300000000000e00000000000000000002000000000000000000000000157e96358c74e01a759d8943de0464cc9cbba17aed5e9e7b6f9feaf93b0f7c17af2f6296ea829a3358ecc62aaf7fbcd0d8d8bbdfd1731443"], 0x78) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) [ 400.975360][T12270] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 400.996779][T12368] usb 1-1: new high-speed USB device number 22 using dummy_hcd 04:06:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000006e00)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000006f00)=0xe8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000006f40)={'hsr0\x00', r5}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'batadv0\x00\x00\x00\x00\x02\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'batadv0\x00\x06\bz\x00\x00\x00\xfd\x00', 0xf7fffffffffffffd}) 04:06:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = eventfd2(0x0, 0x800) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x5) r4 = dup(r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/\x00', 0x40, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8f12, 0x200000) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_GET_XCRS(r7, 0x5000aea5, &(0x7f0000000080)=ANY=[@ANYBLOB="7e38009c53236076"]) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 401.075330][T12269] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 401.223602][T12270] usb 6-1: Using ep0 maxpacket: 8 [ 401.243245][T12368] usb 1-1: Using ep0 maxpacket: 16 [ 401.295498][T13797] device batadv0 entered promiscuous mode [ 401.304592][T13797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.314540][ T4006] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 401.323269][T12269] usb 4-1: Using ep0 maxpacket: 8 [ 401.343643][T12270] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.354788][T12270] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 401.368189][T12270] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 401.377455][T12270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.410265][T12270] usb 6-1: config 0 descriptor?? [ 401.463278][T12269] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 401.471722][T12269] usb 4-1: config 0 has no interface number 0 [ 401.478126][T12269] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 401.485082][T12368] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.489359][T12269] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 401.497372][T12368] usb 1-1: config 0 has no interface number 0 [ 401.508680][T12269] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 401.515224][T12368] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 401.526705][T12269] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 401.535870][T12368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.547646][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 401.547910][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 401.554083][T12368] usb 1-1: config 0 descriptor?? [ 401.556238][T12269] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 401.587858][T12269] usb 4-1: config 0 interface 164 has no altsetting 0 [ 401.608096][T12368] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 401.614955][T12368] gspca_mr97310a: reg write [21] error -22 [ 401.620903][T12368] mr97310a: probe of 1-1:0.2 failed with error -22 [ 401.628180][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 401.628752][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:06:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@remote, 0xa1e, 0x0, 0x1, 0x1, 0x6, 0xeb}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@remote, @loopback}, 0x8) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\b'], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:06:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x8b1dbd0f) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) ftruncate(r4, 0xa00002) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000040)=0xfffffffffffffe95) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xfff6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 401.708224][T12269] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 401.717860][T12269] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 401.723049][ T4006] usb 3-1: device descriptor read/64, error 18 [ 401.726305][T12269] usb 4-1: Product: syz [ 401.784703][T12269] usb 4-1: config 0 descriptor?? [ 401.943266][T12269] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 401.954645][T13811] device batadv0 left promiscuous mode [ 401.963261][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 401.983161][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 402.003387][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 402.020254][T13795] device batadv0 entered promiscuous mode [ 402.026637][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 402.029396][T13795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.053615][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 402.153774][T12270] usbhid 6-1:0.0: can't add hid device: -71 [ 402.159976][T12270] usbhid: probe of 6-1:0.0 failed with error -71 [ 402.170084][T12270] usb 6-1: USB disconnect, device number 10 [ 402.213143][T12269] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 402.233144][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 402.253065][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 402.273523][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 402.293280][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 402.313255][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 402.333319][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 402.353207][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 402.368044][T12269] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input12 [ 402.594824][T12269] usb 4-1: USB disconnect, device number 12 [ 402.883042][T12368] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 403.133138][T12368] usb 6-1: Using ep0 maxpacket: 8 [ 403.253432][T12368] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.264720][T12368] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 403.277711][T12368] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 403.287461][T12368] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.297204][T12368] usb 6-1: config 0 descriptor?? 04:06:34 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 403.715528][ T4006] usb 1-1: USB disconnect, device number 22 [ 403.733378][T12368] usbhid 6-1:0.0: can't add hid device: -71 [ 403.739598][T12368] usbhid: probe of 6-1:0.0 failed with error -71 [ 403.775792][T12368] usb 6-1: USB disconnect, device number 11 04:06:34 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r3, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_usb_disconnect(r3) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) lseek(r1, 0x0, 0x1) accept(r0, &(0x7f00000005c0)=@alg, &(0x7f00000004c0)=0xffffffffffffff31) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() tkill(r5, 0x1000000000016) sendto$inet6(r0, 0x0, 0x184, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 04:06:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r5) ptrace(0x4208, r5) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, 0x24, 0x0, &(0x7f00000001c0)=""/173, 0xad, &(0x7f0000000280)=""/201}, 0x40) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r10, 0x2000) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000400)={r10, 0xffffffffffffffff, 0x101}) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f000000ac80), 0x66, 0x0) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r13 = dup(r12) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r13, 0x2000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r13, 0x28, 0x2, &(0x7f0000000040)=0x3d6, 0xfffffea5) 04:06:34 executing program 4: socket$kcm(0x10, 0x0, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r3 = socket$inet(0x2, 0x3, 0x80000000002) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r6, 0x2000) bind$unix(r6, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) r7 = fcntl$getown(r3, 0x9) r8 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x100, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r8, 0xc0945662, &(0x7f00000002c0)={0x8, 0x0, [], {0x0, @bt={0x140000, 0x2, 0x1, 0x1, 0xfffffffffffffffd, 0x7, 0x2, 0x17, 0x9, 0x1000000, 0xfff, 0x2, 0x0, 0x101, 0x3, 0x8}}}) move_pages(r7, 0x3, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000080)=[0x80000000, 0x32, 0x7f, 0x7fe, 0x6], &(0x7f0000000100)=[0x0], 0x2) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 04:06:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x4000000080002, 0x0) connect$inet6(r0, &(0x7f0000005d00)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) socket$inet6(0xa, 0x4000000080002, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001440)) setreuid(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="ff000000100005f100000009e20000000300f80a00", @ANYRES32=0x0, @ANYBLOB="0000000000010000280012000c0001007665746800040000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0100020000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000240)={{0x6, @broadcast, 0x4e21, 0x4, 'dh\x00', 0x8, 0xfffffffa, 0x19}, {@multicast2, 0x4e24, 0x0, 0x0, 0x19, 0x7}}, 0x44) open_tree(r5, &(0x7f0000000140)='./file0\x00', 0x1) 04:06:34 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x109101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004700)={0x0, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="8895000000000000007579f4ff0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xfffffffffffffffb, 0x40) r3 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x14) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mISDNtimer\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@ipv6_getroute={0x60, 0x1a, 0x0, 0x70bd26, 0x25dfdbff, {0xa, 0xd13248dba47acc47, 0x0, 0xd4, 0x0, 0x1, 0xc8, 0xad0b080240f89a7a, 0x1b00}, [@RTA_EXPIRES={0x8, 0x17, 0x3}, @RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, [], 0x24}}, @RTA_METRICS={0x8, 0x8, "8cec0ee1"}, @RTA_IIF={0x8}, @RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x81}, @RTA_UID={0x8, 0x19, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x400) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'rdma'}]}, 0xce) [ 403.987621][T13827] x86/PAT: syz-executor.2:13827 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back 04:06:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty}, 0x1c, 0x0, 0xfffffffffffffce3}}, {{&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[]}}], 0x2, 0x0) [ 404.032728][T13834] x86/PAT: syz-executor.4:13834 map pfn RAM range req write-combining for [mem 0x1d6ec5000-0x1d6ec5fff], got write-back [ 404.066722][T13829] x86/PAT: syz-executor.1:13829 map pfn RAM range req write-combining for [mem 0x1d3992000-0x1d3992fff], got write-back 04:06:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000040)=0x3, 0xfd86) sendmmsg(r4, &(0x7f000000d8c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg(r5, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x2) write$binfmt_misc(r2, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r6 = socket$bt_rfcomm(0x1f, 0x3, 0x3) listen(r6, 0x80) splice(r1, 0x0, r3, 0x0, 0x8001, 0x0) 04:06:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r3) socket$pppoe(0x18, 0x1, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$inet(0x2, 0x3, 0x80000000002) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4000, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x70, r9, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x33}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xc3be12faa73dc06c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8f8}]}, 0x70}, 0x1, 0x0, 0x0, 0x60025}, 0x4000) setsockopt$inet_int(r7, 0x0, 0xc8, &(0x7f0000000080)=0x1, 0x19e) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 404.184333][ T4006] usb 1-1: new high-speed USB device number 23 using dummy_hcd 04:06:35 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x73) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) prctl$PR_GET_SECCOMP(0x15) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000040)="7f107c118b8297add31f388c7311c77bfbdc6e41377f1cfb54e309444c25b077220b79628a6c85b38759588916055e34c0a46a833c2f458dba1ac8a53f891c17e5b27f5513395510de9350b9225a3f64f3f016f1fa186079b3db1c6ed1f6dc4bbfb42bcbbab2621a73ff", 0x6a) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x18}}], 0x2, 0x0) [ 404.323208][T12368] usb 4-1: new high-speed USB device number 13 using dummy_hcd 04:06:35 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0xffffffffffffff9c, 0x2404c8c1, &(0x7f0000000180)={0xa, 0x400000000004e24, 0x0, @mcast2}, 0x4be) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000005140)={0x1}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f00000003c0)="f8", 0xffb3, 0x4000000, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) r4 = accept4(r3, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) [ 404.438611][ T4006] usb 1-1: Using ep0 maxpacket: 16 04:06:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x10000000003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}, 0x0, 0x3c}, 0x0, @in6=@local, 0x0, 0x3, 0x0, 0x8}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x8000, 0x0) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000140)=r4) r5 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r5, 0x0, 0xc8, &(0x7f0000000080), 0x4) fsetxattr$security_selinux(r5, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2) [ 404.565164][T12368] usb 4-1: Using ep0 maxpacket: 8 [ 404.645452][ T4006] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 404.654763][ T4006] usb 1-1: config 0 has no interface number 0 [ 404.660965][ T4006] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 404.670300][ T4006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.680124][ T4006] usb 1-1: config 0 descriptor?? [ 404.713357][T12368] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 404.721750][T12368] usb 4-1: config 0 has no interface number 0 [ 404.728240][T12368] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 404.739495][T12368] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 404.750994][T12368] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 404.763211][T12368] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 404.774821][T12368] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 404.788939][T12368] usb 4-1: config 0 interface 164 has no altsetting 0 [ 404.800249][ T4006] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 404.806838][ T4006] gspca_mr97310a: reg write [21] error -22 [ 404.813043][ T4006] mr97310a: probe of 1-1:0.2 failed with error -22 [ 404.953250][T12368] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 404.962434][T12368] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 404.970836][T12368] usb 4-1: Product: syz [ 404.977011][T12368] usb 4-1: config 0 descriptor?? [ 405.063447][ C1] net_ratelimit: 18 callbacks suppressed [ 405.063468][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 405.075519][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 405.133172][T12368] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 405.154064][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 405.173408][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 405.193442][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 405.216836][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 405.246002][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 405.403067][T12368] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 405.423162][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 405.443086][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 405.463089][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 405.483260][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 405.503102][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 405.523093][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 405.544206][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 405.552118][T12368] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input13 [ 405.703506][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 405.709853][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 405.783223][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 405.789367][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 405.814512][T12368] usb 4-1: USB disconnect, device number 13 [ 405.863272][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 405.869463][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 406.185485][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 406.192536][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:06:37 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 406.820606][T12368] usb 1-1: USB disconnect, device number 23 04:06:38 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r3, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_usb_disconnect(r3) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) lseek(r1, 0x0, 0x1) accept(r0, &(0x7f00000005c0)=@alg, &(0x7f00000004c0)=0xffffffffffffff31) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() tkill(r5, 0x1000000000016) 04:06:38 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000080)) r4 = socket$inet(0x2, 0x6, 0x4) r5 = dup(r4) getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f0000000000)) 04:06:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x800) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x0, 0x3, 0x3, 0x1, 0x7}, 0x1}, 0xa) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x54752d97d2aa28b7}, {}, {}, 0x0, 0x0, 0x1, 0x3}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6}}, 0xe8) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)={0x4, 0x4000}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000000)={0x0, 0x2515}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = accept(0xffffffffffffffff, &(0x7f0000000180)=@ethernet={0x0, @remote}, &(0x7f0000000100)=0x80) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 04:06:38 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x80000001, 0x222a00) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0x100000000098f907, 0x3, [0x100000000000000]}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4440, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000240)={0x0, @data}) [ 407.156732][T13898] x86/PAT: syz-executor.1:13898 map pfn RAM range req write-combining for [mem 0x1d393a000-0x1d393afff], got write-back [ 407.253389][T12368] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 407.257149][T13907] x86/PAT: syz-executor.1:13907 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back 04:06:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1c040, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) dup(r4) r5 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x1, 0x2}) io_uring_enter(r1, 0x20807, 0x935, 0x6ea2a109d3a57bba, &(0x7f0000000040)={0x400000000}, 0xfffffffffffffef5) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x8001}, 0x90) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000140)={0x10000, 0xfffffffb, 0x61, &(0x7f00000000c0)="14f2ffc23033d0d1e951aa68d73751c4461bc77eaa20f0adb1edcc0f8bb04a0545efb5e94aa446e4f04a5ffd2712b3f0a8888931f3776517e4e2cff74b7a236cafbbc28920ed3264efdc992f69de31519be76d1a7dcade1974a73dcc2c5fb6d4d2"}) 04:06:38 executing program 1: arch_prctl$ARCH_SET_GS(0x1001, 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000180)="0f20e06635000002000f22e00f9350f20f232e0f47f5baf80c66b8c8a2558a66efbafc0c66ed0f35b85c000f00d0baf80c66b8fe65f68066efbafc0ced66b9870a000066b8d95f902966baf1a568110f300f231b", 0x54}], 0x1513cc7, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r6, 0x2000) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000000)={0x10000, 0x8, 0x4, 0x9}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000004cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 407.461354][T13913] x86/PAT: syz-executor.2:13913 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 407.503059][T12368] usb 1-1: Using ep0 maxpacket: 16 [ 407.508624][ T4006] usb 4-1: new high-speed USB device number 14 using dummy_hcd 04:06:38 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r6, 0x2000) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r8, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r8}}, 0x48) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0x29d, 0xfa00, {&(0x7f0000000180), r8, 0x4}}, 0x335) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x1, {0xa, 0x4e24, 0x100, @rand_addr="ddc77fa61b5770a2046174d6926120bf", 0x3}, r8}}, 0x38) lseek(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r6, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x6, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0xdb9, 0x4, 0x89, 0x8001}, {0x4, 0x4, 0xe6, 0x5}, {0xfeff, 0x5, 0x4, 0x3}]}) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r12, 0x2000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r12, 0x4020565a, &(0x7f00000003c0)={0x0, 0x4, 0x1}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x5f, &(0x7f0000000080)=[{&(0x7f0000000100)="240000000f0607031d8469946fa2830020200a00090001000a1d85680c1baba20400ff7e", 0x24}], 0x1, 0x0, 0xfffffffffffffd54}, 0x0) [ 407.576470][T13917] x86/PAT: syz-executor.1:13917 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back [ 407.616306][T13920] x86/PAT: syz-executor.5:13920 map pfn RAM range req write-combining for [mem 0x1d3953000-0x1d3953fff], got write-back [ 407.708917][T13920] x86/PAT: syz-executor.5:13920 map pfn RAM range req write-combining for [mem 0x1d42ef000-0x1d42effff], got write-back [ 407.722213][T12368] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 407.730902][T12368] usb 1-1: config 0 has no interface number 0 [ 407.737167][T12368] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 407.746354][T12368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:06:38 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r6, 0x2000) r7 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r7, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESHEX=r3, @ANYRES16=r7], 0x3}}, 0x0) [ 407.761950][T12368] usb 1-1: config 0 descriptor?? [ 407.769023][T13920] x86/PAT: syz-executor.5:13920 map pfn RAM range req write-combining for [mem 0x1d36fe000-0x1d36fefff], got write-back [ 407.791971][ T4006] usb 4-1: Using ep0 maxpacket: 8 [ 407.825021][T12368] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 407.831452][T12368] gspca_mr97310a: reg write [21] error -22 [ 407.838134][T12368] mr97310a: probe of 1-1:0.2 failed with error -22 [ 407.915788][T13929] x86/PAT: syz-executor.1:13929 map pfn RAM range req write-combining for [mem 0x1d3992000-0x1d3992fff], got write-back [ 407.936232][ T4006] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 407.945738][ T4006] usb 4-1: config 0 has no interface number 0 [ 407.951942][ T4006] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 407.963196][ T4006] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 407.968993][T13931] x86/PAT: syz-executor.1:13931 map pfn RAM range req write-combining for [mem 0x1d6ec5000-0x1d6ec5fff], got write-back [ 407.974611][ T4006] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 407.974704][ T4006] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 04:06:39 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@broadcast, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) ioprio_set$uid(0x1, r0, 0x4) [ 408.010133][ T4006] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 408.023744][ T4006] usb 4-1: config 0 interface 164 has no altsetting 0 04:06:39 executing program 1: mknod(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='jffs2\x00', 0x0, &(0x7f0000dedf2f)='rw') socket$pppoe(0x18, 0x1, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x400401, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000100)={0xff, 0x9, 0xa3cb, 0x101, 0xffffff81, 0x9}) [ 408.108774][ T4006] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 408.118051][ T4006] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 408.126447][ T4006] usb 4-1: Product: syz [ 408.181930][ T4006] usb 4-1: config 0 descriptor?? 04:06:39 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a056a00400000000001090224000100000000090400000603010000092100000001220600090581030000000000ddbe8afb9245079cb97a9bcc83eebead67e11920eceb8fd6f019f66105eb0110c1a752a7e777b267c070aa2a03a370fa92d7ec339c37e826389b8d07c13c3e266e082dc9496ae067621b69b36f206ab126de4190f85476fb89b11a23afd93351bdcea95c333adc5d76fe5dab900d20ffd9e053590f3e8a58592b4cb1487e64ab3588664f57715b8e98d270594b18418a9f16efba4b2709f74e1e73b402ac5fc75ad931d1b4f9ca137578"], 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000040)=0x800) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x4, {[@local=@item_012={0x2, 0x2, 0x0, 'xD'}, @global=@item_012={0x0, 0x1, 0x7}]}}, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) [ 408.262464][T13915] x86/PAT: syz-executor.2:13915 map pfn RAM range req write-combining for [mem 0x1d393a000-0x1d393afff], got write-back [ 408.349519][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 408.380560][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 408.403281][T12269] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 408.406566][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 408.437660][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 408.604892][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 408.611608][T12368] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 408.625233][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 408.643184][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 408.653347][T12269] usb 6-1: Using ep0 maxpacket: 16 [ 408.664975][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 408.683273][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 408.705048][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 408.723200][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 408.746391][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 408.754506][ T4006] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input14 [ 408.773527][T12269] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 408.781804][T12269] usb 6-1: config 0 has no interface number 0 [ 408.788101][T12269] usb 6-1: config 0 interface 41 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 408.798119][T12269] usb 6-1: config 0 interface 41 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 408.808231][T12269] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9d.69 [ 408.817482][T12269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.834772][T12269] usb 6-1: config 0 descriptor?? [ 408.880531][T12269] ni6501 6-1:0.41: driver 'ni6501' failed to auto-configure device. [ 408.973594][T12368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.985071][T12368] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 408.998153][T12368] usb 2-1: New USB device found, idVendor=056a, idProduct=006a, bcdDevice= 0.40 [ 409.007399][T12368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.020492][T12269] usb 4-1: USB disconnect, device number 14 [ 409.046797][T12368] usb 2-1: config 0 descriptor?? [ 409.078538][T12270] usb 6-1: USB disconnect, device number 12 [ 409.285361][T13947] x86/PAT: syz-executor.1:13947 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back [ 409.803264][T12368] usbhid 2-1:0.0: can't add hid device: -71 [ 409.809497][T12368] usbhid: probe of 2-1:0.0 failed with error -71 [ 409.833529][T12368] usb 2-1: USB disconnect, device number 16 [ 409.883292][T12269] usb 6-1: new high-speed USB device number 13 using dummy_hcd 04:06:41 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 409.947771][T12270] usb 1-1: USB disconnect, device number 24 [ 410.143119][T12269] usb 6-1: Using ep0 maxpacket: 16 [ 410.263309][T12269] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 410.271944][T12269] usb 6-1: config 0 has no interface number 0 [ 410.278274][T12269] usb 6-1: config 0 interface 41 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 410.288277][T12269] usb 6-1: config 0 interface 41 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 410.298319][T12269] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9d.69 [ 410.307777][T12269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:06:41 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r3, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_usb_disconnect(r3) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) lseek(r1, 0x0, 0x1) accept(r0, &(0x7f00000005c0)=@alg, &(0x7f00000004c0)=0xffffffffffffff31) socket$inet6_tcp(0xa, 0x1, 0x0) gettid() 04:06:41 executing program 2: r0 = socket$inet(0x2, 0x3, 0x80000000002) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4a, 0x40001) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 410.343217][ C0] net_ratelimit: 22 callbacks suppressed [ 410.343238][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 410.355308][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 410.423293][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 410.429962][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 410.439755][T12269] usb 6-1: config 0 descriptor?? [ 410.475464][T12270] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 410.502224][T12269] ni6501 6-1:0.41: driver 'ni6501' failed to auto-configure device. [ 410.514991][ T12] usb 2-1: new high-speed USB device number 17 using dummy_hcd 04:06:41 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaa44e910e8c51aaaadaa9caa4da3aaaaaa08004500002400000000006c90cbf6ed6d00d7050200f5341c3ec8c0450b7c34650238d33fe06d0bdbf8de28078a7ece1879c22be5b8d585ef48c239acabdcb1313ad65f278c8d7c746b13e38b4ae832e2784a9abcff4daa79ef94e8eccc005ca8e52bfa85b102ad0d333fddd999ff045aa2a43875b411ad6b4d7597e71ba90faeffac3a04c8e4b521f6cf7b32ea31f30391"], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40000012, r2, 0x1ffe) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000040)=""/255) socket$pptp(0x18, 0x1, 0x2) [ 410.698066][T12269] usb 6-1: USB disconnect, device number 13 [ 410.733076][T12368] usb 4-1: new high-speed USB device number 15 using dummy_hcd 04:06:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000140)="660fc7f0b8010000000f01c1470f01cf262e0f01c46764420fa866400fc7320fc7743100430f30c423cd6c6727bcb8010000000f01c1", 0x36}], 0x1, 0x44, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 410.744367][T12270] usb 1-1: Using ep0 maxpacket: 16 [ 410.893484][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.904759][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 410.917777][ T12] usb 2-1: New USB device found, idVendor=056a, idProduct=006a, bcdDevice= 0.40 [ 410.926989][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:06:42 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)='1', 0x1}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x17, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0xec) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr="02422dc6e5933abc7029e5e36fc3e001"}, r2}}, 0x284) [ 410.973141][T12270] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 410.976425][T12368] usb 4-1: Using ep0 maxpacket: 8 [ 410.981551][T12270] usb 1-1: config 0 has no interface number 0 [ 410.992756][T12270] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 411.002057][T12270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.014968][ T12] usb 2-1: config 0 descriptor?? [ 411.021002][T12270] usb 1-1: config 0 descriptor?? [ 411.067935][T12270] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 411.074424][T12270] gspca_mr97310a: reg write [21] error -22 [ 411.080512][T12270] mr97310a: probe of 1-1:0.2 failed with error -22 [ 411.115087][T12368] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 411.123818][T12368] usb 4-1: config 0 has no interface number 0 [ 411.130808][T12368] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 411.142216][T12368] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 411.153756][T12368] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 04:06:42 executing program 5: creat(0x0, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @pic={0x0, 0x0, 0x5d}}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @pic={0x0, 0x0, 0x5d}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0xfffffdfd, 0x3}) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@loopback}, 0x0, @in=@local}}, 0xe8) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x42002, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000000c0)={{0x90, 0x7}, 0x0, 0x80, 0x1, {0x2, 0x3}, 0x80, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) unshare(0x60000000) [ 411.165374][T12368] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 411.176826][T12368] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 411.190356][T12368] usb 4-1: config 0 interface 164 has no altsetting 0 04:06:42 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r5) ptrace(0x4208, r5) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r7 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r7, 0x0, 0xc8, &(0x7f0000000080), 0x4) r8 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r8, 0x0, 0xc8, &(0x7f0000000080), 0x4) kcmp(r5, r6, 0x1, r7, r8) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 411.278023][T12368] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 411.287811][T12368] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 411.291813][T13987] x86/PAT: syz-executor.1:13987 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 411.296240][T12368] usb 4-1: Product: syz [ 411.310593][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 411.311011][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:06:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r8}, 0x18, 0x0) getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r11, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r12, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r10, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r12}}, 0x18) r13 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r13) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r14, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r15, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r13, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r15}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r10, @ANYRES32=r8, @ANYRES32=r13, @ANYRES32=r9, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r16 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000800)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000840)='TRUE', 0x4, 0x2) pwritev(r16, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r16) sendfile(r0, r1, 0x0, 0x102000002) [ 411.440422][T13986] IPVS: ftp: loaded support on port[0] = 21 [ 411.506728][T12368] usb 4-1: config 0 descriptor?? [ 411.663175][T12368] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 411.685391][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 411.735334][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 411.845893][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 411.966033][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 411.973653][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 411.983431][ T12] usbhid 2-1:0.0: can't add hid device: -71 [ 411.989653][ T12] usbhid: probe of 2-1:0.0 failed with error -71 [ 412.003020][ T12] usb 2-1: USB disconnect, device number 17 [ 412.013192][T12368] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 412.023339][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 412.029805][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 412.049245][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 412.090863][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 412.113627][T14003] IPVS: ftp: loaded support on port[0] = 21 [ 412.116569][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 412.143414][T13996] syz-executor.1 (13996) used greatest stack depth: 51328 bytes left [ 412.143797][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 04:06:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000180)={r1}) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) r5 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r5, 0x0, 0xc8, &(0x7f0000000080), 0x4) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r6) ptrace(0x4208, r6) r7 = syz_open_procfs(r6, &(0x7f00000001c0)='oom_score\x00') r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xc0080, 0x0) r9 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r9, 0x0, 0xc8, &(0x7f0000000080), 0x4) poll(&(0x7f0000000240)=[{r3, 0x1000}, {r4, 0x100}, {r5}, {r7, 0xa280}, {r8, 0x8010}, {r9, 0x2000}], 0x6, 0x0) getpeername(r2, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000004b0000240012000c08010069706970000000003100020008001100000000000800100000000000"], 0x44}}, 0x0) [ 412.251929][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 412.256997][T14009] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 412.275882][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 412.293261][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 04:06:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='6\x9d\x9d\x05\x8d\xd5\xf4\x93\x03)', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="36f0821f00f30f350f00dc0f23260f01c372d60f013bba200066ed0f01df0f30", 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f00000002c0)={0x8, 0xb06, &(0x7f00000000c0)="9d98cde39b63fdc7bc1fbcc115e46452c774a8b92146f284b73edc64f39cf7c8db2a7de401ee13d1c032fcad1db6bc7104b532c66d0db78121e9bbc2c6a699bf1afae33b3de2cfd235b7b444a2d67001eed152d31d8ea40c342fafd1e3672e3298fdb2850614a7e14b1f8fdc2d44520e10f9f8619f611603db05510891d3a56d027f1d32", &(0x7f0000000200)="f8409a294191348f264c974f211df5d91b406ce7ad5e3b1d0723d7adcdb9f45931a88df50edce966ca4dabdf4585c46ec334d3d1ff9affa293fbe3bd577a38cbec05b8636f0f1fd67d7adf76f9ae3fddcfabe530cb4bba6c240494e38ec8f96642e685f9ff741e04d1c3bd3635a830f61f1a48c94b6ea42193faa2ae7a826f29d4382c4493ac56c35e3fbfad863d7e6249af5b054056419719", 0x84, 0x99}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 412.302276][T12368] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input15 04:06:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x2, 0x6d, 0x20000000000001, 0x0, 0x0, 0x0, [0x3fffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x3c) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r2, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000080)=0x101) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$RTC_VL_CLR(r3, 0x7014) [ 412.524736][T14022] x86/PAT: syz-executor.4:14022 map pfn RAM range req write-combining for [mem 0x1d36fe000-0x1d36fefff], got write-back [ 412.560375][T14021] x86/PAT: syz-executor.5:14021 map pfn RAM range req write-combining for [mem 0x1d3992000-0x1d3992fff], got write-back [ 412.635661][T14024] x86/PAT: syz-executor.4:14024 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back 04:06:44 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 413.075488][T12368] usb 1-1: USB disconnect, device number 25 [ 413.332741][T14029] x86/PAT: syz-executor.5:14029 map pfn RAM range req write-combining for [mem 0x1d3953000-0x1d3953fff], got write-back [ 413.553072][T12368] usb 1-1: new high-speed USB device number 26 using dummy_hcd 04:06:44 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ddbfe908f8060400010000ed00010902240001000000000904a4e92319b875000905850b000d0000000905010341000000005b7481db4894cd501e42ffc9c7e69f4eacc71f2d60087793bb9db2c4c9e1830101e114d5c8956f42cf4d7c92f71ff0fb85abd1fd06671269ec4b3a4830a47e74aef28fbdde383db227b6f1a02e84847cfc0a3be4f07648913d73ae7e156c21cf44e1fda4d436b133991fecd3023bf386cb21ed85b695b2f579912e5eea4b2db0ee3bc2e645dcdcb82cb7732fce272a39e6922ffffc8243a06685e47356542838ec20f8d4ee9bd76a4c1477b44775dc4c2908b4f3e21de4c986d961d6bf574f81c2c7c0c559385a275f54336d317609e4ea205b5b6bb70c1a68509ee851572af4b5bb72964b121cebdc48519cc5c9c100d5bb10c71a1c2de1116a841eadc3990bfa24f1663c634615e4a64eb004a73e70d5e7349cdacb79a96654172ce8de333e4be6b3c51e4bb8688576653a6bf4025cb78bd0eaaf4e02d6cf382bbf4b1e6c413b06dae03fca569d136c2df9232707a8a8a2d6e7d9939b2e0a1d729d0133cde8cab589a8070eb40246a04ddd035561c975f960cc4c7be68fbfda551de187ba7ed9d55a5f2b95c0226b823f92f80fc0b414b3400b8b2874d47b680aec612798134a28e45738e682114de8c3b164de0f5ca83df813c7c35cba412fb85aefbae132dabca0916e246adc563692e41659faea685d8b59c21bfa9ec9a5b7a6fd87cad2966ec2af3330be"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r3, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_usb_disconnect(r3) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) lseek(r1, 0x0, 0x1) accept(r0, &(0x7f00000005c0)=@alg, &(0x7f00000004c0)=0xffffffffffffff31) socket$inet6_tcp(0xa, 0x1, 0x0) 04:06:44 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r0 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r1, 0x57, 0x4}, &(0x7f00000000c0)={'enc=', 'raw', ' hash=', {'poly1305-generic\x00'}}, &(0x7f00000001c0)="d30cd66c59cf7f99e965a98fc7fadef8c74b4623b90271756b5514d034489b9533a1307205bf4dd652b79d00ce0fffa7075b8be19e128358ba890dfd5ccfdddbe77930db735164511e1bdbc07ecb3945140de546ccfea0", &(0x7f0000000140)="fd326cb0") keyctl$get_persistent(0x16, 0x0, r0) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000180)="c6ef157d03adc939054af9ca0900000000000000ef5a9721bc1a082c00000000", 0x20, r0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x82}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080900}, 0x0) r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x45f, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r2, r2, r4}, &(0x7f0000002700)=""/83, 0xffffff84, 0x0) 04:06:44 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x801}, 0x1fe) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f424000904000a", 0x11) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 04:06:44 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r5) ptrace(0x4208, r5) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r7 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r7, 0x0, 0xc8, &(0x7f0000000080), 0x4) r8 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r8, 0x0, 0xc8, &(0x7f0000000080), 0x4) kcmp(r5, r6, 0x1, r7, r8) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:06:44 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x32, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x7) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, &(0x7f0000013000)=0xffffffffffffff85) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 413.687004][ T4006] usb 4-1: USB disconnect, device number 15 [ 413.792959][T12368] usb 1-1: Using ep0 maxpacket: 16 04:06:44 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x32, @local, 0x4e21, 0x1, 'fo\x00', 0x18, 0x8, 0x14}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0xf3, 0x0, 0x0, 0x1f}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000200)={{0x0, 0x3}}) 04:06:45 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x8000) dup(r2) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) fstat(r3, &(0x7f0000000000)) 04:06:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c8002000800110700000000"], 0x3c}}, 0x0) [ 413.996497][T12368] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 414.004799][T12368] usb 1-1: config 0 has no interface number 0 [ 414.011010][T12368] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 414.020234][T12368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:06:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x3, 0x80000000002) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000280)={0x1, 'netdevsim0\x00', 0x4}, 0x18) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) listen(r2, 0xe19) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="f1b2289d10f4af70817005f90aabb4ccba486ca0df511eb9c4f5c39f6df61a227d8d5576e1300df66cf164cd6695ef388b811fa1c0630365285471b9c6cda09fa9085c32e6823e0f46fa1adbf2802d1c86a77cfba0f62d8ff3aac9481f20a81f11627a91e64c4e5e7e1252efa668dad857bb32416886eb6cf1b226612cc7f6b6ff781c0671ce19e246159be5a3f89f587d1e17081a3f7d34f233e97b1b28d02f938e30533f698d18d859", 0xaa}, {&(0x7f0000000140)="19b5ab9c1bcc246e5fd1208791f6bfc9cafdb54a6ea226dc3123e09001bead83f185a05b11c2f5c60fcd9078f160486876209c0c97d78147a83bd4d8b38a908bdbc1c65fe45f2d416899c6810d15eed766c333b378479ffdb661b9d3c33315ef05d035b21f29b97823b65290ba2ba8afb70c7ee4705f3f6f6a75b211241c091331c6c1296bce63d7a399ed6fa412f379915984e0896e7a9288064e97cfb8c179c7aeb68ff94837eb45f7c2f485a7394735cce1899e3e472f8b3fa34f6ce1f7550c", 0xc1}, {&(0x7f00000003c0)="9472c5dbe61a172e3317b8f13861734846180e4d04eca9f15d90cd37b9d9323d2853022f2b697345dbd6a0afb8e1e31a7b8852f25065f7363d7ddd9516b57c6146e03283ec4471058806dbf5d979072c299f051045abdcd47a48edae8514e41d48881e7990dd3deee2f1a5b2818b71b0bccbb16495ff0e5abedc12f3b0b8ef2a2a147085a5d6e08e70b9274d5a35bc938980983e6d185af72b8073a5203f7f8d9344b105c0c3a679edc771edd9368d5367baa378fa5ea04c7653a58cdd0525bb9fcac738bb2f369c1bea38f5fa201e871ec5ebae8ae3c10be517e0a92f4d3e8e", 0xe0}, {&(0x7f00000000c0)="2e366423050447d9b1af71a069b896592b9bb57833fa7eb2", 0x18}], 0x4, 0x0) r3 = socket(0x2000000000000010, 0x3, 0x0) write(r3, &(0x7f0000000300)="2400000052001f0014f9f407000904000a00071008000100040000000800000000ccecbf820000009626beb97fe84da11a0324703d1dbece3cf045fd6686ff365886ca21a1faf3bf6b2e24f5af8336130b3ff885137070bc859de1482bb6dc82dec87d050941add034f7c209cd48000000000000000000000000a8135fcdc302af768e8f80c5616e0556a01f38e59fdb6643c3072b71aae6f706e0a06ef079d891d96dc08bb9", 0xa6) [ 414.074557][T14053] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 414.142469][T14053] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 414.157781][T12368] usb 1-1: config 0 descriptor?? [ 414.202648][T14061] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 414.218082][T12368] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 414.224674][T12368] gspca_mr97310a: reg write [21] error -22 [ 414.230711][T12368] mr97310a: probe of 1-1:0.2 failed with error -22 04:06:45 executing program 5: ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000040)) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x37e49e05671e9c09, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@mpls_getroute={0x30, 0x1a, 0x100, 0x70bd28, 0x25dfdbfb, {0x1c, 0x74, 0x80, 0x0, 0xfd, 0x3, 0xff, 0x4, 0x2000}, [@RTA_VIA={0x14, 0x12, {0x1, "929caeff95dd35a48f9788e398e4"}}]}, 0x30}}, 0x0) [ 414.273100][T14064] IPVS: Unknown mcast interface: netdevsim0 [ 414.315410][ T4006] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 414.325228][T14067] IPVS: Unknown mcast interface: netdevsim0 04:06:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x7, 0x218240) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xcb8defc2594e1fbc, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0x29d, 0xfa00, {&(0x7f0000000180), r4, 0x4}}, 0x335) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x3, {0xa, 0x4e23, 0xcdd4, @loopback, 0x288b}, r4}}, 0x38) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r5, 0x5}, 0x14}}, 0x0) [ 414.573111][ T4006] usb 4-1: Using ep0 maxpacket: 8 [ 414.695537][ T4006] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 414.704875][ T4006] usb 4-1: config 0 has no interface number 0 [ 414.711184][ T4006] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 414.722892][ T4006] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 414.734738][ T4006] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 414.746448][ T4006] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 414.757863][ T4006] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 414.771329][ T4006] usb 4-1: config 0 interface 164 has no altsetting 0 [ 414.863286][ T4006] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 414.872547][ T4006] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 414.880945][ T4006] usb 4-1: Product: syz [ 414.887672][ T4006] usb 4-1: config 0 descriptor?? [ 415.063362][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 415.083233][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 415.103317][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 415.123209][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 415.143848][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 415.313234][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 415.333339][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 415.353165][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 415.373052][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 415.393298][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 415.413205][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 415.433273][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 415.453070][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 415.460758][ T4006] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input16 [ 415.473565][ C1] net_ratelimit: 18 callbacks suppressed [ 415.473587][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 415.474270][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 415.678105][ T4006] usb 4-1: USB disconnect, device number 16 [ 416.103431][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 416.110046][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:06:47 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 416.183235][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 416.189297][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 416.212209][ T4006] usb 1-1: USB disconnect, device number 26 [ 416.263319][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 416.269772][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 416.583195][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 416.589437][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 416.633452][ T4006] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 416.873011][ T4006] usb 1-1: Using ep0 maxpacket: 16 04:06:48 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r3, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_usb_disconnect(r3) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) lseek(r1, 0x0, 0x1) accept(r0, &(0x7f00000005c0)=@alg, &(0x7f00000004c0)=0xffffffffffffff31) 04:06:48 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="260000160001ebff6f6c260fcf19000000000000"], 0x18}}, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$alg(r3, &(0x7f00000000c0), 0x0, 0x0) 04:06:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x200000001, 0xa, 0x2000000000000009, 0x1}, 0x2c) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ip6tnl0\x00', 0x1c02}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r8, 0x2000) ioctl$HIDIOCSUSAGE(r8, 0x4018480c, &(0x7f0000000140)={0x3, 0x1, 0x2, 0x5, 0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x3bc, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000280)={0x5, 0x0, 'client0\x00', 0x0, "6f083a09ea73068f", "86140fede69a2f3ed815969d525f8c2be56645ee94368d4ff8800a18f36ac677", 0x2, 0x1}) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r9, 0x0, 0x1000000000e6) 04:06:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x2c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x14, 0x5, [@IFLA_BRPORT_ISOLATED={0x8}, @IFLA_BRPORT_GROUP_FWD_MASK={0x8}]}}}]}, 0x4c}}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e24, 0x0, @empty, 0x3}], 0x2c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) getsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 04:06:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x8}) write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000300)="b7", 0x1}], 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 416.990135][T14096] netlink: 'syz-executor.2': attribute type 33 has an invalid length. [ 416.998589][T14096] netlink: 'syz-executor.2': attribute type 31 has an invalid length. 04:06:48 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) [ 417.083315][T14105] x86/PAT: syz-executor.4:14105 map pfn RAM range req write-combining for [mem 0x1d42ef000-0x1d42effff], got write-back [ 417.092202][ T4006] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 417.104986][ T4006] usb 1-1: config 0 has no interface number 0 [ 417.111211][ T4006] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 417.120524][ T4006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.144233][T14105] x86/PAT: syz-executor.4:14105 map pfn RAM range req write-combining for [mem 0x1d393a000-0x1d393afff], got write-back [ 417.191780][ T4006] usb 1-1: config 0 descriptor?? [ 417.238583][ T4006] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 417.245378][ T4006] gspca_mr97310a: reg write [21] error -22 [ 417.251792][ T4006] mr97310a: probe of 1-1:0.2 failed with error -22 [ 417.333156][T12368] usb 4-1: new high-speed USB device number 17 using dummy_hcd 04:06:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 04:06:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000140)="e4a8e38bb0d5840e950e5cc7c5afc1ea877518ac8875dd3a1a190693637e1384074de09405566b35f23e0c1f7f58272108a23de228cac1077e8f7c2c582abf", 0x3f, 0x0) 04:06:48 executing program 4: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0) dup2(r0, r1) [ 417.573155][T12368] usb 4-1: Using ep0 maxpacket: 8 04:06:48 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="000100000000b600070800"/24], 0x18) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) r2 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 417.693174][T12368] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 417.701531][T12368] usb 4-1: config 0 has no interface number 0 [ 417.707968][T12368] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 417.719418][T12368] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 417.730910][T12368] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 04:06:48 executing program 5: mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r0 = socket$inet(0x10, 0x3, 0xc) ftruncate(r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='./file1\x00', 0x0) lstat(0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000540)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) getresuid(0x0, 0x0, &(0x7f0000000240)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 417.742540][T12368] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 417.753944][T12368] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 417.767435][T12368] usb 4-1: config 0 interface 164 has no altsetting 0 [ 417.794128][T14096] netlink: 'syz-executor.2': attribute type 33 has an invalid length. [ 417.802381][T14096] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 417.864010][T12368] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 417.873351][T12368] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 417.881700][T12368] usb 4-1: Product: syz [ 417.941022][T12368] usb 4-1: config 0 descriptor?? [ 418.113067][T12368] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 418.133161][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 418.153179][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 418.173202][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 418.193408][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 418.353119][T12368] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 418.373192][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 418.393183][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 418.413002][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 418.433022][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 418.453049][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 418.473021][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 418.493038][T12368] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 418.500602][T12368] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input17 [ 418.717162][T12368] usb 4-1: USB disconnect, device number 17 04:06:50 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 419.263283][ T12] usb 1-1: USB disconnect, device number 27 [ 419.682996][ T12] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 419.922988][ T12] usb 1-1: Using ep0 maxpacket: 16 04:06:51 executing program 1: 04:06:51 executing program 4: 04:06:51 executing program 2: 04:06:51 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r3, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_usb_disconnect(r3) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) lseek(r1, 0x0, 0x1) accept(r0, &(0x7f00000005c0)=@alg, &(0x7f00000004c0)=0xffffffffffffff31) 04:06:51 executing program 5: 04:06:51 executing program 1: 04:06:51 executing program 4: 04:06:51 executing program 2: 04:06:51 executing program 5: [ 420.125429][ T12] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 420.133654][ T12] usb 1-1: config 0 has no interface number 0 [ 420.140390][ T12] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 420.149847][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.239322][ T12] usb 1-1: config 0 descriptor?? 04:06:51 executing program 4: [ 420.288261][ T12] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 420.295091][ T12] gspca_mr97310a: reg write [21] error -22 [ 420.301181][ T12] mr97310a: probe of 1-1:0.2 failed with error -22 04:06:51 executing program 1: [ 420.373106][T12270] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 420.613150][T12270] usb 4-1: Using ep0 maxpacket: 8 [ 420.733383][T12270] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 420.741835][T12270] usb 4-1: config 0 has no interface number 0 [ 420.748858][ C0] net_ratelimit: 22 callbacks suppressed [ 420.748881][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 420.749227][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 420.769704][T12270] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 420.781025][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 420.792383][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 420.803965][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 420.816490][T12270] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 420.829942][T12270] usb 4-1: config 0 interface 164 has no altsetting 0 [ 420.833336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 420.842992][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 420.913338][T12270] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 420.922771][T12270] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 420.931395][T12270] usb 4-1: Product: syz [ 420.937745][T12270] usb 4-1: config 0 descriptor?? [ 421.113066][T12270] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 421.133090][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 421.153223][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 421.173325][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 421.193059][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 421.213308][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 421.373061][T12270] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 421.393069][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 421.413214][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 421.433065][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 421.453272][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 421.473203][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 421.493059][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 421.513105][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 421.520751][T12270] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input18 [ 421.703228][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 421.709325][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 421.736914][T12368] usb 4-1: USB disconnect, device number 18 04:06:53 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:06:53 executing program 5: 04:06:53 executing program 4: 04:06:53 executing program 2: [ 422.317855][T12270] usb 1-1: USB disconnect, device number 28 [ 422.343375][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 422.349661][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 422.433378][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 422.439867][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 422.827367][T12270] usb 1-1: new high-speed USB device number 29 using dummy_hcd 04:06:54 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r3, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_usb_disconnect(r3) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) lseek(r1, 0x0, 0x1) 04:06:54 executing program 1: 04:06:54 executing program 5: 04:06:54 executing program 2: 04:06:54 executing program 4: [ 423.073301][T12270] usb 1-1: Using ep0 maxpacket: 16 04:06:54 executing program 5: 04:06:54 executing program 4: 04:06:54 executing program 2: [ 423.273727][T12270] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 423.282141][T12270] usb 1-1: config 0 has no interface number 0 [ 423.288505][T12270] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 423.297942][T12270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.388490][T12270] usb 1-1: config 0 descriptor?? [ 423.437860][T12270] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 423.444934][T12270] gspca_mr97310a: reg write [21] error -22 [ 423.451068][T12270] mr97310a: probe of 1-1:0.2 failed with error -22 [ 423.533069][ T12] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 423.772937][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 423.893172][ T12] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 423.901643][ T12] usb 4-1: config 0 has no interface number 0 [ 423.908054][ T12] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 423.920656][ T12] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 423.932202][ T12] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 423.943809][ T12] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 423.955106][ T12] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 423.968945][ T12] usb 4-1: config 0 interface 164 has no altsetting 0 [ 424.053444][ T12] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 424.062792][ T12] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 424.071166][ T12] usb 4-1: Product: syz [ 424.076963][ T12] usb 4-1: config 0 descriptor?? [ 424.233006][ T12] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 424.253153][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 424.273203][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 424.293258][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 424.313223][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 424.333338][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 424.492999][ T12] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 424.513247][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 424.533159][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 424.553147][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 424.573498][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 424.593272][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 424.613216][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 424.633111][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 424.640944][ T12] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input19 [ 424.858189][ T12] usb 4-1: USB disconnect, device number 19 04:06:56 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:06:56 executing program 1: 04:06:56 executing program 5: 04:06:56 executing program 2: [ 425.453633][ T12] usb 1-1: USB disconnect, device number 29 04:06:56 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ddbfe908f8060400010000ed00010902240001000000000904a4e92319b875000905850b000d0000000905010341000000005b7481db4894cd501e42ffc9c7e69f4eacc71f2d60087793bb9db2c4c9e1830101e114d5c8956f42cf4d7c92f71ff0fb85abd1fd06671269ec4b3a4830a47e74aef28fbdde383db227b6f1a02e84847cfc0a3be4f07648913d73ae7e156c21cf44e1fda4d436b133991fecd3023bf386cb21ed85b695b2f579912e5eea4b2db0ee3bc2e645dcdcb82cb7732fce272a39e6922ffffc8243a06685e47356542838ec20f8d4ee9bd76a4c1477b44775dc4c2908b4f3e21de4c986d961d6bf574f81c2c7c0c559385a275f54336d317609e4ea205b5b6bb70c1a68509ee851572af4b5bb72964b121cebdc48519cc5c9c100d5bb10c71a1c2de1116a841eadc3990bfa24f1663c634615e4a64eb004a73e70d5e7349cdacb79a96654172ce8de333e4be6b3c51e4bb8688576653a6bf4025cb78bd0eaaf4e02d6cf382bbf4b1e6c413b06dae03fca569d136c2df9232707a8a8a2d6e7d9939b2e0a1d729d0133cde8cab589a8070eb40246a04ddd035561c975f960cc4c7be68fbfda551de187ba7ed9d55a5f2b95c0226b823f92f80fc0b414b3400b8b2874d47b680aec612798134a28e45738e682114de8c3b164de0f5ca83df813c7c35cba412fb85aefbae132dabca0916e246adc563692e41659faea685d8b59c21bfa9ec9a5b7a6fd87cad2966ec2af3330be"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_usb_disconnect(r2) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) 04:06:56 executing program 2: 04:06:56 executing program 4: 04:06:56 executing program 5: 04:06:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x351, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:06:56 executing program 2: mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x3, 0xc) ftruncate(r1, 0x0) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='./file1\x00', 0x0) lstat(0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000540)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) getresuid(0x0, 0x0, &(0x7f0000000240)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 04:06:56 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'\x8fyb', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f00000002c0)='4', 0x1, r0) keyctl$set_timeout(0xf, r1, 0x0) 04:06:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) [ 425.863275][ C1] net_ratelimit: 18 callbacks suppressed [ 425.863297][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 425.875294][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 425.914475][ T12] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 426.033496][T12270] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 426.153385][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 426.273018][T12270] usb 4-1: Using ep0 maxpacket: 8 [ 426.353453][ T12] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 426.361760][ T12] usb 1-1: config 0 has no interface number 0 [ 426.368111][ T12] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 426.377366][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.386876][ T12] usb 1-1: config 0 descriptor?? [ 426.393197][T12270] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 426.401574][T12270] usb 4-1: config 0 has no interface number 0 [ 426.407939][T12270] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 426.419186][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 426.430741][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 426.442908][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 426.454705][T12270] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 426.468481][T12270] usb 4-1: config 0 interface 164 has no altsetting 0 [ 426.479876][ T12] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 426.486433][ T12] gspca_mr97310a: reg write [21] error -22 [ 426.492492][ T12] mr97310a: probe of 1-1:0.2 failed with error -22 [ 426.503463][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 426.509862][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 426.553497][T12270] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 426.562779][T12270] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 426.571129][T12270] usb 4-1: Product: syz [ 426.576885][T12270] usb 4-1: config 0 descriptor?? [ 426.583331][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 426.589522][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 426.663842][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 426.670627][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 426.753207][T12270] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 426.773316][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 426.793221][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 426.813243][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 426.833879][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 426.983485][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 426.989743][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 427.013176][T12270] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 427.033307][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 427.053204][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 427.073657][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 427.093136][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 427.113188][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 427.133247][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 427.153201][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 427.160978][T12270] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input20 [ 427.377206][T12270] usb 4-1: USB disconnect, device number 20 04:06:59 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:06:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') r5 = dup(r3) sendfile(r5, r4, 0x0, 0x523) 04:06:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000140)=0x1e) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x14, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r4}, @IFLA_IPTUN_ENCAP_DPORT={0x8}]]}}}]}, 0x44}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r5, 0x0, 0xc8, &(0x7f0000000080), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r5}) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r8, 0x2000) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000000240)={0x2, "35f4"}, 0x3) 04:06:59 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:06:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x448000, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x3, &(0x7f00000002c0)={@empty, @broadcast}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x626, 0x20000000fb], 0x1f004, 0x485}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:06:59 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_usb_disconnect(r2) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) [ 428.550891][T12368] usb 1-1: USB disconnect, device number 30 [ 428.656378][T14255] netlink: 'syz-executor.5': attribute type 18 has an invalid length. 04:06:59 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x6, [0x0, 0x1, 0x9, 0xffffffff, 0x3, 0xe986]}, &(0x7f00000000c0)=0x10) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x3432564e}) ioprio_get$pid(0x3, 0x0) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000300)={0x1, 0x0, 0x1000, 0x61, &(0x7f0000000100)="760bf6a05d4b25fe739d8b3f72e8168f2a3eae212619509abd6d10856f8272365e550235079cdce6f7cca0c99057bf4c9ffc759f5d56e3310f9a279509a575dddfb704c23d9fc09b4e205f82a8eabb13b78bcad1682499e283b4316bb39f2b6e98", 0xe8, 0x0, &(0x7f0000000200)="c59ba4b27183d88407e84626771dc983254d844d6c92d6b2bb7f00b394a8ac6a58113128eca10701f581f7ca4a08f8efec74f2be89da0379bdbdb4ec226e78a1ab2c49e8bf0fa3bd3d86730bb1c029bfb931a4b8b4360d9f7fe5fe21a292ac6e7943f88689a09d688b2c310b32e7819e8c554ec772a66f1268734779abb78b51d337aa09a3be3b8c102e9be4623aa912ce568c76c9ddcce3497ad936551c783c91b629a46f996a9ebcaecf1915758e0f8d0fdc5c79729b9526c5522921f246ac7aba3034088b1ec75e5095cc493e18fe393b649688cef17b438f42dc4b10b1dda1737dfdf73e969b"}) [ 428.697023][T14255] x86/PAT: syz-executor.5:14255 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back [ 428.764452][T14260] netlink: 'syz-executor.5': attribute type 18 has an invalid length. [ 428.772932][T14264] x86/PAT: syz-executor.5:14264 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back 04:06:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\a\x00', @ifru_map={0xfffffffffffffff9}}) 04:06:59 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x100000000001432}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dspn(&(0x7f0000000140)='/d/dsp#\x10\x00', 0x4, 0x242400) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffec8, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}}, 0x30}}, 0x0) 04:07:00 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup(r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="15000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0x28) [ 428.885139][T12270] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 428.903219][T12319] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 428.928412][T14269] ùÿÿÿÿÿÿÿ: renamed from eql [ 428.977312][T14273] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 04:07:00 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x598c59e8693c690f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, 0x0, 0x2, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'vcan0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0xc01, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000300)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, 0x0, 0x2, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'vcan0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xa, 0x6, @udp='udp:syz1\x00'}}}, [""]}, 0x34}}, 0x6000000) [ 429.070945][T14269] ùÿÿÿÿÿÿÿ: renamed from eql 04:07:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x5, 0x1f, 0x0, 0x1}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) close(r0) [ 429.123543][T12368] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 429.133183][T12270] usb 5-1: Using ep0 maxpacket: 16 [ 429.154531][T12319] usb 4-1: Using ep0 maxpacket: 8 [ 429.283500][T12483] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 429.303396][T12319] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 429.312771][T12319] usb 4-1: config 0 has no interface number 0 [ 429.320256][T12319] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 429.331746][T12319] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 429.333204][T12270] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 429.343177][T12319] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 429.343264][T12319] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 429.343345][T12319] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 429.343424][T12319] usb 4-1: config 0 interface 164 has no altsetting 0 [ 429.351446][T12270] usb 5-1: config 0 has no interface number 0 [ 429.388289][T12270] usb 5-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 429.410341][T12270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.419569][ T12] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 429.428019][T12270] usb 5-1: config 0 descriptor?? [ 429.433194][T12368] usb 1-1: Using ep0 maxpacket: 16 [ 429.463715][T12319] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 429.473653][T12319] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 429.477199][T12270] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 429.482336][T12319] usb 4-1: Product: syz [ 429.488737][T12270] gspca_mr97310a: reg write [21] error -22 [ 429.498806][T12270] mr97310a: probe of 5-1:0.2 failed with error -22 [ 429.515958][T12319] usb 4-1: config 0 descriptor?? [ 429.573163][T12483] usb 6-1: Using ep0 maxpacket: 8 [ 429.653409][T12368] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 429.661593][T12368] usb 1-1: config 0 has no interface number 0 [ 429.663229][ T12] usb 2-1: Using ep0 maxpacket: 16 [ 429.667905][T12368] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 429.682038][T12368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.694081][T12368] usb 1-1: config 0 descriptor?? [ 429.703356][T12319] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 429.723321][T12319] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 429.753371][T12483] usb 6-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 429.764019][T12483] usb 6-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.775253][T12483] usb 6-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 429.784475][T12483] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.797073][T12368] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 429.803511][T12368] gspca_mr97310a: reg write [21] error -22 [ 429.809526][T12368] mr97310a: probe of 1-1:0.2 failed with error -22 [ 429.813445][ T12] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 429.818292][T12319] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 429.853290][T12319] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 429.874618][T12483] hub 6-1:118.0: ignoring external hub [ 429.886564][T12483] cdc_wdm 6-1:118.0: cdc-wdm0: USB WDM device [ 429.983373][ T12] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 429.992719][ T12] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.000998][ T12] usb 2-1: Product: syz [ 430.005394][ T12] usb 2-1: Manufacturer: syz [ 430.010098][ T12] usb 2-1: SerialNumber: syz [ 430.023839][T12319] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 430.043836][T12319] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 430.058781][ T12] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input22 [ 430.074272][T12319] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 430.094397][T12319] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 430.123170][T12319] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 430.143194][T12319] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 430.164079][T12319] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 430.192674][T12319] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 430.201217][T12319] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input21 [ 430.218517][T12483] usb 6-1: USB disconnect, device number 14 [ 430.258042][T14279] x86/PAT: syz-executor.1:14279 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 430.278617][T12319] usb 2-1: USB disconnect, device number 18 [ 430.418285][ T12] usb 4-1: USB disconnect, device number 21 [ 430.796701][T14296] x86/PAT: syz-executor.1:14296 map pfn RAM range req write-combining for [mem 0x1d36fe000-0x1d36fefff], got write-back [ 431.003147][ T12] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 431.053175][T12270] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 431.143512][ C0] net_ratelimit: 22 callbacks suppressed [ 431.143533][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 431.155569][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 431.223367][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 431.229615][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 431.243091][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 431.363328][ T12] usb 6-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 431.374039][ T12] usb 6-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.385613][ T12] usb 6-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 431.394949][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.444210][ T12] hub 6-1:118.0: ignoring external hub [ 431.455836][ T12] cdc_wdm 6-1:118.0: cdc-wdm0: USB WDM device [ 431.622937][T12319] usb 5-1: USB disconnect, device number 15 04:07:02 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:07:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) openat$cgroup_procs(r3, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xc4, 0x19, 0xe31, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x350759}}]}, 0xc4}, 0x8}, 0x0) 04:07:02 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x598c59e8693c690f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, 0x0, 0x2, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'vcan0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0xc01, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000300)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r5, 0x2000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, 0x0, 0x2, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'vcan0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xa, 0x6, @udp='udp:syz1\x00'}}}, [""]}, 0x34}}, 0x6000000) 04:07:02 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_usb_disconnect(r2) socket$inet(0x2, 0x3, 0x80000000002) 04:07:02 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0xfffffffffffffe60}, 0x0) [ 431.685620][T12368] usb 1-1: USB disconnect, device number 31 [ 431.754889][T14307] x86/PAT: syz-executor.2:14307 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back [ 431.768892][T12483] usb 6-1: USB disconnect, device number 15 04:07:02 executing program 4: ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000003c0)={{0x2, 0x4e23, @loopback}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x40, {0x2, 0x4e21, @multicast2}, 'gre0\x00'}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x7f7, &(0x7f0000000440)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x3d) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40080) syz_emit_ethernet(0x330, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='lo\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x10) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000180)=0x7fff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000380)="9d", 0x1, 0xfffffffffffffffe, 0x0, 0x0) close(r1) [ 431.802128][T14315] x86/PAT: syz-executor.2:14315 map pfn RAM range req write-combining for [mem 0x1d3992000-0x1d3992fff], got write-back 04:07:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfee5, 0x101240) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000002c0)={@caif=@util={0x25, "6a4e6639a115bbbc647ab1932daa4409"}, {&(0x7f0000000180)=""/199, 0xc7}, &(0x7f0000000280), 0x40}, 0xa0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000003c0)={0x7, &(0x7f0000000380)=[{0xff, 0x1f, 0x95, 0xbb}, {0x1ff, 0xff, 0x83, 0x1}, {0x0, 0x1, 0x9, 0x40}, {0x101, 0x9, 0x9, 0x2}, {0x20, 0x20, 0xfe, 0x5}, {0x7, 0x7, 0x81, 0x5}, {0x3800, 0x2f, 0xa3, 0xfffffff9}]}, 0x10) r5 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1a0300}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040882}, 0x24000840) r7 = syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x7fff, 0x881) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f00000005c0)) r8 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)={r2, 0x3f, 0x2, [0x0, 0x0]}, &(0x7f0000000680)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f00000006c0)={r9}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000700)={r3, 0x4, 0x0, 0x5}, &(0x7f0000000740)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000780)={0x6, 0x200, 0x0, 0x2, r10}, &(0x7f00000007c0)=0x10) keyctl$set_reqkey_keyring(0xe, 0x6) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000800)={'\x00', 0x2}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000840)) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x238000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r11, 0xc0045516, &(0x7f00000008c0)=0x3) r12 = syz_open_dev$sndpcmc(&(0x7f0000000900)='/dev/snd/pcmC#D#c\x00', 0x5, 0x4000) ioctl$VIDIOC_S_EDID(r12, 0xc0285629, &(0x7f0000000980)={0x0, 0x3, 0x1, [], &(0x7f0000000940)}) r13 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/video1\x00', 0x2, 0x0) r14 = accept$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a40)=0x14) r15 = syz_open_dev$binderN(&(0x7f0000000a80)='/dev/binder#\x00', 0x0, 0x800) ppoll(&(0x7f0000000ac0)=[{r13, 0x1000}, {r14, 0x2}, {r15, 0x4080}, {r1, 0x200}], 0x4, &(0x7f0000000b00), &(0x7f0000000b40)={0xfffffffffffffffa}, 0x8) r16 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/qat_adf_ctl\x00', 0x100000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000bc0)=0x0) write$FUSE_LK(r16, &(0x7f0000000c00)={0x28, 0x0, 0x4, {{0x22c, 0x82d7, 0x2, r17}}}, 0x28) 04:07:03 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x0, 0xc00, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "22f8a6fc75823c17b0a3af400d07275040bf045fd699200e3105ddd2bb2f547936806a5c46c79ebd57ca99b8780f07a64b04f236289108dfbf1ccdd12225b0c5"}}, 0x80}}, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r3, 0x1, 0x6, @random="fada72be1353"}, 0x10) keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffff9) unshare(0x40000000) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) read(r4, &(0x7f0000000040), 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) 04:07:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x10) [ 432.050628][T14328] IPVS: ftp: loaded support on port[0] = 21 [ 432.055403][ T4006] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 432.103366][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 432.109702][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 432.151507][T14329] IPVS: ftp: loaded support on port[0] = 21 [ 432.215080][T12368] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 432.253596][T12270] usb 2-1: device descriptor read/64, error -71 [ 432.343282][ T4006] usb 4-1: Using ep0 maxpacket: 8 [ 432.463734][ T4006] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 432.472213][ T4006] usb 4-1: config 0 has no interface number 0 [ 432.479090][ T4006] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 432.490838][ T4006] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 432.504187][ T4006] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 432.517400][ T4006] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 432.529945][ T4006] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 432.543520][ T4006] usb 4-1: config 0 interface 164 has no altsetting 0 [ 432.550704][T12368] usb 1-1: Using ep0 maxpacket: 16 [ 432.623694][ T4006] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 432.633515][ T4006] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 432.641796][ T4006] usb 4-1: Product: syz [ 432.648354][ T4006] usb 4-1: config 0 descriptor?? [ 432.653063][T12270] usb 2-1: Using ep0 maxpacket: 16 [ 432.743427][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 432.749810][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 432.763197][T12368] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 432.771533][T12368] usb 1-1: config 0 has no interface number 0 [ 432.778074][T12368] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 432.783546][T12270] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 432.787298][T12368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.809978][T12368] usb 1-1: config 0 descriptor?? [ 432.815944][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 432.823382][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 432.830671][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 432.837470][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 432.857526][T12368] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 432.865549][T12368] gspca_mr97310a: reg write [21] error -22 [ 432.871613][T12368] mr97310a: probe of 1-1:0.2 failed with error -22 [ 432.881641][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 432.903356][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 433.013688][T12270] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 433.025081][T12270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.033392][T12270] usb 2-1: Product: syz [ 433.037665][T12270] usb 2-1: Manufacturer: syz [ 433.042488][T12270] usb 2-1: SerialNumber: syz [ 433.063429][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 433.083248][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 433.088962][T12270] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input24 [ 433.109723][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 433.133314][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 433.153609][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 433.173858][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 433.193218][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 433.223632][ T4006] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 433.231819][ T4006] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input23 [ 433.326822][T14310] x86/PAT: syz-executor.1:14310 map pfn RAM range req write-combining for [mem 0x1d3953000-0x1d3953fff], got write-back [ 433.367991][T12270] usb 2-1: USB disconnect, device number 19 [ 433.452158][ T12] usb 4-1: USB disconnect, device number 22 [ 434.804639][ T4006] usb 1-1: USB disconnect, device number 32 04:07:07 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb9, 0x1e, 0x65, 0x20, 0x763, 0x2030, 0xc404, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xff, 0xbd, 0xbb}}]}}]}}, 0x0) prctl$PR_GET_SECCOMP(0x15) 04:07:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x323, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000240)={{0x81, 0x7}, 'port0\x00', 0x80, 0x0, 0x5, 0x80f, 0x80, 0x8, 0x400, 0x0, 0x4, 0x3b43}) r4 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000080)={[0x81, 0x401, 0x2, 0x6, 0x4, 0x0, 0x20, 0x2, 0x496, 0x7, 0x80, 0xffffffffffffffca, 0x5, 0x6, 0xfff, 0x9b], 0x4}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "7cd600"}, @global]}}, 0x0}, 0x0) 04:07:07 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000480)={0x3ff, 0x1000}, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r3, 0xeb, "ed6121", "0144cd0250f34ca7b07915472cd0719e13da163aaf4d978c8c8df1f45a29570e701824fbbd9e1ca4f565138b96f339a5f67c36d6d24b0bf255a5caaf6e5521072ff76b84fa3f0865bf669c750e19842e0f8ea8d15cf45827268b2d2a46b7dcb62f1324ff936f9ef9fd172f610b69d8ff0f8cfb906e6ded837e0f5975172bf2fe880c5b30a6affbb7acfb123974fb65ac6f2e86a6ef52fb99dafd3bb78b75e3fb04768ab142593285c9b774d73aa1bd208eb596eadac041aa80714bce08b5b8af68d9465d32d05809eff8a6cc23d94208a002462d733e623640a0ba4a083ce1ae9d5b36c946d727b792807b123e4e1380ec24576947cbe60f6fb5fe9576730ecb"}}, 0x110) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000005a0000000ac9e34409938b8b6bac93bec1e34abbdcc4a2a4289d45ccc338951a49ff2ac8cf5c775370a5682c5d2cd378671e1e08a5de85acd21cfef184eca333ff4817d58ad6811146232c9f4bc8edfd4a5c88fc81dd21c3620316807c71"], &(0x7f0000000300)=0x7e) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58010000", @ANYRESHEX=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x4008011) 04:07:07 executing program 4: madvise(&(0x7f00000b1000/0x4000)=nil, 0x4000, 0x12) mprotect(&(0x7f00000b2000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f00000b2000/0x4000)=nil, 0x4000, 0x2) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20c00, 0x10) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f00000004c0), &(0x7f0000000500)=0x4) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x40000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r5, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendfile(r4, r5, &(0x7f0000000600)=0x46, 0x10001) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) r8 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r8, 0x0, 0xc8, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000d, 0x20010, r8, 0x1ffb) sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f0000000140)=@nfc={0x27, 0x1, 0x2, 0x36275393f788995c}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="2f93586bccc06159b7ffef2ba581e1475649053564ddb208f768f3fb052c413a49b5f198f0b78980737c15ef25fd401979e072c79a026a2466d663d596b2cc4fc03764125ec9b9aa6f4cc136592e611569670042f447b599e143920d95e2498397946f8ed966f587282cfea3", 0x6c}, {&(0x7f0000000240)="f90d60e27f0a092bb30160c02d5f5494efd6d235a118594a4b620c25607f51a551e98d5127641327e8cbdce7fd265eec9d66126d3dc3c6ffefd96c0fabc798c6e60434b88a4111399327acfe6b3f9c17b5da59af17226e9749305002aeac2b5e743e14dfb0cd5b80c4c1000ab915cbd56d749e9a612822af1f00197ba8e5e496a6a06bfdeaab639ce484eb1d4ecf4fa641d6a42d433aa236288e66b815817c1ca3fc85f8896382e74def241be1df1e3bf31975f4e89eb329b068a10e20557235f9966c", 0xc3}, {&(0x7f0000000340)="e5d419afeee4b26ea1d101bb09b05711844e1f3931673f4e5da9e81c259d8359b50a8ad55ba020f2ede4a2552fb9a31eb6417697eb2e14ba894a6a665382bcf7eaa860f570e2766b15e33b54a86aa0cfaa178ee097240e5dcb88512d0ba53662042c8e45fad94cc179a37ba00bf334a539a87440db81109ea4aab5115dbbd5ebace83e0ae8816fe0f617e27dfb645417d34b56f1c0bb618f494abe744a0724a4a691ef3f8dcc71411c4d207edbba1cac2d70784b468dcdb3b18b8cc927df20854f0333560a912c6c88ead344a2c384376d9986b3872ba1c8f77808ee03cf5cc0cca46df1122a4c1585d42b6333290c69ce96cec8338ea4a0f4", 0xf9}], 0x3}, 0x20000080) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x8, 0xd}) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='\x00\b\x00\x00\x00\x00K.\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r11 = dup(r10) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000005c0)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r11, 0x2000) ioctl$BLKSECDISCARD(r11, 0x127d, &(0x7f0000000100)=0x7) 04:07:07 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_usb_disconnect(r2) 04:07:07 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r1, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 435.925790][T14275] cdc_wdm 6-1:118.0: Error autopm - -16 04:07:07 executing program 4: unshare(0x400) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x0, 0x3, 0xfffffdfd}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = socket(0x1, 0x5, 0x3) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x1d, r4}, 0x10, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\f\x00'/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000000000022f8a6fc75823c17b0a3af400d07275040bf045fd699200e3105ddd2bb2f547936806a5c46c79ebd57ca99b8780f07984b04f236289108dfbf1ccdd12225b0c5e50d81d72300cca895a0ec49b337659ba452fba1279aa0fea91c02adabc995fe60d371482f9091080016c8b34cf2fa8d960e47880744e173c620158baf86af13b03cb43b86da20f79f3193afa1bc8db416e24f187f59443ed5a976dfcf81d720db059f7cb8a3a7951488d03a23e2f5793135ce9f82f32f586b192f71b5ee5e443d9de1fc9661b216683d996d3278e390f8126ef8ef5aa966ac0a7e7360978f94d914e13355b5bc4e4c5285a1c567e5bdcc08b209562102e36e214e8a2f631989be6f7de3501f33defb1fb95fe6494ebe0618b6a4f8d2f9e359b1a6b44160372bf8f0addf361538aca4d61225f13af4ed62f75dc05ad7d57e675818ffa76b10a0c1f1c9933d1b76121cfadd0b5f9a6f771ce60fc84d07fe361b4918bfec195f2b289da3c25b891e739741644f759294aa65157689068a52af7f0f6af5dbbb91a0394e8cc3c88dbf2d36cb0dd035"], 0x80}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000240)={{0x0, 0x1, 0xfffffeff, 0x1, 0xe356}}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x4, 0xfffffff9, {r5, r6/1000+10000}, {0x77359400}, {0x1, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x2}, 0xe, 0x1, 0x0, 0x0, "357092100b02b6ed3f639b6bea4d533db2f2b25981273e09bc9133b897ec53582151d96fcf5c1a7526197a9c3090ed9baf4004dbb3d7ae527b61ee3696636f8d"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40100) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) [ 436.117095][T14352] IPVS: ftp: loaded support on port[0] = 21 [ 436.263453][ C1] net_ratelimit: 18 callbacks suppressed [ 436.263476][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 436.275818][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 436.293068][T12483] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 436.323327][ T4006] usb 6-1: new high-speed USB device number 16 using dummy_hcd 04:07:07 executing program 4: syz_usb_connect(0x0, 0x299, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xca, 0x4c, 0xe5, 0x20, 0x46d, 0xa0e, 0xbae, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x44, 0x0, 0x0, 0x3}}]}}]}}, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) [ 436.564293][ T4006] usb 6-1: Using ep0 maxpacket: 32 [ 436.636203][T14362] IPVS: ftp: loaded support on port[0] = 21 [ 436.654807][T12483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.666300][T12483] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 436.679363][T12483] usb 3-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.40 [ 436.681204][T12269] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 436.688556][T12483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.696323][ T12] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 436.723634][ T4006] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.732018][ T4006] usb 6-1: config 0 has no interface number 0 [ 436.738654][ T4006] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=c4.04 [ 436.747868][ T4006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.767673][ T4006] usb 6-1: config 0 descriptor?? 04:07:07 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000480)={0x3ff, 0x1000}, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r3, 0xeb, "ed6121", "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"}}, 0x110) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000005a0000000ac9e34409938b8b6bac93bec1e34abbdcc4a2a4289d45ccc338951a49ff2ac8cf5c775370a5682c5d2cd378671e1e08a5de85acd21cfef184eca333ff4817d58ad6811146232c9f4bc8edfd4a5c88fc81dd21c3620316807c71"], &(0x7f0000000300)=0x7e) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58010000", @ANYRESHEX=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x4008011) [ 436.782762][T12483] usb 3-1: config 0 descriptor?? [ 436.905828][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 436.913402][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 436.935391][T14371] IPVS: ftp: loaded support on port[0] = 21 [ 436.983465][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 436.989769][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 437.032364][T14355] x86/PAT: syz-executor.2:14355 map pfn RAM range req write-combining for [mem 0x1d6ec5000-0x1d6ec5fff], got write-back [ 437.066313][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 437.073731][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 437.074676][ T4006] usb 6-1: USB disconnect, device number 16 [ 437.086166][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 437.091534][T12269] usb 4-1: Using ep0 maxpacket: 8 [ 437.096903][T12270] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 437.369371][T12483] wacom 0003:056A:0323.0003: Unknown device_type for 'HID 056a:0323'. Assuming pen. [ 437.383541][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 437.384148][T12483] input: Wacom Intuos P M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0323.0003/input/input25 [ 437.390201][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 437.425161][T12269] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 437.430814][T12483] wacom 0003:056A:0323.0003: hidraw0: USB HID v0.00 Device [HID 056a:0323] on usb-dummy_hcd.2-1/input0 [ 437.433673][T12269] usb 4-1: config 0 has no interface number 0 [ 437.433766][T12269] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 437.433859][T12269] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 437.433946][T12269] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 437.434037][T12269] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 437.434125][T12269] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 437.434204][T12269] usb 4-1: config 0 interface 164 has no altsetting 0 [ 437.553688][ T12] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 437.562141][ T12] usb 1-1: config 0 has no interface number 0 [ 437.568493][ T12] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 437.577674][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.587531][T12270] usb 5-1: Using ep0 maxpacket: 32 [ 437.594823][ T12] usb 1-1: config 0 descriptor?? [ 437.617163][ T4006] usb 3-1: USB disconnect, device number 13 [ 437.637579][ T12] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 437.644345][ T12] gspca_mr97310a: reg write [21] error -22 [ 437.650370][ T12] mr97310a: probe of 1-1:0.2 failed with error -22 04:07:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000003060501ff00000104ffcd3e84237c1e0aff2ef6ff04610c0001187bd243c9bf4ce1da764843898001800000232eac52ee90c9595b17980ea01f488be8f35a7c3434ff77938b0cee79be99750600ad687d7b00"], 0x57}}, 0x4000001) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x5}], 0x2c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6f8, 0x368, 0x0, 0x228, 0x138, 0x228, 0x628, 0x628, 0x628, 0x628, 0x628, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x28, 0x29, 0x7f}}}, {{@ipv6={@empty, @empty, [0xff000000, 0xff, 0x0, 0xffffff00], [0xff000000, 0xffffff00, 0xff, 0xffffff00], 'bond_slave_1\x00', 'eql\x00', {}, {}, 0xc, 0x3, 0x6, 0x1}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x28}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0x0, 0x0, 0xff000000, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffff00, 0x65bfc52b462f79df], 'nr0\x00', 'bridge0\x00', {}, {}, 0x2b, 0x3, 0x1, 0x20}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x1, 0x40}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x6}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc8, 0xf0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1}}}, {{@ipv6={@rand_addr="0d71b271e9d94e438a7cf4087da5906f", @local, [0x0, 0xffffff00, 0xff], [0xffffff00, 0xffffff00, 0xffffffff, 0xff], 'veth0_to_hsr\x00', 'bond0\x00', {0xff}, {0xff}, 0x5c, 0x8, 0x7, 0x2}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@unspec=@string={0xc0, 'string\x00', 0x1, {0x3ed, 0x3, 'bm\x00', "48660e4d2b13add67ec1018b2c3a79a2be48c129bc84e12c3f4fe0d68fad225e21e337783c75a0e1cb0bc1240067459db063105faffedcfc6ccbda7269270604183648c719fd4f5f0daa4603ceff43c19bf18afd473f1ad94e92029a80e73c8e26d536e1402ca148ce176a1b94ca731748deb846d0ea2b679e89d0146e28ba38", 0x2, 0x1, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={[], [], @local}, @ipv4=@broadcast, 0x2e, 0x2b, 0x101}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x758) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f00000001c0)) [ 437.659643][T12269] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 437.669028][T12269] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 437.677420][T12269] usb 4-1: Product: syz [ 437.698089][T12269] usb 4-1: config 0 descriptor?? [ 437.763649][T12270] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 437.774076][T12270] usb 5-1: config 0 has no interface number 0 [ 437.780503][T12270] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= b.ae [ 437.790039][T12270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.805486][T12483] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 437.816172][T12270] usb 5-1: config 0 descriptor?? [ 437.885566][T12269] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 437.903872][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 437.924078][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 437.953942][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 437.974176][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 438.053091][T12483] usb 6-1: Using ep0 maxpacket: 32 [ 438.073930][T12270] (null): keene_cmd_main failed (-71) [ 438.104771][T12270] video4linux radio32: keene_cmd_main failed (-71) [ 438.112387][T12270] radio-keene 5-1:0.68: V4L2 device registered as radio32 [ 438.128727][T12270] usb 5-1: USB disconnect, device number 16 [ 438.166062][T12269] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 438.183703][T12483] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 438.191946][T12483] usb 6-1: config 0 has no interface number 0 [ 438.198673][T12483] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=c4.04 [ 438.199367][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 438.207885][T12483] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.233778][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 438.237238][T12483] usb 6-1: config 0 descriptor?? [ 438.254668][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 438.274608][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 438.294065][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 438.313859][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 438.340637][T12269] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 438.349394][T12269] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input28 [ 438.393728][ T12] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 438.545456][T12483] usb 6-1: USB disconnect, device number 17 [ 438.580088][T12368] usb 4-1: USB disconnect, device number 23 04:07:09 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r3, &(0x7f00000001c0)=0x4) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0xfffffffffffffd31) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0xc5, 0x0, &(0x7f0000000080)=0x1a7) [ 438.753717][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.764898][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 438.778171][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.40 [ 438.789313][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.811179][ T12] usb 3-1: config 0 descriptor?? 04:07:09 executing program 1: r0 = socket(0x1000000000000010, 0x80802, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') write(r0, &(0x7f0000000000)="a4000000580001040000e3f9002304000a04f511080001000300009f08000280010000f26c416b7117029336ffba3d6cedbe7a05f474e49272471f26f6959b120320244ab9d6b23a33328f1b8277b14ed8ecf5ebfdf534c90f87228c1dba591e010584b8a554139458f62ea9a5981599ecf407da1d9b1360ab4863bbf73093a90704ceee5df2ce397733e3e635060b120ac709f42d9d9c2093e28104986f40907c0537e0", 0xa4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000140)) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendfile(r0, r2, &(0x7f0000000180), 0x100000001) [ 438.873452][T12269] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 438.925916][T14399] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 438.941726][T14400] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. 04:07:10 executing program 5: clone(0x0, &(0x7f0000659ffe), 0x0, 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x8010, r3, 0x2003) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x2, 0x3, "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"}) wait4(0x0, &(0x7f0000000100), 0x40000002, 0x0) [ 439.055628][T14403] x86/PAT: syz-executor.2:14403 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 439.087023][T12368] usb 1-1: USB disconnect, device number 33 04:07:10 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa9, 0x0, 0x4f, 0x20, 0x2770, 0x913d, 0xe47, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc3, 0x0, 0x0, 0x49, 0xa9, 0x66}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000005040)={0x2c, &(0x7f0000004e40), 0x0, 0x0, 0x0, 0x0}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x900, 0x0) 04:07:10 executing program 1: syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7, 0x400) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400080, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000040)=""/133) syz_emit_ethernet(0xb2, &(0x7f0000001100)={@random="f7b40ec3d749", @random="b5369ab886d1", [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x29, 0x0, @ipv4={[0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2b00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f]}}}}}}}}, 0x0) 04:07:10 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r1, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 439.114876][T12269] usb 5-1: Using ep0 maxpacket: 32 [ 439.235265][T12269] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 439.243796][T12269] usb 5-1: config 0 has no interface number 0 [ 439.250068][T12269] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= b.ae [ 439.259478][T12269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.284112][T12269] usb 5-1: config 0 descriptor?? [ 439.292410][ T12] usbhid 3-1:0.0: can't add hid device: -71 [ 439.298749][ T12] usbhid: probe of 3-1:0.0 failed with error -71 04:07:10 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0x4f, &(0x7f0000000180)=""/79) [ 439.335858][ T12] usb 3-1: USB disconnect, device number 14 04:07:10 executing program 1: syz_usb_connect(0x0, 0x31, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1a, 0xef, 0xc2, 0x20, 0x499, 0x1020, 0x5182, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe, 0x0, 0x1, 0x28, 0xb0, 0x7f, 0x0, [@generic={0x2}, @generic={0x2}], [{{0x9, 0x5, 0x8}}]}}]}}]}}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) 04:07:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000100)={0x7fff, 0x2c9, 0x9, 0x8001}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="00000000000000000c000100aaaaaaaaaaaa00000800210000000000"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x10000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 439.543661][T12269] (null): keene_cmd_main failed (-71) [ 439.564088][T12269] video4linux radio32: keene_cmd_main failed (-71) [ 439.571030][T12269] radio-keene 5-1:0.68: V4L2 device registered as radio32 [ 439.610787][T12269] usb 5-1: USB disconnect, device number 17 [ 439.623404][T12368] usb 1-1: new high-speed USB device number 34 using dummy_hcd 04:07:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0xfff, 0x0, 0x40, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r4) ptrace(0x4208, r4) tgkill(r3, r4, 0x1f) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:07:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) r5 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r5, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000040)={r4, 0xfffc, 0x38}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f00000000c0)={{0xf34343b217b33320, @multicast1, 0x0, 0x4, 'sed\x00', 0x0, 0x0, 0x80}, {@multicast2, 0x0, 0x0, 0x2, 0x8001}}, 0x44) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff5c, 0x0}, 0x0) [ 439.703086][ T12] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 439.746144][T12483] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 439.783403][ T4006] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 439.802624][T14436] kvm: pic: non byte read [ 439.808154][T14436] kvm: pic: non byte write [ 439.814009][T14436] kvm: pic: single mode not supported [ 439.814422][T14436] kvm: pic: non byte read [ 439.826474][T14436] kvm: pic: non byte write [ 439.832194][T14436] kvm: pic: non byte read [ 439.837085][T14436] kvm: pic: non byte write [ 439.841936][T14436] kvm: pic: non byte read [ 439.847579][T14436] kvm: pic: non byte write [ 439.852599][T14436] kvm: pic: non byte read [ 439.857694][T14436] kvm: pic: non byte write [ 439.865490][T14436] kvm: pic: non byte read [ 439.870518][T14436] kvm: pic: non byte write [ 439.877608][T12368] usb 1-1: Using ep0 maxpacket: 16 [ 439.892928][T14437] kvm: emulating exchange as write [ 439.898906][T14436] kvm: pic: non byte read [ 439.906720][T14436] kvm: pic: non byte write [ 439.926008][T14436] kvm: pic: non byte read [ 439.930652][T14436] kvm: pic: non byte write [ 439.939569][T14436] kvm: pic: non byte read [ 439.943110][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 439.949926][T14436] kvm: pic: non byte write [ 439.955510][T14436] kvm: pic: non byte read [ 439.962462][T14436] kvm: pic: non byte write [ 440.008183][T12483] usb 4-1: Using ep0 maxpacket: 8 [ 440.023528][ T4006] usb 2-1: Using ep0 maxpacket: 32 [ 440.065296][ T12] usb 3-1: config 0 has an invalid interface number: 195 but max is 0 [ 440.073963][ T12] usb 3-1: config 0 has no interface number 0 [ 440.080212][ T12] usb 3-1: New USB device found, idVendor=2770, idProduct=913d, bcdDevice= e.47 [ 440.089489][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:07:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f00000000c0)={@local, @remote, @dev={0xac, 0x14, 0x14, 0x15}}, 0xc) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000022000000b4"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 440.111989][T12368] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 440.121694][T12368] usb 1-1: config 0 has no interface number 0 [ 440.128234][T12368] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 440.137441][T12368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.156884][ T12] usb 3-1: config 0 descriptor?? [ 440.173502][T12483] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 440.182094][T12483] usb 4-1: config 0 has no interface number 0 [ 440.188521][T12483] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 440.199937][T12483] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 440.208424][ T12] gspca_main: sq905c-2.14.0 probing 2770:913d [ 440.211363][T12483] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 440.228885][T12483] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 440.240280][T12483] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 440.253775][T12483] usb 4-1: config 0 interface 164 has no altsetting 0 [ 440.260910][ T4006] usb 2-1: config 0 has an invalid interface number: 14 but max is 0 [ 440.269344][ T4006] usb 2-1: config 0 has no interface number 0 [ 440.276646][ T4006] usb 2-1: New USB device found, idVendor=0499, idProduct=1020, bcdDevice=51.82 [ 440.285998][ T4006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.352942][T12368] usb 1-1: config 0 descriptor?? [ 440.367241][ T4006] usb 2-1: config 0 descriptor?? [ 440.397588][T12368] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 440.405243][T12368] gspca_mr97310a: reg write [21] error -22 [ 440.411305][T12368] mr97310a: probe of 1-1:0.2 failed with error -22 [ 440.428954][ T4006] snd-usb-audio: probe of 2-1:0.14 failed with error -2 [ 440.503664][T12483] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 440.513164][T12483] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 440.521485][T12483] usb 4-1: Product: syz [ 440.548956][T12483] usb 4-1: config 0 descriptor?? [ 440.557543][T14435] debugfs: Directory '14435-4' with parent 'kvm' already present! [ 440.616829][ T2922] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 440.634766][T12269] usb 2-1: USB disconnect, device number 20 04:07:11 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) r5 = dup2(r4, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x40000012, r5, 0x2000) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000200)={0x0, 0x200000169, 0x63, 0x6}) r6 = gettid() move_pages(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x2, 0x4, 0x7, 0x401, 'syz0\x00', 0x4}, 0x3, 0x6092cf107baa272b, 0x1, r6, 0x4, 0xfff, 'syz1\x00', &(0x7f0000000040)=['self#)em0\x00', 'bdev*\x00', '[)-!user%procwlan0*wlan1md5sum+system\x00', 'selinux\x00'], 0x3e, [], [0x0, 0x6, 0xfffffffffffffff8, 0x6]}) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@sco, &(0x7f00000001c0)=0x80) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa64515c4924455fa53d1099de04e8aaaaaa00000000000086dd60d8652b00200600fe8000000000000000000000000000aafe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020000907800001e0aa0000000000000000000"], 0x0) [ 440.723392][T12483] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 440.743314][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 440.764226][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 04:07:11 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x8001009, 0x2, 0x2}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) [ 440.783513][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 440.805651][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 440.853179][ T12] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 440.860836][ T12] sq905c: probe of 3-1:0.195 failed with error -71 [ 440.870718][ T2922] usb 5-1: Using ep0 maxpacket: 8 [ 440.906212][ T12] usb 3-1: USB disconnect, device number 15 [ 440.926992][T14455] x86/PAT: syz-executor.5:14455 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back [ 440.949732][T14456] x86/PAT: syz-executor.5:14456 map pfn RAM range req write-combining for [mem 0x1d3992000-0x1d3992fff], got write-back [ 440.983361][T12483] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 440.995041][ T2922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:07:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="aa05000000aa192bce5e2dfb86dd60c31c2b0014060000000000000000000000000000008000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) bind$vsock_dgram(r3, &(0x7f0000000000)={0x28, 0x0, 0x1ffffd8ef, @my=0x0}, 0x10) [ 441.006675][ T2922] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 441.019750][ T2922] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 441.019984][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 441.028972][ T2922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.074042][ T2922] usb 5-1: config 0 descriptor?? [ 441.086570][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 441.112195][T14460] x86/PAT: syz-executor.5:14460 map pfn RAM range req write-combining for [mem 0x1d3953000-0x1d3953fff], got write-back [ 441.126507][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 441.155504][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 441.173462][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 441.194240][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 441.213659][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 441.221779][T12483] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input29 [ 441.433039][T12319] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 441.543581][ C0] net_ratelimit: 22 callbacks suppressed [ 441.543603][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 441.555806][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 441.566694][ T2922] hid-multitouch 0003:1FD2:6007.0004: global environment stack underflow [ 441.575519][ T2922] hid-multitouch 0003:1FD2:6007.0004: item 0 0 1 11 parsing failed [ 441.584013][ T2922] hid-multitouch: probe of 0003:1FD2:6007.0004 failed with error -22 [ 441.633287][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 441.639338][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 441.663271][ T12] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 441.703119][T12319] usb 2-1: Using ep0 maxpacket: 32 [ 441.767047][T12483] usb 5-1: USB disconnect, device number 18 [ 441.823480][T12319] usb 2-1: config 0 has an invalid interface number: 14 but max is 0 [ 441.831768][T12319] usb 2-1: config 0 has no interface number 0 [ 441.838154][T12319] usb 2-1: New USB device found, idVendor=0499, idProduct=1020, bcdDevice=51.82 [ 441.847341][T12319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.857306][T12319] usb 2-1: config 0 descriptor?? [ 441.898719][T12319] snd-usb-audio: probe of 2-1:0.14 failed with error -2 [ 441.914507][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 441.949876][T12319] usb 4-1: USB disconnect, device number 24 [ 442.063215][ T12] usb 3-1: config 0 has an invalid interface number: 195 but max is 0 [ 442.072336][ T12] usb 3-1: config 0 has no interface number 0 [ 442.078725][ T12] usb 3-1: New USB device found, idVendor=2770, idProduct=913d, bcdDevice= e.47 [ 442.088004][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.099579][ T12] usb 3-1: config 0 descriptor?? [ 442.099911][T12483] usb 2-1: USB disconnect, device number 21 [ 442.146195][ T12] gspca_main: sq905c-2.14.0 probing 2770:913d [ 442.209315][ T2922] usb 1-1: USB disconnect, device number 34 04:07:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl(r5, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000080)=0x6, 0x4) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @dev}, @in6}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r4, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(r4, 0x0, 0x15, &(0x7f0000000200)='D', 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$isdn(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x80, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x4f) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x4000, 0x0) fcntl$dupfd(r3, 0x406, r6) sendto$inet(r1, &(0x7f0000000240)="f4", 0x1, 0x4090, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 04:07:13 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="11dca5055e0bcfe47bf070") r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) r8 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r8, 0x0, 0xc8, &(0x7f0000000080), 0x4) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000000)={0x2002}) 04:07:13 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ddbfe908f8060400010000ed00010902240001000000000904a4e92319b875000905850b000d0000000905010341000000005b7481db4894cd501e42ffc9c7e69f4eacc71f2d60087793bb9db2c4c9e1830101e114d5c8956f42cf4d7c92f71ff0fb85abd1fd06671269ec4b3a4830a47e74aef28fbdde383db227b6f1a02e84847cfc0a3be4f07648913d73ae7e156c21cf44e1fda4d436b133991fecd3023bf386cb21ed85b695b2f579912e5eea4b2db0ee3bc2e645dcdcb82cb7732fce272a39e6922ffffc8243a06685e47356542838ec20f8d4ee9bd76a4c1477b44775dc4c2908b4f3e21de4c986d961d6bf574f81c2c7c0c559385a275f54336d317609e4ea205b5b6bb70c1a68509ee851572af4b5bb72964b121cebdc48519cc5c9c100d5bb10c71a1c2de1116a841eadc3990bfa24f1663c634615e4a64eb004a73e70d5e7349cdacb79a96654172ce8de333e4be6b3c51e4bb8688576653a6bf4025cb78bd0eaaf4e02d6cf382bbf4b1e6c413b06dae03fca569d136c2df9232707a8a8a2d6e7d9939b2e0a1d729d0133cde8cab589a8070eb40246a04ddd035561c975f960cc4c7be68fbfda551de187ba7ed9d55a5f2b95c0226b823f92f80fc0b414b3400b8b2874d47b680aec612798134a28e45738e682114de8c3b164de0f5ca83df813c7c35cba412fb85aefbae132dabca0916e246adc563692e41659faea685d8b59c21bfa9ec9a5b7a6fd87cad2966ec2af3330be"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0x4f, &(0x7f0000000180)=""/79) 04:07:13 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r1, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 442.383614][ T12] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 442.391227][ T12] sq905c 3-1:0.195: Get version command failed [ 442.397723][ T12] sq905c: probe of 3-1:0.195 failed with error -71 [ 442.438382][T14480] x86/PAT: syz-executor.5:14480 map pfn RAM range req write-combining for [mem 0x1d42ef000-0x1d42effff], got write-back [ 442.454693][ T12] usb 3-1: USB disconnect, device number 16 04:07:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="09000000000000001c0012000c00010062726964676500000c000200edff04002200a264"], 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 442.477962][T14484] x86/PAT: syz-executor.5:14484 map pfn RAM range req write-combining for [mem 0x1d393a000-0x1d393afff], got write-back [ 442.503539][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 442.509959][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 442.510475][T14483] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 442.565849][T12319] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 442.591282][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 04:07:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000002c0)=0x6, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0xfff, 0x0, 0x40, 0x0, 0x0, 0xc}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r8) ptrace(0x4208, r8) ioctl$TIOCSPGRP(r7, 0x5410, &(0x7f0000000280)=r8) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 442.701988][T14493] x86/PAT: syz-executor.5:14493 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back [ 442.734209][T12483] usb 4-1: new high-speed USB device number 25 using dummy_hcd 04:07:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) read$char_usb(r3, &(0x7f00000000c0)=""/60, 0x3c) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = fcntl$dupfd(r0, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400000, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f0000000080)='}\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000000)) 04:07:13 executing program 1: syz_emit_ethernet(0x1f6, &(0x7f0000000200)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x1c0, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[@fragment={0x3a, 0x0, 0x1, 0x0, 0x0, 0x17, 0x65}, @srh={0x29, 0xa, 0x4, 0x5, 0x1f, 0x30, 0xfc00, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1]}, @dstopts={0x0, 0x1c, [], [@jumbo={0xc2, 0x4, 0xfffffa23}, @calipso={0x7, 0x20, {0xf0e, 0x6, 0x4, 0xfff7, [0x3, 0xffff, 0x5]}}, @generic={0xb3, 0xb0, "22903633de8fda89ff97bd3bfa2f46a562e5fc89c48fe7ee96bb8ddb6fc208e1da0341a025e12967bfdd62eaf6fec5f93a3917b6d42e8e3272139c434cde0886eb2f48565809eeb8bb63fa0368bc9b7274ffcea18e18fdfb335ced84797f31279e498d81154468a7b7d0b159b72b4ad53402c09acb7306d19b98fe9c4cd14f9b7fed349f3222f422cd4f2ccbafbb0b4452d46eedcb2dfa0b757674faf48aef615bdfeb29f9dce726643e72c107f10265"}, @ra={0x5, 0x2, 0x7f}, @ra={0x5, 0x2, 0x3ff}]}, @srh={0x2f, 0x8, 0x4, 0x4, 0x5, 0xc0, 0x1, [@remote, @loopback, @loopback, @loopback]}], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, [], @loopback={0x2}, @ipv4}}}}}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xfff) [ 442.813837][ T2922] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 442.835240][T12319] usb 5-1: Using ep0 maxpacket: 8 [ 442.888688][T14500] x86/PAT: syz-executor.5:14500 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 442.942326][T14504] x86/PAT: syz-executor.5:14504 map pfn RAM range req write-combining for [mem 0x1d6ec5000-0x1d6ec5fff], got write-back [ 442.990923][T12319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.002217][T12319] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 443.015720][T12319] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 443.024931][T12319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.039473][T12483] usb 4-1: Using ep0 maxpacket: 8 [ 443.063369][ T2922] usb 1-1: Using ep0 maxpacket: 16 [ 443.082247][T12319] usb 5-1: config 0 descriptor?? [ 443.143607][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 443.149958][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 443.183598][T12483] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 443.191990][T12483] usb 4-1: config 0 has no interface number 0 [ 443.198494][T12483] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 443.209762][T12483] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 443.221290][T12483] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 443.232997][T12483] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 443.244477][T12483] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 443.257930][T12483] usb 4-1: config 0 interface 164 has no altsetting 0 [ 443.265428][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 443.271458][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 443.310097][ T2922] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 443.318256][ T2922] usb 1-1: config 0 has no interface number 0 [ 443.324516][ T2922] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 443.333710][ T2922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.345042][ T2922] usb 1-1: config 0 descriptor?? [ 443.356687][T12483] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 443.366395][T12483] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 443.374963][T12483] usb 4-1: Product: syz [ 443.384146][T12483] usb 4-1: config 0 descriptor?? [ 443.387678][ T2922] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 443.395944][ T2922] gspca_mr97310a: reg write [21] error -22 [ 443.401993][ T2922] mr97310a: probe of 1-1:0.2 failed with error -22 04:07:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000400)=@getae={0x40, 0x1f, 0x1, 0x0, 0x0, {{@in=@remote}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x40}}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000440)={{0x2, 0x4, 0x4, 0x4, 0x9, 0x4}, 0x258, [0x11, 0x7, 0x9c1, 0xfffffffb, 0x7, 0x892, 0x3, 0x4, 0x7, 0xffffffe2, 0x2, 0x5, 0xde, 0x6, 0x0, 0x5, 0x1, 0x9, 0x6, 0x6, 0x7ff, 0x90a8, 0x3ff, 0x1, 0x1f, 0x3ff, 0xffffff24, 0x8, 0x4000, 0x74a5, 0x0, 0x7, 0x1, 0x200, 0x0, 0x7, 0x7ff, 0x6, 0xfffffffc, 0x8, 0x8, 0x3, 0xf9e, 0x1f, 0x7, 0x401, 0x0, 0x3ff, 0x4, 0x5, 0x1f, 0xffff365d, 0x6, 0x40, 0x7, 0x1be7b982, 0x6, 0xffffff80, 0x0, 0x2, 0x401, 0x8ac3, 0x5, 0x80, 0xfff, 0x5, 0x7, 0x7, 0x6, 0x4, 0x4, 0x0, 0x3, 0x4, 0x1, 0xfffffffb, 0xfffffffc, 0x8, 0xa, 0x1f, 0x7, 0x1, 0x5, 0x1f, 0x3, 0x6, 0x0, 0x9, 0x3cb7, 0x1ff, 0x0, 0x860, 0x68, 0xf2f8, 0x8, 0x81, 0x2b9, 0x0, 0x8000, 0x3, 0x4, 0xfffffffe, 0x2, 0x9, 0x6, 0x3, 0x8b, 0x3, 0x28f2, 0x1, 0x1, 0x81, 0x7fff, 0xfff, 0x100, 0x8, 0x492, 0xffffffff, 0xfffffffe, 0x6, 0x3, 0x0, 0x4, 0x3, 0x6, 0x3, 0x0, 0x6, 0x6af4, 0x3, 0x7e2, 0x2, 0x1, 0x3, 0x401, 0x2, 0x99a7, 0x5, 0x9, 0x9, 0x1, 0xffffffff, 0xd, 0x1000, 0x9, 0xaaba, 0x6, 0x4, 0xfffffffc, 0x200, 0x2, 0xfffffff7, 0x7, 0x6, 0x7, 0x4, 0x0, 0x0, 0x7, 0x5, 0x7fff, 0x81, 0xb706, 0x0, 0xffffffff, 0x94, 0xfa1, 0x8, 0x400, 0x2, 0x7, 0x6, 0xff, 0x517b9608, 0x400, 0x8, 0x1f, 0x6, 0x0, 0x2, 0x3, 0x0, 0x1, 0x349b, 0x80, 0x4, 0x1f, 0x9, 0x0, 0x7, 0x8, 0x200, 0x8, 0x98, 0x79b, 0x5, 0x7, 0x401, 0xfff, 0x3ff, 0x2, 0x1f, 0x81, 0x1ff, 0x1, 0x8, 0x7, 0x9, 0x3f, 0x3e, 0x7fff, 0x1, 0xfffffffb, 0x9, 0x1f, 0x2, 0x3, 0x7, 0x6, 0xfffffff9, 0x9, 0x92b5, 0x1, 0x9, 0x74, 0x8, 0x7ff, 0x9, 0x3, 0x8, 0x200, 0x7, 0x2, 0x4, 0x40, 0x10000, 0x162204e1, 0x80000001, 0x1ff, 0xfffffe00, 0x6, 0x3, 0x7, 0x7, 0x1, 0x6, 0x6, 0x10f07cca, 0x2, 0x3, 0x5, 0x0, 0xffffff9e, 0x1f, 0x5, 0x7, 0xff, 0x80000001, 0x757, 0x5, 0x7, 0xfffffeff, 0x8001, 0x0, 0x10001, 0x6, 0x3ff, 0x8001, 0x0, 0x45f, 0x8000, 0x6, 0xa9, 0x40, 0x8, 0x22, 0x6, 0x8, 0x101, 0x4, 0x0, 0x5, 0x10000, 0x5, 0x7fffffff, 0x1, 0xb21, 0x1, 0x3ff, 0x110a, 0xcd, 0x10000, 0x2, 0x800, 0xfffffe01, 0x0, 0x5, 0x2, 0xd06, 0xfff, 0x3, 0x9, 0x4275, 0x6, 0x5cf1, 0x1, 0x992, 0xa40, 0x0, 0x49, 0x1, 0x9, 0x3, 0x25, 0x80000001, 0x7, 0x6, 0xfffffffc, 0x4, 0x1, 0x8, 0x3f, 0x1f, 0x1, 0x8e, 0x40, 0x4, 0x5, 0x2, 0x8, 0xb1a, 0x7ff, 0x8000, 0x10000, 0x3, 0x0, 0x3, 0x0, 0x1, 0x3, 0x1, 0x9, 0x8, 0x7, 0x101, 0x401, 0x4, 0x0, 0x80000000, 0x9, 0x4, 0x1fe00, 0x6d26, 0x1f, 0x20, 0x845, 0xfffffffa, 0x3f, 0x9, 0x8001, 0x0, 0x10001, 0x4, 0x8, 0x0, 0xffff, 0x0, 0x26, 0xff, 0x4f5d, 0x3, 0x6, 0x4601, 0x100, 0x3, 0x8, 0x6, 0x4d88, 0xc7d, 0x80000001, 0x7ff, 0x9, 0x80, 0x4, 0x8001, 0x37, 0x8, 0x862, 0xd637, 0x3, 0x8, 0x5, 0x0, 0x5, 0x9, 0x6, 0x1ff, 0x8, 0x7, 0x101, 0x6, 0x80000000, 0x7, 0xff, 0xfffffffc, 0x2, 0x1, 0x10000, 0x9, 0x7f, 0x0, 0x0, 0x2, 0x8, 0x40, 0x6, 0xfffffffe, 0xfffffffa, 0x3a0, 0xfffffffb, 0x100, 0x6, 0x101, 0x400, 0x6, 0x3fd3, 0x80000000, 0x686, 0x8, 0x8, 0x9, 0x9, 0x7, 0x4, 0x2, 0x40, 0x800, 0x6, 0x6, 0x7, 0xfffffffe, 0x5, 0x4, 0x3, 0x0, 0x4, 0x8d, 0x80000000, 0x8001, 0x6, 0x2, 0x4, 0x2, 0x8, 0x10000, 0x5, 0x0, 0x9, 0x1, 0x7, 0x8, 0x5, 0x7, 0x4, 0x8, 0x1000, 0xffffffff, 0x0, 0x31, 0x6, 0x200, 0x6, 0x6, 0x5, 0x40, 0x9, 0x40, 0x9, 0x80000000, 0xa5, 0x8000, 0x2, 0x7f, 0x4, 0x3, 0xffff, 0x5, 0x0, 0x9dd, 0x389a, 0x0, 0x200, 0x6, 0x3, 0x7, 0x800, 0x40, 0xffffc980, 0x8, 0x9, 0x36a3, 0x9, 0x80000000, 0x0, 0x3f, 0x8, 0x8f, 0x80000000, 0x51b, 0x1, 0x1, 0x80000001, 0x1, 0xfffffff8, 0x81, 0x1, 0x2f75, 0x5, 0x9, 0x9, 0xdfb, 0x2, 0x1ff, 0x5, 0xfffeffff, 0x7fff, 0x54, 0x3a9e, 0x7, 0x6, 0x4, 0x3, 0x4, 0x7, 0x17, 0x9, 0x0, 0x7fff, 0xffffffc1, 0x8, 0x8, 0x1, 0x0, 0xfffffffc, 0x1, 0x4, 0x7fff, 0x2, 0x8000, 0x80, 0x0, 0x9, 0x4, 0x100, 0xb29, 0xfffffffc, 0x2, 0x3, 0x1, 0x9, 0x91c, 0x4, 0x81, 0x7, 0x9, 0x0, 0x8, 0x313, 0x8, 0xb7, 0x1, 0x9c4, 0x98, 0x0, 0x8, 0x81, 0xfffffffa, 0x1, 0xffffffe4, 0xffffff80, 0x9, 0x6, 0xb46, 0x1f, 0xcdb, 0x8001, 0x9, 0xb4c9, 0x3, 0x0, 0x8001, 0x564a65c5, 0x4, 0x7, 0x200, 0x0, 0x3, 0x80000000, 0x32f4, 0x4, 0x4, 0x8001, 0x8d04, 0x96000000, 0x143, 0x1, 0x5, 0x79, 0x80000001, 0x2, 0xef85, 0x40, 0x59, 0x8, 0x9, 0x8000, 0x0, 0x7f, 0x3, 0x1, 0x0, 0xfffffff9, 0x1ff, 0x6, 0x8, 0x7, 0x5, 0x6, 0x0, 0x1ff, 0x2, 0x20, 0x4, 0x8, 0x101, 0x67, 0xfa6c, 0x157, 0x7ff, 0x9, 0x0, 0x8, 0x9, 0x7, 0x7, 0x5, 0xffffffff, 0x800, 0x6, 0xd2b1, 0x9, 0x0, 0x0, 0x5, 0x10000, 0x5, 0x1, 0x1, 0x7fffffff, 0x20, 0x1, 0x80, 0xff, 0xfffffe00, 0x1, 0x968e, 0x100, 0x60, 0x7, 0x4, 0x400, 0x80000001, 0x0, 0x400, 0x400, 0xd0, 0x7f, 0x3, 0x1, 0x10001, 0x0, 0x5, 0xfffffff9, 0x4, 0x5, 0xff, 0x8, 0x7, 0x90df, 0x923d, 0x0, 0x26e9, 0x3, 0x6, 0x0, 0x7, 0x9, 0x20, 0x4, 0x3d66, 0x6, 0xf494, 0x0, 0x6, 0x0, 0x3, 0x0, 0x92aa, 0x2, 0x9, 0x7, 0x80, 0x8, 0x10000, 0x9204, 0x7, 0x5, 0x9, 0x1, 0x8, 0xffffffff, 0x3ff, 0x8, 0x1, 0x7, 0x7fff, 0x3, 0x1f, 0x5, 0x4, 0x4dc7, 0x0, 0x9, 0x1, 0x7fffffff, 0x2, 0x7ff, 0x0, 0x6, 0x4ca, 0x6a0, 0x9, 0x58f, 0x8, 0xfffffffa, 0x3b2, 0x8, 0xfffffff8, 0x3, 0x8d, 0x86, 0x4, 0x101, 0x80, 0xa508, 0x8, 0xff, 0x6, 0x8, 0x2, 0x6, 0x0, 0x3, 0x1f, 0x3, 0x0, 0x7, 0x101, 0x101, 0x3c9e28f9, 0xff000000, 0xfffffffd, 0x3f, 0x1000, 0x7, 0x4, 0xf1b, 0x3d, 0x100, 0x8, 0x4, 0xea, 0x55bed2af, 0x3, 0x5, 0x3f00000, 0xa4bc, 0x8001, 0x10001, 0x10001, 0xd0b7, 0x8000, 0x5, 0x1, 0x10001, 0x9, 0x4, 0x7fff, 0x9c, 0x4, 0x4c7a, 0x0, 0x10001, 0x100, 0x5, 0x8, 0x1, 0x6, 0xfffffd4b, 0x6, 0x0, 0x8, 0x9, 0x3ff, 0x7, 0x7fffffff, 0x8, 0x20, 0x9, 0x9, 0x3ff, 0x6, 0x4, 0xffffffff, 0x9, 0x7ff, 0x8, 0xfffffffd, 0xfffffffa, 0x10000, 0x10000, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x6, 0x8, 0x69, 0x1a, 0x6, 0x42, 0x0, 0x7, 0x87d, 0x1, 0x3ff, 0x91e3, 0x0, 0xbed8, 0x1, 0x91bd, 0x0, 0x7fff, 0x9, 0x101, 0x2, 0x101, 0x6, 0x20, 0xfffffffd, 0x8, 0x3ff, 0x3, 0x5, 0x3, 0x8, 0x6, 0x0, 0x1000, 0x2, 0x2, 0x0, 0x2, 0x80, 0x3, 0x0, 0x0, 0x200, 0x101, 0x5, 0x1ff, 0xcdcb, 0x200, 0x1a7e, 0x8000, 0x0, 0x569c, 0x9, 0x1, 0x0, 0x8001, 0x80000000, 0x7, 0x8, 0xfffffc01, 0x2, 0x9, 0x6, 0x9, 0x0, 0x6, 0x80000001, 0x6e5, 0x7fffffff, 0x800, 0x0, 0x3, 0x0, 0x8c4, 0x10000, 0x85f3, 0x80000000, 0x4, 0x8, 0x9, 0x7, 0x5, 0x0, 0x8000, 0x0, 0x800, 0x200, 0x1ff, 0x7f, 0x3, 0x5, 0x1ff, 0x9e4, 0xaa9, 0x6, 0x7, 0xff, 0x200, 0x6375, 0xf1, 0x21, 0x6, 0x0, 0x3, 0xfffffffd, 0xc125, 0x8001, 0x1, 0x1, 0x200, 0x200, 0x380, 0x7f, 0x3, 0x4, 0x1000, 0x7, 0x1, 0x6, 0x8, 0x4, 0xe982, 0x3, 0x8, 0x24e, 0x5, 0x1, 0x5, 0x45, 0x3, 0x3da, 0x400, 0xffff, 0x1, 0x1, 0x9, 0x2, 0x4, 0x5180000, 0x812, 0x0, 0x9, 0x0, 0xe109, 0xfffffe52, 0x1, 0x6, 0x3f, 0x3f, 0x4, 0x3f, 0x21aa14f7, 0x4, 0x7, 0x6f, 0xfffffffb, 0x2, 0x1, 0x10000, 0x3f, 0x7, 0x7a, 0x0, 0xa1, 0x2, 0x2, 0x8, 0x81, 0x8000, 0x200, 0x6, 0x1, 0x8, 0x80000001, 0x0, 0x3f, 0x5, 0x94a, 0x20, 0x2, 0x8000, 0x8ca9, 0xe303, 0xcdd2ea0, 0x5, 0x101, 0xff, 0x4]}) 04:07:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000002c0), 0x4) r2 = socket$inet(0x10, 0x4, 0x22) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x81, 0x0) ioctl$int_out(r4, 0x2, &(0x7f0000000200)) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x20580, 0x0) ioctl$TIOCLINUX4(r6, 0x541c, &(0x7f0000000280)) r7 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0xc04c5349, &(0x7f0000000100)={0xff800, 0xcdd}) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="24000000280007031dfffd946f610500070000001d00000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x67}], 0x1}, 0x0) 04:07:14 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x2000000000000074, 0x4) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0xffffff19) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000640)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5536dbc0f309747cc199a7f9a20d01e04d55fb1c26504e3e4738aac76780b5c2363a6dc4d10fe9adc2b363abf6981a31f6a58ef2103e7a145b11649eac6d4cc29a315faf899c2e35d08b1974199c08bf4798207b78d8dd89e727382318265acc85a4444869dfc22ba7fd79b455635a715fa1e705070e2857ef21a3076cdfc2c29b26547360add94ef9c349ae62f54e7a90e1aae762a11b2cc6bd720034fac41f1de628e2a3166ec21e03c68a60708328e1606a83211bc78be79097861ce52747ac474593d76f9ec5cdd91725cb16e62b4bb027fbb96eab344de0401076c6345a7d32e9fe9ba1e68ac07081a7d1e0ed1eb9e96b41214af554f1831dfd8bd2b466789f4295317d17c138abe5fa9044a44792e9aecfb3f9130ff673786a8ef2b14c4999c29a5713c2fb5e35f2fae0d58b64355a697efd45e36528e57c68a62c6edc7879962e05419c7c5fa64ec92e670821df50d0f3a7312d2120f363954e72ba0322fc4318f819b1e2b1a17fb939a5db9c1a0a83b44abcffc3dd555d4dd30c0a4bd524c29d4d57bc906c012446c99a882162f3f72cce0702d7394288807fe2a308e01adc9bbf2a9cd78fabaa3c10640777e0813726a70df3323924035b235fd39ae4ab08d3f09bd231b38dca4389b098b0d3538dd3ef5bf068c1df8fbe00b0b2aa9ec3de5d3fba56594328a643c2799b8371adc6ecdfd9b9c4e52102eaa83b57da14645e442b4b7ad5f555d872dc50c330d145ca853b768b990dbaa18ab7f7e2e2d695e980f96d646e8c893ad912bc71237e9aa3ef2d8a40b5629ca02a82556bd433a7222dc3257fd6ace72b00b6f8c9d621c54f777ee5fd1fc59d11a7ea96855d58bb21d40d1bbdfecad8ed15a25062f7692e1879793657f91b6c78d739ef6811d677cf64b4346ac28740f143d5fd3e00e15416e2dbc76c17b1c09fd0b4065d2252b29370c8ec3", 0x2d1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000080)=""/62, 0x3e}], 0x2}, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 443.503509][T12319] usbhid 5-1:0.0: can't add hid device: -71 [ 443.508862][T14515] x86/PAT: syz-executor.5:14515 map pfn RAM range req write-combining for [mem 0x1be01000-0x1be01fff], got write-back [ 443.509988][T12319] usbhid: probe of 5-1:0.0 failed with error -71 [ 443.531704][T14515] x86/PAT: syz-executor.5:14515 map pfn RAM range req write-combining for [mem 0x1d36fe000-0x1d36fefff], got write-back [ 443.550451][T14519] x86/PAT: syz-executor.1:14519 map pfn RAM range req write-combining for [mem 0x1bf95000-0x1bf95fff], got write-back [ 443.563658][T12483] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 443.583278][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 04:07:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e21, 0x0, @ipv4={[], [], @local}, 0x2}}, 0x40, 0x8, 0x3f, 0xffffffff, 0x101}, &(0x7f00000000c0)=0x98) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newsa={0xfc, 0x10, 0x200, 0x0, 0x0, {{@in, @in=@local}, {@in, 0x0, 0x2b}, @in=@multicast1, {0x0, 0x0, 0xffffffff}, {0x80000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) [ 443.617383][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 443.649459][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 04:07:14 executing program 5: r0 = syz_usb_connect(0x1, 0x15c8, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x52, 0x3a, 0x8, 0xe9c, 0x0, 0x64f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x15b6, 0x1, 0x0, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0xfb, 0x2, 0xb, 0x31, 0xce, 0xdb, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x1ce, 0x80, 0x0, 0x9, [@generic={0x5c, 0x0, "0e7d4e5672ca8f6ad41cc4a0c64dceed3f52377fc186c05ab7eb93dfb7ad696d86a46bfb7ca0c306db7fe273f87cd092f28823affb0efd694b428f085f3fa9ba960f1f8ab9987ed1ec0099c071c90de56a7119ce2117d7e38b70"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x224, 0x8, 0x8c}}, {{0x9, 0x5, 0x6, 0x9fc5eac2a743df6a, 0x293, 0x8, 0x1, 0x0, [@generic={0x94, 0x22, "7d28b5309a38ddfd91dbab3738196db055a205a206795593b444135b1613ea9a8c0632478f33673415b8c5292c4ddbf869fc92e2546128462ef3717c3018cbf83db6a460a8f1891a1f0298dd40113a9da9f47ec90bd7f21c3d989cef73d78034b33e02be84fa5d4cef786f0441d32537c7718f53dc75e86518b149cf963e376e2726989600287d234734f64f638aec52921d"}, @generic={0xbd, 0x24, "3dbffeb298458acbe4b1092fa4b12faa8f8af0e1ca7e2b658f6b0bfdd9e1a4c425aa0e036d918c465e7bdae832b57f502124c352c5e442d874ecaaf52ee40f5016da5a71f3beb63802e2629371361a01683b09d3686eeda09e8269ca2edfe1508a14a12f831f985ad67e13a146c232178b6fafe7d9d130f627f856e10bd782423f2d42abb130fc3515dee2302e6f30fe15da6f39bf919dc8ee2a8cdad46898273d94009e638e1ff86100668e6f2b7dc5203b4182560da695622146"}]}}, {{0x9, 0x5, 0x84, 0x4, 0x223, 0x7, 0x8, 0x0, [@generic={0x73, 0x3, "c1f393df631096bd635a6a013ec67ccaa13a12aeddff6d1430d87473d16e56fdb34ca2a90bb5f58e7e6acd718995c1f065cfd83ae3dec17dc8684c79e0e94bd5503b7fcc9996fa9b6ef310363cb4047a002f51c97cdfe72796f2eaead0f84d52edc351a9c125915ea26fa06643f8446812"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x6f, 0x3, 0x7, 0x7, [@generic={0x79, 0x2, "1bb1cde3eae1aba0c0fbb85e25b08feb6abb05b748ef53626b0112ee03c39be44585bdeacfd5da6ee0204aed8cc82a983af3b06bc9e88bce4a92bb7f6f29f5f52aa6d686e5b9ce596b3637e48594588c75a67b5d2d85e25148b961602d766a9f14ae8588d4080435d5d3b17543ef4cc943e4809a3cba30"}, @generic={0x80, 0x3, "7a6d9a1b078e043ee4072ca60b44064c150d10c0e12e7ee800e0abc93af0ecca5a45e18ed794159c974ac937ba37652e81fec3af7f8a0dbe63a6642f972319913a442d8c188f6652c26f505f00d86f92ae27aaceaae698788f365aca543510d2192ff134da0ee73d77b8efbbbbe6040771d6795f2642a585d6647fa6d87f"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x2, 0xf0, 0x81, [@generic={0x27, 0x31, "368ff2e4d4cb41cde51325f9e6b4400a682fb1ecf4c190b0bfdfb508e9db8a3cfadfb2c6a0"}, @generic={0x1002, 0xe, "6d5188b6e1efe4384e666654b6936e67e5e03beeca4ed17cd59436c9c59da734154ce816f30165363c6120a0c1b46c048466d7a7e34f936aca55e3ec5ffde90b06930f06bca5773897d70ce94eae61725a02cc84c9ff72b2d88f7c45d41ade9d1c87e72f4fdf87a7dd5263553b00e84e4521417da09ec7b6fbedfa7e8392790ba956b9c979009f6ebd7330b1e4067f9601cb5e333b229aec5059d3a0dd43a3c5b2253fdec0785b97b139834e508051bfc535777e24516ffa7a424672fb6fab7ce7c67658a212dfcecfd850a7a8041034a0c81084f44adad31480329a34a6f5f16bdca07f4ebb3faff1f72eee7fb36448cef9add0106cfca139297aae567d68d96b56e214b6f6e6774c7a7eb67c6986e6f0513c696181afdff0ac8b16e3a2fd296d9c292b422cb9d28ec398f964aae22cf2001cbdf161e1858029eee8cb59ee60b5ef30bf33b199262649c50ce1542890e28c78c9d51611ae6f7b5da042db2408eeb72f52661b472c1439bdf2af742f8c23a45bf03385b55a58539552a10443cccfdf5efbaee9228b6e843378f9f12c9512385bf8ad802d467902797dc6f1163f782f4946341bcd642641459efa2324329c473bdc750a419351e99eb2d04f43013f4f4235e2cab69f919d5cd8ad3f9c3795762dc81b12633ecea848e355d0afdede866188132aa5a5284a9004b4649829cb79c3def707abfb6ad7fb355f552dc46f119f32a774eba27ab814b31d1e61b45095a72a77a5df9732013897f6b7bbfd08b0f3dc820f04d16f1b41cbc7dcc871b7dac260ba34118e9ecf917d0c8aa3c9e1330a84eda24ed54710d9adc88162d83b3f2c2b9fe5773a9aeea0b677167795e26a4259b8b94e6014d5cf1434b04209e829a6faa038971dc14b02838f57a844d90bbb4ff199bbf1bc79f356070d09c733a687414a4254ede152709376e3fc3328223f179e25b9c41d85ebc82b2863704245b31345a7cea6f3a28619b9d9c141b984778abcfdb11fe5b53edab2b89d882381cde2d4aa81b28c8c1cdf6a264b468e4f40a6c9ba8120b1ff592ce9d467b0aa3dba9caaae16f6fefbea6e48572a4a4e0a578356539e5c34ee264cb5b114f2f9e790c384166f65e5c02b0f23c99b497ac6ed493d5773ae7082a9e19c07ec5bc61835e7275de21952a2b57672bdcd344d585a111bfae40385ccbd103171d372c38f041af0e94387ffc2bf302b315bcd2e1d54e322855dc4b419a41c20fefc67e61ed3a4db67993f0da0ecb3b632d9afa51254e9275a0a25e05944662d71849b45f5c8acb1d21f3b1baa62bfb0f56ebeb76466baf3e4687a37a75e51e89e73debfa1eb142eafd3293f7a262da35030512872971a2e8dd4e3dfb195368de866e4e61574aa0f71570a727b08e0dff5856c68827c7bccf736f036bf0415d097bb5d7ee948ed27f600fb232b7d201e0014dfe0f483efb878123d37449ae5926d8ac6928ae7cd8d98e7f046d3a0f69bf9b354413b1c728e3bb600034199d84fbf0130c0a78f095ca0954257b866feb24be5cbe227a14911cc030a63e3a669da0ae698ad11375218c6f54eda81011d655e35428462c2ab8fdc8cbd3f1375dc4e8ce5ab63d548cc88011d8fc6ecb09bd4dbfb0418dafb56b4e039085a4e6cb4907fa3918a68730f1e39e8a9f571d651f1d13a66ce507ab54effa8664cf5572b4012cda9fee38f05a06b1e0368d75dd6676034564901fba4ce7c10e7fe0f8e5bdde659197bcf6d3853c5aa952ee234248e362d40f0a1656544ca63138466d110eee8bdb913efc4c7be20e41742a6537af8cdcae480be01e612e0bb1d810ff3a948827157249407c996871f06dfbe5d53be53ae444a0914a3ca3fb8cca685ad52af3981d7d50f1ef11c0fed428c1f2104fe9a068f80004e58c3ddc14742b1e54fd319fb90089dc34cf728c202064e52efc1045535a305958ea6b723293c01cdb7ce7a502e29142547c2fe42717e6b2399a6e9d55f71511f8623fbb08d126fcd4ca2c037c11d4ec222b496fa8cab0fc4de715db3f1e9e5798e09023c6d75b28208c2c444fef5d26b6b9e9286a7290b25825c9be0fcc752c6b28bfd2fd21c0df47ed564c81b741ca6d60c67bb1d88ebc3458db795ff2ccfb894925deb8bee7249629613d27235b84e163763057ebee62582055ca6751d79a9b7ac279b1bbfa1f83b196cab89856cd22f96e509fb98a73d97f979d49ac9bcae35566a6affb775f5eb3b25389559beb4231521492b48af658c4835a5e959528beae852ff24029135f29bbaf88579c8ed754fc3d8e472bfd10350e7f8dc848b8c7cc50965fa46a034e45c4bcbe8bf8bd223268da86afcddf869b082ce926a4686b38278ff45b317437358a71a9507005a7b26b83e0746786d7f98888b1ae8bf97d4efb7a15e7051789fe957f6600221389255ff5116ef77cfe766f707c860b87efa472a50c6bb9fe8730f414643d1101e4fb3a88cf5bfcda9c859d069e0f570735ab74670166cf49f53c4304820679fdfd6cd7a07e0fcc5c43a34d179a0c2b06e9d15dfca527415116594d306a459ad7f4922ca2a04f31d77609b4dc2f58b8010a1aca6cd080a27031a7d52924f6936f401fb010099e1ec99832268652836be23f8ee7835cd9119bf547406eeb9d91e1a490acd6a41cb550c2dbf669e79437aae00560ae159f466681a86c13e1d708b552303e41045b8a4f4f3380b8f16f1d42f9c62df5a4eefaa30a7a23259a3a18838a3c36fba8b65d41c420e5e369a9655591d58e7ff80b82bc74099931893b7ac0b8efcb2b9a8acc2413aa43f8d9a6698afde4979288e18bc2e9e61b72531dc85ff40f8899ccf31de388e5de4a1b894f096414b63359e658d1a4b899192862eb79327f1b1d21b2531d310b177223206e12de8d90ae87c937fcd86fe78cf6f732d1b0d2f9c86f35d99986e0174cfcef71f5f0a47529d4711e79b4cc46368371132571c0868c356f3ce6c90d21352be1f22cb875fe78cee0c2a4e3097f4db9be184d45b5cf3f7f3b4b79bc5b11b7b0b3282d6c670a5e829e2c39125996bf023e516aa45e660057a0131fe62935a5b08da1fc1ac8e6de4c7baae8f301870a0e9d4a6f744beac0aa2fd553679dc481cb3f62d7220f6c294bc1d9ac6b7fc07e3af6283cba8e131cc723f8a2f182891709d1f4328d19862acff49e1a79d856f274d2538bbd56cf1e3256b1026de212f498f77633981b8f7cf4fe775529035777aa8b9ee6bbcfa896b7b16d20cb2d414ab7a45c68b83de920f426d9ed0bd68a8d824543e7383e82a21d7f36366337d05412f27f128623880624292460da7af47b7a1df166f12b3d3485d15bbb0f41d2d445ea7858c0f63797e304b932130c11b34b95dfef9990167c789b3d064830210959e4b4f22ea3b26456c09c61d3099b7c0d4b9b2ccf9919baadc465a232c725b607ca4f6b757ebb36810a1044c7bb425a9c53fce21bdad8e07c5b45432b2987d99d7a7f89ee5bdf47a9cbcbcaaab7fca01f5d210767dee60045f1229c8861e9b80272a118422b3c38bc0d9a8a4b5d967afe02874672cb6a8a765a43dd4dfa91585192154d51db5c640d3cf9bb7c8107ad3eb17b006fcf17383342403b760ef6c1110fe120bc4a4f90923a7de13a546eda8622751558835983bbc05aed875fcf5423ebc031dbdfd11b839942101c7eaa2361db5273220ebd44f9420cad56a8c51004c917557ba76e872adea2f063986afb473153bac7dc03594a4611fa3d3a8e34e3a9a8be7d2a3eae35a08815662fbd18008cb665c5186c219a305a2341ea46986b7f418bc134b2fe3bcc3e1a7e890da9372aefc13bfbfaf095cde0e951e8f07e4c8e70b5580a43a7d13ef0385c9a674187a5c7c54fad9b5e82e5358825bc7fbd63478a8d7e723d78ae722a34e61f10ebf663dd5566a82b93d8cf1d70a3810357089ffea20f59a9a706213346dec5049fe5abf199994cabf693e29061494112d2ec9188ad1fdbe8530a0cfeabbb468d31c7494cabbedf6706c49aed7f63c37b68ac8a65022edeae298849dac4c5ee52443687778d989afe1362449ba0023f73432ae80eea8ea18ba243609735b0be207f9b93afd325143e1648980f7e2db4e312af939a1be8a10d078014231dc0b7b8008a2780e0fcffdc4c1d7be6fb4d3683c01a7faf3c994d2e804acea124ae4665c0a65cd642b6fe7948cf87773d6c415d4383bf73b0b76393ddf54ef003e573ac3c041c7e1a457e86cc430e3548687d93c1264c97e678f211f21f1f570881b1387d090e645a16883cdb3d14146d0c1bd528a635cf42c421eebc9df913e53bf5db9fbaf5820a7ce83a15f25b746e6066ae921a6535dfe5688445b25fad3b2945f122200da8f07bf5ec2e542ca9771d94fe8fb468518ec6fb0813145f1538dd0a3e797b33d0d7cd89692473cc2728bf5736a3d64bd4c968e50efb406c00183119dcb204a5e87ea9a5e9cef4839c0d44b77f418f8cc46c2d74b4d050b67949d28c8f694514b8e2af3234b8c7db01ba6d901bdbfc5a596cc0ce0b6fe56f9c0379f769e5ab6cf2c14b569217d2576bf7dd63566a89bdb251ea2585a4177277ead5d73c9484e76a3b8cbabcde2407393d4e73b88fe5bcdaeb34842cbc7cdb239b782585a45decb26d0ed513ac32694298e2c84993fc4a9a359ed98668977b3e92e609c51c4385f6fb4ebf22847a8ed265ce2c64282e2baaea14c0900b44f283c0f8d7a83637d23a758d80c7073ae7d7d2e798f36479ba8b1772b96e8aa08e619f962e70e4e381bdc836e28ed0d231cfc8b9d061370969d5e02167307f45b702f5fdc3f71c5fc7d56e0604dba2dde0dd596943ecb9539d52f84a9208e3dbf32f5753c1f9368acc28833b848b897b3e35ed0d4df52be3aa26e7c15d6bbd02a2afc798bfd4426363d7f1f7bed17da4810fae32ed4a94cdba578172d708d588698d2ca5fde2f20e3990d776283bde3c26e0a59fb8e9dc382f0342ec99b24cf2472509e4f67432b776adc7eb10d03a3853c670d1fbf5a023fd294bba2d655e6ad39de0ef5898eff0d28d4124082255e00ea8aad4435d58cbc746be5ed29d17c37a92b7e97a687834ac35f0689b8ce3197a3aec3e9c98de72dfb8a3779f82d62681f059841005fc62de04a1afaf849baeb4eb6dab7b57271ab2d471ea159f2cc9f616fbbe95701c3c9b7452c86b7d22caba25636c9c56018185a7cad68a5a9df28b1bf69f5a761cc6fc9ddeee26c05d10756a4cec4251adaeec5aff7e43a79fd8907702f73bc7605fc481e4712a71ef7929cb6f1edf63aa9e382d40d706ba21e9a49930b80faf5f3ab63901276c960d592476c1d4153f627ed295be5c3b089c94b560b3222f122ef0f101b28511528a27f401929a00d2709d10d36e85f670c599c45740683be1910d16ce74a25c4537a5d6cb7b5435b312ada3247776b9ac39c867e97e7210e7e23025f2c3691bb0b12f0ca7d12b91fa4e351f977a848557f9be3d15b311c430e6bb254cc7888b4bb54f692ae321cdb40246fd03938b26081c16dd47d17760879abd11ae13310c9a19abac6be52822bdae47e77589136866c2254e7b1e4b14d29de3bc0b355b9d918585da5df38f92beefc7521400885cb160db7205006b6d27352f5ca491e20d2489d1a85920e36872d0da35a4b35ba1a9b7a67c2fc92305fbc37263a63345b2a98802b6fe0284a4c8f2ec8dae7393304071f0887bca93cd5bba3ea755d142d7b473daca926e01274b05d927d8d30fe0de653cc7bbaa527e4335d47502db1d67641546a9628a3db2d0bf5b5"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x11ec, 0x6, 0x4, 0x7, [@generic={0xd4, 0x0, "b68a30854168cc7afd4b1c4e2d7728b64bf805d84ade7af076454e3e470f6e4fde9b698ed4a0a3bcabda4d4d44e37abad7be82abf782c24d4b94351f3c00cf5de246d843e54455f809af24a8de7ee14904b803c603ab9aae3e3456d9c6f72d4de73c8077633e213959f11bddbf3b3a00cf86025c6efb07bc28441f7f3de8eb77129ee7fe8a417b65374af6c4e887d1ed8d46471cbef8c5579177d591a3e8ccd9040ac132ead9d5cfab19fff7a6c9caa639d60f75ac5580ce56afaa68996d414fa779d0441cd99a9c897aaca6b1c4a0d71d04"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x26a, 0x8, 0x8, 0x9}}, {{0x9, 0x5, 0x80, 0x0, 0x12e, 0x5, 0x81, 0x2, [@generic={0x91, 0x7, "c2a5954a4c5162380a8616ba25923533a358f8d6458ae4ffeed5b47f95bb4f157e74440043dea3d0cb6f97954c73928b69f537a2c1f8fd759ded001d1f86c637c99f9bd52134c7debcaae7aba63e80e1093b321225965afd797e61ec17f7ee9a8290f3d6da86711035d316396171f9b419ad59adbcdcc3a7401bc86e1c79bd5859af9b2fcda2a912816fb29544f8a2"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3a9, 0x9, 0x0, 0xfc, [@generic={0x46, 0x6, "9355d62b0f21ca961e07f2e67fba73976b3aeb149d075899b452444fb8c8b5fac04c7e26ecf62cffe991407f8ffee6399036dd29894d262d85df9b34fae8a1c19e7202f7"}]}}, {{0x9, 0x5, 0x0, 0x0, 0xbd, 0x2, 0x40, 0x4, [@generic={0x3e, 0x5, "603e3a4ce74f7d6b280c5b1d577b03999d2a3eb677930480d4d9d65462a2cb83cf2442464816997a790b8d73fbc0b93b2e95483d122fce78e6b39c25"}, @generic={0x16, 0x6, "8e5e7c72c907b3c85205d7c7cba5cf91b2c65904"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000017c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x844000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x140, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6f3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe9e}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @ipv4={[], [], @rand_addr=0x19b}, 0x1ff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8000, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa86c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x78}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0x140}}, 0x88) [ 443.665080][T12319] usb 5-1: USB disconnect, device number 19 [ 443.773172][T12483] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 443.793287][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 443.813324][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 443.833431][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 443.863286][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 443.883197][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 443.903254][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 443.927665][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 443.954023][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 443.983077][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 04:07:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr, 0x1}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0x29d, 0xfa00, {&(0x7f0000000180), r5, 0x4}}, 0x335) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r5, 0x10}}, 0x10) r6 = socket(0x100000000000011, 0x2, 0x0) r7 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r7, 0x0, 0xc8, &(0x7f00000004c0), 0x4) ioctl$sock_netdev_private(r7, 0x89f1, &(0x7f00000003c0)="e84009fc0d168907b12d3e47bb0815a10e2444847a41f1ab2d09da59459d81ee74456bf9dd0775a7a6bc354340a4e7e053934ddaff5acff5a8a2c9d9dcb82e4ce9eac263c0beffb002523bd4c86e3a2d886257b8d86bc6b1053ccdd6be8ac22d21c235d86e7a14e9d4a1e1c6232b1ee4b58d363dddeecd859ea17e4324632c859b5a838f6dd3fd61") bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r12, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r12, 0x80045400, &(0x7f0000000480)) r13 = open(&(0x7f000000cc80)='./bus\x00', 0x141042, 0x0) r14 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x103000, 0x0) ioctl$FS_IOC_FSSETXATTR(r14, 0x401c5820, &(0x7f0000000380)={0x1, 0x6, 0x8, 0x1}) ftruncate(r13, 0x87ffd) sendfile(r0, r13, 0x0, 0x800000000024) [ 444.003143][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 444.027533][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 444.034708][T12320] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 444.053415][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 444.073420][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 444.087495][T14537] x86/PAT: syz-executor.4:14537 map pfn RAM range req write-combining for [mem 0x1d3992000-0x1d3992fff], got write-back [ 444.100621][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 444.125406][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 444.131944][T12483] input input30: Timeout waiting for response from device. [ 444.179604][T14537] x86/PAT: syz-executor.4:14537 map pfn RAM range req write-combining for [mem 0x1d3953000-0x1d3953fff], got write-back [ 444.348962][T14545] x86/PAT: syz-executor.1:14545 map pfn RAM range req write-combining for [mem 0x917a6000-0x917a6fff], got write-back [ 444.433373][T12320] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 444.441580][T12320] usb 6-1: can't read configurations, error -22 [ 444.626234][T12320] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 445.033238][T12320] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 445.041692][T12320] usb 6-1: can't read configurations, error -22 [ 445.048548][T12320] usb usb6-port1: attempt power cycle 04:07:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix={0x0, 0x0, 0x34324d59}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x10000) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r2, 0x0, 0x200, 0x80000000, 0x7}) [ 445.393846][T12483] usb 4-1: USB disconnect, device number 25 04:07:16 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:07:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r2, 0x2000) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000240)={0x9, {0x101, 0x0, 0x7, 0x401}, {0x7, 0x9, 0x3b1, 0x1f}, {0x1, 0x7}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) syz_emit_ethernet(0x300502, &(0x7f00000000c0)=ANY=[@ANYBLOB="aae53ab95035eaaa94aaaaaa001a0000000086dd60b4090000022b0000000000000000000000ffffe06f0002ff02000000000000000000c2b6c3811900c4cf7800090000000000000000000000ffffffffffff000000000000000600000000000000bb30c7908dbde686714c8154afd4965d020768c2a38c46e3b54556468531d30798af445dd9003b67ef357967a15d8bbc6796d55611969de8c9a82d0ef2a2386540b73285b01c4b6a812303160000000200000000000000fd14ccc169dc44036e715ce14cd6e9df6b22663353bb7c67bc6b5679d4a5f0524d514fb1376e99faca2de82b60a34011c235a6c852bbeec3b366b82d11763c4a4844ae185dffc636aa7ece8b5b094266ce47a5814cf0fe887f567a689c1db2b1110988720c9535ccab7fc3a70773bbea2cca77deb8b7000000a20e73a91904684a3401a47509000000d2e9a45a5ad0e5bc067d9d224fb305dde00bb5a8"], 0x0) 04:07:16 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0x4f, &(0x7f0000000180)=""/79) 04:07:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="218000f0c00f3235010000000f300fc7ae42000000660e3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727f0fc776000f011424f30f09660f38826ab2360f06c4c18d72d68366baa100ed", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x246, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x40) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:07:16 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="5500ffff00000000a177962ccbd059c7188accb5da88745906168ba6333e0d5eddc66e42770ba05a138838be3d160f350000000000000000b79de2ec3facde196286f8"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000300)={0x5, {0x4f8, 0x7ff, 0xffffff80, 0xec7b}}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8ac80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000240)={0x86e, 0x97d}) r4 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000000)=0x1) [ 445.474393][ T2922] usb 1-1: USB disconnect, device number 35 [ 445.529053][T14560] x86/PAT: syz-executor.4:14560 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back [ 445.620382][T14565] x86/PAT: syz-executor.1:14565 map pfn RAM range req write-combining for [mem 0x93a5d000-0x93a5dfff], got write-back [ 445.662652][T14565] x86/PAT: syz-executor.1:14565 map pfn RAM range req write-combining for [mem 0x1d6ec5000-0x1d6ec5fff], got write-back 04:07:16 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r1, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 445.775054][T12320] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 445.793839][T14573] x86/PAT: syz-executor.5:14573 map pfn RAM range req write-combining for [mem 0x1be04000-0x1be04fff], got write-back 04:07:16 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa9, 0x8c, 0x78, 0x8, 0x2040, 0x4902, 0xff51, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x1, 0xf, 0xa0, 0x63, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002000)={0x2c, &(0x7f0000001ec0)={0x0, 0x0, 0x2e, "e7dc40edac96b90f01956721a760e44a198c1e5df704c775d33346ced2d92e2c7eddabe2eec9e80f119e763687ae"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) write$hidraw(r3, &(0x7f00000000c0)="1f1cb46b33b4df08e969f089864f77d7bc1f5b6ea7e81ff5027b1d6f5ac4fba39b457682b7755b2a7eccc077f31b0640c46c653a5a5935fb21794443e3533ba3eea9e65459e423ca474f7d7077ea6333e0bbd98fa504a955f1001de716600f43f39045e4ea7e451869e0a673e59f7618af44feaffbf6483b1bc8b57d5a6c4e136471eb29109a344d861f15704a09f8eb60dbfd2ed26c5a2e9ce019c8dfc3825852", 0xa1) 04:07:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0000001000000000000000") r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xd25c, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) r3 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0xfffffffffffffffb, 0x400) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000200)={0x4, 0x7, 0x1, "30e36306a9529bef04b10477fdc43d1cc1812abfcfac7062db513eb2ba1191fa"}) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r2, 0xffffcce7}, &(0x7f0000000180)=0x8) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000008ffffffff400001020301090224000101000000090400160003010002092100000001220000090581030000000009"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000440)={0x24, &(0x7f0000000340)={0x0, 0x0, 0x2, {0x2, 0x5}}, 0x0, 0x0, 0x0}, 0x0) [ 445.943239][T12483] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 445.964113][T12320] usb 6-1: device descriptor read/8, error -61 [ 446.003154][ T2922] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 446.053038][ T12] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 446.183006][T12269] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 446.183428][T12483] usb 4-1: Using ep0 maxpacket: 8 [ 446.243036][ T2922] usb 1-1: Using ep0 maxpacket: 16 [ 446.253214][T12320] usb 6-1: device descriptor read/8, error -61 [ 446.263176][T12319] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 446.292983][ T12] usb 2-1: Using ep0 maxpacket: 16 [ 446.323455][T12483] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 446.331861][T12483] usb 4-1: config 0 has no interface number 0 [ 446.338223][T12483] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 446.349385][T12483] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 446.360820][T12483] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 446.372328][T12483] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 446.383672][T12483] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 446.397107][T12483] usb 4-1: config 0 interface 164 has no altsetting 0 [ 446.423139][T12269] usb 3-1: Using ep0 maxpacket: 8 [ 446.443346][ T2922] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 446.451580][ T2922] usb 1-1: config 0 has no interface number 0 [ 446.457943][ T2922] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 446.467304][ T2922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.477402][ T2922] usb 1-1: config 0 descriptor?? [ 446.484531][T12483] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 446.493994][T12483] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 446.502547][T12483] usb 4-1: Product: syz [ 446.509253][T12483] usb 4-1: config 0 descriptor?? [ 446.513549][ T12] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 446.522449][ T12] usb 2-1: config 0 has no interface number 0 [ 446.529107][ T12] usb 2-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 446.538312][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.543264][T12319] usb 5-1: Using ep0 maxpacket: 8 [ 446.551145][ T2922] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 446.557869][ T2922] gspca_mr97310a: reg write [21] error -22 [ 446.558164][T12320] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 446.563934][ T2922] mr97310a: probe of 1-1:0.2 failed with error -22 [ 446.591598][ T12] usb 2-1: config 0 descriptor?? [ 446.597801][T12269] usb 3-1: config 0 has an invalid interface number: 26 but max is 0 [ 446.606103][T12269] usb 3-1: config 0 has no interface number 0 [ 446.612298][T12269] usb 3-1: config 0 interface 26 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 446.622416][T12269] usb 3-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ff.51 [ 446.631696][T12269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.655804][ T12] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 446.662274][ T12] gspca_mr97310a: reg write [21] error -22 [ 446.668327][ T12] mr97310a: probe of 2-1:0.2 failed with error -22 [ 446.673440][ C1] net_ratelimit: 18 callbacks suppressed [ 446.673460][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 446.686665][T12269] usb 3-1: config 0 descriptor?? [ 446.687094][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 446.713389][T12483] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 446.733506][T12319] usb 5-1: config 1 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 446.746789][T12319] usb 5-1: config 1 interface 0 has no altsetting 0 [ 446.757843][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 446.785271][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 446.804706][T12320] usb 6-1: device descriptor read/8, error -61 [ 446.811276][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 04:07:17 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f0000000040)) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) [ 446.914337][T14587] x86/PAT: syz-executor.5:14587 map pfn RAM range req write-combining for [mem 0x1d4767000-0x1d4767fff], got write-back [ 446.943562][T12269] hdpvr 3-1:0.26: firmware version 0xdc dated @í¬–¹•g!§`äJŒ]÷ÇuÓ3FÎÒÙ.,~Ý«âîÉèžv6‡®6 [ 446.945164][T12483] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 446.953974][T12269] hdpvr 3-1:0.26: untested firmware, the driver might not work. [ 446.960541][T12319] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 446.977640][T12319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.985847][T12319] usb 5-1: Product: syz [ 446.990132][T12319] usb 5-1: Manufacturer: syz [ 446.995188][T12319] usb 5-1: SerialNumber: syz [ 447.002175][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 447.023309][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 447.045771][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 447.053882][T12320] usb 6-1: device descriptor read/8, error -71 [ 447.073810][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 447.093313][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 447.113343][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 04:07:18 executing program 5: r0 = socket$inet(0x2, 0x3, 0x80000000002) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x4000) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000380)={{0x4, @multicast1, 0x4e21, 0x2, 'sed\x00', 0x32, 0x1, 0x67}, {@empty, 0x4e20, 0x2001, 0x7ff, 0x81, 0x4}}, 0x44) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) r2 = socket$inet(0x2, 0x3, 0x80000000002) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000400)=0xc) write$FUSE_LK(r1, &(0x7f0000000440)={0x28, 0xfffffffffffffff5, 0x8, {{0x1f, 0x8, 0x0, r4}}}, 0x28) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) r5 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r5, 0x0, 0xc8, &(0x7f0000000080), 0x4) syz_usb_connect(0x4, 0xa, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYBLOB="fa35e99437d71269d91c4c7c7dfaa9ec4a884179a9bd66931c4ed466fb3cbc591cd0452295ab4c7b269ef52f5f5880cea2d1f34e22286260aaa05022b6254e28b99ca9c416c48d4e98965c36f1c5789fe1b3e3fce4843c758f7b8e417f4b1fa70f0f53f1121de9c73493bc0638a8385c972f3e05bb5a927581c438874b47eb0ae3a4e5673c5571081f89cb01c81ffca6b42ce6eeef3256a16f7b3fc59766108a8751dd14a2cbad4433971ccd3b30ed371964849fef1abe79dc2839e1b124e6c54d3c2b781c7794741cf3ed810bddaaea660b47f2c0606c"], @ANYPTR, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRESHEX], @ANYBLOB="d81d03d436a2a1a334812b", @ANYRESHEX=r2, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES64], @ANYRES64=0x0, @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYRES64, @ANYRES32=r5], 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4000, 0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x6, 0x301000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, &(0x7f0000000080)) [ 447.156027][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 447.184031][T14577] x86/PAT: syz-executor.2:14577 map pfn RAM range req write-combining for [mem 0x1d393b000-0x1d393bfff], got write-back [ 447.202509][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 447.223958][T12320] usb usb6-port1: unable to enumerate USB device [ 447.224052][T12269] hdpvr 3-1:0.26: device init failed [ 447.236903][T12269] hdpvr: probe of 3-1:0.26 failed with error -12 [ 447.240894][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 447.263717][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 447.274153][T12269] usb 3-1: USB disconnect, device number 17 [ 447.285552][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 447.303646][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 447.303867][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 447.309952][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 447.334068][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 447.363877][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 447.383461][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 447.389722][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 447.397989][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 447.404592][T12483] input input31: Timeout waiting for response from device. [ 447.463396][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 447.469887][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 447.516801][T12319] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 447.534544][T12319] usb 5-1: USB disconnect, device number 20 [ 447.783457][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 447.790656][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 447.993148][T12269] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 448.233013][T12269] usb 3-1: Using ep0 maxpacket: 8 [ 448.253138][T12319] usb 5-1: new high-speed USB device number 21 using dummy_hcd 04:07:19 executing program 5: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(r7, 0x0) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="0200000001002aaf0000000002000100", @ANYRES32=r4, @ANYRES64=0x0, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00?', @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r7, @ANYBLOB="04000c000000000008000000", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="10000100000000002000020000000000"], 0xd, 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100)=0x4, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000000)="11dca50d5e0b38e47bf070") r11 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)=@builtin='builtin_trusted\x00') write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000500)={0x31, 0x4, 0x0, {0x1, 0x0, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) splice(r0, 0x0, r3, 0x0, 0x10003, 0x0) r12 = openat$random(0xffffffffffffff9c, &(0x7f0000000600)='/dev/urandom\x00', 0x840200, 0x0) fstatfs(r12, &(0x7f0000000640)=""/181) [ 448.353566][T12269] usb 3-1: config 0 has an invalid interface number: 26 but max is 0 [ 448.361857][T12269] usb 3-1: config 0 has no interface number 0 [ 448.368349][T12269] usb 3-1: config 0 interface 26 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 448.378361][T12269] usb 3-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ff.51 [ 448.387679][T12269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.397811][T12269] usb 3-1: config 0 descriptor?? 04:07:19 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0x4f, &(0x7f0000000180)=""/79) [ 448.523070][T12319] usb 5-1: Using ep0 maxpacket: 8 [ 448.538611][ T12] usb 4-1: USB disconnect, device number 26 04:07:19 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 448.634954][T12320] usb 1-1: USB disconnect, device number 36 [ 448.646966][T14607] x86/PAT: syz-executor.2:14607 map pfn RAM range req write-combining for [mem 0x1bf98000-0x1bf98fff], got write-back [ 448.663709][T12269] hdpvr 3-1:0.26: firmware version 0xdc dated @í¬–¹•g!§`äJŒ]÷ÇuÓ3FÎÒÙ.,~Ý«âîÉèžv6‡®6 [ 448.673952][T12269] hdpvr 3-1:0.26: untested firmware, the driver might not work. 04:07:19 executing program 1: r0 = getpgrp(0x0) process_vm_readv(r0, &(0x7f0000001540)=[{&(0x7f0000000000)=""/169, 0xa9}, {&(0x7f00000000c0)=""/114, 0x72}, {&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/239, 0xef}, {&(0x7f0000001300)=""/93, 0x5d}, {&(0x7f0000001380)=""/95, 0x5f}, {&(0x7f0000001400)=""/141, 0x8d}, {&(0x7f00000014c0)=""/84, 0x54}], 0x9, &(0x7f0000001880)=[{&(0x7f0000001600)=""/113, 0x71}, {&(0x7f0000001680)=""/85, 0x55}, {&(0x7f0000001700)=""/59, 0x3b}, {&(0x7f0000001740)=""/66, 0x42}, {&(0x7f00000017c0)=""/153, 0x99}], 0x5, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001900)='/dev/dlm_plock\x00', 0x4e4401, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = syz_open_dev$audion(&(0x7f0000001940)='/dev/audio#\x00', 0xff, 0x500) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000001980)=0x4) r3 = syz_open_dev$vbi(&(0x7f00000019c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x7) r4 = gettid() capset(&(0x7f0000001a00)={0x19980330, r4}, &(0x7f0000001a40)={0x5, 0x5de, 0x80000000, 0x4903, 0x2cee, 0xfffffc00}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001a80)={0x0, 0x0, 0x0}, &(0x7f0000001ac0)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001b00)={0x85, 0x5311, r0, 0x0, r5, 0x0, 0xfff, 0x75}) syz_open_dev$radio(&(0x7f0000001b40)='/dev/radio#\x00', 0x0, 0x2) fcntl$getownex(r1, 0x10, &(0x7f0000001b80)={0x0, 0x0}) ptrace$setsig(0x4203, r7, 0x3, &(0x7f0000001bc0)={0x2d, 0x200, 0x676}) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/dsp\x00', 0x602000, 0x0) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000001c80)) stat(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001e00)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000001f00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001f40)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000002040)=0xe8) fstat(r3, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)='system.posix_acl_access\x00', &(0x7f0000002100)={{}, {0x1, 0x1}, [{0x2, 0x2, r9}, {0x2, 0x4, r5}, {0x2, 0x0, r10}, {0x2, 0x7, r11}], {0x4, 0xc}, [{0x8, 0x0, r12}, {0x8, 0x5, r6}], {0x10, 0x2}, {0x20, 0x5}}, 0x54, 0x1) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000002180)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000021c0)={0x0}, &(0x7f0000002200)=0xc) ptrace(0x10, r13) openat$audio(0xffffffffffffff9c, &(0x7f0000002240)='/dev/audio\x00', 0xa00, 0x0) r14 = openat$audio(0xffffffffffffff9c, &(0x7f0000002280)='/dev/audio\x00', 0x46f663a3c2c0ebd0, 0x0) setsockopt$bt_BT_RCVMTU(r14, 0x112, 0xd, &(0x7f00000022c0)=0x9, 0x2) r15 = syz_open_dev$dspn(&(0x7f0000002300)='/dev/dsp#\x00', 0x3, 0x4000) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r15, 0x84, 0x12, &(0x7f0000002340)=0xffffffa7, 0x4) [ 448.790036][ T2922] usb 2-1: USB disconnect, device number 22 [ 448.813176][T12269] hdpvr 3-1:0.26: device init failed [ 448.818946][T12269] hdpvr: probe of 3-1:0.26 failed with error -12 04:07:19 executing program 4: r0 = syz_usb_connect(0x0, 0xfffffffffffffde9, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd9, 0xa9, 0x1, 0x20, 0x8086, 0x200, 0x3ab3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x80}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 448.864579][T12269] usb 3-1: USB disconnect, device number 18 [ 448.885541][T12319] usb 5-1: device descriptor read/all, error -71 04:07:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x100000001004, 0x4) listen(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @dev}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x100000001004, 0x4) listen(r2, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x80000006}]}, 0x10) [ 448.927527][T14614] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 448.983235][ T12] usb 4-1: new high-speed USB device number 27 using dummy_hcd 04:07:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff8a, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_delrule={0x0, 0x21, 0x4, 0x70bd2c, 0x25dfdbff, {0x2, 0x10, 0x1c, 0x20, 0x80, 0x0, 0x0, 0x1, 0x12}, [@FRA_SRC={0xfffffffffffffec2, 0x2, @rand_addr=0x8}, @FRA_FLOW={0x0, 0xb, 0x9}, @FRA_SRC={0x0, 0x2, @rand_addr=0x3ff}]}, 0x4c}}, 0x0) 04:07:20 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x7, &(0x7f0000000040)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x50}, 0x70) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)={0x3c, 0x2, 0xfffffffe}) ptrace(0x4206, r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$KDDELIO(r3, 0x4b35, 0x86d7) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000002c0), 0x4) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r6, 0x2000) ioctl$USBDEVFS_RELEASE_PORT(r6, 0x80045519, &(0x7f0000000000)=0x3) ptrace(0x4208, r0) waitid(0x2, r0, &(0x7f0000000100), 0xa22cb4ae9c91e06b, &(0x7f0000000200)) 04:07:20 executing program 2: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000040)=0xd8c, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280200000c00010076657468000000e6170002001400010052abe36c536f6a2bab000000430edf00000000", @ANYRES32=0x0, @ANYBLOB="000000003db39d06"], 0x48}}, 0x0) [ 449.144921][T12320] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 449.223502][ T12] usb 4-1: Using ep0 maxpacket: 8 04:07:20 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000380)) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x3, 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x200000, 0x0) write$sndseq(r2, &(0x7f0000000180)=[{0xffffff81, 0x4, 0x0, 0x0, @time={0x77359400}}], 0x30) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x8}, 0x18) shutdown(r0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x10001, 0x8, 0x9ae1, 0xc96e]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x14}]}, &(0x7f0000000080)=0x10) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x200, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="4ce2466a2e8f45e832f6479927776ffcf896f863dca3447850ef7e77831e61b9ec61", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x3, 0x8}, 0x98) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup(r8) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000140)={0x0, 0x100000001}) r9 = syz_open_pts(r8, 0x4000000000005) r10 = dup3(r9, r8, 0x0) write$UHID_INPUT(r10, &(0x7f00000015c0)={0x8, "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", 0xaf0}, 0x1006) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="02930000f150284393e97b39f08aef644b0535c3896ff22b201ba08b279af5c6a905fbc2aaafca6940b3a9287e4129ecb26fb0f97118717ac5e037250a9754aa75b76c001009009edfeebf100be2feec28e324dd4638b176297d69891e2ce5bbca180e90c2181a4bff7f1dc72165f776e51d17ad4327fc848e733cc92d99f985649265742214305915656d35400faca076a1c7e5988ad9a45b788a1f7f12402a1e328820d840b5f1b93fbf1ad1878648d6e742a279cbb81a50d559bfbca73ebff401159845d448ab373e7284b2957f405c37e02a348a13f92ef84768a28f460482a9215963461b27265be737f50f3f45f912ccb0d0002f35396e22c5abcd857fce3033", @ANYPTR], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x200, 0x200000}, &(0x7f0000000100)=0xffffff08) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x3, 0x2, 0xf203, 0x0, 0x8, 0xc1, 0xe1d}, 0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000480)={r7, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x20ec}}}, 0x84) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0) [ 449.248684][T14633] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 449.283406][T12319] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 449.319443][T14636] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 449.344489][ T12] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 449.352967][ T12] usb 4-1: config 0 has no interface number 0 04:07:20 executing program 5: shutdown(0xffffffffffffffff, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x4e22, 0x0, @loopback}], 0x38) [ 449.359246][ T12] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 449.370530][ T12] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 449.381967][ T12] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 449.393617][ T12] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 449.405078][ T12] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 04:07:20 executing program 2: socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x100) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) [ 449.418651][ T12] usb 4-1: config 0 interface 164 has no altsetting 0 [ 449.433397][T12320] usb 1-1: Using ep0 maxpacket: 16 04:07:20 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x40, 0x8, 0x8}) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000100)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000002c0)="f5", 0x1}], 0x1}, 0x0) [ 449.533483][ T12] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 449.542732][ T12] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 449.552186][ T12] usb 4-1: Product: syz [ 449.554423][T12319] usb 5-1: Using ep0 maxpacket: 32 [ 449.569114][ T12] usb 4-1: config 0 descriptor?? [ 449.621669][T14650] x86/PAT: syz-executor.5:14650 map pfn RAM range req write-combining for [mem 0x1d42ec000-0x1d42ecfff], got write-back [ 449.645143][T14650] x86/PAT: syz-executor.5:14650 map pfn RAM range req write-combining for [mem 0x8ecf0000-0x8ecf0fff], got write-back [ 449.685142][T12320] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 449.694068][T12320] usb 1-1: config 0 has no interface number 0 [ 449.700426][T12320] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 449.709924][T12320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.723937][T12320] usb 1-1: config 0 descriptor?? [ 449.740279][ T12] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 449.755387][T12319] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 449.763517][T12319] usb 5-1: can't read configurations, error -22 [ 449.764089][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 449.787961][T12320] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 449.794444][T12320] gspca_mr97310a: reg write [21] error -22 [ 449.798514][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 449.800545][T12320] mr97310a: probe of 1-1:0.2 failed with error -22 [ 449.825248][T12319] usb usb5-port1: attempt power cycle [ 449.826316][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 449.953264][ T12] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 449.973365][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 449.993238][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 450.013196][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 450.033433][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 450.053184][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 450.073318][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 450.093180][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 450.113435][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 450.133150][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 450.153261][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 450.173154][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 450.193338][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 450.213474][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 450.233344][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 450.253400][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 450.259896][ T12] input input32: Timeout waiting for response from device. [ 450.563090][T12319] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 450.803221][T12319] usb 5-1: Using ep0 maxpacket: 32 [ 450.963363][T12319] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 450.971512][T12319] usb 5-1: can't read configurations, error -22 [ 451.123054][T12319] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 451.372983][T12319] usb 5-1: Using ep0 maxpacket: 32 [ 451.533287][T12319] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 451.541685][T12319] usb 5-1: can't read configurations, error -22 [ 451.549674][T12319] usb usb5-port1: unable to enumerate USB device 04:07:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x400, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r5, 0x0, 0xc8, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40031032, r5, 0x2000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0xffffff20) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) r6 = accept$alg(r0, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r7, 0x0, 0xc8, &(0x7f0000000080), 0x4) clone3(&(0x7f0000000280)={0x1800, &(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000200), 0x14, 0x0, &(0x7f0000000240)=""/56, 0x38, &(0x7f0000000300)=""/113}, 0x40) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000380)=r8) sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18}, 0x0) write$binfmt_script(r6, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r6, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xfeb8}], 0x1}}], 0x1, 0x0, 0x0) [ 451.604029][ T12] usb 4-1: USB disconnect, device number 27 04:07:22 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r1, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:07:22 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0x4f, &(0x7f0000000180)=""/79) [ 451.751136][T12269] usb 1-1: USB disconnect, device number 37 [ 451.943468][ C0] net_ratelimit: 22 callbacks suppressed [ 451.943492][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 451.955602][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:07:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000080)={0x4000, 0x2000}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x45}]}, 0x3c}}, 0x0) 04:07:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="8b112d6c18b6ea46826fcf5b6b0e1074a609dc850c15226401ab3c81558f4e85cddaa2b08a31cdf4503958b7fd8847efb534c8e3108985f23db4ee63b9962f6cbf9408b09194ff970415bd333708b7c9f17001c37935f67e725fae1d8718", 0xfffffc7f}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x9, 0xfffffffd, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x7, 0x0, 0x0, 0x2]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x98}}, 0x4) [ 452.023253][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 452.029466][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:07:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000000c0)) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000000c0)) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x8, 0x12bbaa9d, 0x3, @stepwise={0x27, 0x1, 0x0, 0x59, 0x2, 0xff}}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newspdinfo={0x2c, 0x24, 0x400, 0x70bd25, 0x25dfdbfb, 0x9, [@replay_val={0x10, 0xa, {0x70bda7, 0x70bd2e, 0x800}}, @etimer_thresh={0x8, 0xc, 0x9}]}, 0x2c}}, 0x0) [ 452.173279][T12269] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 452.181361][ T12] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 452.193033][T14679] x86/PAT: syz-executor.2:14679 map pfn RAM range req write-combining for [mem 0x1d342a000-0x1d342afff], got write-back [ 452.251298][T14679] x86/PAT: syz-executor.2:14679 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back 04:07:23 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x200004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e24, 0x1ff, @mcast2, 0x6f}}, 0x3, 0x100, 0x4, 0x6, 0x10001}, &(0x7f0000000140)=0x98) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r6, 0x2000) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000180)=0x3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0xd6, "f909db928ac849a1fa2a598d563ccf4bfbf57dd9c5f6350bb59e2738008764ff00e624d9673c93d5a205faab0569e466c2b9d388389384071647cb39cb6354d5f840b9ca453a199a6383994a48a34b98b25177728c626f4c80e4597af20ee3f27552e99d40bd74ee8f6785fe02e47b3049bcbbd863763266677359653460a32845c885d1ed53dc6bd1f700571947b57130a5d2fa3f8ae5b810658345753cfcc29c235293557b4ccbcb8639d55c98d662cc389045e3d29fe13075ff4c0ed73ca67fb50c4cbc55c090f98e9e1c454756bc187accde7982"}, &(0x7f0000000400)=0xde) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="a80b00bc0b9a83ed6c5e514eb4261baaa39c00", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r9, &(0x7f0000000440)=0x4) 04:07:23 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(r6, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(r9, 0x0) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000480)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000640)=0x282) r12 = socket(0x30002000000010, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r14 = socket(0x30002000000010, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setresgid(0x0, r13, r15) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {}, [{0x2, 0x2, r2}, {0x2, 0x4, r4}, {0x2, 0x0, r6}, {0x2, 0xa4d96fc60d57ad22, r7}, {0x2, 0x198667e773db9a72, r9}, {0x2, 0x1, r11}], {0x4, 0x7}, [{0x8, 0x1, r13}], {0x10, 0x5}, {0x20, 0x8}}, 0x5c, 0x1) r16 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='\x0fprc0ncci\x00\x00\x00\b\x00\x00\x00\x00\x00\x00-%\x00', 0x210000, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_CONNECT(r18, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000063c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}], @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r19}]]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec0000002800ae5a682108eb4700000000000000", @ANYRES32=r19, @ANYBLOB="030000001200040002000600080005000306000008000100647272000c000200080001007d920000080005002f0500000c0001006866736300000000440002001000020000000000000000900600000010000100060000000002000006000000100002000000000000000080930000001000010003000000000000000500000008000100636271002c00020010000200080390050100008006000000180001001e010d08e5060000ff07000008000000ff07000008000500090200000c00010064736d61726b00000c0002000800040008000000"], 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) socket(0x10, 0xf, 0x7) 04:07:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x0, 0xc00, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "22f8a6fc75823c17b0a3af400d07275040bf045fd699200e3105ddd2bb2f547936806a5c46c79ebd57ca99b8780f07a64b04f236289108dfbf1ccdd12225b0c5"}}, 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'gretap0\x00', r6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x6c00, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="740000002400f3a4748635e300db000000040000", @ANYRES32=r2, @ANYBLOB="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"], 0x74}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xa00, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r13 = dup(r12) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r13, 0x2000) ioctl$SG_GET_SG_TABLESIZE(r13, 0x227f, &(0x7f00000003c0)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r10, 0x2000) getsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000000340)=0x20, &(0x7f0000000380)=0x4) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r14 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r14, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r16 = dup(r15) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r16, 0x2000) ioctl$VIDIOC_G_MODULATOR(r16, 0xc0445636, &(0x7f0000000400)={0xffffff80, "9d7f02caf083a61b2d8026036539c9ed372b8331e33d462b5640067083d23417", 0x1000, 0x1, 0x1, 0x8, 0x3}) 04:07:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000180)={@remote, 0x0}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x4f, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(\xd0\xb9q\x88]\xfd\x915L\xa6\xad\xb3\xacJz\xd7=\x17\xb7\xec\x16i@\xee\xd1\"\xcb\xd5\xe2Fj\xd5\x97\xde\x88\xf5\xca\xf3\xacS\"\xc1\xe9\xd8*)\xe9{Y \xc7\xdcx\xf1\x90w\xdc\xe4\xde\x8a\xfc\xbco\xbb$A\xa4gZu\x87\xfbN\xc7\x88\xa7Y\x9a\x85g[\xe3\xb0\xf5X\xd1\xb2\xe16\x12\xd2\xdeV\xa6\xe6\f\xbd\xb9\xec7\xef\x06E\xd3\xbal\n\x8d\x06\xd1\xe9\xf0\xc9\xe8\xed\xabYkvz\xc0\xcb', 0x0, 0xfffffffffffffe32, 0x0, 0x0, 0x3, [], r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x40000000, 0x200, 0x0, 0x7fff}, 0x10}, 0x70) [ 452.427583][T14689] x86/PAT: syz-executor.5:14689 map pfn RAM range req write-combining for [mem 0x1d3993000-0x1d3993fff], got write-back [ 452.440729][T12269] usb 1-1: Using ep0 maxpacket: 16 [ 452.446832][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 452.463177][T14691] netlink: 'syz-executor.4': attribute type 22 has an invalid length. [ 452.471904][T14692] x86/PAT: syz-executor.1:14692 map pfn RAM range req write-combining for [mem 0x1d4767000-0x1d4767fff], got write-back [ 452.475860][T14691] batman_adv: Cannot find parent device [ 452.487793][T14693] x86/PAT: syz-executor.5:14693 map pfn RAM range req write-combining for [mem 0x1be04000-0x1be04fff], got write-back [ 452.514216][T14689] x86/PAT: syz-executor.5:14689 map pfn RAM range req write-combining for [mem 0x1d393b000-0x1d393bfff], got write-back 04:07:23 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffff41, 0x2, 0x1, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x0, 0x1, "0000ed000000"}, {0xfffffffffffffed9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x7, 0x4}, [@network_terminal={0x0, 0x24, 0xa, 0x4b, 0x3f, 0x9, 0x40}, @dmm={0x0, 0x24, 0x14, 0x4, 0x3}, @obex={0x0, 0x24, 0x15, 0x1}, @call_mgmt={0x0, 0x24, 0x1, 0x2}, @mdlm_detail={0x0, 0x24, 0x13, 0x1, "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"}, @mdlm={0x0, 0x24, 0x12, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x3}}}}}}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x10, &(0x7f0000000a80)={0x5, 0xf, 0x10, 0x1}, 0x15555555555555da}) [ 452.539590][T14693] x86/PAT: syz-executor.5:14693 map pfn RAM range req write-combining for [mem 0x1bf98000-0x1bf98fff], got write-back [ 452.605202][T14699] sctp: [Deprecated]: syz-executor.1 (pid 14699) Use of int in maxseg socket option. [ 452.605202][T14699] Use struct sctp_assoc_value instead [ 452.620902][ T12] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 452.629459][ T12] usb 4-1: config 0 has no interface number 0 [ 452.635659][ T12] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 452.646869][ T12] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 452.658273][ T12] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 452.669851][ T12] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 452.681183][ T12] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 452.694671][ T12] usb 4-1: config 0 interface 164 has no altsetting 0 [ 452.743413][T12269] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 452.751708][T12269] usb 1-1: config 0 has no interface number 0 [ 452.758405][T12269] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 452.767602][T12269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.777594][T12269] usb 1-1: config 0 descriptor?? [ 452.826868][T12269] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 452.833389][T12269] gspca_mr97310a: reg write [21] error -22 [ 452.839458][T12269] mr97310a: probe of 1-1:0.2 failed with error -22 [ 452.849817][ T12] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 452.859179][ T12] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 452.867591][ T12] usb 4-1: Product: syz [ 452.874862][ T12] usb 4-1: config 0 descriptor?? [ 452.903320][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 452.909606][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 452.983233][T12319] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 453.053499][ T12] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 453.073746][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.093694][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.113365][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.134154][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.234595][T14699] sctp: [Deprecated]: syz-executor.1 (pid 14699) Use of int in maxseg socket option. [ 453.234595][T14699] Use struct sctp_assoc_value instead [ 453.250903][T12319] usb 6-1: Using ep0 maxpacket: 16 [ 453.255055][ T12] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 453.274696][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 04:07:24 executing program 1: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x10, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast, {[@rr={0x7, 0x2b, 0x20, [@rand_addr=0x8, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, @local, @remote, @multicast2, @loopback, @local]}]}}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2e, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0x4, 0x8, 0x40000000, 0x3, 0xc6f}, 0x14) 04:07:24 executing program 4: seccomp(0x1, 0x0, &(0x7f00000005c0)={0x3, &(0x7f0000000040)=[{0x1d, 0x7f01}, {0x16}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x2) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x2000) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000100)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @dev={[], 0xe}}, 0x37a71a93714c1ed4, {0x2, 0x4e20, @empty}, 'ip6tnl0\x00'}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000001c0)=0x1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000080)={0x0, 0x3f, 0x9, [], &(0x7f0000000000)=0x9}) socket$inet_udplite(0x2, 0x2, 0x88) [ 453.295443][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.326360][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.369359][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.390841][T12319] usb 6-1: descriptor type invalid, skip [ 453.397106][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.423312][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.443898][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.475146][T12319] usb 6-1: config index 0 descriptor too short (expected 65345, got 92) [ 453.480015][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.483895][T12319] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.500882][T12319] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 453.509977][T12319] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 453.530229][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.547671][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 453.554857][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 453.574743][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.593900][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.614625][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.623331][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 453.629462][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 453.636524][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.663828][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 453.670815][ T12] input input33: Timeout waiting for response from device. [ 453.823390][T12319] usb 6-1: string descriptor 0 read error: -22 [ 453.830567][T12319] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.841176][T12319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.917151][T12319] cdc_ncm 6-1:1.0: bind() failure [ 454.120130][T12319] usb 6-1: USB disconnect, device number 22 [ 454.788531][ T12] usb 4-1: USB disconnect, device number 28 04:07:25 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r1, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:07:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x200}, 0x1c) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) 04:07:25 executing program 1: syz_emit_ethernet(0x76, &(0x7f0000000000)={@random="c5d32df662eb", @local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x3a, 0x0, @remote={0xfe, 0x80, [0x29c, 0x58, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "b66cb8", 0x0, 0xffffff88, 0x0, @empty, @rand_addr="31e8015c1c5d7206a0d800", [@dstopts={0x0, 0x0, [], [@padn={0xf000, 0x1, [0x0]}, @padn]}]}}}}}}}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r2, 0x2000) write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0x0, 0x3}, 0x10) 04:07:25 executing program 4: syz_usb_connect(0x4, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007ce40c08e30502055ce68000000109021200ff6cf942e99998325d7f030bc99a9d0fe2431008000000000000000032c7e4104a7266401e39d009a11e1c12e8b513418acc0d2213f462b5657e098fbcc939cdbd3e13167e4bd11ffc6eef1a3891b904537f9c87b1e2d95f08ed106916776cec270e8399908c1a89d6eab6c1e17bb1ef000000"], 0x0) 04:07:25 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ddbfe908f8060400010000ed00010902240001000000000904a4e92319b875000905850b000d0000000905010341000000005b7481db4894cd501e42ffc9c7e69f4eacc71f2d60087793bb9db2c4c9e1830101e114d5c8956f42cf4d7c92f71ff0fb85abd1fd06671269ec4b3a4830a47e74aef28fbdde383db227b6f1a02e84847cfc0a3be4f07648913d73ae7e156c21cf44e1fda4d436b133991fecd3023bf386cb21ed85b695b2f579912e5eea4b2db0ee3bc2e645dcdcb82cb7732fce272a39e6922ffffc8243a06685e47356542838ec20f8d4ee9bd76a4c1477b44775dc4c2908b4f3e21de4c986d961d6bf574f81c2c7c0c559385a275f54336d317609e4ea205b5b6bb70c1a68509ee851572af4b5bb72964b121cebdc48519cc5c9c100d5bb10c71a1c2de1116a841eadc3990bfa24f1663c634615e4a64eb004a73e70d5e7349cdacb79a96654172ce8de333e4be6b3c51e4bb8688576653a6bf4025cb78bd0eaaf4e02d6cf382bbf4b1e6c413b06dae03fca569d136c2df9232707a8a8a2d6e7d9939b2e0a1d729d0133cde8cab589a8070eb40246a04ddd035561c975f960cc4c7be68fbfda551de187ba7ed9d55a5f2b95c0226b823f92f80fc0b414b3400b8b2874d47b680aec612798134a28e45738e682114de8c3b164de0f5ca83df813c7c35cba412fb85aefbae132dabca0916e246adc563692e41659faea685d8b59c21bfa9ec9a5b7a6fd87cad2966ec2af3330be"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0x4f, &(0x7f0000000180)=""/79) [ 454.848389][T12269] usb 1-1: USB disconnect, device number 38 [ 454.888002][T12319] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 454.898950][T14730] x86/PAT: syz-executor.1:14730 map pfn RAM range req write-combining for [mem 0x8ecf0000-0x8ecf0fff], got write-back 04:07:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000bfdfdc)={0x14, 0x0, 0x10000001, 0x800000001}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb5f}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3a}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf0}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa439}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r6, 0x2000) write$P9_RREADLINK(r6, &(0x7f0000000400)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f00000003c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) syz_usb_connect$cdc_ecm(0x3, 0xfb, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x58fc89c26758ece1, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x1, 0x1, 0x2, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x47, {{0xa, 0x24, 0x6, 0x0, 0x0, "fccbff32f0"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x5, 0x3, 0x1f}, [@ncm={0x6, 0x24, 0x1a, 0x7fff, 0x80}, @country_functional={0x12, 0x24, 0x7, 0x6a, 0x7f, [0x3, 0x2, 0x4, 0x200, 0x8001, 0xfff]}, @mdlm_detail={0x86, 0x24, 0x13, 0x80, "ef35675e2cab33f8cdca5858608b5b3a86108a2cf2c560e58f7406b0d44aa424433bb9677a705e18806f2d666343ecff7fa5246a6d4979122e4da18c6246ed78749a8f21591e354b0e24b4000ac3a78249a23f5e8f00804e2dbb6d8396f2a307c26c965b1625a854f4bd53826643320d7881892db1b5ff0f08238ae7ac3235a4511b"}, @dmm={0x7, 0x24, 0x14, 0x9, 0x1}, @acm={0x4, 0x24, 0x2, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x304, 0x7, 0xa3, 0xaf}}, {{0x9, 0x5, 0x3, 0x2, 0x21b, 0x2, 0x1}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x200, 0x9, 0x1, 0x6, 0x40, 0x3}, 0x29, &(0x7f0000000580)={0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "84269fa73ab78cb3e846f293553257a3"}, @ssp_cap={0x10, 0x10, 0xa, 0x9c, 0x1, 0x7fffffc, 0x1e00, 0x5, [0xc0ff]}]}, 0x5, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x6806}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3c01}}, {0xba, &(0x7f0000000680)=@string={0xba, 0x3, "574b0f5d317d8da2766fc69884d9b35e59f58c7da457371c72a9365f12ffe4a44fe4d9397d3e8a13a1ba4ce7ce7d4efa46b0ffecb513d033238960d787073cd37385e4f98cb2aa487c626738cdd57730e94c8a0fceaa35f2e2a2e49f7c9ba1bea8f85ff47f15a2ec7fa53871753fc2ece5fc1c9ef482f175065017f31018ab39e62c805e3dfad77ea96006bc8fe6ce074adc6a30730ab930e67a7372932fb9c61e89612e459abdd5a5142f65d1227311897cb084588fb7d8"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x44b}}]}) [ 454.974428][T14738] x86/PAT: syz-executor.1:14738 map pfn RAM range req write-combining for [mem 0x1d3956000-0x1d3956fff], got write-back 04:07:26 executing program 1: mlock(&(0x7f00005f0000/0x2000)=nil, 0x2000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) mq_open(&(0x7f0000000000)='ppp0-)-bdev\x00', 0x0, 0x3, &(0x7f0000000040)={0x3, 0xfffffffffffffffc, 0x1, 0x7, 0x8, 0x1, 0x0, 0x5631}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00005e9000/0xc000)=nil, 0xc000) [ 455.058732][T14742] x86/PAT: syz-executor.2:14742 map pfn RAM range req write-combining for [mem 0x1c6e2000-0x1c6e2fff], got write-back 04:07:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r2, 0xfffffffa}, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b05839657d3e92134a76ead59081ac7efaa568d4416a"], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xa808) socket$inet6_udplite(0xa, 0x2, 0x88) [ 455.133472][T12319] usb 6-1: Using ep0 maxpacket: 16 [ 455.139595][T14745] debugfs: Directory '14745-4' with parent 'kvm' already present! [ 455.253552][T12319] usb 6-1: descriptor type invalid, skip [ 455.353040][ T2922] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 455.363422][T12269] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 455.373578][ T12] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 455.374374][T12319] usb 6-1: config index 0 descriptor too short (expected 65345, got 92) [ 455.390128][T12319] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.400756][T12319] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 455.410002][T12319] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.603199][T12269] usb 1-1: Using ep0 maxpacket: 16 04:07:26 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000000)={0x5, 0x13ff, 0xfffffffb, 0x10007, 0x0, 0x1}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0x1, @raw_data="1fcb46d02ab6c63c424731327b3a75537c49b43893fc974900400000463f0437f7ffd8500d384ced6347be0711b5c9cc1bf51d241901c2c02cf411338e817d388054685cbb244a3e0244c4ef0915c7c51d07d272610817ba58559342ce7918de9a85638015aef9a5e3cd6a7c9367289b69f9d462ebe0785411a26cfb487d7bc2a5456cb92cfdad5d3c088a2861de26cdb810b47f7095d5b1a0cf189b5b2fc861f8104c4c07882c2e8345bea52167e2d4f9e707d8df10dfbc8b3f2de6d19f8cec666e98588ed484ee"}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x50f, 0x6, 0x3, "4c4c66db3bfd5a5d0d2cc20379e2a372f91fa94c8b1b68a75b14e8ed63fb6ef3", 0x20363159}) [ 455.625394][ T2922] usb 3-1: device descriptor read/64, error 18 [ 455.633390][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 455.664454][T12319] usb 6-1: string descriptor 0 read error: -71 [ 455.671053][T12319] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 455.680298][T12319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.708079][T12319] usb 6-1: can't set config #1, error -71 [ 455.729228][T14757] x86/PAT: syz-executor.5:14757 map pfn RAM range req write-combining for [mem 0x1d342a000-0x1d342afff], got write-back [ 455.742658][T12319] usb 6-1: USB disconnect, device number 23 [ 455.753585][ T12] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 455.761839][ T12] usb 4-1: config 0 has no interface number 0 [ 455.768240][ T12] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 455.779884][ T12] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 455.791343][T14758] x86/PAT: syz-executor.5:14758 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back [ 455.791567][ T12] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 455.816080][ T12] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 04:07:26 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1, 0x1493f737}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x400caeaa, &(0x7f0000000480)={0x10}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0x8f) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000780)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYBLOB="0003ddad0efd2bffb60ce95b360b5a067ac4b991522a41962bb90cd0166f98c0a034349b59ccc41178b47b8c02702546bbbac673dcbbb07f2bca637377e24b6f7c7e2fc8495671aac79e80daf341e097ef227c07b79a6b5e4a2c9885a2bbed2ffd70e37d2577f0a382be3d1f9ea615389af58d0e3c3e7bf1315d0d48372f82d8f53f6b859b09499d3450c8834193c681dd5b29656e818a727cd1caf4d37bc2e3f9ad1342413e222d52c0f4540de10cb3cf3b49ac1dc87181e79693784088800000000000000000"], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c7d]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 455.829710][ T12] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 455.843703][ T12] usb 4-1: config 0 interface 164 has no altsetting 0 04:07:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x2, 0x5, @loopback, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x2000000d, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 455.883623][T12269] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 455.892810][T12269] usb 1-1: config 0 has no interface number 0 [ 455.899418][T12269] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 455.908731][T12269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.923292][T12269] usb 1-1: config 0 descriptor?? [ 455.967525][T12269] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 455.974111][T12269] gspca_mr97310a: reg write [21] error -22 [ 455.980234][T12269] mr97310a: probe of 1-1:0.2 failed with error -22 [ 456.005408][ T12] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 456.014819][ T12] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 456.024767][ T12] usb 4-1: Product: syz [ 456.073890][ T12] usb 4-1: config 0 descriptor?? 04:07:27 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x7f6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000080)=0x222, 0x4) r1 = socket$inet(0x2, 0x3, 0x80000000002) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, [], [{0xfffffff8, 0x7, 0x80, 0x100000000, 0x7, 0x1}, {0x8000, 0x5, 0xb3, 0x3ff, 0xfffffffffffffffa, 0xf5}], [[], [], [], []]}) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/107, 0x6b}], 0x1}, 0x40000202) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/171, 0xab}}], 0x1, 0x12001, 0x0) [ 456.136568][ T2922] usb 3-1: device descriptor read/64, error 18 [ 456.233308][ T12] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 456.254284][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.276160][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.293468][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.313419][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.334235][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.413069][ T2922] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 456.453590][ T12] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 456.473429][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.494092][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.514893][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.535021][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.553280][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.573249][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.594769][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.614202][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.633204][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.653285][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.673277][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.683599][ T2922] usb 3-1: device descriptor read/64, error 18 [ 456.693541][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.713335][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 456.719846][ T12] input input34: Timeout waiting for response from device. [ 457.063537][ C1] net_ratelimit: 19 callbacks suppressed [ 457.063558][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 457.075575][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 457.096412][ T2922] usb 3-1: device descriptor read/64, error 18 [ 457.213355][ T2922] usb usb3-port1: attempt power cycle [ 457.703226][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 457.709559][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 457.783400][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 457.789399][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 457.863282][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 457.869483][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 457.906990][ T12] usb 4-1: USB disconnect, device number 29 [ 457.924746][ T2922] usb 3-1: new high-speed USB device number 21 using dummy_hcd 04:07:29 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x600, 0xf, 0xf7, 0x46, 0x10, 0x93a, 0x10e, 0xafeb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xce, 0xc2, 0x78}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r1, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:07:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000240)=""/192, 0xc0}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r4, 0x2000) write$P9_RUNLINKAT(r4, &(0x7f0000000340)={0x6, 0x4d, 0x2}, 0x7) connect$l2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0xa9, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r7, 0x2000) ioctl$TIOCLINUX2(r7, 0x541c, &(0x7f00000001c0)={0x2, 0x7, 0xff, 0xcf, 0x85f5, 0x8001}) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x600, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') io_setup(0xcd, &(0x7f0000000380)=0x0) io_pgetevents(r11, 0x7f, 0x5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0xfff}, 0x8}) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r1], 0x2}, 0x1, 0x0, 0x0, 0xb9619d8666262ff9}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10820023}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r10, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 04:07:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x1d, r4}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x0, 0xc00, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "22f8a6fc75823c17b0a3af400d07275040bf045fd699200e3105ddd2bb2f547936806a5c46c79ebd57ca99b8780f07a64b04f236289108dfbf1ccdd12225b0c5"}}, 0x80}}, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x6093d58400dca155, r4, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa192bce5e2dfb86dd60d8652b00140600fe8000000000000000000d00000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000cf6f8a2ef48fd4cc484e84fd06a5e9d496e9d00a9b6831087de24d118aeb0e957e043952063326da0192d4d204d205951610ecd3ab43ff7d33774a7a682ba765a1423be3a339b859de4a0d8a8eb095f2e0c8af49d777ea59e4"], 0x0) 04:07:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000600)=0x3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_setlink={0x290, 0x13, 0xa, 0x70bd2d, 0x7fff, {0x7, 0x0, 0x0, 0x0, 0x10944, 0x10201}, [@IFLA_EVENT={0x8, 0x2c, 0x23c}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xd6e0}, @IFLA_VFINFO_LIST={0x258, 0x16, [{0x68, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x7, 0x7fffffff, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff7, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0x8, 0x100, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x80, 0xd0a, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1f}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xffffff80, 0xcb2}}]}, {0x7c, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xfffffffb}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, [{0x14, 0x1, {0xfffff800, 0x61a, 0x7, 0x88a8}}, {0x14, 0x1, {0x80000000, 0x8f0, 0x1, 0xb6706f1874294e78}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x10000, @dev={[], 0x28}}}, @IFLA_VF_TRUST={0xc, 0x9, {0x10001, 0xffffffff}}, @IFLA_VF_TRUST={0xc, 0x9, {0xb33, 0xffff}}]}, {0xc0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x1}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, [{0x14, 0x1, {0x44, 0xe65, 0x8, 0x8100}}, {0x14, 0x1, {0x7, 0x14e, 0x2, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, [{0x14, 0x1, {0x2904, 0x49e, 0x5, 0x18300}}, {0x14, 0x1, {0x6, 0x5fd, 0x9, 0x8100}}, {0x14, 0x1, {0xfffffff8, 0xf4d, 0x8, 0x88a8}}, {0x14, 0x1, {0x1, 0xc10, 0x2, 0x88a8}}, {0x14, 0x1, {0x6, 0xed8, 0x8, 0x8100}}, {0x14, 0x1, {0x8001, 0x5f4, 0x4, 0x8100}}]}]}, {0x84, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, [{0x14, 0x1, {0x0, 0x762, 0x1, 0xfd9d378ed569ba9c}}, {0x14, 0x1, {0x1, 0xe45, 0x627, 0x88a8}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x80}}, @IFLA_VF_VLAN={0x10, 0x2, {0x9, 0x7c4, 0x4e}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x323}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, [{0x14, 0x1, {0x3ff, 0x569, 0x3ea, 0x88a8}}, {0x14, 0x1, {0x1, 0x66a, 0x10001, 0x88a8}}]}]}, {0x2c, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7fff, 0x6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x40, 0x4}}]}]}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x290}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f00000000c0)={0x5, 0x56, @value=0xfffffffffffffeff}) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r6, 0x0, 0xc8, &(0x7f0000000080), 0x4) r7 = accept(r6, &(0x7f0000000540)=@llc, &(0x7f00000005c0)=0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x20) lsetxattr$trusted_overlay_opaque(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.opaque\x00', &(0x7f0000000500)='y\x00', 0x2, 0x1) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000100), 0x4) 04:07:29 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0x4f, &(0x7f0000000180)=""/79) [ 457.973728][T12269] usb 1-1: USB disconnect, device number 39 [ 458.034616][T14785] x86/PAT: syz-executor.4:14785 map pfn RAM range req write-combining for [mem 0x1d3993000-0x1d3993fff], got write-back 04:07:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010078d1082f68a95350783b0500000000000010e5932700000000000001090224000100000000090412000903000000092100000001222200090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000080)={0x5e, @multicast2, 0x4e24, 0x2, 'wrr\x00', 0x20, 0x6, 0x51}, 0x2c) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@main=@item_012={0x2, 0x0, 0x0, "0001"}, @local, @main=@item_4={0x3, 0x0, 0x0, "3fbc98bc"}, @global=@item_4={0x3, 0x1, 0x0, "007d8bc3"}, @local=@item_4={0x3, 0x2, 0x0, "bbfbb044"}, @global=@item_4={0x3, 0x1, 0x0, "d9c68a50"}, @local=@item_4={0x3, 0x2, 0x0, "18c1187b"}, @local=@item_4={0x3, 0x2, 0x0, "49a2a234"}]}}, 0x0}, 0x0) [ 458.121454][T14793] x86/PAT: syz-executor.4:14793 map pfn RAM range req write-combining for [mem 0x1be04000-0x1be04fff], got write-back 04:07:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) mmap(&(0x7f0000197000/0x3000)=nil, 0x3000, 0x2000006, 0x4032, r0, 0xfffffffffffffffe) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000), 0x1fa) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) [ 458.183357][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 458.189710][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:07:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000140)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000300)='\'', 0x1}], 0x1, 0x1081809) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0xffffffff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x29}}, 0xffffffff}}, 0x0, 0x80, 0x101, 0xfea7, 0x4}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x1, 0x3f, 0xd, 0x1, 0x3ff, 0x8e0b, 0x3, 0x6, r4}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5b8, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de4538700000000e8904667033a61edb75c8d51c05dfaf7f4fdb16e0cdaa42700", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f900040000b8a7"}) sendfile(r0, r0, 0x0, 0x2000005) 04:07:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243, 0x5512}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0xfffffffffffffdab, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x10, 0x2, [@IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}]]]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 458.413386][ T12] usb 4-1: new high-speed USB device number 30 using dummy_hcd 04:07:29 executing program 4: openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x18000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xa800) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000080)={0x2, 0x2, 0x3f, 0x800, 0xf6d, 0x5}) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f00000000c0)={0x1, 0x100, 0x1c}) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x20002) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000140)={0x5, 0x31363553, 0x1c0000, 0x5, 0x0, @stepwise={{0x3, 0x5b9}, {0x101, 0x7}, {0x7, 0x6}}}) r3 = syz_open_pts(0xffffffffffffffff, 0x200) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000180)={0x40}) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f00000001c0)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x24c041, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000240)=""/72) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f00000002c0)={0x2, 0x101, 0xdd, 0x201}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$setpipe(r5, 0x407, 0x3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x2000, 0x0) readv(r6, &(0x7f00000024c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/77, 0x4d}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/181, 0xb5}, {&(0x7f0000002480)}], 0x5) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002540)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$PPPIOCSCOMPRESS(r7, 0x4010744d) r8 = syz_open_dev$vivid(&(0x7f0000002580)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r8, 0x80845663, &(0x7f00000025c0)={0x0, @reserved}) readlink(&(0x7f0000002680)='.\x00', &(0x7f00000026c0)=""/216, 0xd8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000027c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x0, 0x3359, 0x0, 0x101, 0x2}, &(0x7f0000002880)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000028c0)={r9, @in6={{0xa, 0x4e20, 0xffff7fff, @rand_addr="712340b3134eeea39f7a85f33dafbdcf", 0x7}}}, &(0x7f0000002980)=0x84) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000029c0)={0x14, 0x49, 0x1, {0xc62ed984ed53fc59, 0x2, 0x1}}, 0x14) syz_open_dev$dmmidi(&(0x7f0000002a00)='/dev/dmmidi#\x00', 0x5, 0x0) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002a40)='/dev/mixer\x00', 0x82000, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000002a80)={0x5, 0x0, [{0x60000018, 0x400, 0x2, 0xfffff887, 0x6, 0xffff8000, 0x7}, {0x40000001, 0x1, 0x6, 0x3, 0x7, 0x6, 0x7}, {0x2, 0x6, 0x2, 0x1000, 0xdc, 0x0, 0x1000}, {0x80000019, 0x81, 0x4, 0x2, 0x6, 0x8000}, {0x80000001, 0x6071, 0x4, 0x8, 0x10001, 0x7, 0x1000000}]}) r11 = syz_open_dev$midi(&(0x7f0000002b80)='/dev/midi#\x00', 0x87b, 0x80) ioctl$RTC_WIE_ON(r11, 0x700f) write$vnet(0xffffffffffffffff, &(0x7f0000002d80)={0x1, {&(0x7f0000002bc0)=""/174, 0xae, &(0x7f0000002c80)=""/238, 0x1, 0x1}}, 0x68) [ 458.484764][T14811] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 458.497903][T14812] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 458.503204][ T2922] usb 3-1: device descriptor read/64, error 18 [ 458.514696][T12269] usb 1-1: new high-speed USB device number 40 using dummy_hcd 04:07:29 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000000)=@generic={0x9, "a0f1e4640767a8fdc463106d01468d889666fffdec20731b16d6f385f4e9ccaf7404b0c94f5778305f5b42f9207e5f82511da2cf7ffc2089e7b11ddf770680d488d75f3aab6922d385cecc58d626347ecd687dcaf910dc671a1462d2072288d9bbcc9d92182409b28529718c86e7772e57f149397637a4d832bf0384a5bc"}, 0x80) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) recvmmsg(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/135, 0x87}], 0x1, &(0x7f00000001c0)=""/130, 0x82}, 0x2}, {{&(0x7f0000000280)=@x25, 0x80, &(0x7f0000002580)=[{&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/89, 0x59}, {&(0x7f0000000440)=""/38, 0x26}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/158, 0x9e}, {&(0x7f0000001540)=""/13, 0x89}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x7}, 0x3e}, {{&(0x7f0000002600)=@nfc, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002680)=""/197, 0xc5}, {&(0x7f0000002780)=""/45, 0x2d}, {&(0x7f00000027c0)=""/228, 0xe4}, {&(0x7f00000028c0)=""/18, 0x12}, {&(0x7f0000002900)=""/148, 0x94}, {&(0x7f00000029c0)}], 0x6, &(0x7f0000002a80)=""/57, 0x39}, 0x10040000}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002ac0)=""/237, 0xed}, {&(0x7f0000002bc0)=""/110, 0x6e}, {&(0x7f0000002c40)=""/49, 0x31}], 0x3, &(0x7f0000002cc0)=""/95, 0x5f}, 0x6}, {{&(0x7f0000002d40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000005500)=""/127, 0x7f}], 0x1}, 0x9}, {{&(0x7f0000002e80)=@nfc_llcp, 0x80, &(0x7f00000052c0), 0x0, &(0x7f0000005340)=""/8, 0x8}, 0x1ff}], 0x6, 0x20000, 0x0) r1 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) accept4(r1, &(0x7f0000002dc0)=@hci={0x1f, 0x0}, &(0x7f00000029c0)=0x80, 0x80400) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(r4, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002f00)={{{@in6=@dev={0xfe, 0x80, [], 0x24}, @in6=@remote, 0x4e24, 0x1, 0x4e22, 0x200, 0x2, 0xa0, 0x90, 0x21, r2, r4}, {0x1, 0xec, 0x800, 0x6, 0x8, 0x7, 0x55c5, 0x4b2}, {0x8, 0x1000, 0x4, 0x1}, 0x2a49, 0x0, 0x0, 0x0, 0x4, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d6, 0x3c}, 0x8, @in=@multicast2, 0x0, 0x0, 0x3, 0x9, 0xffff, 0x2, 0x3}}, 0xe8) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x95, 0x21, 0x5c, 0x10, 0x413c, 0x8196, 0xc42f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9e, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, [@usb_cdc={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x800}}]}}]}}]}}, 0x0) [ 458.653514][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 458.763102][T12269] usb 1-1: Using ep0 maxpacket: 16 [ 458.773499][ T12] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 458.781791][ T12] usb 4-1: config 0 has no interface number 0 [ 458.788244][ T12] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 04:07:29 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000400)={0xff, 0x5, 0x7, 0x2}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) fcntl$setpipe(r0, 0x407, 0xfffffffffffeffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) truncate(&(0x7f00000002c0)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chdir(&(0x7f0000000300)='./file0\x00') pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f0000000200)='./file0\x00') poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') r7 = dup(r5) r8 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r8, 0x0, 0xc8, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xca59b7928f956a54, r8, 0x2000) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f00000001c0)={{0x20, 0x1}, {0x4, 0x2}, 0x11d, 0x1, 0x40}) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf250300000040000300080003000400000008000500ac1414bb0800000400000000000002006970366772657461703000000000000008000100010000000800030003000000"], 0x54}, 0x1, 0x0, 0x0, 0xc0040}, 0x10040000) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000340)="5500000018007f5f00fe01b2a4a280930206000100000001020b000039000900350028000600000019001240020000000022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) ioctl$BLKALIGNOFF(r7, 0x127a, &(0x7f00000003c0)) [ 458.799523][ T12] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 458.814296][ T12] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 458.825966][ T12] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 458.837381][ T12] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 458.851094][ T12] usb 4-1: config 0 interface 164 has no altsetting 0 [ 458.892555][T14824] x86/PAT: syz-executor.4:14824 map pfn RAM range req write-combining for [mem 0x1bf98000-0x1bf98fff], got write-back [ 458.923058][ T2922] usb 3-1: device descriptor read/64, error 18 [ 458.935305][ T12] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 458.944989][ T12] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 458.953550][ T12] usb 4-1: Product: syz [ 458.959358][ T12] usb 4-1: config 0 descriptor?? [ 459.003285][T12270] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 459.017132][T12269] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 459.025400][T12269] usb 1-1: config 0 has no interface number 0 [ 459.031799][T12269] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=af.eb [ 459.041472][T12269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.052364][T12269] usb 1-1: config 0 descriptor?? [ 459.096558][T12269] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 459.103146][T12269] gspca_mr97310a: reg write [21] error -22 [ 459.109155][T12269] mr97310a: probe of 1-1:0.2 failed with error -22 [ 459.133910][ T12] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 459.153051][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.173611][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.193159][ T2922] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 459.201692][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.223763][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.243171][T12270] usb 2-1: Using ep0 maxpacket: 16 [ 459.343521][ T12] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 459.363426][T12270] usb 2-1: config 0 has an invalid interface number: 158 but max is 0 [ 459.371821][T12270] usb 2-1: config 0 has no interface number 0 [ 459.378320][T12270] usb 2-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=c4.2f [ 459.388079][T12270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.397909][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.405146][T12270] usb 2-1: config 0 descriptor?? [ 459.423330][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.446015][T12270] qmi_wwan 2-1:0.158: bogus CDC Union: master=0, slave=0 [ 459.454717][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.463584][ T2922] usb 3-1: device descriptor read/64, error 18 [ 459.475402][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.493282][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.513397][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.533441][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.553290][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.573288][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.593691][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.613633][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.635066][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.654961][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.674821][ T12] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 459.681373][ T12] input input35: Timeout waiting for response from device. [ 459.700422][T14831] x86/PAT: syz-executor.4:14831 map pfn RAM range req write-combining for [mem 0x1d4767000-0x1d4767fff], got write-back [ 459.853489][ T2922] usb 3-1: device descriptor read/64, error 18 [ 459.973381][ T2922] usb usb3-port1: unable to enumerate USB device [ 460.216420][T14836] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20004 [ 461.005400][ T2922] usb 4-1: USB disconnect, device number 30 04:07:32 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:07:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = epoll_create1(0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='r\xe6amfs\x00', 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x200004) sendfile(r1, r5, 0x0, 0x80001d00c0d0) 04:07:32 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000400)={0xff, 0x5, 0x7, 0x2}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) fcntl$setpipe(r0, 0x407, 0xfffffffffffeffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) truncate(&(0x7f00000002c0)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chdir(&(0x7f0000000300)='./file0\x00') pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f0000000200)='./file0\x00') poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') r7 = dup(r5) r8 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r8, 0x0, 0xc8, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xca59b7928f956a54, r8, 0x2000) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f00000001c0)={{0x20, 0x1}, {0x4, 0x2}, 0x11d, 0x1, 0x40}) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf250300000040000300080003000400000008000500ac1414bb0800000400000000000002006970366772657461703000000000000008000100010000000800030003000000"], 0x54}, 0x1, 0x0, 0x0, 0xc0040}, 0x10040000) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000340)="5500000018007f5f00fe01b2a4a280930206000100000001020b000039000900350028000600000019001240020000000022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) ioctl$BLKALIGNOFF(r7, 0x127a, &(0x7f00000003c0)) 04:07:32 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x4f, &(0x7f0000000180)=""/79) [ 461.089357][T12319] usb 1-1: USB disconnect, device number 40 [ 461.138965][T14841] x86/PAT: syz-executor.4:14841 map pfn RAM range req write-combining for [mem 0x1d3956000-0x1d3956fff], got write-back 04:07:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:07:32 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000140)="6812334f6743a747f8bf094356", 0xd, 0x8800, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x80800) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100)='\x00', 0x38, 0x4088, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/22, 0x16}, {&(0x7f0000000300)=""/247, 0xf7}], 0x2}}], 0x1, 0x0, 0x0) 04:07:32 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x4f, &(0x7f0000000180)=""/79) 04:07:32 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x4, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000040)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) [ 461.773360][T12270] usb 2-1: string descriptor 0 read error: -71 [ 461.780076][T12270] qmi_wwan: probe of 2-1:0.158 failed with error -22 [ 461.804719][T12270] usb 2-1: USB disconnect, device number 23 04:07:33 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000400)={0xff, 0x5, 0x7, 0x2}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) fcntl$setpipe(r0, 0x407, 0xfffffffffffeffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) truncate(&(0x7f00000002c0)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chdir(&(0x7f0000000300)='./file0\x00') pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f0000000200)='./file0\x00') poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') r7 = dup(r5) r8 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r8, 0x0, 0xc8, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xca59b7928f956a54, r8, 0x2000) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f00000001c0)={{0x20, 0x1}, {0x4, 0x2}, 0x11d, 0x1, 0x40}) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf250300000040000300080003000400000008000500ac1414bb0800000400000000000002006970366772657461703000000000000008000100010000000800030003000000"], 0x54}, 0x1, 0x0, 0x0, 0xc0040}, 0x10040000) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000340)="5500000018007f5f00fe01b2a4a280930206000100000001020b000039000900350028000600000019001240020000000022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) ioctl$BLKALIGNOFF(r7, 0x127a, &(0x7f00000003c0)) 04:07:33 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000080)={@random="c5d32df662eb", @local, [{[], {0x8100, 0x2}}], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x3a, 0x0, @remote={0xfe, 0x80, [0x29c, 0x58, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "b66cb8", 0xffff, 0xffffff88, 0x0, @empty, @rand_addr="31e8015c1c5d7206a0d800", [@dstopts={0x0, 0x0, [], [@padn, @padn]}]}}}}}}}, 0x0) 04:07:33 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 462.038186][T14871] x86/PAT: syz-executor.4:14871 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back 04:07:33 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4000, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000080)=0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x105080) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x20010, r2, 0x0) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) 04:07:33 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x4f, &(0x7f0000000180)=""/79) 04:07:33 executing program 2: creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x81fd) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000080)={0x20fc, 0x4, 0x7fff, 0x8, 0x3, 0x5, 0x0, 0x8, 0x4, 0x7f, 0x20, 0x9a34, 0x1000, 0x20, &(0x7f0000000040)=""/30, 0xff49, 0x678, 0x8}) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000000)={0x7fffffff, 0x1, 0x8001}) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) [ 462.343383][ C0] net_ratelimit: 22 callbacks suppressed [ 462.343404][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 462.355645][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 462.423384][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 462.429689][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:07:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, &(0x7f0000000200)={&(0x7f0000000100)={'crc32\x00'}, &(0x7f0000000480)}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0), 0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0xac, r2, 0x100, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3122}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x27}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x24}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0xac}}, 0x8081) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002580)={0x34, r4, 0x1ef6325be532a5eb, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev}]}, 0x34}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400d2}, 0x4000000) [ 462.558904][T14896] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 462.567802][T14896] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 462.593024][T14896] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 462.601344][T14896] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 04:07:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) accept(r3, &(0x7f00000002c0)=@hci, &(0x7f0000000140)=0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) 04:07:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff676, 0xb0f}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x7}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfeac, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x11}]}, 0x30}}, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x80000) r4 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000280)=0x4, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r5) r6 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r6) keyctl$search(0xa, r5, &(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, r6) [ 462.737297][T14904] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 462.867405][T14904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:07:33 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0x4f, &(0x7f0000000180)=""/79) 04:07:34 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 463.251845][T14922] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 463.270317][T14922] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:07:34 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000400)={0xff, 0x5, 0x7, 0x2}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) fcntl$setpipe(r0, 0x407, 0xfffffffffffeffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) truncate(&(0x7f00000002c0)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chdir(&(0x7f0000000300)='./file0\x00') pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f0000000200)='./file0\x00') poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') r7 = dup(r5) r8 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r8, 0x0, 0xc8, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xca59b7928f956a54, r8, 0x2000) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f00000001c0)={{0x20, 0x1}, {0x4, 0x2}, 0x11d, 0x1, 0x40}) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf250300000040000300080003000400000008000500ac1414bb0800000400000000000002006970366772657461703000000000000008000100010000000800030003000000"], 0x54}, 0x1, 0x0, 0x0, 0xc0040}, 0x10040000) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000340)="5500000018007f5f00fe01b2a4a280930206000100000001020b000039000900350028000600000019001240020000000022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) ioctl$BLKALIGNOFF(r7, 0x127a, &(0x7f00000003c0)) 04:07:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) chroot(&(0x7f0000000180)='./file0\x00') [ 463.303487][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 463.309644][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:07:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000600)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53dc9f2653d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xc0, 0xfffffffffffffffe) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) ppoll(&(0x7f0000000040)=[{r0, 0x23a0}, {r0, 0x100}, {r2, 0x8}, {r3, 0x1020}, {}, {r0, 0x240}], 0x6, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180)={0x40}, 0x8) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="10", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r1, r4}, &(0x7f0000000240)=""/112, 0x208, &(0x7f0000000580)={&(0x7f0000000500)={'crc32\x00'}}) 04:07:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff676, 0xb0f}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x7}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfeac, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x11}]}, 0x30}}, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x80000) r4 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000280)=0x4, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r5) r6 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r6) keyctl$search(0xa, r5, &(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, r6) [ 463.443903][T14926] kvm [14924]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 463.461309][T14926] kvm [14924]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 463.479761][T14926] kvm [14924]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 [ 463.529440][T12270] usb 4-1: new high-speed USB device number 31 using dummy_hcd 04:07:34 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x80800) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0xfe9, 0xae, 0x9, 0x6, 0x6}) syz_usb_connect(0x2, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) read$rfkill(r3, &(0x7f0000000080), 0x8) [ 463.602044][T14932] x86/PAT: syz-executor.4:14932 map pfn RAM range req write-combining for [mem 0x1d3993000-0x1d3993fff], got write-back [ 463.631683][T14935] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 463.679887][T14939] x86/PAT: syz-executor.5:14939 map pfn RAM range req write-combining for [mem 0x1be04000-0x1be04fff], got write-back [ 463.739644][T14935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 463.793673][T12270] usb 4-1: Using ep0 maxpacket: 8 [ 463.914415][T12270] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 463.923066][T12270] usb 4-1: config 0 has no interface number 0 [ 463.929304][T12270] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 463.942705][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 463.954574][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 463.955081][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 463.967270][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 463.978818][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 463.990579][T12270] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 04:07:35 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 464.011158][T12270] usb 4-1: config 0 interface 164 has no altsetting 0 [ 464.023577][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 464.029906][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:07:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000600)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53dc9f2653d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xc0, 0xfffffffffffffffe) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) ppoll(&(0x7f0000000040)=[{r0, 0x23a0}, {r0, 0x100}, {r2, 0x8}, {r3, 0x1020}, {}, {r0, 0x240}], 0x6, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180)={0x40}, 0x8) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="10", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r1, r4}, &(0x7f0000000240)=""/112, 0x208, &(0x7f0000000580)={&(0x7f0000000500)={'crc32\x00'}}) 04:07:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@mpls_delroute={0x1c, 0x19, 0x201}, 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400800, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f0000000040)={0x2, 0x0, {0x1ff, 0x10001, 0x3016, 0x2, 0x3, 0x7, 0x4, 0x4}}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400000, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000140)=[0x6, 0x20000]) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f0000000180)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00630800000002000000837ed84e4ac66b8bbb68202b23016e28a7f13073b2c3e0a6"], 0xffd3) 04:07:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000600)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53dc9f2653d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xc0, 0xfffffffffffffffe) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) ppoll(&(0x7f0000000040)=[{r0, 0x23a0}, {r0, 0x100}, {r2, 0x8}, {r3, 0x1020}, {}, {r0, 0x240}], 0x6, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180)={0x40}, 0x8) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="10", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r1, r4}, &(0x7f0000000240)=""/112, 0x208, &(0x7f0000000580)={&(0x7f0000000500)={'crc32\x00'}}) [ 464.204171][T14957] x86/PAT: syz-executor.5:14957 map pfn RAM range req write-combining for [mem 0x1d42ec000-0x1d42ecfff], got write-back [ 464.223729][T12270] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 464.233030][T12270] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 464.241292][T12270] usb 4-1: Product: syz [ 464.245897][T14960] device nr0 entered promiscuous mode [ 464.302135][T12270] usb 4-1: config 0 descriptor?? 04:07:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000400)={0xff, 0x5, 0x7, 0x2}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) fcntl$setpipe(r0, 0x407, 0xfffffffffffeffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) truncate(&(0x7f00000002c0)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chdir(&(0x7f0000000300)='./file0\x00') pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f0000000200)='./file0\x00') poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') r7 = dup(r5) r8 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r8, 0x0, 0xc8, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xca59b7928f956a54, r8, 0x2000) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f00000001c0)={{0x20, 0x1}, {0x4, 0x2}, 0x11d, 0x1, 0x40}) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf250300000040000300080003000400000008000500ac1414bb0800000400000000000002006970366772657461703000000000000008000100010000000800030003000000"], 0x54}, 0x1, 0x0, 0x0, 0xc0040}, 0x10040000) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000340)="5500000018007f5f00fe01b2a4a280930206000100000001020b000039000900350028000600000019001240020000000022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 464.444781][T14960] device nr0 entered promiscuous mode [ 464.465440][T12270] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 464.486222][T14968] x86/PAT: syz-executor.4:14968 map pfn RAM range req write-combining for [mem 0x1bf98000-0x1bf98fff], got write-back [ 464.486702][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 464.547337][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 464.574365][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 464.733214][T12270] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 464.755573][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 464.781440][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 464.803807][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 464.824014][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 464.843362][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 464.863359][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 464.894574][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 464.902246][T12270] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input36 04:07:36 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0x4f, &(0x7f0000000180)=""/79) 04:07:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000600)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53dc9f2653d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xc0, 0xfffffffffffffffe) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) r3 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) ppoll(&(0x7f0000000040)=[{r0, 0x23a0}, {r0, 0x100}, {r2, 0x8}, {r3, 0x1020}, {}, {r0, 0x240}], 0x6, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180)={0x40}, 0x8) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="10", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r1, r4}, &(0x7f0000000240)=""/112, 0x208, &(0x7f0000000580)={&(0x7f0000000500)={'crc32\x00'}}) 04:07:36 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x930, r0, 0x20000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd9, 0x0, &(0x7f0000000000)) 04:07:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) prctl$PR_GET_SECUREBITS(0x1b) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x100000000037, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 04:07:36 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:07:36 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000400)={0xff, 0x5, 0x7, 0x2}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) fcntl$setpipe(r0, 0x407, 0xfffffffffffeffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) truncate(&(0x7f00000002c0)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chdir(&(0x7f0000000300)='./file0\x00') pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f0000000200)='./file0\x00') poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') r7 = dup(r5) r8 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r8, 0x0, 0xc8, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xca59b7928f956a54, r8, 0x2000) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f00000001c0)={{0x20, 0x1}, {0x4, 0x2}, 0x11d, 0x1, 0x40}) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000340)="5500000018007f5f00fe01b2a4a280930206000100000001020b000039000900350028000600000019001240020000000022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 465.619954][T12483] usb 4-1: USB disconnect, device number 31 [ 465.726074][T14989] x86/PAT: syz-executor.4:14989 map pfn RAM range req write-combining for [mem 0x1d4767000-0x1d4767fff], got write-back 04:07:36 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a00090200000000000000007a5b00"], 0x10}}, 0x0) 04:07:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x730, 0x33, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd38d9b", @nested={0x718, 0x1, [@generic="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"]}]}, 0x730}}, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000180)) 04:07:36 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:07:37 executing program 1: r0 = gettid() ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) getxattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) pselect6(0xfe2b, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000cfa000/0x2000)=nil) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff51, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8040, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f00000000c0)) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f0000bfd000/0x400000)=nil) shmat(0x0, &(0x7f0000db4000/0x4000)=nil, 0x0) tkill(r0, 0x1000000000015) 04:07:37 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = inotify_init() close(r4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x13000000, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) 04:07:37 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 466.183350][T12483] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 466.443323][T12483] usb 4-1: Using ep0 maxpacket: 8 [ 466.565465][T12483] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 466.574408][T12483] usb 4-1: config 0 has no interface number 0 [ 466.580599][T12483] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 466.592968][T12483] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 466.604919][T12483] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 466.616782][T12483] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 466.628147][T12483] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 466.642233][T12483] usb 4-1: config 0 interface 164 has no altsetting 0 [ 466.743454][T12483] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 466.752784][T12483] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 466.761150][T12483] usb 4-1: Product: syz [ 466.767529][T12483] usb 4-1: config 0 descriptor?? [ 466.954988][T12483] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 466.973305][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 466.997016][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 467.023541][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 467.043274][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 467.203035][T12483] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 467.223183][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 467.243076][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 467.263050][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 467.283069][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 467.303083][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 467.323046][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 467.343045][T12483] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 467.350401][T12483] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input37 [ 467.473328][ C1] net_ratelimit: 20 callbacks suppressed [ 467.473350][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 467.485483][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:07:39 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ddbfe908f8060400010000ed00010902240001000000000904a4e92319b875000905850b000d0000000905010341000000005b7481db4894cd501e42ffc9c7e69f4eacc71f2d60087793bb9db2c4c9e1830101e114d5c8956f42cf4d7c92f71ff0fb85abd1fd06671269ec4b3a4830a47e74aef28fbdde383db227b6f1a02e84847cfc0a3be4f07648913d73ae7e156c21cf44e1fda4d436b133991fecd3023bf386cb21ed85b695b2f579912e5eea4b2db0ee3bc2e645dcdcb82cb7732fce272a39e6922ffffc8243a06685e47356542838ec20f8d4ee9bd76a4c1477b44775dc4c2908b4f3e21de4c986d961d6bf574f81c2c7c0c559385a275f54336d317609e4ea205b5b6bb70c1a68509ee851572af4b5bb72964b121cebdc48519cc5c9c100d5bb10c71a1c2de1116a841eadc3990bfa24f1663c634615e4a64eb004a73e70d5e7349cdacb79a96654172ce8de333e4be6b3c51e4bb8688576653a6bf4025cb78bd0eaaf4e02d6cf382bbf4b1e6c413b06dae03fca569d136c2df9232707a8a8a2d6e7d9939b2e0a1d729d0133cde8cab589a8070eb40246a04ddd035561c975f960cc4c7be68fbfda551de187ba7ed9d55a5f2b95c0226b823f92f80fc0b414b3400b8b2874d47b680aec612798134a28e45738e682114de8c3b164de0f5ca83df813c7c35cba412fb85aefbae132dabca0916e246adc563692e41659faea685d8b59c21bfa9ec9a5b7a6fd87cad2966ec2af3330be"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0x4f, &(0x7f0000000180)=""/79) 04:07:39 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000400)={0xff, 0x5, 0x7, 0x2}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) fcntl$setpipe(r0, 0x407, 0xfffffffffffeffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) truncate(&(0x7f00000002c0)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chdir(&(0x7f0000000300)='./file0\x00') pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f0000000200)='./file0\x00') poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') r7 = dup(r5) r8 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r8, 0x0, 0xc8, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xca59b7928f956a54, r8, 0x2000) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000340)="5500000018007f5f00fe01b2a4a280930206000100000001020b000039000900350028000600000019001240020000000022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 04:07:39 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:07:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="66b841008ee80f35c421fe6fcfd39b96000000420f35450f0666b897000f00d866460f38814c64008f2978d6a2166b3b5565400f01cb", 0x36}], 0x1, 0x0, 0x0, 0xffffffffffffff71) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:07:39 executing program 1: r0 = creat(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100), 0x1c) dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x0, 0x7f}, @sack_perm], 0x2000000000000014) 04:07:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010207031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0) [ 468.071512][T12270] usb 4-1: USB disconnect, device number 32 [ 468.103444][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 468.109777][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 468.134156][T15047] x86/PAT: syz-executor.4:15047 map pfn RAM range req write-combining for [mem 0x1d3956000-0x1d3956fff], got write-back [ 468.183350][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 468.189614][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:07:39 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 04:07:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000180)='/dev/loop-control\x00'], &(0x7f0000000340)=[&(0x7f0000000300)='selinux6\xc5GPL^\x00'], 0x100) lsetxattr$security_smack_entry(&(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)='HL\x00', 0x3, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x155ab1269a8af398}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 468.263566][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 468.272330][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:07:39 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:07:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 04:07:39 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 468.583534][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 468.589930][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:07:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7544, 0x2, 0x1, 0xab1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4c1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8e2, 0x3, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000004c0), 0x3}, 0x82c6b155ac0f06a2, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xa, r2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='cpuset.effective_mems\x00o\x90\x99\x05\x05\x98\xd4t\xbf\x02\xfd\x89z\x1b\xba\x9a\xc1\x9b/\xeb\x96-\x87\x98\x89eo\xd6=\xe5Z\xc6\xe9\x83G\xdc\xc9v>\xcd\xe1\x1ca\xe5f\xd4Q\xe7\x84w3\xfdh\x05\x06\xc3\xe7\xcd\v\xe9\'\xc7-+\xb8\xa4\xac\xe0\x17\xf3\x15\xe0\xfb\x8e#\x1b|\xde\x0f\x94\x1c\x18\x15^\xb0\n\xf0\x04\xbe\xbb\x8c\xd6!\xe8_\xcaK5N<\xe7\xf4\x1dQ\x0e_\xb9\xa5\x01\x8c\x99\x010\x13\xfd\b\x01\xb9v\xca\x87\xf0\xc4*\x06P\xd4\"\xdf\x81\xfa\x83i^\xe3\x8b\xf5\xd4+5h\xcbv\x00 \t\x85\xeb\tf\xfc\x81#\xefr(\x8dX\x962N/\x93', 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000006c0)=@pppoe={0x18, 0x0, {0x2, @random="1250c8010805", 'batadv0\x00'}}, 0x80, 0x0}, 0x5000040) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'tunl0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='rdma.\x1b\x1f\xe5)\xd4\x19\xa1burrent\x00\x96PO\xb6k\xbb\xe7\xbb\xcf\x0e\xdd\xf9\xa5\x9c\xcd !\x0fG\xfe\x8f\xed\x8fx\xb7r\xfa\x8fl{q\x90\xb7\xe3\x1d\x89a\x82{\f\xe8@C:Zli_\x8dv\x15\xa4\xb4\xc6)\xd5\xe5\xfc\x88\x9e\xee\xbf\x14 \x97l\xc7\xb0\x0f2\xd0\x02t\xe9\x00\x01\x00\x00\x00\x00\x00\x00\xb5\xaf\x18\x940e\xd70[i\xbf%7<\xabs}\x00\x00\x00\x00+\x16\xdd\x95\xd1o\xce\xfa\'\rIW5\x01gs.:x\x01\x86t\x9f\a\xbd\x10N\x83\x81C\x05\xe7\xe91\x1f\xd6\xcb\xe0\x14)\xe0\xca\xb8\xaehR\xea\xb3xuH7_\xdc\x1c{(YZo\x1b\xa4\xd0', 0x2761, 0x0) write$cgroup_type(r4, &(0x7f0000000440)='threaded\x00', 0x38b) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x200000, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x2ff}, 0x0, 0xffffffffffffffff, r5, 0x0) socketpair(0x15, 0x3, 0x1, &(0x7f0000000140)) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xccd, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getpid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r6, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x0, 0x989680}}], 0x30) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x81, 0x0) write$sndseq(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socket$kcm(0x2b, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') [ 468.663143][T12270] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 468.908203][T12270] usb 4-1: Using ep0 maxpacket: 8 [ 469.033169][T12270] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 469.043875][T12270] usb 4-1: config 0 has no interface number 0 [ 469.050100][T12270] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 469.061306][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 469.072678][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 469.084245][T12270] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 469.095478][T12270] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 469.109137][T12270] usb 4-1: config 0 interface 164 has no altsetting 0 [ 469.193408][T12270] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 469.202773][T12270] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 469.211225][T12270] usb 4-1: Product: syz [ 469.216920][T12270] usb 4-1: config 0 descriptor?? [ 469.373050][T12270] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 469.393171][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 469.413034][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 469.433041][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 469.453062][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 469.473209][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 469.633057][T12270] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 469.653009][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 469.673080][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 469.693246][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 469.713224][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 469.733163][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 469.753079][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 469.773044][T12270] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 469.780783][T12270] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input38 04:07:41 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) munlockall() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0x4f, &(0x7f0000000180)=""/79) 04:07:41 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 04:07:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000b060501ff0080fffdffff2e0a0005610c000100060000007d0a00010c0002"], 0x23}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 04:07:41 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:07:41 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xcc, 0xa0, 0xed, 0x8, 0x424, 0x7500, 0x8212, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x2, 0xf2, 0x23, 0x6b, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x8a, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0xac, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x94, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffff89}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000004c0)={0x0, 0x0, 0x2, "72d4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000380)={0x0, 0x0, 0x1, "c6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000005200), 0x0, 0x0, 0x0, 0x0, 0x0}) 04:07:41 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000400)={0xff, 0x5, 0x7, 0x2}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r3, 0x2000) fcntl$setpipe(r0, 0x407, 0xfffffffffffeffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) truncate(&(0x7f00000002c0)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chdir(&(0x7f0000000300)='./file0\x00') pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f0000000200)='./file0\x00') poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') dup(r5) r7 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r7, 0x0, 0xc8, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xca59b7928f956a54, r7, 0x2000) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000340)="5500000018007f5f00fe01b2a4a280930206000100000001020b000039000900350028000600000019001240020000000022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 470.499174][T12483] usb 4-1: USB disconnect, device number 33 [ 470.589384][T15100] x86/PAT: syz-executor.4:15100 map pfn RAM range req write-combining for [mem 0x3be64000-0x3be64fff], got write-back 04:07:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x3e24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$inet(r0, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) gettid() ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) lsetxattr$security_evm(&(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000540)=@v2={0x3, 0x0, 0xe, 0x3}, 0xa, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010207031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/250, 0x128b9372) 04:07:41 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 470.665722][T15110] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 04:07:41 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) 04:07:41 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 470.843774][T12319] usb 6-1: new high-speed USB device number 24 using dummy_hcd 04:07:42 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 471.045460][T12483] usb 4-1: new high-speed USB device number 34 using dummy_hcd 04:07:42 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0xde, 0xdb}, &(0x7f0000000040)=0x8) [ 471.093411][T12319] usb 6-1: Using ep0 maxpacket: 8 [ 471.223436][T12319] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 471.232051][T12319] usb 6-1: config 0 has no interface number 0 [ 471.238388][T12319] usb 6-1: config 0 interface 186 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 471.248568][T12319] usb 6-1: config 0 interface 186 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 471.258829][T12319] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=82.12 [ 471.268154][T12319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.281617][T12319] usb 6-1: config 0 descriptor?? [ 471.325409][T12319] smsc75xx v1.0.0 [ 471.333378][T12483] usb 4-1: Using ep0 maxpacket: 8 [ 471.456094][T12483] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 471.464905][T12483] usb 4-1: config 0 has no interface number 0 [ 471.471461][T12483] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 471.482991][T12483] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 471.494393][T12483] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 471.506043][T12483] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 471.517350][T12483] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 471.531055][T12483] usb 4-1: config 0 interface 164 has no altsetting 0 [ 471.643322][T12483] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice= 0.01 [ 471.653438][T12483] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 471.661704][T12483] usb 4-1: Product: syz [ 471.667509][T12483] usb 4-1: config 0 descriptor?? [ 471.763218][T12319] ===================================================== [ 471.770256][T12319] BUG: KMSAN: uninit-value in usbnet_probe+0x10ae/0x3960 [ 471.777363][T12319] CPU: 1 PID: 12319 Comm: kworker/1:1 Not tainted 5.3.0-rc7+ #0 [ 471.785138][T12319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.795618][T12319] Workqueue: usb_hub_wq hub_event [ 471.800909][T12319] Call Trace: [ 471.804332][T12319] dump_stack+0x191/0x1f0 [ 471.808670][T12319] kmsan_report+0x13a/0x2b0 [ 471.813198][T12319] __msan_warning+0x73/0xe0 [ 471.817784][T12319] smsc75xx_bind+0x541/0x12d0 [ 471.822453][T12319] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 471.828361][T12319] ? smsc75xx_write_wuff+0x9e0/0x9e0 [ 471.833750][T12319] usbnet_probe+0x10ae/0x3960 [ 471.838867][T12319] ? kmsan_internal_set_origin+0x6a/0xb0 [ 471.844543][T12319] ? usbnet_disconnect+0x660/0x660 [ 471.849762][T12319] usb_probe_interface+0xd19/0x1310 [ 471.855003][T12319] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 471.862395][T12319] ? usb_register_driver+0x7d0/0x7d0 [ 471.867691][T12319] really_probe+0x1373/0x1dc0 [ 471.872398][T12319] driver_probe_device+0x1ba/0x510 [ 471.877506][T12319] __device_attach_driver+0x5b8/0x790 [ 471.882892][T12319] bus_for_each_drv+0x28e/0x3b0 [ 471.887744][T12319] ? deferred_probe_work_func+0x400/0x400 [ 471.893458][T12319] __device_attach+0x489/0x750 [ 471.898214][T12319] device_initial_probe+0x4a/0x60 [ 471.906199][T12319] bus_probe_device+0x131/0x390 [ 471.911063][T12319] device_add+0x25b5/0x2df0 [ 471.915595][T12319] usb_set_configuration+0x309f/0x3710 [ 471.921096][T12319] generic_probe+0xe7/0x280 [ 471.925770][T12319] ? usb_choose_configuration+0xae0/0xae0 [ 471.931486][T12319] usb_probe_device+0x146/0x200 [ 471.936339][T12319] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 471.942227][T12319] ? usb_register_device_driver+0x470/0x470 [ 471.948114][T12319] really_probe+0x1373/0x1dc0 [ 471.952787][T12319] driver_probe_device+0x1ba/0x510 [ 471.958423][T12319] __device_attach_driver+0x5b8/0x790 [ 471.963811][T12319] bus_for_each_drv+0x28e/0x3b0 [ 471.968675][T12319] ? deferred_probe_work_func+0x400/0x400 [ 471.974395][T12319] __device_attach+0x489/0x750 [ 471.980546][T12319] device_initial_probe+0x4a/0x60 [ 471.985732][T12319] bus_probe_device+0x131/0x390 [ 471.990588][T12319] device_add+0x25b5/0x2df0 [ 471.995088][T12319] usb_new_device+0x23e5/0x2fb0 [ 471.999936][T12319] hub_event+0x581d/0x72f0 [ 472.004892][T12319] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 472.011030][T12319] ? led_work+0x720/0x720 [ 472.015438][T12319] ? led_work+0x720/0x720 [ 472.019765][T12319] process_one_work+0x1572/0x1ef0 [ 472.024905][T12319] worker_thread+0x111b/0x2460 [ 472.029687][T12319] kthread+0x4b5/0x4f0 [ 472.033850][T12319] ? process_one_work+0x1ef0/0x1ef0 [ 472.039038][T12319] ? kthread_blkcg+0xf0/0xf0 [ 472.043663][T12319] ret_from_fork+0x35/0x40 [ 472.048088][T12319] [ 472.051439][T12319] Local variable description: ----buf.i93@smsc75xx_bind [ 472.061322][T12319] Variable was created at: [ 472.065748][T12319] smsc75xx_bind+0x44c/0x12d0 [ 472.070431][T12319] usbnet_probe+0x10ae/0x3960 [ 472.075090][T12319] ===================================================== [ 472.082014][T12319] Disabling lock debugging due to kernel taint [ 472.088437][T12319] Kernel panic - not syncing: panic_on_warn set ... [ 472.095017][T12319] CPU: 1 PID: 12319 Comm: kworker/1:1 Tainted: G B 5.3.0-rc7+ #0 [ 472.104140][T12319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.114913][T12319] Workqueue: usb_hub_wq hub_event [ 472.119923][T12319] Call Trace: [ 472.123220][T12319] dump_stack+0x191/0x1f0 [ 472.127575][T12319] panic+0x3c9/0xc1e [ 472.131535][T12319] kmsan_report+0x2a2/0x2b0 [ 472.136057][T12319] __msan_warning+0x73/0xe0 [ 472.140604][T12319] smsc75xx_bind+0x541/0x12d0 [ 472.145291][T12319] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 472.151180][T12319] ? smsc75xx_write_wuff+0x9e0/0x9e0 [ 472.156669][T12319] usbnet_probe+0x10ae/0x3960 [ 472.161396][T12319] ? kmsan_internal_set_origin+0x6a/0xb0 [ 472.167123][T12319] ? usbnet_disconnect+0x660/0x660 [ 472.172414][T12319] usb_probe_interface+0xd19/0x1310 [ 472.177634][T12319] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 472.183537][T12319] ? usb_register_driver+0x7d0/0x7d0 [ 472.189914][T12319] really_probe+0x1373/0x1dc0 [ 472.194696][T12319] driver_probe_device+0x1ba/0x510 [ 472.200163][T12319] __device_attach_driver+0x5b8/0x790 [ 472.205627][T12319] bus_for_each_drv+0x28e/0x3b0 [ 472.210500][T12319] ? deferred_probe_work_func+0x400/0x400 [ 472.216398][T12319] __device_attach+0x489/0x750 [ 472.221171][T12319] device_initial_probe+0x4a/0x60 [ 472.226209][T12319] bus_probe_device+0x131/0x390 [ 472.231073][T12319] device_add+0x25b5/0x2df0 [ 472.235636][T12319] usb_set_configuration+0x309f/0x3710 [ 472.241123][T12319] generic_probe+0xe7/0x280 [ 472.245636][T12319] ? usb_choose_configuration+0xae0/0xae0 [ 472.251359][T12319] usb_probe_device+0x146/0x200 [ 472.256210][T12319] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 472.262156][T12319] ? usb_register_device_driver+0x470/0x470 [ 472.268163][T12319] really_probe+0x1373/0x1dc0 [ 472.273361][T12319] driver_probe_device+0x1ba/0x510 [ 472.278485][T12319] __device_attach_driver+0x5b8/0x790 [ 472.284313][T12319] bus_for_each_drv+0x28e/0x3b0 [ 472.289185][T12319] ? deferred_probe_work_func+0x400/0x400 [ 472.294940][T12319] __device_attach+0x489/0x750 [ 472.299807][T12319] device_initial_probe+0x4a/0x60 [ 472.305000][T12319] bus_probe_device+0x131/0x390 [ 472.309858][T12319] device_add+0x25b5/0x2df0 [ 472.314365][T12319] usb_new_device+0x23e5/0x2fb0 [ 472.319219][T12319] hub_event+0x581d/0x72f0 [ 472.323689][T12319] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 472.329603][T12319] ? led_work+0x720/0x720 [ 472.333930][T12319] ? led_work+0x720/0x720 [ 472.338248][T12319] process_one_work+0x1572/0x1ef0 [ 472.343302][T12319] worker_thread+0x111b/0x2460 [ 472.348081][T12319] kthread+0x4b5/0x4f0 [ 472.352172][T12319] ? process_one_work+0x1ef0/0x1ef0 [ 472.357499][T12319] ? kthread_blkcg+0xf0/0xf0 [ 472.362088][T12319] ret_from_fork+0x35/0x40 [ 472.367912][T12319] Kernel Offset: disabled [ 472.372252][T12319] Rebooting in 86400 seconds..