0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x4, 0x0, 0x4) 16:02:08 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:08 executing program 1: prctl$PR_SET_MM(0xd, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:02:08 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:08 executing program 1: r0 = socket(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf) 16:02:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="60e88e6e1f978b8d887609c13117b154278beb816ca3c9ed1a6d454951365b518c46ee84b70ba0c6b8b1f4fd99757377dff7afcd3136e972b66769bd73803d3e47b7a36cd6fb02a7b9db93a5307dbcfffc2d51d7138cc295ba8d8afe623d79a39225d19cdd9578a36c71753c76a342b4c593ae38aaa3", 0x76}, {&(0x7f00000001c0)="27217af087a9264954dd160362fda4b482ccaa544344e2d7e3f46f8d9ff9cf315a2be53344cf5994fb243ec93b2f3ed10b5d0826da36d469213654e88850bcf33266a0eb002dc9bca32062ab327b81c07df4e6e25e603f3f040e0ad0782f33bafcc56b96def4eef2a470d4b9d649955b1a1e2b4b71843a51c3dabde8cf85c3949c6f9d6656d09998efbab2d0608a736e4e9bde0fdace9e1c03983ceeda5887f470cc72c5941d5b767978e752483cf0e9f24594226657fa0d45bba820", 0xbc}, {&(0x7f0000000280)="4dee37271a02d51722843ee02a2527dd92ed8170e07f76c5bab4611c066be14f3c03494753488154694a48faf3eb81a6f4f2f5c5c099a6798e62e298383868645bc6fb3f315b1ba565d24c3e92539e04c78f835fbb9325c26092efc8d9f55a67649fe35cc6c4303b52950356ee852a7e29586f4e5fb2224121f06edac9c92461ad", 0x81}, {&(0x7f0000000340)="e6b4411b4a1968fff27f6fdf41a50d3495146fc8efe1720cc5249290149b63fb866f3d8da7bf0cd49d08dc50a6729b2d9190afbca9a939bf4e260e190463786f72bb0ed084cd60", 0x47}, {&(0x7f00000003c0)="13bf8a78bd444070e072c581c60bb3511dbd9e1dc451718db62414dde520a6b8867a63e6d050a5b0aab76f58f8aed2d8db0941883992a15e8a7089ec78df43988e91fe2bb166368bed15160faa0e3f09c720baa198e6edf6d7ae482281b391f86ac545c47a5f059ca9e055ccb59dbdd99c14393c46fc1bea32bf7ce699a4d8fe211650c494b5a5d3fb9c159f7d757cc5546b304cf6dff9d16d7a04fec5c4db9d1342f84513da83c42c69a36d", 0xac}, {&(0x7f0000000480)="1ae40bb456d28bd855b467f28d4b6f426c91d32331e9eb296806aef95113a2f6bb2b06631ffebb3e3bb91ccdf7756ec3c94613e045b73eca5115719c2f997497d70eabd258cf7260ea43b7cee803fa7e65e025616b9f4aa98f78f1ba224849f6a3a046262a63bd71092d8392282cf98634129ab1850023b1b0ccba321eae5d50da738340ce7cae4593a24f274411cef86833f5286dd3aa17dcb04d4b46d44764072d2b009c910737d023dccfc9df0b99", 0xb0}, {&(0x7f0000000a40)="bc99b172b58c12da4785115b0c19ecdb92b88a0f7c601222583c1ffddaaec38e59ce5fad5316f8777a2407e01f5a4c0f4d78df978abcf67fdbf5caa39d595842eda12d7656bf8b21db200530a62bd9178c3f985c5cd82e77b29e600364570ed70079166b3151e316498bc583d8a7c857ce63624407ceced8fb38e36640fb83bb89c3db91e1019b4b0b96d16ac92a2ee6f73d0c7c6f06a4ab74f21d1f9e1501661a20b78195a20c3425a8b2cc1fdf13d597aa52548cc4d9915ab915c7b8d5e545545ac0782c39f90ef59fed508c1748adfeac0b70613f588cc706bbb73aa180e51e6e600d5e023d4b88e79338dc116c976e98df8eb8e7607ead0becbcf478c6b7a3bde1d2781742e95e96d4925db670153480ea22006bb127b82da5b814939350c162092fbf2718827a51ebf2d5b6b704169360000cde878163f3034a79aeeb4a3bfedf152278d20c8e86040aac657a13e386871a6c2d6dd4445dd3972911f11fdc07", 0x162}], 0x7}}], 0x1, 0x0) 16:02:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 16:02:08 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:09 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 719.754298][T26602] ucma_write: process 1709 (syz-executor.0) changed security contexts after opening file descriptor, this is not allowed. [ 719.928602][ T9813] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 720.228748][ T9813] usb 4-1: Using ep0 maxpacket: 8 [ 720.368875][ T9813] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 720.377327][ T9813] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 720.388720][ T9813] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 720.399877][ T9813] usb 4-1: config 5 has no interface number 0 [ 720.406112][ T9813] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 720.419156][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 720.430836][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 720.443591][ T9813] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 720.457045][ T9813] usb 4-1: config 5 interface 228 has no altsetting 0 [ 720.559090][ T9813] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 720.568755][ T9813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 720.576874][ T9813] usb 4-1: SerialNumber: syz [ 720.673127][T26586] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 720.689498][T26586] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 720.731100][ T9813] hub 4-1:5.228: bad descriptor, ignoring hub [ 720.737469][ T9813] hub: probe of 4-1:5.228 failed with error -5 [ 721.001834][ T9813] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 725.597637][ T9813] usb 4-1: USB disconnect, device number 24 [ 725.606975][ T9813] usblp0: removed 16:02:15 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 16:02:15 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x68000000, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000002140)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 16:02:15 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:15 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x511301) 16:02:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0}}], 0x1, 0x0) 16:02:15 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) getsockname$packet(r2, &(0x7f0000006580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000065c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000006680)={'ip6_vti0\x00', &(0x7f0000006600)={'syztnl1\x00', r3, 0x29, 0x3, 0xa6, 0x63a9, 0x2b, @empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000, 0x7, 0x20, 0x2d64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r4, 0x4, 0x3f, 0x5, 0x4, 0x24, @empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x700, 0x80000, 0x8813}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', r5, 0x2f, 0x52, 0x6, 0x3f, 0x8, @dev={0xfe, 0x80, [], 0x2d}, @dev={0xfe, 0x80, [], 0x20}, 0x7, 0x40, 0x6, 0x7b4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', r1, 0x29, 0x7f, 0x80, 0x5, 0x40, @private2, @private2={0xfc, 0x2, [], 0x3}, 0x8000, 0x700, 0xfffffff8, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'sit0\x00', r6, 0x2f, 0xd5, 0x0, 0x5, 0xc, @private0, @rand_addr=' \x01\x00', 0x1, 0x40, 0x5, 0x5}}) 16:02:15 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:15 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000400)={&(0x7f0000000140), 0x20000154, &(0x7f00000003c0)={&(0x7f0000000300)="40b243e54bc5f2279b8ac9a99d91007fa69aa9f39fa63880315b9d54471ee1d0805bf1bd0b00b05a00b8f0f45ef18a9c0b94ffbf5abec0c91eef402c0aa64398c676af5850855cbb7791949851123d0a08292198c3ef1fc1bc27a29e73edf86f15ce54d7f1a44c2806ab583390a26f2766", 0x71}}, 0x0) 16:02:15 executing program 0: r0 = socket(0x29, 0x2, 0x0) recvmmsg(r0, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:02:15 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:15 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 726.719172][ T9813] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 726.958783][ T9813] usb 4-1: Using ep0 maxpacket: 8 [ 727.128715][ T9813] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 727.140934][ T9813] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 727.152308][ T9813] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 727.162043][ T9813] usb 4-1: config 5 has no interface number 0 [ 727.169211][ T9813] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 727.180725][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 727.191891][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 727.204340][ T9813] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 727.233167][ T9813] usb 4-1: config 5 interface 228 has no altsetting 0 [ 727.356766][ T9813] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 727.384359][ T9813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 727.393980][ T9813] usb 4-1: SerialNumber: syz [ 727.486508][T26652] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 727.498242][T26652] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 727.529888][ T9813] hub 4-1:5.228: bad descriptor, ignoring hub [ 727.536074][ T9813] hub: probe of 4-1:5.228 failed with error -5 [ 727.780403][ T9813] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 25 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 732.415817][ T8] usb 4-1: USB disconnect, device number 25 [ 732.472590][ T8] usblp0: removed 16:02:22 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:02:22 executing program 1: getitimer(0xf61b133b1a5fa00a, &(0x7f00000010c0)) 16:02:22 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:22 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x53, 0x0}) 16:02:22 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:22 executing program 0: memfd_create(&(0x7f0000000080)='l2tp\x00', 0x0) 16:02:22 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000004c0)) 16:02:22 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf, 0xffffffffffffffff) 16:02:22 executing program 2: syz_emit_ethernet(0x5a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) 16:02:22 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:22 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) [ 733.328770][ T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 733.598643][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 733.788711][ T8] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 733.797145][ T8] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 733.808580][ T8] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 733.817766][ T8] usb 4-1: config 5 has no interface number 0 [ 733.824589][ T8] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 733.836269][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 733.846793][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 733.860867][ T8] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 733.875022][ T8] usb 4-1: config 5 interface 228 has no altsetting 0 [ 733.978771][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 733.988007][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 733.998561][ T8] usb 4-1: SerialNumber: syz [ 734.087574][T26719] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 734.108201][T26719] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 734.140431][ T8] hub 4-1:5.228: bad descriptor, ignoring hub [ 734.146635][ T8] hub: probe of 4-1:5.228 failed with error -5 [ 734.386821][ T8] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 734.635193][T26762] udc-core: couldn't find an available UDC or it's busy [ 734.642437][T26762] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 734.742386][ T8] usb 4-1: USB disconnect, device number 26 [ 734.758292][ T8] usblp0: removed 16:02:24 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000000)='rxrpc_s\x00', 0x0, 0xfffffffffffffff9) 16:02:24 executing program 1: bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 16:02:24 executing program 2: prctl$PR_SET_SECCOMP(0x29, 0x0, &(0x7f0000000040)={0x0, 0x0}) 16:02:24 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:02:24 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:02:24 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:24 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:24 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:02:24 executing program 1: prctl$PR_SET_MM(0x26, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:02:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x0) 16:02:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x21, 0x0) 16:02:25 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:25 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:25 executing program 0: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 16:02:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) 16:02:25 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 735.936293][ T9789] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 736.208671][ T9789] usb 4-1: Using ep0 maxpacket: 8 [ 736.369246][ T9789] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 736.377829][ T9789] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 736.400683][ T9789] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 736.443713][ T9789] usb 4-1: config 5 has no interface number 0 [ 736.450086][ T9789] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 736.471937][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 736.486236][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 736.534953][ T9789] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 736.551537][ T9789] usb 4-1: config 5 interface 228 has no altsetting 0 [ 736.654440][ T9789] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 736.663902][ T9789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 736.672236][ T9789] usb 4-1: SerialNumber: syz [ 736.747055][T26786] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 736.794234][T26786] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 736.900179][ T9789] hub 4-1:5.228: bad descriptor, ignoring hub [ 736.906374][ T9789] hub: probe of 4-1:5.228 failed with error -5 [ 737.132213][ T9789] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 27 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 737.385057][T26835] udc-core: couldn't find an available UDC or it's busy [ 737.392394][T26835] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 737.483936][ T9789] usb 4-1: USB disconnect, device number 27 [ 737.511111][ T9789] usblp0: removed 16:02:27 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:02:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8916, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:02:27 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x8001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 16:02:27 executing program 0: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) 16:02:27 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback}}) 16:02:27 executing program 1: waitid(0x1, 0x0, &(0x7f00000020c0), 0x8, 0x0) 16:02:27 executing program 0: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 16:02:27 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:27 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:27 executing program 2: keyctl$search(0xa, 0x0, &(0x7f0000000100)='.dead\x00', 0x0, 0xfffffffffffffffd) [ 738.505813][T26871] ptrace attach of "/root/syz-executor.5"[26870] was attempted by "/root/syz-executor.5"[26871] [ 738.688734][ T9595] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 738.998670][ T9595] usb 4-1: Using ep0 maxpacket: 8 [ 739.128814][ T9595] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 739.137243][ T9595] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 739.159855][ T9595] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 739.169161][ T9595] usb 4-1: config 5 has no interface number 0 [ 739.175806][ T9595] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 739.189251][ T9595] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 739.199820][ T9595] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 739.210318][ T9595] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 739.223771][ T9595] usb 4-1: config 5 interface 228 has no altsetting 0 [ 739.328707][ T9595] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 739.337929][ T9595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 739.346327][ T9595] usb 4-1: SerialNumber: syz [ 739.419665][T26859] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 739.442342][T26859] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 739.469766][ T9595] hub 4-1:5.228: bad descriptor, ignoring hub [ 739.476085][ T9595] hub: probe of 4-1:5.228 failed with error -5 [ 739.765023][ T9595] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 740.027589][T26896] udc-core: couldn't find an available UDC or it's busy [ 740.034896][T26896] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 740.148215][ T4860] usb 4-1: USB disconnect, device number 28 [ 740.162514][ T4860] usblp0: removed 16:02:30 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:02:30 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x501, 0x0, 0x0, {0x2, 0x80}, [@FRA_DST={0x8, 0x1, @private}]}, 0x24}}, 0x0) 16:02:30 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x87000, 0x0) 16:02:30 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:30 executing program 2: r0 = socket(0x2, 0x803, 0x4) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={0x0}}, 0xf0ff7f) 16:02:30 executing program 0: syz_mount_image$fuse(&(0x7f0000000100)='fuse\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f00000021c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 16:02:30 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:30 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:30 executing program 2: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101}, @tipc=@name, @ethernet={0x0, @multicast}, 0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth1_to_hsr\x00'}) [ 740.813940][T26919] ptrace attach of "/root/syz-executor.5"[26916] was attempted by "/root/syz-executor.5"[26919] 16:02:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000200)={&(0x7f0000000040), 0x3, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET], @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG], @NL80211_ATTR_DURATION={0x8}]}, 0xd8}}, 0x0) 16:02:30 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000400)={&(0x7f0000000140), 0x14, &(0x7f00000003c0)={&(0x7f0000000300)="40b243e54bc5f2279b8ac9a99d91007fa69aa9f39fa63880315b9d54471ee1d0805bf1bd0b00b05a00b8f0f45ef18a9c0b94ffbf5abec0c91eef402c0aa64398c676af5850855cbb7791949851123d0a08292198c3ef1fc1bc27a29e73edf86f15ce54d7f1a44c2806ab583390a26f2766", 0x71}}, 0x0) [ 741.208819][T26937] ptrace attach of "/root/syz-executor.5"[26932] was attempted by "/root/syz-executor.5"[26937] [ 741.368698][ T9595] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 741.648268][ T9595] usb 4-1: Using ep0 maxpacket: 8 [ 741.788644][ T9595] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 741.797240][ T9595] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 741.821206][ T9595] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 741.830751][ T9595] usb 4-1: config 5 has no interface number 0 [ 741.836883][ T9595] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 741.854141][ T9595] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 741.864506][ T9595] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 741.874971][ T9595] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 741.888375][ T9595] usb 4-1: config 5 interface 228 has no altsetting 0 [ 741.988707][ T9595] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 741.999977][ T9595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 742.008000][ T9595] usb 4-1: SerialNumber: syz [ 742.106622][T26921] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 742.126581][T26921] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 742.149790][ T9595] hub 4-1:5.228: bad descriptor, ignoring hub [ 742.157324][ T9595] hub: probe of 4-1:5.228 failed with error -5 [ 742.402268][ T9595] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 742.450229][ T9595] usb 4-1: USB disconnect, device number 29 [ 742.471236][ T9595] usblp0: removed [ 742.988581][ T9595] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 743.228700][ T9595] usb 4-1: Using ep0 maxpacket: 8 [ 743.350231][ T9595] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 743.358994][ T9595] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 743.367863][ T9595] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 743.377428][ T9595] usb 4-1: config 5 has no interface number 0 [ 743.385714][ T9595] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 743.397834][ T9595] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 743.408984][ T9595] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 743.419990][ T9595] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 743.434024][ T9595] usb 4-1: config 5 interface 228 has no altsetting 0 [ 743.518795][ T9595] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 743.531433][ T9595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 743.547168][ T9595] usb 4-1: SerialNumber: syz [ 743.633779][T26921] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 743.646260][T26921] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 743.669597][ T9595] hub 4-1:5.228: bad descriptor, ignoring hub [ 743.675814][ T9595] hub: probe of 4-1:5.228 failed with error -5 16:02:33 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:02:33 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x10143, 0x0, 0x0) 16:02:33 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8a, 0x8a, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @restrict, @typedef]}}, 0x0, 0xa6}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:33 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:33 executing program 0: add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 16:02:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="550000000000000002"]) [ 744.160433][ T9595] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 30 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 744.259847][ T9595] usb 4-1: USB disconnect, device number 30 [ 744.291359][ T9595] usblp0: removed 16:02:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "a63d"}, @NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x0) 16:02:33 executing program 0: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) 16:02:33 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:33 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 16:02:33 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8a, 0x8a, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @restrict, @typedef]}}, 0x0, 0xa6}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:34 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, 0x0, 0x196) [ 744.888516][ T9813] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 745.153877][ T9813] usb 4-1: Using ep0 maxpacket: 8 [ 745.328793][ T9813] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 745.337245][ T9813] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 745.373010][ T9813] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 745.382952][ T9813] usb 4-1: config 5 has no interface number 0 [ 745.395077][ T9813] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 745.410722][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 745.430860][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 745.449562][ T9813] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 745.471690][ T9813] usb 4-1: config 5 interface 228 has no altsetting 0 [ 745.588915][ T9813] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 745.598012][ T9813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 745.608570][ T9813] usb 4-1: SerialNumber: syz [ 745.677361][T26999] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 745.693591][T26999] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 745.721708][ T9813] hub 4-1:5.228: bad descriptor, ignoring hub [ 745.728100][ T9813] hub: probe of 4-1:5.228 failed with error -5 [ 745.973269][ T9813] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 31 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 746.030152][ T9813] usb 4-1: USB disconnect, device number 31 [ 746.039798][ T9813] usblp0: removed [ 746.638663][ T9813] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 746.898658][ T9813] usb 4-1: Using ep0 maxpacket: 8 [ 747.045894][ T3248] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.052441][ T3248] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.088708][ T9813] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 747.097125][ T9813] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 747.106543][ T9813] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 747.116327][ T9813] usb 4-1: config 5 has no interface number 0 [ 747.123146][ T9813] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 747.135202][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 747.146209][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 747.156632][ T9813] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 747.170539][ T9813] usb 4-1: config 5 interface 228 has no altsetting 0 [ 747.288624][ T9813] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 747.297722][ T9813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 747.307556][ T9813] usb 4-1: SerialNumber: syz 16:02:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:02:37 executing program 0: select(0x40, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)={0x9}, &(0x7f00000001c0)) 16:02:37 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4}, 0x40) 16:02:37 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8a, 0x8a, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @restrict, @typedef]}}, 0x0, 0xa6}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) [ 747.697788][ T9813] usb 4-1: can't set config #5, error -71 [ 747.727993][ T9813] usb 4-1: USB disconnect, device number 32 16:02:37 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto, @restrict, @typedef]}}, 0x0, 0xb2}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:37 executing program 1: prctl$PR_SET_SECCOMP(0x22, 0x0, &(0x7f0000000040)={0x0, 0x0}) 16:02:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x30}}, 0x0) 16:02:37 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:02:37 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r0, 0x0, 0x0) 16:02:37 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto, @restrict, @typedef]}}, 0x0, 0xb2}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 748.348860][ T9781] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 748.628654][ T9781] usb 4-1: Using ep0 maxpacket: 8 [ 748.843356][ T9781] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 748.853110][ T9781] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 748.863009][ T9781] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 748.872307][ T9781] usb 4-1: config 5 has no interface number 0 [ 748.878552][ T9781] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 748.889924][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 748.900299][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 748.911902][ T9781] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 748.925603][ T9781] usb 4-1: config 5 interface 228 has no altsetting 0 [ 749.008726][ T9781] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 749.019047][ T9781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 749.027202][ T9781] usb 4-1: SerialNumber: syz [ 749.105983][T27069] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 749.132324][T27069] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 749.159613][ T9781] hub 4-1:5.228: bad descriptor, ignoring hub [ 749.165817][ T9781] hub: probe of 4-1:5.228 failed with error -5 [ 749.395586][ T9781] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 33 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 749.458935][ T9781] usb 4-1: USB disconnect, device number 33 [ 749.473376][ T9781] usblp0: removed [ 749.998624][ T9781] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 750.238685][ T9781] usb 4-1: Using ep0 maxpacket: 8 [ 750.358648][ T9781] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 750.367044][ T9781] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 750.386159][ T9781] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 750.396309][ T9781] usb 4-1: config 5 has no interface number 0 [ 750.403596][ T9781] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 750.415994][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 750.427319][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 750.438748][ T9781] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 750.453551][ T9781] usb 4-1: config 5 interface 228 has no altsetting 0 [ 750.557895][ T9781] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 750.567274][ T9781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 750.576489][ T9781] usb 4-1: SerialNumber: syz [ 750.684142][T27069] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 750.707986][T27069] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 750.739981][ T9781] hub 4-1:5.228: bad descriptor, ignoring hub [ 750.746303][ T9781] hub: probe of 4-1:5.228 failed with error -5 16:02:40 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:02:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={0x3}) 16:02:40 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) 16:02:40 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '-'}}, 0x119) 16:02:40 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto, @restrict, @typedef]}}, 0x0, 0xb2}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:40 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:02:40 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 751.137753][ T9781] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 34 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 751.241967][ T9781] usb 4-1: USB disconnect, device number 34 [ 751.291320][ T9781] usblp0: removed 16:02:40 executing program 2: prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffc000/0x4000)=nil) 16:02:40 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:02:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000001800018008000500000000000c00c9"], 0x2c}}, 0x0) 16:02:40 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x7f) 16:02:40 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 752.058520][ T9595] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 752.258595][ T9595] usb 4-1: device descriptor read/64, error 18 [ 752.528553][ T9595] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 752.738585][ T9595] usb 4-1: device descriptor read/64, error 18 [ 752.859211][ T9595] usb usb4-port1: attempt power cycle [ 753.588701][ T9595] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 753.768633][ T9595] usb 4-1: device descriptor read/8, error -61 [ 754.038652][ T9595] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 754.208671][ T9595] usb 4-1: device descriptor read/8, error -61 [ 754.329606][ T9595] usb usb4-port1: unable to enumerate USB device 16:02:43 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:02:43 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:02:43 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000680)={&(0x7f0000000000)=@caif=@rfm={0x25, 0x0, "4efaff78ec6aafa5ec6b327958d58741"}, 0x80, 0x0}, 0x0) 16:02:43 executing program 2: pkey_mprotect(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff7000/0x3000)=nil) 16:02:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @loopback}, 0x80) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) 16:02:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000180)=0xffffffff, 0x4) 16:02:44 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 16:02:44 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x82, 0x82, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0x9e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:44 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:02:44 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$sock(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 16:02:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000018"], 0x2c}}, 0x0) [ 755.308725][ T4860] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 755.568620][ T4860] usb 4-1: device descriptor read/64, error 18 [ 755.838629][ T4860] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 756.048668][ T4860] usb 4-1: device descriptor read/64, error 18 [ 756.179142][ T4860] usb usb4-port1: attempt power cycle [ 756.888633][ T4860] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 757.058659][ T4860] usb 4-1: device descriptor read/8, error -61 [ 757.328755][ T4860] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 757.503493][ T4860] usb 4-1: device descriptor read/8, error -61 [ 757.648837][ T4860] usb usb4-port1: unable to enumerate USB device 16:02:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 16:02:47 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:02:47 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x82, 0x82, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0x9e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100), 0x4) 16:02:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000240)) 16:02:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) 16:02:47 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120) 16:02:47 executing program 0: sysfs$1(0x1, &(0x7f0000000040)='}\x00') 16:02:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="940000000000000000000000074000004434eb11ac1414aa00010000ac1414bb00000005ac1414aa0000000700000000ffffffff0000000000141407000004010144344c91ffffffff000000017f00000100030a010100000007ac7f000001000001000000000000007fff44187f708000000000007fffffffd9bdb9978844758ee833c4898e5efff70081000100000000000020000000001100000000000000000000000100000008000000000002000000b5"], 0xc8}}], 0x2, 0x0) 16:02:47 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x82, 0x82, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0x9e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:47 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:02:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}}, 0x0) [ 758.838542][ T9813] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 759.108604][ T9813] usb 4-1: device descriptor read/64, error 18 [ 759.408608][ T9813] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 759.621334][ T9813] usb 4-1: device descriptor read/64, error 18 [ 759.741084][ T9813] usb usb4-port1: attempt power cycle [ 760.458519][ T9813] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 760.654642][ T9813] usb 4-1: device descriptor read/8, error -61 [ 760.928560][ T9813] usb 4-1: new high-speed USB device number 46 using dummy_hcd 16:02:50 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:02:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140), 0x4) 16:02:50 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0xea}]}) 16:02:50 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xb2}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x890c, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:02:50 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) [ 761.399350][ T9813] usb 4-1: device descriptor read/8, error -71 16:02:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, 0x0, &(0x7f0000000140)) 16:02:50 executing program 1: prctl$PR_SET_MM(0x21, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:02:50 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x34}]}) 16:02:50 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xb2}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 761.529976][ T9813] usb usb4-port1: unable to enumerate USB device 16:02:51 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:02:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) [ 762.146749][ T9813] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 762.409179][ T9813] usb 4-1: Using ep0 maxpacket: 8 [ 762.548625][ T9813] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 762.560503][ T9813] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 762.573619][ T9813] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 762.584790][ T9813] usb 4-1: config 5 has no interface number 0 [ 762.594465][ T9813] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 762.607970][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 762.622110][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 762.633574][ T9813] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 762.647188][ T9813] usb 4-1: config 5 interface 228 has no altsetting 0 [ 762.728729][ T9813] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 762.743094][ T9813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 762.755290][ T9813] usb 4-1: SerialNumber: syz [ 762.825238][T27280] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 762.846827][T27280] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 762.880020][ T9813] hub 4-1:5.228: bad descriptor, ignoring hub [ 762.887623][ T9813] hub: probe of 4-1:5.228 failed with error -5 [ 763.120001][ T9813] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 47 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 763.836686][T27280] usb 4-1: reset high-speed USB device number 47 using dummy_hcd [ 764.103011][T27280] usb 4-1: Using ep0 maxpacket: 8 [ 764.251943][T27316] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 764.260435][T27316] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 764.483671][T27316] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 764.491612][T27316] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 764.568615][ C1] usblp0: nonzero read bulk status received: -71 [ 764.729096][ T9813] usb 4-1: USB disconnect, device number 47 [ 764.750966][ T9813] usblp0: removed 16:02:54 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:02:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a1, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:02:54 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x1000000}]}}, &(0x7f0000002140)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 16:02:54 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xb2}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:02:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8982, &(0x7f0000000140)={@mcast1}) 16:02:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:02:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000100)='L', 0x1}, {0x0}], 0x2, &(0x7f0000002640)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast2}}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002740)="fb", 0x1}, {&(0x7f0000002800)}], 0x2}}], 0x2, 0x0) 16:02:54 executing program 2: prctl$PR_SET_MM(0x24, 0x3, &(0x7f0000ffc000/0x4000)=nil) 16:02:54 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xb2}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:02:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2202, 0x0) [ 765.948722][ T9813] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 766.218600][ T9813] usb 4-1: Using ep0 maxpacket: 8 [ 766.418563][ T9813] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 766.427727][ T9813] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 766.448483][ T9813] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 766.457666][ T9813] usb 4-1: config 5 has no interface number 0 [ 766.484480][ T9813] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 766.510112][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 766.538503][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 766.558523][ T9813] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 766.588535][ T9813] usb 4-1: config 5 interface 228 has no altsetting 0 [ 766.677460][ T9813] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 766.698491][ T9813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 766.706722][ T9813] usb 4-1: SerialNumber: syz [ 766.808088][T27348] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 766.881412][T27348] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 766.949634][ T9813] hub 4-1:5.228: bad descriptor, ignoring hub [ 766.955829][ T9813] hub: probe of 4-1:5.228 failed with error -5 [ 767.217000][ T9813] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 48 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 767.878154][T27348] usb 4-1: reset high-speed USB device number 48 using dummy_hcd [ 768.159891][T27348] usb 4-1: Using ep0 maxpacket: 8 [ 768.323787][T27387] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 768.331691][T27387] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 768.564123][T27387] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 768.572906][T27387] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 768.638532][ C0] usblp0: nonzero read bulk status received: -71 [ 768.803656][ T9789] usb 4-1: USB disconnect, device number 48 [ 768.823618][ T9789] usblp0: removed 16:02:58 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:02:58 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xb2}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000100)='L', 0x1}, {0x0}], 0x2, &(0x7f0000002640)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast2}}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002740)="fb", 0x1}, {&(0x7f0000002800)}], 0x2}}], 0x2, 0x0) 16:02:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:02:58 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @local}, 0x20) 16:02:58 executing program 0: clock_getres(0x541a30d052397c07, 0x0) 16:02:58 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) 16:02:58 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x3f}]}) 16:02:58 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xb2}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:58 executing program 5: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:02:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000100)='L', 0x1}, {0x0}], 0x2, &(0x7f0000002640)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast2}}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002740)="fb", 0x1}, {&(0x7f0000002800)}], 0x2}}], 0x2, 0x0) 16:02:59 executing program 0: prctl$PR_SET_MM(0x59616d61, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 770.007717][ T9813] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 770.278533][ T9813] usb 4-1: Using ep0 maxpacket: 8 [ 770.428671][ T9813] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 770.437175][ T9813] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 770.446503][ T9813] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 770.456117][ T9813] usb 4-1: config 5 has no interface number 0 [ 770.462648][ T9813] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 770.474476][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 770.485680][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 770.498335][ T9813] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 770.511832][ T9813] usb 4-1: config 5 interface 228 has no altsetting 0 [ 770.598668][ T9813] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 770.608046][ T9813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 770.625609][ T9813] usb 4-1: SerialNumber: syz [ 770.707204][T27420] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 770.718826][T27420] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 770.760187][ T9813] hub 4-1:5.228: bad descriptor, ignoring hub [ 770.766494][ T9813] hub: probe of 4-1:5.228 failed with error -5 [ 770.998532][ T9813] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 49 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 771.646582][T27420] usb 4-1: reset high-speed USB device number 49 using dummy_hcd [ 771.908928][T27420] usb 4-1: Using ep0 maxpacket: 8 [ 772.051340][T27458] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 772.060148][T27458] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 772.283667][T27458] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 772.291688][T27458] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 772.358553][ C1] usblp0: nonzero read bulk status received: -71 [ 772.526273][ T8] usb 4-1: USB disconnect, device number 49 [ 772.534922][ T8] usblp0: removed 16:03:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:02 executing program 5: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:02 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) accept$netrom(0xffffffffffffffff, 0x0, 0x0) 16:03:02 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x79, 0x79, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0x96}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000100)='L', 0x1}, {0x0}], 0x2, &(0x7f0000002640)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast2}}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002740)="fb", 0x1}, {&(0x7f0000002800)}], 0x2}}], 0x2, 0x0) 16:03:02 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000140)='6', 0x1, 0x0, &(0x7f0000001140)={0x2, 0x0, @remote}, 0x10) 16:03:02 executing program 0: socket(0x3f, 0x0, 0x0) 16:03:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@mcast1, @remote, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 16:03:02 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x79, 0x79, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0x96}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:02 executing program 5: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:02 executing program 0: getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0x0) 16:03:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x119c) [ 773.538659][ T9778] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 773.788600][ T9778] usb 4-1: Using ep0 maxpacket: 8 [ 773.913949][ T9778] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 773.923552][ T9778] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 773.933096][ T9778] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 773.942448][ T9778] usb 4-1: config 5 has no interface number 0 [ 773.949092][ T9778] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 773.960936][ T9778] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 773.971737][ T9778] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 773.982550][ T9778] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 773.996382][ T9778] usb 4-1: config 5 interface 228 has no altsetting 0 [ 774.078659][ T9778] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 774.087977][ T9778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 774.096772][ T9778] usb 4-1: SerialNumber: syz [ 774.120394][T27492] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 774.127760][T27492] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 774.159731][ T9778] hub 4-1:5.228: bad descriptor, ignoring hub [ 774.165924][ T9778] hub: probe of 4-1:5.228 failed with error -5 [ 774.384751][ T9778] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 50 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 774.998914][T27492] usb 4-1: reset high-speed USB device number 50 using dummy_hcd [ 775.248862][T27492] usb 4-1: Using ep0 maxpacket: 8 [ 775.411360][T27529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 775.419012][T27529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 775.632803][T27529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 775.642080][T27529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 775.718514][ C0] usblp0: nonzero read bulk status received: -71 [ 775.872223][ T9778] usb 4-1: USB disconnect, device number 50 [ 775.896708][ T9778] usblp0: removed 16:03:05 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x79, 0x79, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0x96}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8931, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:03:05 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:05 executing program 0: socketpair(0x25, 0x5, 0x5, &(0x7f0000000040)) 16:03:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x67}, 0xffffffffffffff27}}, 0x0) 16:03:05 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:05 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 16:03:06 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8940, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:03:06 executing program 1: prctl$PR_SET_SECCOMP(0xf, 0x0, 0x0) 16:03:06 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:06 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 16:03:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8943, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:03:06 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0x0, @l2tp={0x2, 0x0, @private}, @hci, @tipc=@id={0x1e, 0x3, 0x0, {0x4e24}}}) 16:03:06 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2203, 0x0) [ 776.898603][ T4860] usb 4-1: new high-speed USB device number 51 using dummy_hcd 16:03:06 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 777.178619][ T4860] usb 4-1: Using ep0 maxpacket: 8 [ 777.309422][ T4860] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 777.328502][ T4860] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 777.337285][ T4860] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 777.358600][ T4860] usb 4-1: config 5 has no interface number 0 [ 777.365063][ T4860] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 777.403992][ T4860] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 777.432919][ T4860] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 777.462934][ T4860] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 777.488603][ T4860] usb 4-1: config 5 interface 228 has no altsetting 0 [ 777.599502][ T4860] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 777.609919][ T4860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 777.617945][ T4860] usb 4-1: SerialNumber: syz [ 777.650323][T27561] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 777.657807][T27561] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 777.679770][ T4860] hub 4-1:5.228: bad descriptor, ignoring hub [ 777.686692][ T4860] hub: probe of 4-1:5.228 failed with error -5 [ 777.914923][ T4860] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 51 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 778.529086][T27561] usb 4-1: reset high-speed USB device number 51 using dummy_hcd [ 778.768561][T27561] usb 4-1: Using ep0 maxpacket: 8 [ 778.921306][T27612] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 778.929379][T27612] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 779.150900][T27612] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 779.158247][T27612] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 779.218497][ C0] usblp0: nonzero read bulk status received: -71 [ 779.383208][ T9595] usb 4-1: USB disconnect, device number 51 [ 779.394284][ T9595] usblp0: removed 16:03:09 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:09 executing program 1: request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0xfffffffffffffff9) 16:03:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) 16:03:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1006}, 0x40) 16:03:09 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:09 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:09 executing program 1: r0 = socket(0x2, 0x803, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 16:03:09 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)) 16:03:09 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000002140)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 16:03:09 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:09 executing program 1: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 16:03:09 executing program 2: r0 = socket(0x2, 0x803, 0x4) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={0x0}, 0x1, 0x0, 0xffff0000}, 0x0) 16:03:09 executing program 0: request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0xfffffffffffffffd) 16:03:09 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:09 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 780.400232][ T9778] usb 4-1: new high-speed USB device number 52 using dummy_hcd 16:03:09 executing program 1: syz_mount_image$fuse(&(0x7f0000000140)='fuse\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id'}}) [ 780.660837][ T9778] usb 4-1: Using ep0 maxpacket: 8 [ 780.664080][T27676] fuse: Bad value for 'fd' [ 780.685254][T27676] fuse: Bad value for 'fd' [ 780.789355][ T9778] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 780.799136][ T9778] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 780.809469][ T9778] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 780.820881][ T9778] usb 4-1: config 5 has no interface number 0 [ 780.827148][ T9778] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 780.839321][ T9778] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 780.850493][ T9778] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 780.862863][ T9778] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 780.877826][ T9778] usb 4-1: config 5 interface 228 has no altsetting 0 [ 780.959446][ T9778] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 780.983196][ T9778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 781.016366][ T9778] usb 4-1: SerialNumber: syz [ 781.070167][T27644] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 781.077587][T27644] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 781.119662][ T9778] hub 4-1:5.228: bad descriptor, ignoring hub [ 781.135701][ T9778] hub: probe of 4-1:5.228 failed with error -5 [ 781.346194][ T9778] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 52 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 781.969153][T27644] usb 4-1: reset high-speed USB device number 52 using dummy_hcd [ 782.208507][T27644] usb 4-1: Using ep0 maxpacket: 8 [ 782.351338][T27694] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 782.359025][T27694] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 782.577480][T27694] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 782.585379][T27694] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 782.638500][ C1] usblp0: nonzero read bulk status received: -71 [ 782.803126][ T9789] usb 4-1: USB disconnect, device number 52 [ 782.815425][ T9789] usblp0: removed 16:03:12 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote, 0x40}, r1}}, 0x30) 16:03:12 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xd, &(0x7f0000000100)=0x6cfc8ff, 0x4) 16:03:12 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:12 executing program 1: r0 = fork() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f00000002c0)) 16:03:12 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:12 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) 16:03:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020000100000000000000000080"], 0x24}}, 0x0) 16:03:13 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 16:03:13 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 783.803614][T27749] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 783.828940][ T4860] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 784.128733][ T4860] usb 4-1: Using ep0 maxpacket: 8 [ 784.269467][ T4860] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 784.277897][ T4860] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 784.302889][ T4860] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 784.314851][ T4860] usb 4-1: config 5 has no interface number 0 [ 784.323350][ T4860] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 784.336167][ T4860] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 784.347513][ T4860] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 784.357997][ T4860] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 784.371876][ T4860] usb 4-1: config 5 interface 228 has no altsetting 0 [ 784.458681][ T4860] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 784.467779][ T4860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 784.476190][ T4860] usb 4-1: SerialNumber: syz [ 784.500285][T27730] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 784.507687][T27730] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 784.529892][ T4860] hub 4-1:5.228: bad descriptor, ignoring hub [ 784.536121][ T4860] hub: probe of 4-1:5.228 failed with error -5 [ 784.755573][ T4860] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 53 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 785.369432][T27730] usb 4-1: reset high-speed USB device number 53 using dummy_hcd [ 785.618538][T27730] usb 4-1: Using ep0 maxpacket: 8 [ 785.783019][T27777] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 785.790891][T27777] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 786.023465][T27777] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 786.031345][T27777] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 786.098481][ C1] usblp0: nonzero read bulk status received: -71 [ 786.262044][ T9813] usb 4-1: USB disconnect, device number 53 [ 786.276314][ T9813] usblp0: removed 16:03:16 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:16 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:16 executing program 1: syz_mount_image$fuse(&(0x7f0000000100)='fuse\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002340)='./file0\x00', &(0x7f0000002380)='fuse\x00', 0x1, &(0x7f00000023c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}, {@max_read={'max_read'}}]}}) 16:03:16 executing program 0: prctl$PR_SET_SECCOMP(0x23, 0x0, &(0x7f0000000040)={0x0, 0x0}) 16:03:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5}]}, 0x24}}, 0x0) 16:03:16 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 786.905949][T27803] fuse: Bad value for 'fd' 16:03:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x890b, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:03:16 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0x2, [@const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xa2}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:16 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:03:16 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x22e8, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "edc8a913"}, 0x0, 0x0, @planes=0x0}) 16:03:16 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000a00)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 16:03:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8981, 0x0) [ 787.259027][ T9781] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 787.508667][ T9781] usb 4-1: Using ep0 maxpacket: 8 [ 787.628649][ T9781] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 787.637087][ T9781] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 787.648320][ T9781] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 787.659059][ T9781] usb 4-1: config 5 has no interface number 0 [ 787.665194][ T9781] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 787.678963][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 787.690715][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 787.716455][ T9781] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 787.732165][ T9781] usb 4-1: config 5 interface 228 has no altsetting 0 [ 787.818657][ T9781] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 787.828330][ T9781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 787.838668][ T9781] usb 4-1: SerialNumber: syz [ 787.860298][T27809] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 787.867674][T27809] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 787.899583][ T9781] hub 4-1:5.228: bad descriptor, ignoring hub [ 787.906150][ T9781] hub: probe of 4-1:5.228 failed with error -5 [ 788.124443][ T9781] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 54 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 788.759267][T27809] usb 4-1: reset high-speed USB device number 54 using dummy_hcd [ 789.028555][T27809] usb 4-1: Using ep0 maxpacket: 8 [ 789.191413][T27846] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 789.201092][T27846] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 789.419373][T27846] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 789.426599][T27846] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 789.498491][ C1] usblp0: nonzero read bulk status received: -71 [ 789.652064][ T9813] usb 4-1: USB disconnect, device number 54 [ 789.688359][ T9813] usblp0: removed 16:03:19 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:19 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0x2, [@const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xa2}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:19 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:03:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) 16:03:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0xc0189436, &(0x7f0000000140)={@mcast1, 0x0, r1}) 16:03:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x5386, 0x0) 16:03:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8947, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:03:19 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:03:19 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0x2, [@const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xa2}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:19 executing program 2: prctl$PR_SET_MM(0x17, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:03:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000001) 16:03:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 790.678624][ T9789] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 790.948579][ T9789] usb 4-1: Using ep0 maxpacket: 8 [ 791.098850][ T9789] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 791.107250][ T9789] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 791.117973][ T9789] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 791.128014][ T9789] usb 4-1: config 5 has no interface number 0 [ 791.135234][ T9789] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 791.147726][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 791.159387][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 791.171060][ T9789] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 791.186443][ T9789] usb 4-1: config 5 interface 228 has no altsetting 0 [ 791.280023][ T9789] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 791.289418][ T9789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 791.297435][ T9789] usb 4-1: SerialNumber: syz [ 791.321600][T27879] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 791.337227][T27879] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 791.360034][ T9789] hub 4-1:5.228: bad descriptor, ignoring hub [ 791.366356][ T9789] hub: probe of 4-1:5.228 failed with error -5 [ 791.591487][ T9789] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 55 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 792.219277][T27879] usb 4-1: reset high-speed USB device number 55 using dummy_hcd [ 792.468632][T27879] usb 4-1: Using ep0 maxpacket: 8 [ 792.611430][T27916] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 792.618991][T27916] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 792.837603][T27916] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 792.846368][T27916] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 792.908477][ C1] usblp0: nonzero read bulk status received: -71 [ 793.072259][ T4860] usb 4-1: USB disconnect, device number 55 [ 793.092662][ T4860] usblp0: removed 16:03:22 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:22 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x890c, 0x0) 16:03:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000004940)) recvmmsg(r0, &(0x7f0000004840)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000680)=""/161, 0xa1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004a00)='nl80211\x00', r0) 16:03:22 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:03:22 executing program 0: r0 = fork() waitid(0x1, r0, 0x0, 0xd, &(0x7f0000000080)) 16:03:23 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:23 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:03:23 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) 16:03:23 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 16:03:23 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:23 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x24, @none={0x7}}, 0x14, &(0x7f00000003c0)={0x0}}, 0x0) [ 794.078819][ T20] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 794.338560][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 794.468588][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 794.480267][ T20] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 794.490088][ T20] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 794.499713][ T20] usb 4-1: config 5 has no interface number 0 [ 794.506345][ T20] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 794.518299][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 794.529092][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 794.540814][ T20] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 794.554464][ T20] usb 4-1: config 5 interface 228 has no altsetting 0 [ 794.639576][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 794.652273][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 794.663856][ T20] usb 4-1: SerialNumber: syz [ 794.690332][T27951] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 794.697776][T27951] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 794.739774][ T20] hub 4-1:5.228: bad descriptor, ignoring hub [ 794.745978][ T20] hub: probe of 4-1:5.228 failed with error -5 [ 794.950076][ T20] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 56 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 795.589261][T27951] usb 4-1: reset high-speed USB device number 56 using dummy_hcd [ 795.858693][T27951] usb 4-1: Using ep0 maxpacket: 8 [ 796.021382][T27990] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 796.029602][T27990] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 796.254440][T27990] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 796.262645][T27990] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 796.328485][ C0] usblp0: nonzero read bulk status received: -71 [ 796.493793][ T4860] usb 4-1: USB disconnect, device number 56 [ 796.511502][ T4860] usblp0: removed 16:03:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 16:03:26 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0xf) 16:03:26 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:26 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x10, 0x2, [@int]}}, &(0x7f0000002140)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 16:03:26 executing program 2: request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', 0x0) 16:03:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0)='NLBL_CIPSOv4\x00', r0) 16:03:26 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) 16:03:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000180)={0xa, 0x4}, 0xc) 16:03:26 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:26 executing program 0: sched_getattr(0x0, 0x0, 0x0, 0x0) 16:03:26 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) fanotify_mark(r0, 0x51, 0x1, 0xffffffffffffffff, 0x0) 16:03:26 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:26 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:27 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 797.529179][ T4860] usb 4-1: new high-speed USB device number 57 using dummy_hcd 16:03:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) [ 797.826715][ T4860] usb 4-1: Using ep0 maxpacket: 8 [ 797.968758][ T4860] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 797.968798][ T4860] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 797.968829][ T4860] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 797.998647][ T4860] usb 4-1: config 5 has no interface number 0 [ 798.005040][ T4860] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 798.019340][ T4860] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 798.031573][ T4860] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 798.048551][ T4860] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 798.074172][ T4860] usb 4-1: config 5 interface 228 has no altsetting 0 [ 798.169446][ T4860] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 798.178749][ T4860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 798.186751][ T4860] usb 4-1: SerialNumber: syz [ 798.210162][T28024] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 798.217618][T28024] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 798.269558][ T4860] hub 4-1:5.228: bad descriptor, ignoring hub [ 798.275759][ T4860] hub: probe of 4-1:5.228 failed with error -5 [ 798.505294][ T4860] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 57 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 799.121001][T28024] usb 4-1: reset high-speed USB device number 57 using dummy_hcd [ 799.378650][T28024] usb 4-1: Using ep0 maxpacket: 8 [ 799.521500][T28077] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 799.529247][T28077] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 799.753768][T28077] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 799.761681][T28077] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 799.828592][ C1] usblp0: nonzero read bulk status received: -71 [ 799.997683][ T9813] usb 4-1: USB disconnect, device number 57 [ 800.009479][ T9813] usblp0: removed 16:03:29 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:29 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:29 executing program 1: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x2bbd052e}, &(0x7f0000000140)={0x77359400}) 16:03:29 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:29 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea279bbe"}, 0x0, 0x0, @fd}) 16:03:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) bind(r0, 0x0, 0x0) 16:03:30 executing program 1: request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', 0x0) 16:03:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0xc0481273, 0x0) 16:03:30 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:30 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:30 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xe4ffffff, 0x0, 0x0, 0x2}}, &(0x7f0000002140)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 16:03:30 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 800.998607][ T9813] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 801.258522][ T9813] usb 4-1: Using ep0 maxpacket: 8 [ 801.388637][ T9813] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 801.398722][ T9813] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 801.407563][ T9813] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 801.417264][ T9813] usb 4-1: config 5 has no interface number 0 [ 801.424079][ T9813] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 801.435641][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 801.447145][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 801.457598][ T9813] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 801.471860][ T9813] usb 4-1: config 5 interface 228 has no altsetting 0 [ 801.578719][ T9813] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 801.588707][ T9813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 801.596824][ T9813] usb 4-1: SerialNumber: syz [ 801.630282][T28108] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 801.637619][T28108] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 801.656099][ T9813] hub 4-1:5.228: bad descriptor, ignoring hub [ 801.663147][ T9813] hub: probe of 4-1:5.228 failed with error -5 [ 801.885465][ T9813] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 58 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 802.509748][T28108] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 802.748511][T28108] usb 4-1: Using ep0 maxpacket: 8 [ 802.891653][T28149] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 802.899796][T28149] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 803.113956][T28149] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 803.121920][T28149] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 803.188451][ C0] usblp0: nonzero read bulk status received: -71 [ 803.356585][ T4860] usb 4-1: USB disconnect, device number 58 [ 803.367911][ T4860] usblp0: removed 16:03:33 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:33 executing program 0: socketpair(0x15, 0x5, 0x8001, &(0x7f0000000200)) 16:03:33 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:33 executing program 1: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000080)='m', 0x1}, {&(0x7f0000000340)='I', 0x1, 0xfffffffffffffeff}], 0x0, 0x0) 16:03:33 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x227c, 0x0) 16:03:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @sco={0x1f, @none}, @isdn, @sco}) 16:03:33 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x40}, @private}}}], 0x20}}], 0x1, 0x0) [ 804.011646][T28174] loop1: detected capacity change from 0 to 16382 16:03:33 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 804.121204][T28174] loop1: detected capacity change from 0 to 16382 16:03:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 16:03:33 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 804.448761][ T8] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 804.698521][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 804.818681][ T8] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 804.839033][ T8] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 804.863565][ T8] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 804.876127][ T8] usb 4-1: config 5 has no interface number 0 [ 804.884522][ T8] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 804.897602][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 804.916374][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 804.937340][ T8] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 804.960198][ T8] usb 4-1: config 5 interface 228 has no altsetting 0 [ 805.048813][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 805.058047][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 805.067538][ T8] usb 4-1: SerialNumber: syz [ 805.090200][T28186] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 805.098150][T28186] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 805.129658][ T8] hub 4-1:5.228: bad descriptor, ignoring hub [ 805.135923][ T8] hub: probe of 4-1:5.228 failed with error -5 [ 805.353319][ T8] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 59 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 805.979020][T28186] usb 4-1: reset high-speed USB device number 59 using dummy_hcd [ 806.218666][T28186] usb 4-1: Using ep0 maxpacket: 8 [ 806.381185][T28229] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 806.389805][T28229] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 806.605401][T28229] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 806.613157][T28229] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 806.678468][ C0] usblp0: nonzero read bulk status received: -71 [ 806.847662][ T20] usb 4-1: USB disconnect, device number 59 [ 806.857646][ T20] usblp0: removed 16:03:36 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) 16:03:36 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:36 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "02248c11"}}) 16:03:36 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private2={0xfc, 0x2, [], 0x1}}}) 16:03:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8983, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:03:36 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:36 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x2a, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000002140)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 16:03:36 executing program 0: socket(0x2, 0x803, 0x4) 16:03:37 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 807.848777][ T8] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 808.088564][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 808.209412][ T8] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 808.217822][ T8] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 808.252853][ T8] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 808.267332][ T8] usb 4-1: config 5 has no interface number 0 [ 808.273674][ T8] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 808.289810][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 808.304906][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 808.317927][ T8] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 808.336421][ T8] usb 4-1: config 5 interface 228 has no altsetting 0 [ 808.419109][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 808.433566][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 808.441737][ T8] usb 4-1: SerialNumber: syz [ 808.470411][T28261] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 808.477773][T28261] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 808.485921][ T3248] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.493241][ T3248] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.509777][ T8] hub 4-1:5.228: bad descriptor, ignoring hub [ 808.516004][ T8] hub: probe of 4-1:5.228 failed with error -5 [ 808.732317][ T8] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 60 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 809.359654][T28261] usb 4-1: reset high-speed USB device number 60 using dummy_hcd [ 809.608714][T28261] usb 4-1: Using ep0 maxpacket: 8 [ 809.761401][T28298] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 809.769493][T28298] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 809.997014][T28298] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 810.005232][T28298] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 810.078568][ C1] usblp0: nonzero read bulk status received: -71 [ 810.232235][ T8] usb 4-1: USB disconnect, device number 60 [ 810.241468][ T8] usblp0: removed 16:03:40 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:40 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:40 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8924, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:03:40 executing program 2: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10004e2, &(0x7f0000004640)=ANY=[]) 16:03:40 executing program 1: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1ff}}], [{@smackfsroot={'smackfsroot', 0x3d, '+'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-&/[#\x19*+&].[:#,\r#%'}}, {@smackfsfloor={'smackfsfloor'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) 16:03:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}], 0x2, 0x0) [ 810.904757][T28328] fuse: Bad value for 'fd' [ 810.922304][T28328] fuse: Bad value for 'fd' 16:03:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 16:03:40 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:40 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:40 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002340)='./file0\x00', &(0x7f0000002380)='fuse\x00', 0x0, 0x0) 16:03:40 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3800019, 0xffffffffffffffff) [ 811.168651][ T20] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 811.448858][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 811.588713][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 811.597111][ T20] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 811.615378][ T20] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 811.625893][ T20] usb 4-1: config 5 has no interface number 0 [ 811.638457][ T20] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 811.656900][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 811.667370][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 811.687212][ T20] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 811.711859][ T20] usb 4-1: config 5 interface 228 has no altsetting 0 [ 811.828620][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 811.837748][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 811.847310][ T20] usb 4-1: SerialNumber: syz [ 811.890234][T28325] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 811.897655][T28325] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 811.909715][ T20] hub 4-1:5.228: bad descriptor, ignoring hub [ 811.915939][ T20] hub: probe of 4-1:5.228 failed with error -5 [ 812.154397][ T20] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 61 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 812.811067][T28325] usb 4-1: reset high-speed USB device number 61 using dummy_hcd [ 813.068524][T28325] usb 4-1: Using ep0 maxpacket: 8 [ 813.210512][T28368] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 813.220663][T28368] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 813.455804][T28368] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 813.463668][T28368] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 813.548535][ C0] usblp0: nonzero read bulk status received: -71 [ 813.692387][ T8] usb 4-1: USB disconnect, device number 61 [ 813.708575][ T8] usblp0: removed 16:03:43 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}) 16:03:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}}, 0x0) 16:03:43 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:43 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x80) 16:03:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 16:03:43 executing program 2: prctl$PR_SET_MM(0x2f, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:03:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:43 executing program 0: r0 = socket(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x40) 16:03:43 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:44 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x40010022, 0x0, 0x0) [ 814.869874][ T8] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 815.138570][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 815.298659][ T8] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 815.307412][ T8] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 815.316891][ T8] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 815.326344][ T8] usb 4-1: config 5 has no interface number 0 [ 815.332619][ T8] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 815.346112][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 815.356584][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 815.368980][ T8] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 815.383649][ T8] usb 4-1: config 5 interface 228 has no altsetting 0 [ 815.488750][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 815.502821][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 815.517646][ T8] usb 4-1: SerialNumber: syz [ 815.540308][T28400] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 815.547688][T28400] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 815.629769][ T8] hub 4-1:5.228: bad descriptor, ignoring hub [ 815.637726][ T8] hub: probe of 4-1:5.228 failed with error -5 [ 815.869787][ T8] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 62 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 816.509020][T28400] usb 4-1: reset high-speed USB device number 62 using dummy_hcd [ 816.778794][T28400] usb 4-1: Using ep0 maxpacket: 8 [ 816.943968][T28444] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 816.951825][T28444] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 817.184148][T28444] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 817.192116][T28444] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 817.258451][ C1] usblp0: nonzero read bulk status received: -71 [ 817.422237][ T4860] usb 4-1: USB disconnect, device number 62 [ 817.449863][ T4860] usblp0: removed 16:03:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:47 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @dev, 0x0, 0x700}}) 16:03:47 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:47 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000a00)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 16:03:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000004940)) recvmmsg(r0, &(0x7f0000004840)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, &(0x7f0000000680)=""/161, 0xa1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004a00)='nl80211\x00', r0) 16:03:47 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:47 executing program 0: request_key(&(0x7f0000000500)='logon\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0) 16:03:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 16:03:47 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:47 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:47 executing program 1: getresgid(&(0x7f00000001c0), 0x0, 0x0) [ 818.418588][ T9789] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 818.719323][ T9789] usb 4-1: Using ep0 maxpacket: 8 [ 818.878734][ T9789] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 818.887386][ T9789] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 818.900088][ T9789] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 818.911423][ T9789] usb 4-1: config 5 has no interface number 0 [ 818.928516][ T9789] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 818.941975][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 818.955299][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 818.968078][ T9789] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 818.987471][ T9789] usb 4-1: config 5 interface 228 has no altsetting 0 [ 819.108998][ T9789] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 819.118962][ T9789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 819.127357][ T9789] usb 4-1: SerialNumber: syz [ 819.217998][T28474] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 819.241154][T28474] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 819.260692][ T9789] hub 4-1:5.228: bad descriptor, ignoring hub [ 819.267273][ T9789] hub: probe of 4-1:5.228 failed with error -5 [ 819.525589][ T9789] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 63 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 820.169319][T28474] usb 4-1: reset high-speed USB device number 63 using dummy_hcd [ 820.468550][T28474] usb 4-1: Using ep0 maxpacket: 8 [ 820.631401][T28516] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 820.642317][T28516] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 820.862271][T28516] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 820.871859][T28516] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 820.948610][ C1] usblp0: nonzero read bulk status received: -71 [ 821.107744][ T9778] usb 4-1: USB disconnect, device number 63 [ 821.131417][ T9778] usblp0: removed 16:03:51 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:51 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x5}]}) 16:03:51 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:51 executing program 1: setrlimit(0xd, &(0x7f0000000040)={0x0, 0x1}) 16:03:51 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:51 executing program 2: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) [ 821.693572][T28541] fuse: Bad value for 'fd' [ 821.710312][T28541] fuse: Bad value for 'fd' 16:03:51 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000004a008b"], 0x58}}, 0x0) 16:03:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x1, 0x0) 16:03:51 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) fork() sched_getattr(0x0, &(0x7f0000000080)={0x38}, 0x38, 0x0) 16:03:51 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:51 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 822.058719][ T9789] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 822.356547][ T9789] usb 4-1: Using ep0 maxpacket: 8 [ 822.489530][ T9789] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 822.500046][ T9789] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 822.510438][ T9789] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 822.520550][ T9789] usb 4-1: config 5 has no interface number 0 [ 822.527151][ T9789] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 822.540435][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 822.551421][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 822.562279][ T9789] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 822.576454][ T9789] usb 4-1: config 5 interface 228 has no altsetting 0 [ 822.668887][ T9789] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 822.678949][ T9789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 822.687358][ T9789] usb 4-1: SerialNumber: syz [ 822.771655][T28548] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 822.784694][T28548] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 822.820223][ T9789] hub 4-1:5.228: bad descriptor, ignoring hub [ 822.826634][ T9789] hub: probe of 4-1:5.228 failed with error -5 [ 823.067104][ T9789] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 64 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 823.679666][T28548] usb 4-1: reset high-speed USB device number 64 using dummy_hcd [ 823.949648][T28548] usb 4-1: Using ep0 maxpacket: 8 [ 824.111125][T28591] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 824.125215][T28591] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 824.353487][T28591] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 824.368939][T28591] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 824.458424][ C1] usblp0: nonzero read bulk status received: -71 [ 824.621901][ T9789] usb 4-1: USB disconnect, device number 64 [ 824.636474][ T9789] usblp0: removed 16:03:54 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000140)={@mcast1, 0x0, r1}) 16:03:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000140)=0x80) sendmsg$L2TP_CMD_TUNNEL_GET(r1, 0x0, 0x0) 16:03:54 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x227b, 0x0) 16:03:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xf5, 0x1}, 0x6) 16:03:54 executing program 0: prctl$PR_SET_MM(0x34, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:03:54 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000680)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r1}}, 0x10) 16:03:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@loopback, 0x0, r1}) [ 826.048586][ T20] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 826.308555][ T20] usb 4-1: device descriptor read/64, error 18 [ 826.578553][ T20] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 826.778479][ T20] usb 4-1: device descriptor read/64, error 18 [ 826.899350][ T20] usb usb4-port1: attempt power cycle [ 827.628777][ T20] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 827.808663][ T20] usb 4-1: device descriptor read/8, error -61 [ 828.098606][ T20] usb 4-1: new high-speed USB device number 68 using dummy_hcd 16:03:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:03:57 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:03:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe27a, 0x4) 16:03:57 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:57 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:03:57 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 828.590436][ T20] usb 4-1: device descriptor read/8, error -71 16:03:58 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 828.729207][ T20] usb usb4-port1: unable to enumerate USB device 16:03:58 executing program 2: prctl$PR_SET_SECCOMP(0x27, 0x0, &(0x7f0000000040)={0x0, 0x0}) 16:03:58 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 828.775764][ T38] audit: type=1326 audit(1618157038.164:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28656 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 16:03:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8932, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:03:58 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000002100)='keyring\x00', &(0x7f0000002140)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0x0, r1) 16:03:58 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 829.478901][ T9778] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 829.688549][ T9778] usb 4-1: device descriptor read/64, error 18 [ 829.958608][ T9778] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 830.169578][ T9778] usb 4-1: device descriptor read/64, error 18 [ 830.288835][ T9778] usb usb4-port1: attempt power cycle [ 830.998540][ T9778] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 831.168606][ T9778] usb 4-1: device descriptor read/8, error -61 [ 831.438516][ T9778] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 831.608983][ T9778] usb 4-1: device descriptor read/8, error -61 [ 831.729173][ T9778] usb usb4-port1: unable to enumerate USB device 16:04:01 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:01 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:01 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:01 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x18, 0xffffffffffffffff) 16:04:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000002000010000000000000000000a0000000000000000000017050015"], 0x24}}, 0x0) 16:04:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000100)={0x0, 0x0}) 16:04:01 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, 0x0) 16:04:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8983, 0x0) 16:04:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400120f2, 0x0) 16:04:01 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:01 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) [ 832.948640][ T9789] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 833.158643][ T9789] usb 4-1: device descriptor read/64, error 18 [ 833.428498][ T9789] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 833.618615][ T9789] usb 4-1: device descriptor read/64, error 18 [ 833.738692][ T9789] usb usb4-port1: attempt power cycle [ 834.448519][ T9789] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 834.618906][ T9789] usb 4-1: device descriptor read/8, error -61 [ 834.888601][ T9789] usb 4-1: new high-speed USB device number 76 using dummy_hcd 16:04:04 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:04 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000580)={0x0, 0x3, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a27a36c5"}, 0x0, 0x0, @planes=0x0}) 16:04:04 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:04 executing program 0: socket(0x2, 0x803, 0x1) 16:04:04 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x82201, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000180)) 16:04:04 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 835.338691][ T9789] usb 4-1: device descriptor read/8, error -71 16:04:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x400c001) [ 835.458987][ T9789] usb usb4-port1: unable to enumerate USB device 16:04:05 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:05 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8918, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:04:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}}, 0x0) 16:04:05 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 835.988522][ T9789] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 836.188503][ T9789] usb 4-1: device descriptor read/64, error 18 [ 836.458507][ T9789] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 836.648682][ T9789] usb 4-1: device descriptor read/64, error 18 [ 836.769742][ T9789] usb usb4-port1: attempt power cycle [ 837.508512][ T9789] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 837.738627][ T9789] usb 4-1: device descriptor read/8, error -61 [ 838.018532][ T9789] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 838.228649][ T9789] usb 4-1: device descriptor read/8, error -61 [ 838.348834][ T9789] usb usb4-port1: unable to enumerate USB device 16:04:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:08 executing program 0: prctl$PR_SET_MM(0x29, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:04:08 executing program 1: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0xffffffffffffffff) 16:04:08 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:08 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x2}, 0x0) 16:04:08 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:08 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 16:04:08 executing program 1: socket(0x29, 0x2, 0x144) 16:04:08 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004f40)=[{{&(0x7f0000000400)={0x2, 0x4e22, @private}, 0x10, 0x0}}], 0x1, 0x0) 16:04:08 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:08 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, 0x0) r3 = gettid() tkill(r3, 0xf) 16:04:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000100)='L', 0x1}], 0x1, &(0x7f0000002640)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002740)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) [ 839.418561][ T9789] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 839.638664][ T9789] usb 4-1: device descriptor read/64, error 18 [ 839.918655][ T9789] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 840.148811][ T9789] usb 4-1: device descriptor read/64, error 18 [ 840.268672][ T9789] usb usb4-port1: attempt power cycle [ 841.008506][ T9789] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 841.198737][ T9789] usb 4-1: device descriptor read/8, error -61 [ 841.478514][ T9789] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 841.718703][ T9789] usb 4-1: device descriptor read/8, error -61 [ 841.838733][ T9789] usb usb4-port1: unable to enumerate USB device 16:04:11 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:11 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0x0, @l2tp={0x2, 0x0, @private}, @hci, @tipc=@id}) 16:04:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x5, @remote, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="60e88e6e1f978b8d887609c13117b154278beb816ca3c9ed1a6d454951365b518c46ee84b70ba0c6b8b1f4fd99757377dff7afcd3136e972b66769bd73803d3e47b7a36cd6fb02a7b9db93a5307dbcfffc2d51d7138cc295ba8d8afe623d79a39225d19cdd9578a36c71753c76a342b4c593ae38aaa3", 0x76}, {&(0x7f00000001c0)="27217af087a9264954dd160362fda4b482ccaa544344e2d7e3f46f8d9ff9cf315a2be53344cf5994fb243ec93b2f3ed10b5d0826da36d469213654e88850bcf33266a0eb002dc9bca32062ab327b81c07df4e6e25e603f3f040e0ad0782f33bafcc56b96def4eef2a470d4b9d649955b1a1e2b4b71843a51c3dabde8cf85c3949c6f9d6656d09998efbab2d0608a736e4e9bde0fdace9e1c03983ceeda5887f470cc72c5941d5b767978e752483cf0e9f24594226657fa0d45bba820", 0xbc}, {&(0x7f0000000280)="4dee37271a02d51722843ee02a2527dd92ed8170e07f76c5bab4611c066be14f3c03494753488154694a48faf3eb81a6f4f2f5c5c099a6798e62e298383868645bc6fb3f315b1ba565d24c3e92539e04c78f835fbb9325c26092efc8d9f55a67649fe35cc6c4303b52950356ee852a7e29586f4e5fb2224121f06edac9c92461ad", 0x81}, {&(0x7f0000000340)="e6b4411b4a1968fff27f6fdf41a50d3495146fc8efe1720cc5249290149b63fb866f3d8da7bf0cd49d08dc50a6729b2d9190afbca9a939bf4e260e190463786f72bb0ed084cd60c0", 0x48}, {&(0x7f00000003c0)="13bf8a78bd444070e072c581c60bb3511dbd9e1dc451718db62414dde520a6b8867a63e6d050a5b0aab76f58f8aed2d8db0941883992a15e8a7089ec78df43988e91fe2bb166368bed15160faa0e3f09c720baa198e6edf6d7ae482281b391f86ac545c47a5f059ca9e055ccb59dbdd99c14393c46fc1bea32bf7ce699a4d8fe211650c494b5a5d3fb9c159f7d757cc5546b304cf6dff9d16d7a04fec5c4db9d1342f84513da83c42c69a36d", 0xac}, {&(0x7f0000000480)="1ae40bb456d28bd855b467f28d4b6f426c91d32331e9eb296806aef95113a2f6bb2b06631ffebb3e3bb91ccdf7756ec3c94613e045b73eca5115719c2f997497d70eabd258cf7260ea43b7cee803fa7e65e025616b9f4aa98f78f1ba224849f6a3a046262a63bd71092d8392282cf98634129ab1850023b1b0ccba321eae5d50da738340ce7cae4593a24f274411cef86833f5286dd3aa17dcb04d4b46d44764072d2b009c910737d023dccfc9df0b99", 0xb0}, {&(0x7f0000000a40)="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", 0x161}], 0x7}}], 0x1, 0x0) 16:04:11 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, 0x0) r3 = gettid() tkill(r3, 0xf) 16:04:11 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:11 executing program 1: syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000012c0), 0x220600a, 0xfffffffffffffffc) 16:04:11 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:11 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, 0x0) r3 = gettid() tkill(r3, 0xf) 16:04:11 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x82201, 0x0) 16:04:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5452, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:04:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xd, &(0x7f0000000100), 0x4) 16:04:12 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 842.749303][ T9789] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 843.028637][ T9789] usb 4-1: device descriptor read/64, error 18 [ 843.328585][ T9789] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 843.538516][ T9789] usb 4-1: device descriptor read/64, error 18 [ 843.658805][ T9789] usb usb4-port1: attempt power cycle [ 844.378496][ T9789] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 844.549356][ T9789] usb 4-1: device descriptor read/8, error -61 [ 844.858717][ T9789] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 845.058622][ T9789] usb 4-1: device descriptor read/8, error -61 [ 845.221052][ T9789] usb usb4-port1: unable to enumerate USB device 16:04:14 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:14 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) gettid() tkill(0x0, 0xf) 16:04:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, 0x0) 16:04:14 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:14 executing program 2: socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)) 16:04:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000100)='L', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:04:15 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:15 executing program 2: socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)) 16:04:15 executing program 1: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, r0) 16:04:15 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:15 executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)=ANY=[]) 16:04:15 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 846.188592][ T9789] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 846.418600][ T9789] usb 4-1: device descriptor read/64, error 18 [ 846.688621][ T9789] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 846.878487][ T9789] usb 4-1: device descriptor read/64, error 18 [ 846.999354][ T9789] usb usb4-port1: attempt power cycle [ 847.708463][ T9789] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 847.878535][ T9789] usb 4-1: device descriptor read/8, error -61 [ 848.148438][ T9789] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 848.328538][ T9789] usb 4-1: device descriptor read/8, error -61 [ 848.448684][ T9789] usb usb4-port1: unable to enumerate USB device 16:04:18 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:18 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000000)) 16:04:18 executing program 0: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xffffffffffffffff, 0x1899c1) 16:04:18 executing program 2: socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)) 16:04:18 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:18 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) gettid() tkill(0x0, 0xf) 16:04:18 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:18 executing program 2: socketpair(0x15, 0x5, 0x0, &(0x7f0000000200)) 16:04:18 executing program 0: syz_emit_ethernet(0xe, &(0x7f0000000040)={@dev, @multicast, @void, {@generic={0x6000}}}, 0x0) 16:04:18 executing program 1: connect$l2tp(0xffffffffffffffff, 0x0, 0x0) 16:04:18 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 16:04:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 849.628770][ T8] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 849.878506][ T8] usb 4-1: device descriptor read/64, error 18 [ 850.158570][ T8] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 850.378558][ T8] usb 4-1: device descriptor read/64, error 18 [ 850.509796][ T8] usb usb4-port1: attempt power cycle [ 851.228496][ T8] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 851.398629][ T8] usb 4-1: device descriptor read/8, error -61 [ 851.678640][ T8] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 851.853851][ T8] usb 4-1: device descriptor read/8, error -61 [ 851.978950][ T8] usb usb4-port1: unable to enumerate USB device 16:04:21 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:21 executing program 1: syz_mount_image$gfs2meta(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 16:04:21 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:21 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 16:04:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000006080)=[{{&(0x7f0000000780)={0xa, 0x0, 0x5, @private1}, 0x1c, &(0x7f0000001c40)=[{&(0x7f00000007c0)="bec4aa60271b4d7a2dc8afa535b4249955f4929d5ba30a3065304057c66d1232fe708fec541e863d22c686c31c5ff3beb16001d2c52939f9bcf6019f23789a3a4a9fc2b7d687ac2c05ab0efa14598a1b9dc8adf4cccddcd79f2fa4f313cf803554077ce3064c9acaa0379bb13cc671bfcf165d61634f03b1d30f059a5f59ed141f26d92e5cf4895bea8f82864e5c3d40cb44998c367d41d917b67ce8fa091e8f0ee7d7ea882874fc535393daffb31dc2578df9da044a9d4f2405326d5e0bce1b11c11eab54e55b87803315e91854a8ad", 0xd0}, {&(0x7f00000008c0)="c5ebcf91eac55ad131b8c0527626bf160acde334a8ab63a99bf865e660e4181a17c52909df255153dba82d136d21d0636ab4aca2bf5edad1a1992013c9354069badbd6551ea936d60a46f19143c8d410e5eaff88ee8c37b7ba9d9fa240f93650b029f4b133af309d407086a494a362367aae1c1c4ebaa33e95a0dda6be05f7ba12d1328444e0c0985c91b9af237bfbcc2370c160b54c5eb621", 0x99}, {&(0x7f0000000a40)="9d5bcda8fb202287789416b4d12eee54b8c2583b549b3d30fa493c0d99905c438fc1f470e22d984eddeaa9eaefdd86a84333dc87e7537c27515fc18399e1bd48bcfed6f7ff6ad4eb8a40a8f6444fdcffcf2fc9837226165aa0a338c158b8b0bec8ca6b5e0367a6e27d7b5d8802ab164ec2433508ed22d07c2626fb8ecbe87cfde2a2659a4d21225aef7c563591f35c74ae97ac16544c75755e6824c5570fe844b622f7e757b922425080605b8c009597b2f21e191aae", 0xb6}, {&(0x7f0000000980)="fc1bc1702ad51c028f0bb1fa590741afb868ddb152d25d89bcaf5e9f3ba6f39581098505d2755f5a706929846cf294c571a11f56ec01ae6583b058e22e1eacb10d9066ce10b55305180d9827c67bf1c6e68db67d8fa896b40deab9fc19a760a93f1bdad13022ad0519c42a", 0x6b}, {&(0x7f0000000b00)="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", 0x247}], 0x5}}, {{&(0x7f0000001ec0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000001f00)="85", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40040) 16:04:21 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) gettid() tkill(0x0, 0xf) 16:04:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast}, 0x80) 16:04:22 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 16:04:22 executing program 0: prctl$PR_SET_MM(0x16, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:04:22 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:22 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:22 executing program 0: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101}, @tipc=@name, @ethernet={0x0, @multicast}, 0x7, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1_to_hsr\x00'}) [ 853.060313][ T8] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 853.278670][ T8] usb 4-1: device descriptor read/64, error 18 [ 853.548501][ T8] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 853.738456][ T8] usb 4-1: device descriptor read/64, error 18 [ 853.858726][ T8] usb usb4-port1: attempt power cycle [ 854.568434][ T8] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 854.764133][ T8] usb 4-1: device descriptor read/8, error -61 [ 855.039528][ T8] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 855.208645][ T8] usb 4-1: device descriptor read/8, error -61 [ 855.330389][ T8] usb usb4-port1: unable to enumerate USB device 16:04:25 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff0500"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:25 executing program 1: prctl$PR_SET_MM(0x2, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:04:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000100)='L', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:04:25 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:25 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000002140)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 16:04:25 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x0) 16:04:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000100)='L', 0x1}], 0x1, &(0x7f0000002640)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002740)="fb", 0x1}], 0x1, &(0x7f0000003940)}}], 0x2, 0x0) 16:04:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2285, 0x0) 16:04:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000140)=0x80) ioctl$sock_bt_hci(r1, 0x0, 0x0) 16:04:25 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000100)='L', 0x1}], 0x1, &(0x7f0000002640)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002740)="fb", 0x1}], 0x1, &(0x7f0000003940)}}], 0x2, 0x0) 16:04:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100)=0x7, 0x4) [ 856.308954][ T9789] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 856.618654][ T9789] usb 4-1: Using ep0 maxpacket: 8 [ 856.768617][ T9789] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 856.777133][ T9789] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 856.789016][ T9789] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 856.801365][ T9789] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 255 [ 856.918546][ T9789] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 856.927870][ T9789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 856.937933][ T9789] usb 4-1: SerialNumber: syz [ 857.769703][T29025] udc-core: couldn't find an available UDC or it's busy [ 857.776695][T29025] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 858.818631][ T8] usb 4-1: USB disconnect, device number 101 16:04:28 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff0500"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:28 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:28 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x34000}, 0x0) 16:04:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000100)='L', 0x1}], 0x1, &(0x7f0000002640)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002740)="fb", 0x1}], 0x1, &(0x7f0000003940)}}], 0x2, 0x0) 16:04:28 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f365bd5e"}, 0x0, 0x0, @fd}) 16:04:28 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x0) 16:04:28 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x22601, 0x0) 16:04:28 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000100)='L', 0x1}], 0x1, &(0x7f0000002640)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002740)="fb", 0x1}], 0x1, &(0x7f0000003940)}}], 0x2, 0x0) 16:04:28 executing program 1: r0 = socket(0x29, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 16:04:29 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:29 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0) [ 859.808737][ T9778] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 860.058784][ T9778] usb 4-1: Using ep0 maxpacket: 8 [ 860.248506][ T9778] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 860.256905][ T9778] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 860.268110][ T9778] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 860.280557][ T9778] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 255 [ 860.388652][ T9778] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 860.402514][ T9778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 860.411730][ T9778] usb 4-1: SerialNumber: syz [ 861.263884][T29073] udc-core: couldn't find an available UDC or it's busy [ 861.271080][T29073] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 862.310381][ T9789] usb 4-1: USB disconnect, device number 102 16:04:32 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff0500"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:32 executing program 1: setrlimit(0x17, &(0x7f0000000000)) 16:04:32 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:32 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)={0x0, 0x6, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1f6800b3"}}) 16:04:32 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000140)="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", 0xfffffffffffffe0e, 0x20004000, &(0x7f0000001140)={0x2, 0x0, @remote}, 0x10) 16:04:32 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], 'k'}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @restrict, @typedef]}}, 0x0, 0xba}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x0) 16:04:32 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)={0x0, 0x8, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ecebf40a"}, 0x0, 0x0, @userptr}) 16:04:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000002940)=0x81, 0x4) 16:04:32 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:32 executing program 0: prctl$PR_SET_SECCOMP(0x2a, 0x0, 0x0) 16:04:32 executing program 1: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x105000) 16:04:32 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, &(0x7f0000000100)) [ 863.318719][ T9789] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 863.578457][ T9789] usb 4-1: Using ep0 maxpacket: 8 [ 863.738575][ T9789] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 863.747256][ T9789] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 863.756718][ T9789] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 863.767232][ T9789] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 255 [ 863.848614][ T9789] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 863.857720][ T9789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 863.873497][ T9789] usb 4-1: SerialNumber: syz [ 864.723210][T29118] udc-core: couldn't find an available UDC or it's busy [ 864.731248][T29118] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 865.789186][ T9789] usb 4-1: USB disconnect, device number 103 16:04:35 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:35 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8980, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:04:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8901, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:04:35 executing program 0: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0xc0100) 16:04:35 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 16:04:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@mcast1, 0x0, r1}) 16:04:35 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:35 executing program 1: prctl$PR_SET_SECCOMP(0x19, 0x0, 0x0) 16:04:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) 16:04:35 executing program 4: r0 = socket(0x2, 0x803, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) 16:04:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, 0x0, &(0x7f0000000200)) [ 866.868522][ T9778] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 867.128567][ T9778] usb 4-1: Using ep0 maxpacket: 8 [ 867.248630][ T9778] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 867.257153][ T9778] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 867.268521][ T9778] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 867.279225][ T9778] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 867.289352][ T9778] usb 4-1: config 5 has no interface number 0 [ 867.295478][ T9778] usb 4-1: config 5 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 867.307256][ T9778] usb 4-1: config 5 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 867.321152][ T9778] usb 4-1: config 5 interface 228 has no altsetting 0 [ 867.398639][ T9778] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 867.407820][ T9778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 867.416617][ T9778] usb 4-1: SerialNumber: syz [ 867.519828][ T9778] hub 4-1:5.228: bad descriptor, ignoring hub [ 867.526120][ T9778] hub: probe of 4-1:5.228 failed with error -5 [ 868.287895][T29165] udc-core: couldn't find an available UDC or it's busy [ 868.294935][T29165] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 869.470949][ T9789] usb 4-1: USB disconnect, device number 104 16:04:39 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:39 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:39 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000240)=0x8, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 16:04:39 executing program 1: r0 = socket(0x2, 0x803, 0x4) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={0x0}, 0x300}, 0x0) 16:04:39 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8981, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:04:39 executing program 4: r0 = socket(0x2, 0x803, 0x4) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x300}, 0x0) 16:04:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x227e, 0x0) [ 869.919633][ T3248] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.926731][ T3248] ieee802154 phy1 wpan1: encryption failed: -22 16:04:39 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{}]}) 16:04:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000140)=""/162) 16:04:39 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0x9f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 16:04:39 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)='syz', r0) [ 870.480659][ T20] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 870.818537][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 870.958615][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 870.967657][ T20] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 870.991236][ T20] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 871.003098][ T20] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 871.013918][ T20] usb 4-1: config 5 has no interface number 0 [ 871.021097][ T20] usb 4-1: config 5 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 871.033113][ T20] usb 4-1: config 5 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 871.047485][ T20] usb 4-1: config 5 interface 228 has no altsetting 0 [ 871.166459][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 871.176360][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 871.186099][ T20] usb 4-1: SerialNumber: syz [ 871.284949][ T20] hub 4-1:5.228: bad descriptor, ignoring hub [ 871.292173][ T20] hub: probe of 4-1:5.228 failed with error -5 [ 872.041537][T29216] udc-core: couldn't find an available UDC or it's busy [ 872.048947][T29216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 873.236208][ T9778] usb 4-1: USB disconnect, device number 105 16:04:42 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x20000009, 0x4) 16:04:42 executing program 0: r0 = socket(0x29, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) 16:04:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2288, 0x0) 16:04:42 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0x9f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:42 executing program 1: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x2, 0x12, 0xffffffffffffff9c, 0x0) 16:04:43 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0x9f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:43 executing program 1: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 16:04:43 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYRES16], 0x196) 16:04:43 executing program 2: prctl$PR_SET_SECCOMP(0x25, 0x0, 0x0) 16:04:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000002940)=0x81, 0x4) 16:04:43 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 874.178523][ T20] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 874.428440][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 874.568532][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 874.577398][ T20] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 874.596746][ T20] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 874.614197][ T20] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 874.623853][ T20] usb 4-1: config 5 has no interface number 0 [ 874.634600][ T20] usb 4-1: config 5 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 874.647930][ T20] usb 4-1: config 5 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 874.662726][ T20] usb 4-1: config 5 interface 228 has no altsetting 0 [ 874.753300][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 874.763206][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 874.771829][ T20] usb 4-1: SerialNumber: syz [ 874.889594][ T20] hub 4-1:5.228: bad descriptor, ignoring hub [ 874.895965][ T20] hub: probe of 4-1:5.228 failed with error -5 [ 875.669153][T29265] udc-core: couldn't find an available UDC or it's busy [ 875.676114][T29265] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 876.858937][ T20] usb 4-1: USB disconnect, device number 106 16:04:46 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe000"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:46 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2403}, 0x0) 16:04:46 executing program 2: socketpair(0x25, 0x5, 0x4, &(0x7f0000000040)) 16:04:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) 16:04:46 executing program 0: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 16:04:46 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe0000001}, 0x10, 0x0}}], 0x1, 0x0) 16:04:46 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 877.342003][T29282] fuse: Bad value for 'fd' 16:04:46 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004940)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) 16:04:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}]}, 0x24}}, 0x0) [ 877.366131][T29282] fuse: Bad value for 'fd' 16:04:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2279, 0x0) 16:04:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000001480)={@empty, 0x0, r1}) [ 877.858626][ T20] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 878.128444][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 878.258477][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 878.266845][ T20] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 878.278484][ T20] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 878.288662][ T20] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 878.297717][ T20] usb 4-1: config 5 has no interface number 0 [ 878.304521][ T20] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 878.316262][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 878.327299][ T20] usb 4-1: config 5 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 878.340799][ T20] usb 4-1: config 5 interface 228 has no altsetting 0 [ 878.438679][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 878.449431][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 878.457553][ T20] usb 4-1: SerialNumber: syz [ 878.546387][T29284] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 878.589871][ T20] hub 4-1:5.228: bad descriptor, ignoring hub [ 878.596088][ T20] hub: probe of 4-1:5.228 failed with error -5 [ 879.349707][T29314] udc-core: couldn't find an available UDC or it's busy [ 879.356672][T29314] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 880.518671][ T9789] usb 4-1: USB disconnect, device number 107 16:04:50 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe000"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:50 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:50 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 16:04:50 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000400)={&(0x7f0000000140), 0x14, &(0x7f00000003c0)={&(0x7f0000000300)='@', 0x1}}, 0x0) 16:04:50 executing program 0: prctl$PR_SET_SECCOMP(0x24, 0x2, 0x0) 16:04:50 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)={0x0, 0x4, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "08fa2aeb"}}) 16:04:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 16:04:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 16:04:50 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg$sock(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@ieee802154={0x24, @short}, 0x80, 0x0}, 0x0) 16:04:50 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:50 executing program 2: fork() syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) 16:04:50 executing program 1: migrate_pages(0x0, 0x1000, 0x0, &(0x7f0000000100)=0x2) [ 881.508780][ T9813] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 881.758511][ T9813] usb 4-1: Using ep0 maxpacket: 8 [ 881.878538][ T9813] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 881.886991][ T9813] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 881.904432][ T9813] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 881.916413][ T9813] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 881.928738][ T9813] usb 4-1: config 5 has no interface number 0 [ 881.934870][ T9813] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 881.946931][ T9813] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 881.957410][ T9813] usb 4-1: config 5 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 881.970804][ T9813] usb 4-1: config 5 interface 228 has no altsetting 0 [ 882.048612][ T9813] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 882.061275][ T9813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 882.070146][ T9813] usb 4-1: SerialNumber: syz [ 882.161550][T29330] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 882.189550][ T9813] hub 4-1:5.228: bad descriptor, ignoring hub [ 882.196318][ T9813] hub: probe of 4-1:5.228 failed with error -5 [ 882.956175][T29364] udc-core: couldn't find an available UDC or it's busy [ 882.963870][T29364] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 884.118789][ T9781] usb 4-1: USB disconnect, device number 108 16:04:53 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe000"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x1274, 0x0) 16:04:53 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xf5}, 0x6) 16:04:53 executing program 4: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x80004022) 16:04:53 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 16:04:54 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000002140)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 16:04:54 executing program 1: accept$netrom(0xffffffffffffffff, 0x0, 0x0) 16:04:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:54 executing program 4: syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) fork() syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x68a3, 0x200000) 16:04:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/246) 16:04:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2289, 0x0) [ 885.038565][ T9778] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 885.328506][ T9778] usb 4-1: Using ep0 maxpacket: 8 [ 885.458494][ T9778] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 885.466890][ T9778] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 885.476372][ T9778] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 885.487189][ T9778] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 885.496783][ T9778] usb 4-1: config 5 has no interface number 0 [ 885.503380][ T9778] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 885.515704][ T9778] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 885.526627][ T9778] usb 4-1: config 5 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 885.540124][ T9778] usb 4-1: config 5 interface 228 has no altsetting 0 [ 885.630880][ T9778] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 885.640129][ T9778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 885.648116][ T9778] usb 4-1: SerialNumber: syz [ 885.740083][T29383] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 885.779744][ T9778] hub 4-1:5.228: bad descriptor, ignoring hub [ 885.785942][ T9778] hub: probe of 4-1:5.228 failed with error -5 [ 886.543390][T29414] udc-core: couldn't find an available UDC or it's busy [ 886.550539][T29414] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 887.761849][ T8] usb 4-1: USB disconnect, device number 109 16:04:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe000000905"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:04:57 executing program 2: prctl$PR_SET_MM(0xf, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:04:57 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:57 executing program 4: prctl$PR_SET_MM(0x4, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:04:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}, @remote}}) 16:04:57 executing program 1: syz_emit_ethernet(0x17e, &(0x7f0000000400)={@broadcast, @broadcast, @void, {@ipv4={0x800, @dccp={{0x19, 0x4, 0x0, 0x0, 0x170, 0x0, 0x0, 0x0, 0x21, 0x0, @multicast2, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'F1\a', 0x0, "70d626"}, "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"}}}}}, &(0x7f0000000140)) 16:04:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100)=0x7f, 0x4) 16:04:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, 0x0) 16:04:57 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:04:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:04:57 executing program 1: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, r0) 16:04:57 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={0x0}}, 0x0) [ 888.638617][ T20] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 888.928435][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 889.048551][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 889.056962][ T20] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 889.068115][ T20] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 889.077699][ T20] usb 4-1: config 5 has no interface number 0 [ 889.084278][ T20] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 889.096930][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 889.107865][ T20] usb 4-1: config 5 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 889.118935][ T20] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 889.132981][ T20] usb 4-1: config 5 interface 228 has no altsetting 0 [ 889.218549][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 889.227632][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 889.246113][ T20] usb 4-1: SerialNumber: syz [ 889.335431][T29436] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 889.369655][ T20] hub 4-1:5.228: bad descriptor, ignoring hub [ 889.376091][ T20] hub: probe of 4-1:5.228 failed with error -5 [ 890.128245][T29466] udc-core: couldn't find an available UDC or it's busy [ 890.135519][T29466] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 891.295090][ T9789] usb 4-1: USB disconnect, device number 110 16:05:00 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe000000905"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0xa, 0xb}}, 0x1c}}, 0x0) 16:05:00 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={0x0}}, 0x0) 16:05:00 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:00 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 16:05:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 16:05:01 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:01 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x2, 0x12, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 16:05:01 executing program 0: recvfrom$l2tp(0xffffffffffffffff, &(0x7f00000000c0)=""/141, 0x8d, 0x0, 0x0, 0x0) r0 = fork() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, 0x0) 16:05:01 executing program 4: r0 = socket(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 16:05:01 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:01 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "82e9a762"}, 0x0, 0x0, @fd}) [ 892.298611][ T20] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 892.582396][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 892.768589][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 892.779346][ T20] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 892.791233][ T20] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 892.802167][ T20] usb 4-1: config 5 has no interface number 0 [ 892.809617][ T20] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 892.823035][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 892.834167][ T20] usb 4-1: config 5 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 892.848237][ T20] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 892.863842][ T20] usb 4-1: config 5 interface 228 has no altsetting 0 [ 892.948752][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 892.959141][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 892.967779][ T20] usb 4-1: SerialNumber: syz [ 893.063185][T29485] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 893.090471][ T20] hub 4-1:5.228: bad descriptor, ignoring hub [ 893.097289][ T20] hub: probe of 4-1:5.228 failed with error -5 [ 893.860851][T29519] udc-core: couldn't find an available UDC or it's busy [ 893.872328][T29519] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 895.040192][ T9789] usb 4-1: USB disconnect, device number 111 16:05:04 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe000000905"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:04 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf) 16:05:04 executing program 4: migrate_pages(0x0, 0x1000, &(0x7f00000000c0), &(0x7f0000000100)=0x2) 16:05:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 16:05:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x20000001) 16:05:04 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "edc8a913"}, 0x0, 0x0, @planes=0x0}) 16:05:04 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x10, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000002140)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 16:05:04 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x10001, 0x0) 16:05:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x24, 0x0, 0x0) 16:05:04 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xc8}}], 0x2, 0x0) [ 895.828569][ T9595] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 896.128502][ T9595] usb 4-1: Using ep0 maxpacket: 8 [ 896.248627][ T9595] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 896.257315][ T9595] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 896.270036][ T9595] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 896.280368][ T9595] usb 4-1: config 5 has no interface number 0 [ 896.287283][ T9595] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 896.301352][ T9595] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 896.313896][ T9595] usb 4-1: config 5 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 896.326504][ T9595] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 896.340910][ T9595] usb 4-1: config 5 interface 228 has no altsetting 0 [ 896.424070][ T9595] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 896.435350][ T9595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 896.443961][ T9595] usb 4-1: SerialNumber: syz [ 896.512513][T29538] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 896.550107][ T9595] hub 4-1:5.228: bad descriptor, ignoring hub [ 896.557767][ T9595] hub: probe of 4-1:5.228 failed with error -5 [ 897.316530][T29567] udc-core: couldn't find an available UDC or it's busy [ 897.323916][T29567] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 898.478810][ T9813] usb 4-1: USB disconnect, device number 112 16:05:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, 0x0) 16:05:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={0x0}) 16:05:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) 16:05:08 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:08 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7fedc5f0"}, 0x0, 0x0, @fd}) 16:05:08 executing program 1: waitid(0x0, 0x0, &(0x7f00000020c0), 0x8, 0x0) 16:05:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x10e, 0x22, 0x0, 0x0) 16:05:08 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0)='NLBL_CIPSOv4\x00', r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 16:05:08 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 16:05:08 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001680)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x0) [ 899.568511][ T20] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 899.858443][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 900.000066][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 900.008939][ T20] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 900.017718][ T20] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 900.028185][ T20] usb 4-1: config 5 has no interface number 0 [ 900.035072][ T20] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 900.046944][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 900.059396][ T20] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 900.070025][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 900.080834][ T20] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 900.094724][ T20] usb 4-1: config 5 interface 228 has no altsetting 0 [ 900.198668][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 900.207801][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 900.225566][ T20] usb 4-1: SerialNumber: syz [ 900.302280][T29586] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 900.339687][ T20] hub 4-1:5.228: bad descriptor, ignoring hub [ 900.345906][ T20] hub: probe of 4-1:5.228 failed with error -5 [ 900.597564][ T20] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 113 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 901.298340][T29586] usb 4-1: reset high-speed USB device number 113 using dummy_hcd [ 901.579134][T29586] usb 4-1: Using ep0 maxpacket: 8 [ 901.752022][T29621] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 901.989676][T29621] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 902.339274][ T8] usb 4-1: USB disconnect, device number 113 [ 902.357002][ T8] usblp0: removed 16:05:12 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "842c2f", 0x8}) 16:05:12 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x227d, 0x0) 16:05:12 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x2}]}) 16:05:12 executing program 2: prctl$PR_SET_MM(0x1a, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:05:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8901, 0x0) 16:05:12 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0) 16:05:12 executing program 0: r0 = socket(0x29, 0x2, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x8001) 16:05:12 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:12 executing program 2: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp, @tipc=@name, @ethernet={0x0, @multicast}}) 16:05:12 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) [ 903.628516][ T9595] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 903.938476][ T9595] usb 4-1: Using ep0 maxpacket: 8 [ 904.078674][ T9595] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 904.087220][ T9595] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 904.098709][ T9595] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 904.107936][ T9595] usb 4-1: config 5 has no interface number 0 [ 904.116652][ T9595] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 904.130327][ T9595] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 904.142930][ T9595] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 904.154697][ T9595] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 904.165792][ T9595] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 904.180403][ T9595] usb 4-1: config 5 interface 228 has no altsetting 0 [ 904.288736][ T9595] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 904.297849][ T9595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 904.316887][ T9595] usb 4-1: SerialNumber: syz [ 904.407590][T29653] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 904.449797][ T9595] hub 4-1:5.228: bad descriptor, ignoring hub [ 904.456811][ T9595] hub: probe of 4-1:5.228 failed with error -5 [ 904.704958][ T9595] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 114 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 904.966215][ T9789] Bluetooth: hci0: command 0x0401 tx timeout [ 905.348587][T29653] usb 4-1: reset high-speed USB device number 114 using dummy_hcd [ 905.609687][T29653] usb 4-1: Using ep0 maxpacket: 8 [ 905.750673][T29690] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 905.974268][T29690] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 906.319202][ T9813] usb 4-1: USB disconnect, device number 114 [ 906.335810][ T9813] usblp0: removed 16:05:16 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:16 executing program 0: prctl$PR_SET_SECCOMP(0x18, 0x0, 0x0) 16:05:16 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x3, [@volatile, @const, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xa3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:16 executing program 2: fanotify_mark(0xffffffffffffffff, 0x35, 0x48000009, 0xffffffffffffffff, 0x0) 16:05:16 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000a00)={0xb, 0x10, 0xfa00, {0x0}}, 0xffffffff200009d0) 16:05:16 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000700)={0x2, 0x0, @dev}, 0x10) 16:05:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @loopback}, 0x80) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) 16:05:16 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x3, [@volatile, @const, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xa3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x894c, 0x0) 16:05:16 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) 16:05:16 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000200), 0x0) 16:05:16 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x3, [@volatile, @const, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xa3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 907.438512][ T9595] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 907.748470][ T9595] usb 4-1: Using ep0 maxpacket: 8 [ 907.932733][ T9595] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 907.943273][ T9595] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 907.954087][ T9595] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 907.964662][ T9595] usb 4-1: config 5 has no interface number 0 [ 907.972278][ T9595] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 907.984854][ T9595] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 907.997050][ T9595] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 908.008875][ T9595] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 908.020252][ T9595] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 908.034763][ T9595] usb 4-1: config 5 interface 228 has no altsetting 0 [ 908.148634][ T9595] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 908.157728][ T9595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 908.167583][ T9595] usb 4-1: SerialNumber: syz [ 908.257248][T29723] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 908.299684][ T9595] hub 4-1:5.228: bad descriptor, ignoring hub [ 908.305905][ T9595] hub: probe of 4-1:5.228 failed with error -5 [ 908.540288][ T9595] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 115 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 909.233101][T29723] usb 4-1: reset high-speed USB device number 115 using dummy_hcd [ 909.498877][T29723] usb 4-1: Using ep0 maxpacket: 8 [ 909.660589][T29762] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 909.884217][T29762] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 910.229023][ T9781] usb 4-1: USB disconnect, device number 115 [ 910.254198][ T9781] usblp0: removed 16:05:20 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) 16:05:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @sco={0x1f, @none}, @isdn, @sco, 0x7}) 16:05:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e23}}]}, 0x24}}, 0x0) 16:05:20 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:20 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f00000003c0)={0x0}}, 0x0) 16:05:20 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @private0}, 0x1c, 0x0}}], 0x1, 0x0) 16:05:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x30}}, 0x0) 16:05:20 executing program 1: r0 = socket(0x2, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) 16:05:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, @isdn, @nfc={0x27, 0x0, 0x0, 0x5}}) 16:05:20 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:20 executing program 2: setrlimit(0x0, &(0x7f0000000000)={0x7, 0xe7}) 16:05:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89b1, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:05:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2282, 0x0) 16:05:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x1275, 0x0) 16:05:20 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:20 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002340)='./file0\x00', &(0x7f0000002380)='fuse\x00', 0x1, &(0x7f00000023c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [{@euid_eq={'euid'}}]}}) [ 911.398511][ T9789] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 911.593091][T29823] fuse: Bad value for 'fd' [ 911.698535][ T9789] usb 4-1: Using ep0 maxpacket: 8 [ 911.918815][ T9789] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 911.929832][ T9789] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 911.949765][ T9789] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 911.959229][ T9789] usb 4-1: config 5 has no interface number 0 [ 911.966283][ T9789] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 911.978239][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 911.988828][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 912.001370][ T9789] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 912.015571][ T9789] usb 4-1: config 5 interface 228 has no altsetting 0 [ 912.108648][ T9789] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 912.121271][ T9789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 912.131491][ T9789] usb 4-1: SerialNumber: syz [ 912.204617][T29793] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 912.227351][T29793] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 912.279732][ T9789] hub 4-1:5.228: bad descriptor, ignoring hub [ 912.285960][ T9789] hub: probe of 4-1:5.228 failed with error -5 [ 912.526175][ T9789] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 116 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 912.580954][ T9789] usb 4-1: USB disconnect, device number 116 [ 912.595103][ T9789] usblp0: removed [ 913.150022][ T9789] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 913.438564][ T9789] usb 4-1: Using ep0 maxpacket: 8 [ 913.568507][ T9789] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 913.590810][ T9789] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 913.600239][ T9789] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 913.609502][ T9789] usb 4-1: config 5 has no interface number 0 [ 913.615939][ T9789] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 913.627558][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 913.637926][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 913.648371][ T9789] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 913.661972][ T9789] usb 4-1: config 5 interface 228 has no altsetting 0 [ 913.748742][ T9789] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 913.757975][ T9789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 913.768138][ T9789] usb 4-1: SerialNumber: syz 16:05:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b50e66be93e3777, r4}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl0\x00', r4, 0x29, 0x3, 0xa7, 0x0, 0x87, @private0, @empty, 0x40, 0x8, 0xfffffffe, 0x82a}}) r5 = socket(0x1d, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x1f, 0x9, 0x401, 0x20, @mcast2, @mcast1, 0x1, 0x8000, 0x400, 0x3}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=@expire={0x114, 0x18, 0x400, 0x70bd2b, 0x25dfdbff, {{{@in6=@empty, @in6=@loopback, 0x4e21, 0x0, 0x4e20, 0x9, 0xa, 0x0, 0x80, 0x2c, r6, r7}, {@in=@empty, 0x4d4, 0xff}, @in=@local, {0x400, 0x2, 0x6, 0x3749, 0x3, 0x5, 0x7449, 0xfffffffffffff800}, {0x0, 0x3261, 0xf5, 0x1}, {0x0, 0x0, 0x10000}, 0x70bd2d, 0x3503, 0x2, 0x3, 0x0, 0x20}, 0x4}, [@encap={0x1c, 0x4, {0x2, 0x4e20, 0x4e23, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}}]}, 0x114}, 0x1, 0x0, 0x0, 0xf5a738283da2b26a}, 0x40090) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@mcast1, 0x0, r1}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x95) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2, r1}) 16:05:23 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xe, &(0x7f0000000000), 0xdc) 16:05:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="15"], 0x2c}}, 0x0) 16:05:23 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind(r0, 0x0, 0x61) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@mcast1, @remote, @dev={0xfe, 0x80, [], 0x20}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, r3}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x4e20, 0x0, 0x4e22, 0x0, 0x2, 0xa0, 0x0, 0x11, r3}, {0x5, 0x6, 0x2b, 0x3, 0x0, 0x8, 0x84, 0x3}, {0x7ff, 0x2, 0xfffffffffffffffd, 0x10001}, 0x26cf6394, 0x6e6bbf, 0x1, 0x0, 0x0, 0x3}, {{@in6=@private1, 0x4d4, 0x3c}, 0xa, @in6=@loopback, 0x3503, 0x2, 0x2, 0xc0, 0x4, 0x40, 0x1}}, 0xe8) r4 = accept$inet6(r0, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001640)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001cc0)='batadv\x00', r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r3, 0x4, 0x96, 0x6f, 0x80000000, 0x1, @private2={0xfc, 0x2, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7800, 0x8533619d31b0fbbd, 0x4, 0x1}}) getsockopt$inet6_buf(r5, 0x29, 0xca, &(0x7f0000000280), &(0x7f00000002c0)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001640)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001cc0)='batadv\x00', r8) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000200"/72], 0x48) getsockopt$inet6_int(r7, 0x29, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 914.188514][ T9789] usb 4-1: can't set config #5, error -71 [ 914.216348][ T9789] usb 4-1: USB disconnect, device number 117 16:05:23 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000006580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x142, 0x0) 16:05:23 executing program 4: r0 = socket$inet(0x2, 0x6, 0x0) sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 16:05:23 executing program 1: prctl$PR_SET_SECCOMP(0x2, 0x0, 0x0) 16:05:23 executing program 2: prctl$PR_SET_MM(0x18, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:05:24 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) [ 914.908378][ T8] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 915.228493][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 915.348543][ T8] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 915.356963][ T8] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 915.377731][ T8] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 915.386921][ T8] usb 4-1: config 5 has no interface number 0 [ 915.397506][ T8] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 915.415251][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 915.425666][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 915.441473][ T8] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 915.457700][ T8] usb 4-1: config 5 interface 228 has no altsetting 0 [ 915.538499][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 915.547704][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 915.561390][ T8] usb 4-1: SerialNumber: syz [ 915.656503][T29872] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 915.677622][T29872] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 915.709838][ T8] hub 4-1:5.228: bad descriptor, ignoring hub [ 915.716081][ T8] hub: probe of 4-1:5.228 failed with error -5 [ 915.964094][ T8] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 118 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 916.025063][ T8] usb 4-1: USB disconnect, device number 118 [ 916.034703][ T8] usblp0: removed [ 916.558546][ T8] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 916.798642][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 916.928481][ T8] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 916.937015][ T8] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 916.947839][ T8] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 916.959269][ T8] usb 4-1: config 5 has no interface number 0 [ 916.965403][ T8] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 916.978539][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 916.989925][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 917.001308][ T8] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 917.016290][ T8] usb 4-1: config 5 interface 228 has no altsetting 0 [ 917.098632][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 917.107729][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 917.117404][ T8] usb 4-1: SerialNumber: syz [ 917.227267][T29872] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 917.265105][T29872] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 917.299906][ T8] hub 4-1:5.228: bad descriptor, ignoring hub [ 917.306128][ T8] hub: probe of 4-1:5.228 failed with error -5 16:05:27 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:27 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f00000000c0)={0x24, @short}, 0x14) 16:05:27 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) 16:05:27 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x7ffffffff000}, 0x1, 0x0, 0x34000}, 0x0) 16:05:27 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x8, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) [ 917.734410][ T8] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 119 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 16:05:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8922, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback}}) [ 917.859605][ T8] usb 4-1: USB disconnect, device number 119 16:05:27 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) [ 917.919498][ T8] usblp0: removed 16:05:27 executing program 2: select(0x40, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 16:05:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1}, 0x40) 16:05:27 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 918.110780][T29952] sit0: mtu greater than device maximum 16:05:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$khugepaged_scan(r0, 0x0, 0x0) [ 918.418843][ T8] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 918.678534][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 918.838676][ T8] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 918.847488][ T8] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 918.858893][ T8] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 918.867988][ T8] usb 4-1: config 5 has no interface number 0 [ 918.876511][ T8] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 918.894865][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 918.905877][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 918.916732][ T8] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 918.930658][ T8] usb 4-1: config 5 interface 228 has no altsetting 0 [ 919.028570][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 919.037697][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 919.055175][ T8] usb 4-1: SerialNumber: syz [ 919.143876][T29947] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 919.156447][T29947] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 919.189653][ T8] hub 4-1:5.228: bad descriptor, ignoring hub [ 919.195982][ T8] hub: probe of 4-1:5.228 failed with error -5 [ 919.440549][ T8] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 120 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 919.489456][ T8] usb 4-1: USB disconnect, device number 120 [ 919.507501][ T8] usblp0: removed [ 920.038653][ T8] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 920.278515][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 920.398562][ T8] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 920.410733][ T8] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 920.427033][ T8] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 920.447359][ T8] usb 4-1: config 5 has no interface number 0 [ 920.455100][ T8] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 920.467690][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 920.479335][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 920.490860][ T8] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 920.505129][ T8] usb 4-1: config 5 interface 228 has no altsetting 0 [ 920.588532][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 920.597789][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 920.608651][ T8] usb 4-1: SerialNumber: syz [ 920.705962][T29947] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 920.732848][T29947] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 920.759730][ T8] hub 4-1:5.228: bad descriptor, ignoring hub [ 920.766021][ T8] hub: probe of 4-1:5.228 failed with error -5 16:05:30 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000100)='L', 0x1}, {0x0}, {0x0}], 0x3, &(0x7f0000002640)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002740)="fb", 0x1}, {&(0x7f0000002880)}], 0x2}}], 0x2, 0x0) 16:05:30 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 16:05:30 executing program 2: mq_open(&(0x7f0000000140)='activeport\x00', 0x0, 0x0, &(0x7f0000000180)) 16:05:30 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x1267, 0x0) [ 921.222836][ T8] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 121 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 921.369457][ T8] usb 4-1: USB disconnect, device number 121 16:05:30 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) [ 921.430389][ T8] usblp0: removed 16:05:30 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) read$FUSE(r0, 0x0, 0x0) 16:05:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x0, 0x2}}}], 0x18}}], 0x1, 0x0) 16:05:30 executing program 4: select(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 16:05:30 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:31 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) [ 921.988464][ T8] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 922.278514][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 922.408485][ T8] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 922.416890][ T8] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 922.432516][ T8] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 922.442088][ T8] usb 4-1: config 5 has no interface number 0 [ 922.448207][ T8] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 922.466516][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 922.477305][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 922.488507][ T8] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 922.502076][ T8] usb 4-1: config 5 interface 228 has no altsetting 0 [ 922.594058][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 922.604114][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 922.613924][ T8] usb 4-1: SerialNumber: syz [ 922.677679][T30017] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 922.704015][T30017] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 922.739630][ T8] hub 4-1:5.228: bad descriptor, ignoring hub [ 922.747583][ T8] hub: probe of 4-1:5.228 failed with error -5 [ 922.994210][ T8] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 122 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 923.049589][ T8] usb 4-1: USB disconnect, device number 122 [ 923.071689][ T8] usblp0: removed [ 923.638427][ T8] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 923.878407][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 923.998565][ T8] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 924.007352][ T8] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 924.024219][ T8] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 924.037064][ T8] usb 4-1: config 5 has no interface number 0 [ 924.052695][ T8] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 924.066988][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 924.083381][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 924.093762][ T8] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 924.111640][ T8] usb 4-1: config 5 interface 228 has no altsetting 0 [ 924.198643][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 924.211307][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 924.228149][ T8] usb 4-1: SerialNumber: syz 16:05:34 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x70}}, 0x0) 16:05:34 executing program 4: prctl$PR_SET_MM(0x25, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:05:34 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:34 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x66, 0x2}]}}, &(0x7f0000002140)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 16:05:34 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) [ 924.678444][ T8] usb 4-1: can't set config #5, error -71 [ 924.698652][ T8] usb 4-1: USB disconnect, device number 123 16:05:34 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x10a00) 16:05:34 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x5000}, 0x0) 16:05:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x0) 16:05:34 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@volatile, @const, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "7d1c76"}) 16:05:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89b0, &(0x7f0000000440)={'sit0\x00', 0x0}) [ 925.408571][ T20] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 925.678529][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 925.818690][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 925.827099][ T20] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 925.838155][ T20] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 925.850541][ T20] usb 4-1: config 5 has no interface number 0 [ 925.857461][ T20] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 925.869465][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 925.880337][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 925.891230][ T20] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 925.905422][ T20] usb 4-1: config 5 interface 228 has no altsetting 0 [ 926.018773][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 926.027884][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 926.042286][ T20] usb 4-1: SerialNumber: syz [ 926.120610][T30088] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 926.139666][T30088] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 926.170026][ T20] hub 4-1:5.228: bad descriptor, ignoring hub [ 926.176234][ T20] hub: probe of 4-1:5.228 failed with error -5 [ 926.402272][ T20] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 124 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 926.469417][ T20] usb 4-1: USB disconnect, device number 124 [ 926.485567][ T20] usblp0: removed [ 927.058454][ T20] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 927.278621][ T9789] Bluetooth: hci0: command 0x0401 tx timeout [ 927.298411][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 927.446678][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 927.455176][ T20] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 927.464534][ T20] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 927.473854][ T20] usb 4-1: config 5 has no interface number 0 [ 927.480560][ T20] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 927.492122][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 927.503588][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 927.518136][ T20] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 927.531827][ T20] usb 4-1: config 5 interface 228 has no altsetting 0 [ 927.618657][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 927.627826][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 927.646682][ T20] usb 4-1: SerialNumber: syz [ 927.736190][T30088] raw-gadget gadget: fail, usb_ep_enable returned -22 16:05:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:37 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "7d1c76"}) 16:05:37 executing program 4: socket(0xf, 0x803, 0x0) 16:05:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'vlan1\x00', @local}) 16:05:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8907, 0x0) [ 928.090425][ T20] usb 4-1: can't set config #5, error -71 [ 928.111868][ T20] usb 4-1: USB disconnect, device number 125 16:05:37 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001280)={'ip6gre0\x00', &(0x7f0000001200)={'syztnl0\x00', 0x0, 0x4, 0xb3, 0xff, 0x800, 0x58, @private0, @rand_addr=' \x01\x00', 0x0, 0x8, 0x2, 0xfc}}) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001180)={&(0x7f0000000080)={0x10ec, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x60, 0x45, "e88d2c075bfb68a9ff7a1bed39bf22cb786ae6b20c1082561d5a08797ca433d8d00783d6091784e05ce0f19fb85ae29aba3d850e3b2550c9e016981fb4d810b32667edd3f318d93cd287932811752482c28e1efee683acf8642b5179"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x34, 0x45, "f120a0a99dd909c735a9d91af31658ea6cad0c4d7299bf02c9a09f3ed1f347a20e3eaf38c5aabec12a379c8ad13f2812"}, @NL80211_ATTR_TESTDATA={0x40, 0x45, "a9cb57300ba66dd2cebbeb63bb7d9ddf445a782ea26ea069a4f68ef90f06922d3693daab43aa4986e155167a6ed53a627d526bb149bdb7087c8e13b5"}]}, 0x10ec}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001340)={'syztnl1\x00', &(0x7f00000012c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x0, 0x20, @private1={0xfc, 0x1, [], 0x1}, @local, 0x10, 0x7800, 0x80000001, 0x8000}}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8943, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 16:05:37 executing program 4: socketpair(0x10, 0x2, 0xffffffff, &(0x7f0000000080)) 16:05:37 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:37 executing program 2: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3f, 0x0) 16:05:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "7d1c76"}) 16:05:38 executing program 4: prctl$PR_SET_MM(0x59616d61, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 928.820382][ T8] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 929.151621][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 929.308479][ T8] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 929.316874][ T8] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 929.327981][ T8] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 929.339657][ T8] usb 4-1: config 5 has no interface number 0 [ 929.345887][ T8] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 929.359384][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 929.378307][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 929.390038][ T8] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 929.403559][ T8] usb 4-1: config 5 interface 228 has no altsetting 0 [ 929.498643][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 929.511247][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 929.521327][ T8] usb 4-1: SerialNumber: syz [ 929.590768][T30152] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 929.614420][T30152] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 929.629773][ T8] hub 4-1:5.228: bad descriptor, ignoring hub [ 929.636068][ T8] hub: probe of 4-1:5.228 failed with error -5 [ 929.882595][ T8] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 126 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 929.949534][ T8] usb 4-1: USB disconnect, device number 126 [ 929.966318][ T8] usblp0: removed [ 930.318496][ T9789] Bluetooth: hci0: command 0x0401 tx timeout [ 930.548354][ T8] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 930.788327][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 930.928555][ T8] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 930.940505][ T8] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 930.951782][ T8] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 930.962569][ T8] usb 4-1: config 5 has no interface number 0 [ 930.970529][ T8] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 930.983999][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 930.995660][ T8] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 931.006339][ T8] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 931.019939][ T8] usb 4-1: config 5 interface 228 has no altsetting 0 [ 931.098521][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 931.107616][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 931.124401][ T8] usb 4-1: SerialNumber: syz [ 931.359718][ T3248] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.366073][ T3248] ieee802154 phy1 wpan1: encryption failed: -22 16:05:40 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "7d1c76"}) 16:05:40 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x3, &(0x7f0000000200)=[{0x5}, {}, {}]}) 16:05:40 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@volatile, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:40 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000440)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "98daf0c8"}, 0x0, 0x0, @planes=0x0}) 16:05:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) [ 931.539899][ T8] usb 4-1: can't set config #5, error -71 [ 931.593904][ T8] usb 4-1: USB disconnect, device number 127 16:05:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000025001f"], 0x24}}, 0x0) 16:05:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x6, 0x4) 16:05:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480), 0x13f}}, 0x20) 16:05:41 executing program 1: r0 = socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r0) 16:05:41 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:41 executing program 2: r0 = socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r0) [ 932.328519][ T9781] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 932.398512][ T9789] Bluetooth: hci0: command 0x0401 tx timeout [ 932.598538][ T9781] usb 4-1: Using ep0 maxpacket: 8 [ 932.731039][ T9781] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 932.739564][ T9781] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 932.750340][ T9781] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 932.760390][ T9781] usb 4-1: config 5 has no interface number 0 [ 932.766488][ T9781] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 932.779949][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 932.791598][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 932.803280][ T9781] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 932.817887][ T9781] usb 4-1: config 5 interface 228 has no altsetting 0 [ 932.904186][ T9781] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 932.923731][ T9781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 932.934013][ T9781] usb 4-1: SerialNumber: syz [ 933.045132][T30229] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 933.094135][T30229] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 933.177208][ T9781] hub 4-1:5.228: bad descriptor, ignoring hub [ 933.185918][ T9781] hub: probe of 4-1:5.228 failed with error -5 [ 933.423956][ T9781] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 933.479513][ T9781] usb 4-1: USB disconnect, device number 2 [ 933.499416][ T9781] usblp0: removed [ 934.008373][ T9781] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 934.258431][ T9781] usb 4-1: Using ep0 maxpacket: 8 [ 934.378581][ T9781] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 934.386987][ T9781] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 934.397807][ T9781] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 934.407772][ T9781] usb 4-1: config 5 has no interface number 0 [ 934.414702][ T9781] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 934.427318][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 934.438933][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 934.450228][ T9781] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 934.465059][ T9781] usb 4-1: config 5 interface 228 has no altsetting 0 [ 934.478719][ T9789] Bluetooth: hci0: command 0x0401 tx timeout [ 934.548682][ T9781] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 934.557776][ T9781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 934.577954][ T9781] usb 4-1: SerialNumber: syz 16:05:44 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:44 executing program 4: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) 16:05:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x723}, 0x14}}, 0x0) 16:05:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xe0}, 0x40) 16:05:44 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x8901) 16:05:44 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 935.002548][ T9781] usb 4-1: can't set config #5, error -71 [ 935.040286][ T9781] usb 4-1: USB disconnect, device number 3 16:05:44 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, 0x0, &(0x7f00000001c0)) 16:05:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x0) 16:05:44 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:44 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)=ANY=[]) 16:05:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x16, &(0x7f0000000100), 0x4) 16:05:44 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 16:05:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) 16:05:45 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x2, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}}, 0x0, 0xce}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) 16:05:45 executing program 4: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x2000)=nil) [ 935.739181][ T9789] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 936.036666][ T9789] usb 4-1: Using ep0 maxpacket: 8 [ 936.248721][ T9789] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 936.257121][ T9789] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 936.272115][ T9789] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 936.282403][ T9789] usb 4-1: config 5 has no interface number 0 [ 936.296342][ T9789] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 936.309644][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 936.321975][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 936.334929][ T9789] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 936.351528][ T9789] usb 4-1: config 5 interface 228 has no altsetting 0 [ 936.438554][ T9789] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 936.447806][ T9789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 936.464087][ T9789] usb 4-1: SerialNumber: syz [ 936.592879][T30297] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 936.624940][T30297] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 936.649673][ T9789] hub 4-1:5.228: bad descriptor, ignoring hub [ 936.655882][ T9789] hub: probe of 4-1:5.228 failed with error -5 [ 936.923180][ T9789] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 936.970201][ T9789] usb 4-1: USB disconnect, device number 4 [ 936.989529][ T9789] usblp0: removed [ 937.528391][ T9789] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 937.798399][ T9789] usb 4-1: Using ep0 maxpacket: 8 [ 937.950235][ T9789] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 937.958792][ T9789] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 937.967599][ T9789] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 937.979586][ T9789] usb 4-1: config 5 has no interface number 0 [ 937.985841][ T9789] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 937.999163][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 938.010852][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 938.023113][ T9789] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 938.037431][ T9789] usb 4-1: config 5 interface 228 has no altsetting 0 16:05:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2272, 0x0) 16:05:47 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) 16:05:47 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x2, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}}, 0x0, 0xce}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:47 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x2, 0x0, @remote}, 0x10) 16:05:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x1, 0x4) [ 938.468519][ T9789] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 938.477615][ T9789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 938.548486][ T9789] usb 4-1: can't set config #5, error -71 [ 938.567951][ T9789] usb 4-1: USB disconnect, device number 5 16:05:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000100)=0x2, 0x4) 16:05:48 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x2, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}}, 0x0, 0xce}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:48 executing program 2: prctl$PR_SET_MM(0x10, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:05:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8918, 0x0) 16:05:48 executing program 4: r0 = fork() wait4(r0, 0x0, 0x9, &(0x7f0000000040)) 16:05:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vcan0\x00'}) [ 939.118448][ T9781] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 939.368458][ T9781] usb 4-1: Using ep0 maxpacket: 8 [ 939.599438][ T9781] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 939.607834][ T9781] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 939.628478][ T9781] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 939.637560][ T9781] usb 4-1: config 5 has no interface number 0 [ 939.647259][ T9781] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 939.658885][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 939.669676][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 939.681899][ T9781] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 939.703254][ T9781] usb 4-1: config 5 interface 228 has no altsetting 0 [ 939.808590][ T9781] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 939.817683][ T9781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 939.832769][ T9781] usb 4-1: SerialNumber: syz [ 939.911564][T30372] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 939.932648][T30372] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 939.959545][ T9781] hub 4-1:5.228: bad descriptor, ignoring hub [ 939.966181][ T9781] hub: probe of 4-1:5.228 failed with error -5 [ 940.219997][ T9781] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 940.303631][ T9781] usb 4-1: USB disconnect, device number 6 [ 940.312169][ T9781] usblp0: removed [ 940.828440][ T9781] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 941.068415][ T9781] usb 4-1: Using ep0 maxpacket: 8 [ 941.188477][ T9781] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 941.196906][ T9781] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 941.208055][ T9781] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 941.220095][ T9781] usb 4-1: config 5 has no interface number 0 [ 941.226268][ T9781] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 941.238788][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 941.249614][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 941.260558][ T9781] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 941.274649][ T9781] usb 4-1: config 5 interface 228 has no altsetting 0 [ 941.358558][ T9781] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 941.367673][ T9781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 941.387084][ T9781] usb 4-1: SerialNumber: syz [ 941.492921][T30372] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 941.516578][T30372] raw-gadget gadget: fail, usb_ep_enable returned -22 16:05:51 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8906, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x34f8, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x40}}}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xae, 0x45, "16713c2b85d98fe6756d5e91310e5f698e634f44c46e87545455d85e2073a7d0ca3a4f0dbf56ab36f6fedaf36795fa33052116be2e84840cbaaa0df1a81be5c27ad509ff695efd58614168a83f3a5f5af50d240fe9b7a00ee64ffd04c9d38e060cffa2965528c69a58868145ebc0a95cd4072409ea996c78bfde5c67d3319790c51cdb8be44ddabf90c89a646aea26fd47a4807418be4ba2f9cf398809066b96576189184b0e65049266"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xe4, 0x45, "dbc322dff2ca28e583917ed3d72d6a6736e183ebb2e67397b2828dd0e0104fd4a626590206c57a15ddcacfb524a2fc9e2580ca2eecd665475d402e68108ae1ae4795bf797c30127d7396cf8877e25a0b86031ca993817a868bc23168e0fa6b35e77d03e679556a2604426c0cd0a9fa924319bb134952df6f78487f3c55e8cddf83b0a53b76310dffc0502c4e30a0ae85f826790c76db31bcf5d533916f1dd0da1074de8efdf9362d6658ce82a97cdba284cec5b4c6250e27e999fbbe5e78079ed3a940ac928418d08534f2a7f1602feb927ede337ad4d22628e30c8a17e7ec92"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xda, 0x45, "3137eca3e25d60a186fe7f1531dff83fd457c1a0df9209039fe0f6f4326a18316d77c9a19c44af9baed080779af7cafb2807d8cbacefa6d0b0faac3458653e5a81f93c9209077ad3fda014accf03d35c5d0a677b828c2f7d751185e8c0b1e308d5c44936f1c80edf1d99b5ab150b7e9c7d79e674b9739b4d688ad610b212b1e44874be3ebfb286dca4e78e186e0a61e80b7404f303b79619f120b1c02ebe7131b9ec4edde4f2360057b0d672235ab258b689a588f4c78a99f0f833e4b1aa139e954f50db17499dc65c3a4b583d0f27af279a6fd5926d"}, @NL80211_ATTR_TESTDATA={0xda, 0x45, "d7f417e59f9baf36ff48fbbe0b1f644529435d4258b77c84ba17a93dbfb2064ddc4e9b4db8da894d79e03cc28e08eb595819e7bf52ceae91aad952ba4efdf7aba1be6b160b16e1e3aa128e259966e613816a3a0c687a8dd3856e5bdbe17d02977f01c8c01b6f27433e52c07d1d6f9e14ac6e8de3c06c83768f025237dc9452297f77969b52ddc0af305261596f8685628f5c7e9543000b9b74bf190c9837141a117c82b13ef583a0bc6c672fd8f42e8c356b950b3acdc2d342a2cf071b5fb040b5ef18ba7744720412cbc44d5e858aa9dc18981830e6"}, @NL80211_ATTR_TESTDATA={0xc2, 0x45, "90342d077450536c57aa04b5ca7a5bb8e9865760a23e2e6fb132f8ffdb97bb4c52793e3696db11443132aa72ba7ac7838fcc385d5a7e6a57936d31147d960e0c0ff8b09954a16f1c08eeb123365e9b9a4c6b88d2c7d24296956e6590e4a27af36269eedf1b043306c8f2463830932d920d232a8735e3869fc2fba5348f5d3db0457c8519eb9466d2c8bac56b8f9eecbbc079ac3037a87901e42194261166722b0422e015addc45bf1aad0f66d3efa3d9365baa840878b76af3137e9f413a"}, @NL80211_ATTR_TESTDATA={0xbc, 0x45, "cda78eeb0c0ca1a7df245bc8dd18aeae12db77abb917c12f90633d182a842986f173c617047660cbdbbd76cda8300b7f44884b76c5dfbff5904249395ee36e4a5bc0216edc7a1c2850eb93a65746e04212f2edd1e63d1ebd2866c7c343c0970a73542376e47070b7b262736033e092ac41f7c31cb93526ad295194b8a4408d661ccbb02443e14b1506b49665bce56ad4f307f926a6ad77a6eac1f88b937f503a7ddb71d8e5e6497cda8169d72daec12cee43b45aa137c8d9"}]}, 0x34f8}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0xfffd, 0x1a}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00', r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0xff, 0xff, 0xffff, 0x0, @ipv4={[], [], @multicast1}, @private1, 0x40, 0x10, 0x4, 0x45a91b37}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', r2, 0x4, 0x0, 0x5, 0x61a, 0x18, @mcast1, @loopback, 0x48, 0x700, 0x8000, 0x3}}) 16:05:51 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:51 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "91571de6"}, 0x0, 0x0, @userptr}) 16:05:51 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 16:05:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x2}, 0x40) [ 941.888523][ T9781] usb 4-1: can't set config #5, error -71 [ 941.897811][ T9781] usb 4-1: USB disconnect, device number 7 16:05:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="60e88e6e1f978b8d887609c13117b154278beb816ca3c9ed1a6d454951365b518c46ee84b70ba0c6b8b1f4fd99757377dff7afcd3136e972b66769bd73803d3e47b7a36cd6fb02a7b9db93a5307dbcfffc2d51d7138cc295ba8d8afe623d79a39225d19cdd9578a36c71753c76a342b4c593ae38aaa3", 0x76}, {&(0x7f00000001c0)="27217af087a9264954dd160362fda4b482ccaa544344e2d7e3f46f8d9ff9cf315a2be53344cf5994fb243ec93b2f3ed10b5d0826da36d469213654e88850bcf33266a0eb002dc9bca32062ab327b81c07df4e6e25e603f3f040e0ad0782f33bafcc56b96def4eef2a470d4b9d649955b1a1e2b4b71843a51c3dabde8cf85c3949c6f9d6656d09998efbab2d0608a736e4e9bde0fdace9e1c03983ceeda5887f470cc72c5941d5b767978e752483cf0e9f24594226657fa0d45bba820", 0xbc}, {&(0x7f0000000280)="4dee37271a02d51722843ee02a2527dd92ed8170e07f76c5bab4611c066be14f3c03494753488154694a48faf3eb81a6f4f2f5c5c099a6798e62e298383868645bc6fb3f315b1ba565d24c3e92539e04c78f835fbb9325c26092efc8d9f55a67649fe35cc6c4303b52950356ee852a7e29586f4e5fb2224121f06edac9c92461ad", 0x81}, {&(0x7f0000000340)="e6b4411b4a1968fff27f6fdf41a50d3495146fc8efe1720cc5249290149b63fb866f3d8da7bf0cd49d08dc50a6729b2d9190afbca9a939bf4e260e190463786f72bb0ed084cd60c0", 0x48}, {&(0x7f00000003c0)="13bf8a78bd444070e072c581c60bb3511dbd9e1dc451718db62414dde520a6b8867a63e6d050a5b0aab76f58f8aed2d8db0941883992a15e8a7089ec78df43988e91fe2bb166368bed15160faa0e3f09c720baa198e6edf6d7ae482281b391f86ac545c47a5f059ca9e055ccb59dbdd99c14393c46fc1bea32bf7ce699a4d8fe211650c494b5a5d3fb9c159f7d757cc5546b304cf6dff9d16d7a04fec5c4db9d1342f84513da83c42c69a36d", 0xac}, {&(0x7f0000000480)="1ae40bb456d28bd855b467f28d4b6f426c91d32331e9eb296806aef95113a2f6bb2b06631ffebb3e3bb91ccdf7756ec3c94613e045b73eca5115719c2f997497d70eabd258cf7260ea43b7cee803fa7e65e025616b9f4aa98f78f1ba224849f6a3a046262a63bd71092d8392282cf98634129ab1850023b1b0ccba321eae5d50da738340ce7cae4593a24f274411cef86833f5286dd3aa17dcb04d4b46d44764072d2b009c910737d023dccfc9df0b99", 0xb0}], 0x6, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x10000}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x29, 0x6, 0x0, 0x1d, 0x0, [@remote, @remote, @private0={0xfc, 0x0, [], 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @private=0xa010101}}}}], 0x88}}], 0x1, 0x8081) 16:05:51 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:51 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000680)={&(0x7f0000000000)=@caif=@rfm={0x25, 0x0, "4efaff78ec6aafa5ec6b327958d58741"}, 0x80, 0x0}, 0x0) bind(r0, 0x0, 0x0) 16:05:51 executing program 1: prctl$PR_SET_MM(0x1e, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:05:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}}, 0x0) 16:05:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2201, 0x0) [ 942.639136][ T20] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 942.938421][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 943.058556][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 943.073783][ T20] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 943.082966][ T20] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 943.092953][ T20] usb 4-1: config 5 has no interface number 0 [ 943.099571][ T20] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 943.111392][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 943.122308][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 943.133291][ T20] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 943.146801][ T20] usb 4-1: config 5 interface 228 has no altsetting 0 [ 943.228695][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 943.241801][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 943.262058][ T20] usb 4-1: SerialNumber: syz [ 943.393880][T30447] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 943.457678][T30447] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 943.495489][ T20] hub 4-1:5.228: bad descriptor, ignoring hub [ 943.519201][ T20] hub: probe of 4-1:5.228 failed with error -5 [ 943.734143][ T20] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 944.088310][ C0] usblp0: nonzero read bulk status received: -71 [ 944.223654][T30447] udc-core: couldn't find an available UDC or it's busy [ 944.231383][T30447] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 944.279825][ T9781] usb 4-1: USB disconnect, device number 8 [ 944.287314][ T9781] usblp0: removed 16:05:54 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:54 executing program 2: r0 = socket(0x2, 0x803, 0x4) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) 16:05:54 executing program 1: keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)='\\', 0x1}, {0x0}], 0x2, 0x0) 16:05:54 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 16:05:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2275, 0x0) 16:05:54 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) 16:05:54 executing program 0: r0 = fork() syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) fork() sched_getattr(r0, &(0x7f0000000080)={0x38}, 0x38, 0x0) 16:05:54 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000), 0x10) 16:05:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 16:05:54 executing program 1: request_key(&(0x7f0000000500)='logon\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100), 0x0) 16:05:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 945.449307][ T9778] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 945.718414][ T9778] usb 4-1: Using ep0 maxpacket: 8 [ 945.946358][ T9778] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 945.965863][ T9778] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 946.003680][ T9778] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 946.028392][ T9778] usb 4-1: config 5 has no interface number 0 [ 946.052082][ T9778] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 946.098746][ T9778] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 946.128549][ T9778] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 946.168307][ T9778] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 946.208307][ T9778] usb 4-1: config 5 interface 228 has no altsetting 0 [ 946.330672][ T9778] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 946.368290][ T9778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 946.376331][ T9778] usb 4-1: SerialNumber: syz [ 946.497900][T30514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 946.540464][T30514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 946.599828][ T9778] hub 4-1:5.228: bad descriptor, ignoring hub [ 946.606033][ T9778] hub: probe of 4-1:5.228 failed with error -5 [ 946.853340][ T9778] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 947.248376][ C0] usblp0: nonzero read bulk status received: -71 [ 947.354758][T30514] udc-core: couldn't find an available UDC or it's busy [ 947.381145][T30514] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 947.418808][ T8] usb 4-1: USB disconnect, device number 9 [ 947.426573][ T8] usblp0: removed 16:05:57 executing program 4: r0 = socket(0x2, 0x803, 0x4) recvmsg$can_bcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 16:05:57 executing program 2: prctl$PR_SET_MM(0xe, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:05:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)) 16:05:57 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:57 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 16:05:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:05:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="159b"], 0x2c}}, 0x0) 16:05:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}}, 0x0) 16:05:57 executing program 4: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)=ANY=[]) 16:05:57 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) 16:05:57 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000010c0)={0x0}) 16:05:57 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:05:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000180), 0x4) 16:05:57 executing program 4: r0 = socket(0x2, 0x803, 0x4) bind$can_raw(r0, 0x0, 0x0) 16:05:57 executing program 1: r0 = socket(0x2, 0x803, 0x4) recvmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x41) 16:05:58 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x15}]}) [ 948.608506][ T9778] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 948.878561][ T9778] usb 4-1: Using ep0 maxpacket: 8 [ 949.078504][ T9778] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 949.086895][ T9778] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 949.105290][ T9778] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 949.116336][ T9778] usb 4-1: config 5 has no interface number 0 [ 949.133160][ T9778] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 949.147392][ T9778] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 949.163090][ T9778] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 949.173626][ T9778] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 949.191691][ T9778] usb 4-1: config 5 interface 228 has no altsetting 0 [ 949.283269][ T9778] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 949.292597][ T9778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 949.301788][ T9778] usb 4-1: SerialNumber: syz [ 949.362042][T30577] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 949.384749][T30577] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 949.419518][ T9778] hub 4-1:5.228: bad descriptor, ignoring hub [ 949.425708][ T9778] hub: probe of 4-1:5.228 failed with error -5 [ 949.684811][ T9778] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 950.048315][ C1] usblp0: nonzero read bulk status received: -71 [ 950.173324][T30577] udc-core: couldn't find an available UDC or it's busy [ 950.180632][T30577] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 950.198201][ T9778] usb 4-1: USB disconnect, device number 10 [ 950.208079][ T9778] usblp0: removed 16:06:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f0000000440)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000063c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x13, 0x7, 0x0, @private0, @loopback, 0x7800, 0x7800, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', r1, 0x4, 0x3, 0x40, 0x4e0, 0x20, @remote, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x41}}, 0x40, 0x40, 0x7f, 0x209}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000006480)={'sit0\x00', r2, 0x2f, 0xff, 0x6, 0x3f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x10, 0x1, 0x9}}) r3 = socket(0xf729648e3c5de4fa, 0x80000, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x7, @remote, 0x7}}, 0x7, 0xfc00, 0x80000000, 0x5, 0x12, 0xa5a, 0x2}, &(0x7f0000000240)=0x9c) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040095}, 0x40000) recvmmsg(r4, &(0x7f00000059c0)=[{{&(0x7f0000002f00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000003380)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x92, &(0x7f0000005a80)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x479a, 0x2, 0x2, 0x7f, 0x7}, 0x14) 16:06:00 executing program 0: add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) 16:06:00 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:00 executing program 1: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)=ANY=[@ANYBLOB='fd=']) 16:06:00 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 16:06:00 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 950.848863][T30639] fuse: Bad value for 'fd' 16:06:00 executing program 0: r0 = getpid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f00000002c0)) [ 950.884427][T30639] fuse: Bad value for 'fd' 16:06:00 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@private1}, 0x14) 16:06:00 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8927, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:06:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2287, 0x0) 16:06:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x21, 0x0, 0x0) 16:06:00 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x321000) 16:06:00 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 951.388560][ T20] usb 4-1: new high-speed USB device number 11 using dummy_hcd 16:06:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000100)=0x2, 0x4) 16:06:01 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) 16:06:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x5, @remote, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="60e88e6e1f978b8d887609c13117b154278beb816ca3c9ed1a6d454951365b518c46ee84b70ba0c6b8b1f4fd99757377dff7afcd3136e972b66769bd73803d3e47b7a36cd6fb02a7b9db93a5307dbcfffc2d51d7138cc295ba8d8afe623d79a39225d19cdd9578a36c71753c76a342b4c593ae38aaa3", 0x76}, {&(0x7f00000001c0)="27217af087a9264954dd160362fda4b482ccaa544344e2d7e3f46f8d9ff9cf315a2be53344cf5994fb243ec93b2f3ed10b5d0826da36d469213654e88850bcf33266a0eb002dc9bca32062ab327b81c07df4e6e25e603f3f040e0ad0782f33bafcc56b96def4eef2a470d4b9d649955b1a1e2b4b71843a51c3dabde8cf85c3949c6f9d6656d09998efbab2d0608a736e4e9bde0fdace9e1c03983ceeda5887f470cc72c5941d5b767978e752483cf0e9f24594226657fa0d45bba820", 0xbc}, {&(0x7f0000000280)="4dee37271a02d51722843ee02a2527dd92ed8170e07f76c5bab4611c066be14f3c03494753488154694a48faf3eb81a6f4f2f5c5c099a6798e62e298383868645bc6fb3f315b1ba565d24c3e92539e04c78f835fbb9325c26092efc8d9f55a67649fe35cc6c4303b52950356ee852a7e29586f4e5fb2224121f06edac9c92461ad", 0x81}, {&(0x7f0000000340)="e6b4411b4a1968fff27f6fdf41a50d3495146fc8efe1720cc5249290149b63fb866f3d8da7bf0cd49d08dc50a6729b2d9190afbca9a939bf4e260e190463786f72bb0ed084cd60c0", 0x48}, {&(0x7f00000003c0)="13bf8a78bd444070e072c581c60bb3511dbd9e1dc451718db62414dde520a6b8867a63e6d050a5b0aab76f58f8aed2d8db0941883992a15e8a7089ec78df43988e91fe2bb166368bed15160faa0e3f09c720baa198e6edf6d7ae482281b391f86ac545c47a5f059ca9e055ccb59dbdd99c14393c46fc1bea32bf7ce699a4d8fe211650c494b5a5d3fb9c159f7d757cc5546b304cf6dff9d16d7a04fec5c4db9d1342f84513da83c42c69a36d", 0xac}, {&(0x7f0000000480)="1ae40bb456d28bd855b467f28d4b6f426c91d32331e9eb296806aef95113a2f6bb2b06631ffebb3e3bb91ccdf7756ec3c94613e045b73eca5115719c2f997497d70eabd258cf7260ea43b7cee803fa7e65e025616b9f4aa98f78f1ba224849f6a3a046262a63bd71092d8392282cf98634129ab1850023b1b0ccba321eae5d50da738340ce7cae4593a24f274411cef86833f5286dd3aa17dcb04d4b46d44764072d2b009c910737d023dccfc9df0b99", 0xb0}, {&(0x7f0000000a40)="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", 0x162}], 0x7}}], 0x1, 0x0) [ 951.658504][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 951.898497][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 951.938321][ T20] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 951.947174][ T20] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 951.968351][ T20] usb 4-1: config 5 has no interface number 0 [ 951.975140][ T20] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 951.989009][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 952.000961][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 952.018361][ T20] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 952.033614][ T20] usb 4-1: config 5 interface 228 has no altsetting 0 [ 952.158512][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 952.167619][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 952.201549][ T20] usb 4-1: SerialNumber: syz [ 952.298897][T30645] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 952.322588][T30645] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 952.339549][ T20] hub 4-1:5.228: bad descriptor, ignoring hub [ 952.345755][ T20] hub: probe of 4-1:5.228 failed with error -5 [ 952.634329][ T20] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 957.315855][ T9781] usb 4-1: USB disconnect, device number 11 [ 957.336331][ T9781] usblp0: removed 16:06:07 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:06:07 executing program 0: socketpair(0x21, 0x0, 0x2, &(0x7f0000001cc0)) 16:06:07 executing program 2: memfd_create(&(0x7f0000000000)='!({@-:\x00', 0x3) 16:06:07 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xe, &(0x7f0000000100), 0x4) 16:06:07 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x5, @remote, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="60e88e6e1f978b8d887609c13117b154278beb816ca3c9ed1a6d454951365b518c46ee84b70ba0c6b8b1f4fd99757377dff7afcd3136e972b66769bd73803d3e47b7a36cd6fb02a7b9db93a5307dbcfffc2d51d7138cc295ba8d8afe623d79a39225d19cdd9578a36c71753c76a342b4c593ae38aaa3", 0x76}, {&(0x7f00000001c0)="27217af087a9264954dd160362fda4b482ccaa544344e2d7e3f46f8d9ff9cf315a2be53344cf5994fb243ec93b2f3ed10b5d0826da36d469213654e88850bcf33266a0eb002dc9bca32062ab327b81c07df4e6e25e603f3f040e0ad0782f33bafcc56b96def4eef2a470d4b9d649955b1a1e2b4b71843a51c3dabde8cf85c3949c6f9d6656d09998efbab2d0608a736e4e9bde0fdace9e1c03983ceeda5887f470cc72c5941d5b767978e752483cf0e9f24594226657fa0d45bba820", 0xbc}, {&(0x7f0000000280)="4dee37271a02d51722843ee02a2527dd92ed8170e07f76c5bab4611c066be14f3c03494753488154694a48faf3eb81a6f4f2f5c5c099a6798e62e298383868645bc6fb3f315b1ba565d24c3e92539e04c78f835fbb9325c26092efc8d9f55a67649fe35cc6c4303b52950356ee852a7e29586f4e5fb2224121f06edac9c92461ad", 0x81}, {&(0x7f0000000340)="e6b4411b4a1968fff27f6fdf41a50d3495146fc8efe1720cc5249290149b63fb866f3d8da7bf0cd49d08dc50a6729b2d9190afbca9a939bf4e260e190463786f72bb0ed084cd60c0", 0x48}, {&(0x7f00000003c0)="13bf8a78bd444070e072c581c60bb3511dbd9e1dc451718db62414dde520a6b8867a63e6d050a5b0aab76f58f8aed2d8db0941883992a15e8a7089ec78df43988e91fe2bb166368bed15160faa0e3f09c720baa198e6edf6d7ae482281b391f86ac545c47a5f059ca9e055ccb59dbdd99c14393c46fc1bea32bf7ce699a4d8fe211650c494b5a5d3fb9c159f7d757cc5546b304cf6dff9d16d7a04fec5c4db9d1342f84513da83c42c69a36d", 0xac}, {&(0x7f0000000480)="1ae40bb456d28bd855b467f28d4b6f426c91d32331e9eb296806aef95113a2f6bb2b06631ffebb3e3bb91ccdf7756ec3c94613e045b73eca5115719c2f997497d70eabd258cf7260ea43b7cee803fa7e65e025616b9f4aa98f78f1ba224849f6a3a046262a63bd71092d8392282cf98634129ab1850023b1b0ccba321eae5d50da738340ce7cae4593a24f274411cef86833f5286dd3aa17dcb04d4b46d44764072d2b009c910737d023dccfc9df0b99", 0xb0}, {&(0x7f0000000a40)="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", 0x162}], 0x7}}], 0x1, 0x0) 16:06:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x891e, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:06:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x401, 0x4) 16:06:07 executing program 1: memfd_create(&(0x7f0000000080)='l2tp\x00', 0x4) 16:06:07 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:07 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:07 executing program 0: fork() r0 = fork() wait4(r0, 0x0, 0x8, 0x0) [ 958.358380][ T9789] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 958.628509][ T9789] usb 4-1: Using ep0 maxpacket: 8 [ 958.753900][ T9789] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 958.762377][ T9789] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 958.772046][ T9789] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 958.781800][ T9789] usb 4-1: config 5 has no interface number 0 [ 958.787943][ T9789] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 958.799907][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 958.810778][ T9789] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 958.821827][ T9789] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 958.836106][ T9789] usb 4-1: config 5 interface 228 has no altsetting 0 [ 958.944680][ T9789] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 958.953886][ T9789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 958.962641][ T9789] usb 4-1: SerialNumber: syz [ 959.074291][T30730] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 959.107082][T30730] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 959.150257][ T9789] hub 4-1:5.228: bad descriptor, ignoring hub [ 959.156457][ T9789] hub: probe of 4-1:5.228 failed with error -5 [ 959.391814][ T9789] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 964.102330][ T9789] usb 4-1: USB disconnect, device number 12 [ 964.170373][ T9789] usblp0: removed 16:06:13 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 16:06:13 executing program 1: r0 = socket(0x2, 0x803, 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) 16:06:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2270, 0x0) 16:06:13 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x5, @remote, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="60e88e6e1f978b8d887609c13117b154278beb816ca3c9ed1a6d454951365b518c46ee84b70ba0c6b8b1f4fd99757377dff7afcd3136e972b66769bd73803d3e47b7a36cd6fb02a7b9db93a5307dbcfffc2d51d7138cc295ba8d8afe623d79a39225d19cdd9578a36c71753c76a342b4c593ae38aaa3", 0x76}, {&(0x7f00000001c0)="27217af087a9264954dd160362fda4b482ccaa544344e2d7e3f46f8d9ff9cf315a2be53344cf5994fb243ec93b2f3ed10b5d0826da36d469213654e88850bcf33266a0eb002dc9bca32062ab327b81c07df4e6e25e603f3f040e0ad0782f33bafcc56b96def4eef2a470d4b9d649955b1a1e2b4b71843a51c3dabde8cf85c3949c6f9d6656d09998efbab2d0608a736e4e9bde0fdace9e1c03983ceeda5887f470cc72c5941d5b767978e752483cf0e9f24594226657fa0d45bba820", 0xbc}, {&(0x7f0000000280)="4dee37271a02d51722843ee02a2527dd92ed8170e07f76c5bab4611c066be14f3c03494753488154694a48faf3eb81a6f4f2f5c5c099a6798e62e298383868645bc6fb3f315b1ba565d24c3e92539e04c78f835fbb9325c26092efc8d9f55a67649fe35cc6c4303b52950356ee852a7e29586f4e5fb2224121f06edac9c92461ad", 0x81}, {&(0x7f0000000340)="e6b4411b4a1968fff27f6fdf41a50d3495146fc8efe1720cc5249290149b63fb866f3d8da7bf0cd49d08dc50a6729b2d9190afbca9a939bf4e260e190463786f72bb0ed084cd60c0", 0x48}, {&(0x7f00000003c0)="13bf8a78bd444070e072c581c60bb3511dbd9e1dc451718db62414dde520a6b8867a63e6d050a5b0aab76f58f8aed2d8db0941883992a15e8a7089ec78df43988e91fe2bb166368bed15160faa0e3f09c720baa198e6edf6d7ae482281b391f86ac545c47a5f059ca9e055ccb59dbdd99c14393c46fc1bea32bf7ce699a4d8fe211650c494b5a5d3fb9c159f7d757cc5546b304cf6dff9d16d7a04fec5c4db9d1342f84513da83c42c69a36d", 0xac}, {&(0x7f0000000480)="1ae40bb456d28bd855b467f28d4b6f426c91d32331e9eb296806aef95113a2f6bb2b06631ffebb3e3bb91ccdf7756ec3c94613e045b73eca5115719c2f997497d70eabd258cf7260ea43b7cee803fa7e65e025616b9f4aa98f78f1ba224849f6a3a046262a63bd71092d8392282cf98634129ab1850023b1b0ccba321eae5d50da738340ce7cae4593a24f274411cef86833f5286dd3aa17dcb04d4b46d44764072d2b009c910737d023dccfc9df0b99", 0xb0}, {&(0x7f0000000a40)="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", 0x162}], 0x7}}], 0x1, 0x0) 16:06:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x15, &(0x7f0000000100), 0x4) 16:06:14 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 16:06:14 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}, r1}}, 0x30) 16:06:14 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000240)=0x8, 0x4) 16:06:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2283, 0x0) 16:06:14 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 965.156355][ T20] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 965.458405][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 965.588806][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 965.597234][ T20] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 965.616827][ T20] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 965.627105][ T20] usb 4-1: config 5 has no interface number 0 [ 965.638305][ T20] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 965.654257][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 965.664675][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 965.681461][ T20] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 965.695669][ T20] usb 4-1: config 5 interface 228 has no altsetting 0 [ 965.798458][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 965.807733][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 965.817946][ T20] usb 4-1: SerialNumber: syz [ 965.910375][T30798] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 965.936402][T30798] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 965.949589][ T20] hub 4-1:5.228: bad descriptor, ignoring hub [ 965.956597][ T20] hub: probe of 4-1:5.228 failed with error -5 [ 966.194699][ T20] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 970.875151][ T9778] usb 4-1: USB disconnect, device number 13 [ 970.884032][ T9778] usblp0: removed 16:06:20 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 16:06:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x0) 16:06:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8910, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:06:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a0, 0x0) 16:06:20 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:20 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x5, @remote, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="60e88e6e1f978b8d887609c13117b154278beb816ca3c9ed1a6d454951365b518c46ee84b70ba0c6b8b1f4fd99757377dff7afcd3136e972b66769bd73803d3e47b7a36cd6fb02a7b9db93a5307dbcfffc2d51d7138cc295ba8d8afe623d79a39225d19cdd9578a36c71753c76a342b4c593ae38aaa3", 0x76}, {&(0x7f00000001c0)="27217af087a9264954dd160362fda4b482ccaa544344e2d7e3f46f8d9ff9cf315a2be53344cf5994fb243ec93b2f3ed10b5d0826da36d469213654e88850bcf33266a0eb002dc9bca32062ab327b81c07df4e6e25e603f3f040e0ad0782f33bafcc56b96def4eef2a470d4b9d649955b1a1e2b4b71843a51c3dabde8cf85c3949c6f9d6656d09998efbab2d0608a736e4e9bde0fdace9e1c03983ceeda5887f470cc72c5941d5b767978e752483cf0e9f24594226657fa0d45bba820", 0xbc}, {&(0x7f0000000280)="4dee37271a02d51722843ee02a2527dd92ed8170e07f76c5bab4611c066be14f3c03494753488154694a48faf3eb81a6f4f2f5c5c099a6798e62e298383868645bc6fb3f315b1ba565d24c3e92539e04c78f835fbb9325c26092efc8d9f55a67649fe35cc6c4303b52950356ee852a7e29586f4e5fb2224121f06edac9c92461ad", 0x81}, {&(0x7f0000000340)="e6b4411b4a1968fff27f6fdf41a50d3495146fc8efe1720cc5249290149b63fb866f3d8da7bf0cd49d08dc50a6729b2d9190afbca9a939bf4e260e190463786f72bb0ed084cd60c0", 0x48}, {&(0x7f00000003c0)="13bf8a78bd444070e072c581c60bb3511dbd9e1dc451718db62414dde520a6b8867a63e6d050a5b0aab76f58f8aed2d8db0941883992a15e8a7089ec78df43988e91fe2bb166368bed15160faa0e3f09c720baa198e6edf6d7ae482281b391f86ac545c47a5f059ca9e055ccb59dbdd99c14393c46fc1bea32bf7ce699a4d8fe211650c494b5a5d3fb9c159f7d757cc5546b304cf6dff9d16d7a04fec5c4db9d1342f84513da83c42c69a36d", 0xac}, {&(0x7f0000000480)="1ae40bb456d28bd855b467f28d4b6f426c91d32331e9eb296806aef95113a2f6bb2b06631ffebb3e3bb91ccdf7756ec3c94613e045b73eca5115719c2f997497d70eabd258cf7260ea43b7cee803fa7e65e025616b9f4aa98f78f1ba224849f6a3a046262a63bd71092d8392282cf98634129ab1850023b1b0ccba321eae5d50da738340ce7cae4593a24f274411cef86833f5286dd3aa17dcb04d4b46d44764072d2b009c910737d023dccfc9df0b99", 0xb0}, {&(0x7f0000000a40)="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", 0x162}], 0x7}}], 0x1, 0x0) 16:06:20 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:20 executing program 0: prctl$PR_SET_MM(0x22, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:06:20 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x16}]}) 16:06:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77a40038"}, 0x0, 0x0, @fd}) 16:06:21 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:21 executing program 0: prctl$PR_SET_MM(0x24, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 971.741491][ T38] audit: type=1326 audit(1618157181.134:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30861 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 971.898462][ T20] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 972.209240][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 972.348449][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 972.356856][ T20] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 972.367613][ T20] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 972.377909][ T20] usb 4-1: config 5 has no interface number 0 [ 972.385781][ T20] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 972.398729][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 972.410919][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 972.422552][ T20] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 972.437894][ T20] usb 4-1: config 5 interface 228 has no altsetting 0 [ 972.583437][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 972.592680][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 972.601304][ T20] usb 4-1: SerialNumber: syz [ 972.675387][T30859] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 972.694796][T30859] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 972.729494][ T20] hub 4-1:5.228: bad descriptor, ignoring hub [ 972.735687][ T20] hub: probe of 4-1:5.228 failed with error -5 [ 972.984397][ T20] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 973.651569][T30859] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 973.929804][T30859] usb 4-1: Using ep0 maxpacket: 8 [ 974.091474][T30896] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 974.100541][T30896] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 979.210001][T30859] usb 4-1: failed to restore interface 228 altsetting 255 (error=-110) [ 979.242977][ T9781] usb 4-1: USB disconnect, device number 14 [ 979.268519][ T9781] usblp0: removed [ 979.458444][ T9781] usb 4-1: new high-speed USB device number 15 using dummy_hcd 16:06:29 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 16:06:29 executing program 2: r0 = socket(0x2, 0x803, 0x4) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000002240)={&(0x7f0000001fc0), 0xc, &(0x7f0000002200)={0x0}}, 0x0) 16:06:29 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8906, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d43d84579d69aa59dd0b9"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, [], 0x17}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x6, 0x9, 0x14, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x14}, 0x8000, 0x10, 0xffff5336, 0xffff}}) 16:06:29 executing program 1: prctl$PR_SET_MM(0x28, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:06:29 executing program 4: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000340)='I', 0x1, 0xfffffffffffffeff}], 0x0, 0x0) [ 979.628320][ T9781] usb 4-1: device descriptor read/64, error -32 16:06:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a0, &(0x7f0000000140)={@mcast1, 0x0, r1}) 16:06:29 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) [ 979.761519][T30924] loop4: detected capacity change from 0 to 16382 16:06:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000006680)={'ip6_vti0\x00', &(0x7f0000006600)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) [ 979.863664][T30924] loop4: detected capacity change from 0 to 16382 16:06:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x501, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}}, 0x0) 16:06:29 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000040)={@dev, @multicast, @void}, 0x0) 16:06:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000bbaa459258f307"], 0x24}}, 0x0) [ 980.401309][T30960] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 980.415397][T30962] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 980.668364][ T9781] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 980.938342][ T9781] usb 4-1: Using ep0 maxpacket: 8 [ 981.058405][ T9781] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 981.067415][ T9781] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 981.084347][ T9781] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 981.094983][ T9781] usb 4-1: config 5 has no interface number 0 [ 981.105371][ T9781] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 981.122702][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 981.133223][ T9781] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 981.148178][ T9781] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 981.162236][ T9781] usb 4-1: config 5 interface 228 has no altsetting 0 [ 981.248833][ T9781] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 981.266944][ T9781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 981.277007][ T9781] usb 4-1: SerialNumber: syz [ 981.351641][T30931] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 981.387054][T30931] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 981.409631][ T9781] hub 4-1:5.228: bad descriptor, ignoring hub [ 981.415807][ T9781] hub: probe of 4-1:5.228 failed with error -5 [ 981.651790][ T9781] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 982.297879][T30931] usb 4-1: reset high-speed USB device number 16 using dummy_hcd [ 982.578672][T30931] usb 4-1: Using ep0 maxpacket: 8 [ 982.730402][T30978] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 982.737644][T30978] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 987.859531][T30931] usb 4-1: failed to restore interface 228 altsetting 255 (error=-110) [ 987.880186][ T20] usb 4-1: USB disconnect, device number 16 [ 987.896970][ T20] usblp0: removed [ 988.068541][ T20] usb 4-1: new high-speed USB device number 17 using dummy_hcd 16:06:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe00000090582026f"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 16:06:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8942, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:06:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x501, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}}, 0x0) 16:06:37 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)) 16:06:37 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="60e88e6e1f978b8d887609c13117b154278beb816ca3c9ed1a6d454951365b518c46ee84b70ba0c6b8b1f4fd99757377dff7afcd3136e972b66769bd73803d3e47b7a36cd6fb02a7b9db93a5307dbcfffc2d51d7138cc295ba8d8afe623d79a39225d19cdd9578a36c71753c76a342b4c593ae38aaa3", 0x76}, {&(0x7f00000001c0)="27217af087a9264954dd160362fda4b482ccaa544344e2d7e3f46f8d9ff9cf315a2be53344cf5994fb243ec93b2f3ed10b5d0826da36d469213654e88850bcf33266a0eb002dc9bca32062ab327b81c07df4e6e25e603f3f040e0ad0782f33bafcc56b96def4eef2a470d4b9d649955b1a1e2b4b71843a51c3dabde8cf85c3949c6f9d6656d09998efbab2d0608a736e4e9bde0fdace9e1c03983ceeda5887f470cc72c5941d5b767978e752483cf0e9f24594226657fa0d45bba820", 0xbc}, {&(0x7f0000000280)="4dee37271a02d51722843ee02a2527dd92ed8170e07f76c5bab4611c066be14f3c03494753488154694a48faf3eb81a6f4f2f5c5c099a6798e62e298383868645bc6fb3f315b1ba565d24c3e92539e04c78f835fbb9325c26092efc8d9f55a67649fe35cc6c4303b52950356ee852a7e29586f4e5fb2224121f06edac9c92461ad", 0x81}, {&(0x7f0000000340)="e6b4411b4a1968fff27f6fdf41a50d3495146fc8efe1720cc5249290149b63fb866f3d8da7bf0cd49d08dc50a6729b2d9190afbca9a939bf4e260e190463786f72bb0ed084cd60c0", 0x48}, {&(0x7f00000003c0)="13bf8a78bd444070e072c581c60bb3511dbd9e1dc451718db62414dde520a6b8867a63e6d050a5b0aab76f58f8aed2d8db0941883992a15e8a7089ec78df43988e91fe2bb166368bed15160faa0e3f09c720baa198e6edf6d7ae482281b391f86ac545c47a5f059ca9e055ccb59dbdd99c14393c46fc1bea32bf7ce699a4d8fe211650c494b5a5d3fb9c159f7d757cc5546b304cf6dff9d16d7a04fec5c4db9d1342f84513da83c42c69a3", 0xab}, {&(0x7f0000000480)="1ae40bb456d28bd855b467f28d4b6f426c91d32331e9eb296806aef95113a2f6bb2b06631ffebb3e3bb91ccdf7756ec3c94613e045b73eca5115719c2f997497d70eabd258cf7260ea43b7cee803fa7e65e025616b9f4aa98f78f1ba224849f6a3a046262a63bd71092d8392282cf98634129ab1850023b1b0ccba321eae5d50da738340ce7cae4593a24f274411cef86833f5286dd3aa17dcb04d4b46d44764072d2b009c910737d023dccfc9df0b99", 0xb0}, {&(0x7f0000000a40)="bc99b172b58c12da4785115b0c19ecdb92b88a0f7c601222583c1ffddaaec38e59ce5fad5316f8777a2407e01f5a4c0f4d78df978abcf67fdbf5caa39d595842eda12d7656bf8b21db200530a62bd9178c3f985c5cd82e77b29e600364570ed70079166b3151e316498bc583d8a7c857ce63624407ceced8fb38e36640fb83bb89c3db91e1019b4b0b96d16ac92a2ee6f73d0c7c6f06a4ab74f21d1f9e1501661a20b78195a20c3425a8b2cc1fdf13d597aa52548cc4d9915ab915c7b8d5e545545ac0782c39f90ef59fed508c1748adfeac0b70613f588cc706bbb73aa180e51e6e600d5e023d4b88e79338dc116c976e98df8eb8e7607ead0becbcf478c6b7a3bde1d2781742e95e96d4925db670153480ea22006bb127b82da5b814939350c162092fbf2718827a51ebf2d5b6b704169360000cde878163f3034a79aeeb4a3bfedf152278d20c8e86040aac657a13e386871a6c2d6dd4445dd3972911f11fdc07", 0x162}], 0x7}}], 0x1, 0x0) [ 988.248737][ T20] usb 4-1: device descriptor read/64, error -32 16:06:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x501, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}}, 0x0) 16:06:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="60e88e6e1f978b8d887609c13117b154278beb816ca3c9ed1a6d454951365b518c46ee84b70ba0c6b8b1f4fd99757377dff7afcd3136e972b66769bd73803d3e47b7a36cd6fb02a7b9db93a5307dbcfffc2d51d7138cc295ba8d8afe623d79a39225d19cdd9578a36c71753c76a342b4c593ae38aaa3", 0x76}, {&(0x7f00000001c0)="27217af087a9264954dd160362fda4b482ccaa544344e2d7e3f46f8d9ff9cf315a2be53344cf5994fb243ec93b2f3ed10b5d0826da36d469213654e88850bcf33266a0eb002dc9bca32062ab327b81c07df4e6e25e603f3f040e0ad0782f33bafcc56b96def4eef2a470d4b9d649955b1a1e2b4b71843a51c3dabde8cf85c3949c6f9d6656d09998efbab2d0608a736e4e9bde0fdace9e1c03983ceeda5887f470cc72c5941d5b767978e752483cf0e9f24594226657fa0d45bba8", 0xbb}, {&(0x7f0000000280)="4dee37271a02d51722843ee02a2527dd92ed8170e07f76c5bab4611c066be14f3c03494753488154694a48faf3eb81a6f4f2f5c5c099a6798e62e298383868645bc6fb3f315b1ba565d24c3e92539e04c78f835fbb9325c26092efc8d9f55a67649fe35cc6c4303b52950356ee852a7e29586f4e5fb2224121f06edac9c92461ad", 0x81}, {&(0x7f0000000340)="e6b4411b4a1968fff27f6fdf41a50d3495146fc8efe1720cc5249290149b63fb866f3d8da7bf0cd49d08dc50a6729b2d9190afbca9a939bf4e260e190463786f72bb0ed084cd60c0", 0x48}, {&(0x7f00000003c0)="13bf8a78bd444070e072c581c60bb3511dbd9e1dc451718db62414dde520a6b8867a63e6d050a5b0aab76f58f8aed2d8db0941883992a15e8a7089ec78df43988e91fe2bb166368bed15160faa0e3f09c720baa198e6edf6d7ae482281b391f86ac545c47a5f059ca9e055ccb59dbdd99c14393c46fc1bea32bf7ce699a4d8fe211650c494b5a5d3fb9c159f7d757cc5546b304cf6dff9d16d7a04fec5c4db9d1342f84513da83c42c69a36d", 0xac}, {&(0x7f0000000480)="1ae40bb456d28bd855b467f28d4b6f426c91d32331e9eb296806aef95113a2f6bb2b06631ffebb3e3bb91ccdf7756ec3c94613e045b73eca5115719c2f997497d70eabd258cf7260ea43b7cee803fa7e65e025616b9f4aa98f78f1ba224849f6a3a046262a63bd71092d8392282cf98634129ab1850023b1b0ccba321eae5d50da738340ce7cae4593a24f274411cef86833f5286dd3aa17dcb04d4b46d44764072d2b009c910737d023dccfc9df0b99", 0xb0}, {&(0x7f0000000a40)="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", 0x162}], 0x7}}], 0x1, 0x0) 16:06:37 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:37 executing program 2: syz_emit_ethernet(0x10, &(0x7f0000000040)={@dev, @multicast, @void, {@generic={0x0, '%\b'}}}, 0x0) 16:06:38 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:38 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$sock(r0, &(0x7f0000000640)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x0) [ 989.042191][ T20] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 989.298319][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 989.478527][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 989.490672][ T20] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 989.512335][ T20] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 989.527297][ T20] usb 4-1: config 5 has no interface number 0 [ 989.543261][ T20] usb 4-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 989.566667][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 989.585252][ T20] usb 4-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 111 [ 989.597360][ T20] usb 4-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 989.617681][ T20] usb 4-1: config 5 interface 228 has no altsetting 0 [ 989.698430][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 989.707621][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 989.715915][ T20] usb 4-1: SerialNumber: syz [ 989.810356][T31009] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 989.826271][T31009] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 989.849915][ T20] hub 4-1:5.228: bad descriptor, ignoring hub [ 989.856119][ T20] hub: probe of 4-1:5.228 failed with error -5 [ 990.103704][ T20] usblp 4-1:5.228: usblp0: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 990.768164][T31009] usb 4-1: reset high-speed USB device number 18 using dummy_hcd [ 991.038656][T31009] usb 4-1: Using ep0 maxpacket: 8 [ 991.200529][T31048] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 991.207795][T31048] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 992.809634][ T3248] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.816009][ T3248] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.249173][T31009] usb 4-1: failed to restore interface 228 altsetting 255 (error=-110) [ 996.274952][ T20] usb 4-1: USB disconnect, device number 18 [ 996.297726][ T20] usblp0: removed [ 996.468528][ T20] usb 4-1: new high-speed USB device number 19 using dummy_hcd 16:06:46 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x501, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}}, 0x0) 16:06:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}) 16:06:46 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) [ 996.639409][ T20] usb 4-1: device descriptor read/64, error -32 16:06:46 executing program 0: r0 = socket(0x29, 0x2, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x8001) 16:06:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020000100000000000000000081"], 0x24}}, 0x0) 16:06:46 executing program 0: syz_mount_image$fuse(&(0x7f0000002140)='fuse\x00', &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x1090408, &(0x7f0000002280)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 996.812342][T31075] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:06:46 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{}]}) 16:06:46 executing program 3: prctl$PR_SET_MM(0x15, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:06:46 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 16:06:46 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname(r0, 0x0, &(0x7f0000000100)) 16:06:46 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:46 executing program 0: r0 = socket(0x2, 0x803, 0x4) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000002240)={&(0x7f0000001fc0), 0xc, &(0x7f0000002200)={0x0, 0xffff0000}}, 0x0) 16:06:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2286, 0x0) 16:06:46 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{}]}) 16:06:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000100)='L', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000002640)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002740)="fb", 0x1}, {&(0x7f0000002800)}], 0x2, &(0x7f0000003940)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x60008085) 16:06:46 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0xf) 16:06:46 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 16:06:46 executing program 0: syz_mount_image$fuse(&(0x7f0000002140)='fuse\x00', &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 16:06:46 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{}]}) 16:06:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x227a, 0x0) 16:06:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1f) setsockopt$inet6_buf(r0, 0x29, 0xca, 0x0, 0x0) 16:06:46 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, 0x0) r3 = gettid() tkill(r3, 0xf) 16:06:46 executing program 1: socket(0xa, 0x0, 0x191) [ 997.499496][T31114] fuse: Bad value for 'fd' 16:06:47 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{}]}) [ 997.534936][T31114] fuse: Bad value for 'fd' 16:06:47 executing program 3: prctl$PR_SET_MM(0x35, 0x3, &(0x7f0000ffc000/0x4000)=nil) 16:06:47 executing program 0: ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x111}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000004900)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000004c80)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 16:06:47 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 16:06:47 executing program 1: r0 = socket(0x2, 0x803, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}) 16:06:47 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, 0x0) r3 = gettid() tkill(r3, 0xf) 16:06:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) 16:06:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100), 0x4) 16:06:47 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000003c0)={0x0}}, 0x0) 16:06:47 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, 0x0) r3 = gettid() tkill(r3, 0xf) 16:06:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)) 16:06:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {0xee00, 0xee01}}]}, 0x28}}, 0x0) 16:06:47 executing program 3: prctl$PR_SET_SECCOMP(0x1b, 0x0, 0x0) 16:06:47 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) gettid() tkill(0x0, 0xf) 16:06:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5421, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:06:48 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00'}}, 0x118) 16:06:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xee00}}]}, 0x28}}, 0x0) 16:06:48 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) 16:06:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x501, 0x0, 0x0, {0x2, 0x0, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}}, 0x0) 16:06:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x321000) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, 0x0) 16:06:48 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 16:06:48 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000040)) 16:06:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2}, 0x40) 16:06:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004a00)='nl80211\x00', r0) 16:06:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 16:06:50 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000400)={@broadcast, @broadcast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @multicast2, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'F1\a', 0x0, "70d626"}}}}}}, 0x0) 16:06:50 executing program 2: mq_open(&(0x7f0000000040)=',})\x00', 0x40, 0x0, &(0x7f0000000080)={0x8, 0x100000000, 0x8, 0x8}) 16:06:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8913, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:06:50 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x24, @none={0x3}}, 0x14, &(0x7f00000003c0)={0x0}}, 0x0) 16:06:50 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) gettid() tkill(0x0, 0xf) 16:06:50 executing program 1: prctl$PR_SET_SECCOMP(0x21, 0x0, &(0x7f0000000040)={0x0, 0x0}) 16:06:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8903, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:06:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)=ANY=[]) 16:06:50 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000180)=""/248, 0xf8}}, 0x120) 16:06:50 executing program 1: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000100)='0', 0x1) 16:06:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x5, @remote, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x0) 16:06:51 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x6002) 16:06:51 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7, 0x8c202) 16:06:51 executing program 1: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000100)='0', 0x1) [ 1001.660564][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1001.698425][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1001.725726][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1001.769391][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 16:06:51 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002340)='./file0\x00', 0x0, 0x1, 0x0) [ 1001.821332][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 16:06:51 executing program 1: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000100)='0', 0x1) [ 1001.868165][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1001.915760][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1001.965567][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.007814][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.043056][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.073694][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.097543][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.115212][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.132001][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.149544][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.166382][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.177133][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.197809][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.214914][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.231936][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.252320][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.269659][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.286838][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.303659][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.320714][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.336376][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.354595][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.373811][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.389608][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.406388][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.418865][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.441762][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.471102][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.496283][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.521272][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.560286][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.570353][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.598357][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.605906][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.629609][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.644898][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.663149][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.673555][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.687157][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.697527][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.711854][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.724488][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.734818][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.747704][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.766279][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.776471][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.794456][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.807784][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.824100][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.847534][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.879407][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.887864][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.903314][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.913486][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.927048][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.937389][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.952869][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.965443][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.973113][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.980680][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.988171][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1002.995761][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.003444][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.010941][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.018623][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.026026][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.033749][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.041552][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.049475][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.056994][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.064799][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.073012][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.080717][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.088513][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.096072][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.103872][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.111719][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.119550][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.127140][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.134970][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.142779][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.150892][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.158765][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.166938][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.175353][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.183455][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.191367][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.199190][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.206778][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.214889][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.223101][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.231162][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.238987][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.246596][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.255122][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.263111][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.276342][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.288166][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.311187][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.325444][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.336043][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.350818][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.364881][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.383148][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.396712][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.407206][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.423068][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.433907][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.445690][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.463991][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.474442][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.483386][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.491068][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.499061][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.506577][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.514165][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.521739][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.529480][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.536976][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.544694][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.552391][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.560223][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.568630][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.576256][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.584619][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.592540][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.600795][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.608644][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.616238][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.624079][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.631859][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.639697][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.647290][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.655146][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.662906][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.670727][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.678729][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.687264][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.695541][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.703962][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.711757][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.719546][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.727178][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.735141][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.743100][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.751115][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.759187][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.766783][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.774839][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.782757][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.793046][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.801040][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.809205][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.816804][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.824948][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.833764][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.841850][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.849771][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.857373][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.865563][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.873502][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.881511][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.890004][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.897613][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.905742][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.917735][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.933614][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.944134][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.957914][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.973733][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.984096][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1003.993055][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.000733][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.008141][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.015844][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.023386][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.030921][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.038692][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.046237][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.054027][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.061823][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.070140][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.077676][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.085502][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.093755][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.101628][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.109408][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.117013][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.124939][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.133389][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.141952][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.149825][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.157551][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.165460][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.173443][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.181258][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.189219][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.197364][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.205236][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.213086][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.221024][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.230614][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.238512][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.246124][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.254068][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.261987][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.269800][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.277945][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.285850][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.293697][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.301966][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.309866][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.317527][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.341388][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.354508][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.365456][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.382263][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.394277][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.403596][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.411552][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.420619][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.428525][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.436176][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 16:06:53 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) gettid() tkill(0x0, 0xf) 16:06:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400401, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/114, &(0x7f00000000c0)=0x72) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, r2}) 16:06:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2284, 0x0) 16:06:53 executing program 1: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000100)='0', 0x1) [ 1004.450723][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.467494][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.480696][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.507584][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.532416][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.565996][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.600713][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.633879][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.681742][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.707593][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.727689][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.738004][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.753331][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.764813][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.783540][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.795714][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.817570][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.833281][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.844501][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.856507][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1004.887562][ T8] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 16:06:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:06:54 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x2, 0x0, @broadcast}, 0x10) 16:06:54 executing program 3: openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x101c00, 0x0) 16:06:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8903, 0x0) 16:06:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000004900)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000004c80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000004c40)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 16:06:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xffff, 0x4) 16:06:54 executing program 1: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x80050, &(0x7f0000000400)) 16:06:54 executing program 0: prctl$PR_SET_MM(0x8, 0x3, &(0x7f0000ffc000/0x4000)=nil) 16:06:56 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x0) 16:06:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x5385, 0x0) 16:06:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8936, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:06:56 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) keyctl$set_reqkey_keyring(0xe, 0x2) prctl$PR_SET_SECCOMP(0x8, 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000040), 0x48) write$tcp_mem(r0, &(0x7f0000000080)={0x7fffffff, 0x20, 0xa4, 0x20, 0x10000}, 0x48) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000000)='bic\x00', 0x4) 16:06:56 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x64}]}) 16:06:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000100)='L', 0x1}], 0x1}}], 0x1, 0x0) 16:06:57 executing program 3: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, r0) 16:06:57 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, 0x0, &(0x7f0000000100)) 16:06:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd}, 0x40) 16:06:57 executing program 2: pkey_alloc(0x0, 0x18602049e3d430ca) 16:06:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x10000, 0x4) 16:06:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0xfbbc1126fbce6e35) 16:07:00 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x0) 16:07:00 executing program 4: mq_open(&(0x7f0000000140)='activeport\x00', 0x0, 0x0, 0x0) 16:07:00 executing program 1: prctl$PR_SET_MM(0x19, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:07:00 executing program 2: r0 = socket(0x2, 0x803, 0x4) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000002240)={&(0x7f0000001fc0), 0x20001fcc, &(0x7f0000002200)={0x0}}, 0x0) 16:07:00 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 16:07:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0e850f55"}}) 16:07:00 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x161) 16:07:00 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x4e040) 16:07:00 executing program 4: prctl$PR_SET_SECCOMP(0x35, 0x0, 0x0) 16:07:00 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @empty}}}, 0x90) 16:07:00 executing program 3: prctl$PR_SET_MM(0x3, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:07:00 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x595bb6d1, 0x8c002) 16:07:03 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@volatile, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @ptr]}, {0x0, [0x0]}}, 0x0, 0xcf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x0) 16:07:03 executing program 2: r0 = socket(0x18, 0x0, 0x1) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 16:07:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000100), 0x4) 16:07:03 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@x25={0x9, @remote}, 0xffffff5f, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f00000005c0)=""/253, 0xffffff49}, {&(0x7f0000000180)=""/34, 0x23}], 0x5, &(0x7f0000000200)=""/108, 0x6c}, 0x0) 16:07:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x5382, 0x0) 16:07:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:07:03 executing program 1: prctl$PR_SET_SECCOMP(0x59616d61, 0x0, 0x0) 16:07:03 executing program 3: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 16:07:03 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xffffffff}, 0x8) 16:07:03 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 16:07:03 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x214a02, 0x0) 16:07:03 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x300}, 0x0) 16:07:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8911, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:07:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020001fffffff0000000000000a"], 0x24}}, 0x0) 16:07:06 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000000)) 16:07:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB='U']) 16:07:06 executing program 4: prctl$PR_SET_MM(0x35, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:07:06 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2276, 0x0) 16:07:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8}]}, 0x24}}, 0x0) [ 1016.911217][T31412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 16:07:06 executing program 4: syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) fork() syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) 16:07:06 executing program 1: socket(0x2c, 0x3, 0x40bc) 16:07:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2205, 0x0) 16:07:06 executing program 2: r0 = socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 16:07:06 executing program 5: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000), 0xfffffd08) 16:07:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0xff0f}]}) 16:07:06 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, 0xfffffffffffffff9) 16:07:06 executing program 1: r0 = socket(0x25, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', r0) 16:07:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, r1) 16:07:06 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7fedc5f0"}, 0x0, 0x0, @fd, 0x7fff}) 16:07:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8906, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00', r1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x2d, 0x7, 0x80, 0xf6, 0x4e, @private1={0xfc, 0x1, [], 0x1}, @empty, 0x8000, 0x8, 0x9, 0x1ffc0}}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00', r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x29, 0xf8, 0x3, 0x1, 0x4, @mcast2, @local, 0x700, 0x20, 0x4, 0x2}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x80, 0x5c, 0x4c3e, 0x62, @dev={0xfe, 0x80, [], 0x37}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7, 0x0, 0x58f}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x4, 0x1b, 0xd0, 0xfd, 0x3c, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}, @remote, 0x7800, 0x20, 0x40, 0x7}}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', r5, 0x4, 0x40, 0x0, 0x10000, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x8, 0x7f, 0x8}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00', r6) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00', r7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x6, 0x2, 0x24, @loopback, @dev={0xfe, 0x80, [], 0x2e}, 0x700, 0x10, 0x3}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f00000003c0)="3e3a87cb18645e0507f68c7f6eaf8483c8fa04f8a727af1653454f1b0306c665c10b1a79f13ed31097f0034c7d3ed954816b25647fcc3fa6e45367170059ffb6cfe9196e647383f3090cb6d6a3ef9c9ff843a41d1a194d118c9dbad0f2e0b01ec824fcffb112e9601e32f080af1cfbdc70d4fc859a89baa73cdff36eae08e6d9206bfe232448564b846f0fa0bcce61f97b93a4af4649cdc12253fbbeee7b23700f5eb3e66e5c1634d100841c4e38ee89417af6102f3c46e73235d5b766aaae4aeb995f00ebdd9bc3cf2bd9b937ee581ef36943d233359fb85b2fdfe56ab8d2ee14cf83836a41c0717ea137750c8e20", &(0x7f00000004c0)=@tcp=r7, 0x4}, 0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0xffffffffffffffff, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r4, 0x2f, 0x1f, 0xf8, 0x0, 0x6f, @mcast2, @loopback, 0x7, 0x40, 0x7f, 0x8}}) 16:07:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@mcast1, @remote, @dev, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, r2}) 16:07:06 executing program 1: r0 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', r0) 16:07:06 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x6) 16:07:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4cd1697"}, 0x0, 0x0, @planes=0x0}) 16:07:07 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000280)={0x4, 0x8}, 0x10) 16:07:07 executing program 0: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1b, 0x86042) 16:07:07 executing program 1: setrlimit(0x9, &(0x7f0000000200)) 16:07:07 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) 16:07:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8922, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:07:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback}}) 16:07:07 executing program 1: r0 = socket(0x29, 0x2, 0x0) bind$can_raw(r0, 0x0, 0x0) [ 1018.197396][T31479] sit0: mtu less than device minimum 16:07:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x3000000, 0x0, 0x0, 0x2}}, &(0x7f0000002140)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 16:07:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 16:07:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x1276, 0x0) 16:07:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback}}) 16:07:07 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000180), 0x10) 16:07:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x894a, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:07:07 executing program 2: request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 16:07:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x14, &(0x7f0000000100), 0x4) 16:07:07 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@x25={0x9, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f00000001c0)=""/23, 0xf}, {&(0x7f00000005c0)=""/244, 0xea}, {&(0x7f0000000180)=""/35, 0x1b}], 0xfffffffffffffc56, &(0x7f0000000100)=""/108, 0x6c}, 0x0) 16:07:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 16:07:07 executing program 4: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x9}, 0x0) 16:07:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, @in=@local}}, 0xe8) 16:07:08 executing program 1: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x4000000) 16:07:08 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x28}]}) 16:07:08 executing program 0: r0 = socket(0x28, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 16:07:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000002cc0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x3ff}, 0x1c) 16:07:08 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 16:07:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000040)) 16:07:08 executing program 1: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000200)={0x2, 0x0, @local, 0x4}, 0x10) 16:07:08 executing program 2: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@link_local, @broadcast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="9f57bc369de4", @empty, @local, @mcast2}}}}, 0x0) 16:07:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f5ecb8a6"}, 0x0, 0x0, @planes=0x0}) 16:07:08 executing program 4: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101}, @tipc=@name, @ethernet={0x0, @multicast}, 0x7, 0x0, 0x0, 0x0, 0x8}) 16:07:08 executing program 3: syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f00000000c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}) 16:07:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 16:07:08 executing program 1: prctl$PR_SET_MM(0x21, 0x3, &(0x7f0000ffc000/0x4000)=nil) 16:07:08 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 16:07:08 executing program 0: migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000180)) 16:07:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 16:07:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000003c0)={0x4}, &(0x7f00000001c0)=0xffffffffffffffe7) 16:07:08 executing program 5: prctl$PR_SET_SECCOMP(0x4, 0x2, 0x0) 16:07:08 executing program 1: r0 = socket(0x2, 0x803, 0x4) bind$can_raw(r0, &(0x7f00000000c0), 0x10) 16:07:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a0, &(0x7f0000000440)={'sit0\x00', 0x0}) 16:07:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:07:09 executing program 4: r0 = socket(0x11, 0xa, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, 0x0) 16:07:09 executing program 5: prctl$PR_SET_MM(0x1c, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:07:09 executing program 1: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 16:07:09 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000000)) 16:07:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000100), 0x4) 16:07:09 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind(r0, 0x0, 0x61) 16:07:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 16:07:09 executing program 3: setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) 16:07:09 executing program 0: request_key(&(0x7f0000000c80)='.dead\x00', 0x0, 0x0, 0xfffffffffffffffe) 16:07:09 executing program 4: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x911801, 0x0) 16:07:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:07:09 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, &(0x7f0000002140)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 16:07:09 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) 16:07:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 16:07:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000002140)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 16:07:10 executing program 1: syz_emit_ethernet(0x5a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb8848"], 0x0) 16:07:10 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x40000042, 0x0, 0x0) 16:07:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, "7d1c76"}) 16:07:10 executing program 5: prctl$PR_SET_SECCOMP(0x1d, 0x2, 0x0) 16:07:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, 0x80) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001640)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000100)='L', 0x1}], 0x1, &(0x7f0000002640)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002740)="fb", 0x1}], 0x1}}], 0x2, 0x0) 16:07:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000100), 0x4) 16:07:10 executing program 1: migrate_pages(0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000280)) 16:07:10 executing program 4: r0 = socket(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x38}}, 0x40) 16:07:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001640)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001cc0)='batadv\x00', r2) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={r1, r2}) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x410200) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001cc0)='batadv\x00', r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={r5}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000040)={r5}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r9 = socket$inet6(0xa, 0x6, 0x7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', r8, 0x4, 0x81, 0x4, 0x7ee1, 0x9, @dev={0xfe, 0x80, [], 0x33}, @private0, 0x80, 0x80, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r9, 0x89f5, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', r10, 0x2f, 0xe1, 0x6, 0x9, 0x0, @ipv4={[], [], @loopback}, @loopback, 0x40, 0x8000, 0x4, 0x20}}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000040)={@mcast1, @remote, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b50e66be93e3677, r8}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@private2, 0x0, r8}) 16:07:10 executing program 0: syz_mount_image$fuse(&(0x7f0000000140)='fuse\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x8024, &(0x7f00000004c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id'}}) 16:07:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 16:07:10 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) 16:07:10 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:07:10 executing program 3: migrate_pages(0x0, 0x1000, 0x0, &(0x7f0000000100)) 16:07:10 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r0, r1, 0x0) 16:07:10 executing program 5: syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@remote, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "fa034f", 0x8, 0x0, 0x0, @dev, @loopback, {[@srh]}}}}}, 0x0) 16:07:11 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) 16:07:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{}]}, 0x9) 16:07:11 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'bond_slave_1\x00', {0x2, 0x0, @broadcast}}) 16:07:11 executing program 5: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x10040) 16:07:11 executing program 4: prctl$PR_SET_SECCOMP(0x10, 0x0, 0x0) 16:07:11 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x1}) 16:07:11 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16:07:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) pipe(&(0x7f0000000640)) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) 16:07:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) 16:07:11 executing program 1: clone(0x5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) clone(0x101efff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000000c0)="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"/297, 0xffffffca) ptrace(0x4206, r0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x800000009) 16:07:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16:07:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, "b8e4cf404e6c7a3027bd035445c85172533997"}) 16:07:12 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000100)=0x7) 16:07:12 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r0, r1, 0x0) accept$inet6(r2, 0x0, 0x0) 16:07:12 executing program 4: syz_emit_ethernet(0x4ac, &(0x7f0000001540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6815e4480476880000000000000000000000ffffe0000002fe"], 0x0) 16:07:12 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000280)='encrypted\x00', 0x0, 0x0, 0x0, r0) 16:07:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16:07:12 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time_for_children\x00') 16:07:12 executing program 4: syz_emit_ethernet(0x4ac, &(0x7f0000001540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6815e4480476880000000000000000000000ffffe0000002fe"], 0x0) 16:07:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16:07:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c, 0x0}}], 0x1, 0x20000000) 16:07:12 executing program 3: r0 = openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) mq_notify(r0, 0x0) 16:07:12 executing program 0: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 16:07:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16:07:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup2(r0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000000)={'ip6erspan0\x00'}) 16:07:12 executing program 4: syz_emit_ethernet(0x4ac, &(0x7f0000001540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6815e4480476880000000000000000000000ffffe0000002fe"], 0x0) 16:07:12 executing program 3: r0 = openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) mq_notify(r0, 0x0) 16:07:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) vmsplice(r2, &(0x7f0000003440)=[{&(0x7f00000001c0)="ae", 0x1}], 0x1, 0x0) close(r2) close(r0) pipe(&(0x7f0000000640)) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) 16:07:12 executing program 1: openat$full(0xffffff9c, &(0x7f0000001740)='/dev/full\x00', 0x1a34c2, 0x0) 16:07:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), 0x4) 16:07:12 executing program 4: syz_emit_ethernet(0x4ac, &(0x7f0000001540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6815e4480476880000000000000000000000ffffe0000002fe"], 0x0) 16:07:12 executing program 3: r0 = openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) mq_notify(r0, 0x0) 16:07:13 executing program 1: add_key$fscrypt_provisioning(&(0x7f00000023c0)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 16:07:13 executing program 5: request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0) 16:07:13 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 16:07:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) vmsplice(r2, &(0x7f0000003440)=[{&(0x7f00000001c0)="ae", 0x1}], 0x1, 0x0) close(r2) close(r0) pipe(&(0x7f0000000640)) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) 16:07:13 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000001300)='logon\x00', &(0x7f0000001340)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000001380)={0x0, "6a242c33a7f1d85ebc901382ccf40b43ed7e2aa882a99150bc73b02d4d71ce2f663e80d922387a03abc9dbaac56415afa14191a9daf40ea80d2aa7c9fa2cc8f7"}, 0x48, 0xfffffffffffffffc) add_key(&(0x7f0000000280)='pkcs7_test\x00', 0x0, 0x0, 0x0, r0) 16:07:13 executing program 3: r0 = openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) mq_notify(r0, 0x0) 16:07:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)='S', 0x1) 16:07:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @loopback}, 0xc) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') 16:07:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) 16:07:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc810, 0x0, 0x0) 16:07:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) vmsplice(r2, &(0x7f0000003440)=[{&(0x7f00000001c0)="ae", 0x1}], 0x1, 0x0) close(r2) close(r0) pipe(&(0x7f0000000640)) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) 16:07:13 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}) 16:07:13 executing program 1: request_key(&(0x7f0000000040)='trusted\x00', 0x0, 0x0, 0xffffffffffffffff) 16:07:13 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f0000000180)) [ 1024.072393][T31780] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 16:07:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0xfffffffffffffed0}}], 0x1, 0x0, 0x0) 16:07:13 executing program 4: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)) [ 1024.175788][T31780] device lo entered promiscuous mode 16:07:13 executing program 1: inotify_init1(0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x1}, &(0x7f0000000180)={0x9}, 0x0, 0x0) 16:07:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) vmsplice(r2, &(0x7f0000003440)=[{&(0x7f00000001c0)="ae", 0x1}], 0x1, 0x0) close(r2) close(r0) pipe(&(0x7f0000000640)) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) 16:07:13 executing program 5: r0 = openat$null(0xffffff9c, &(0x7f0000000680)='/dev/null\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 16:07:14 executing program 2: openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) 16:07:14 executing program 3: request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0x0) 16:07:14 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x37a}) 16:07:14 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x20) 16:07:14 executing program 0: r0 = openat$hwrng(0xffffff9c, &(0x7f0000002200)='/dev/hwrng\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 16:07:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000040)={'veth1_to_bond\x00', @ifru_names}) [ 1024.994277][T31780] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 16:07:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x841) 16:07:14 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) 16:07:14 executing program 0: r0 = openat$apparmor_task_exec(0xffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 16:07:14 executing program 3: add_key$fscrypt_v1(&(0x7f0000001300)='logon\x00', &(0x7f0000001340)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000001380)={0x0, "6a242c33a7f1d85ebc901382ccf40b43ed7e2aa882a99150bc73b02d4d71ce2f663e80d922387a03abc9dbaac56415afa14191a9daf40ea80d2aa7c9fa2cc8f7"}, 0x48, 0xfffffffffffffffc) 16:07:14 executing program 2: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x5}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x6de]}, 0x8}) 16:07:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 16:07:14 executing program 1: r0 = epoll_create(0x6) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x3) 16:07:14 executing program 0: clock_gettime(0x0, &(0x7f0000001c80)) clock_gettime(0x0, &(0x7f0000000180)) 16:07:14 executing program 5: r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f00000001c0)='ns/ipc\x00') 16:07:14 executing program 2: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r0) 16:07:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40440d1) 16:07:14 executing program 4: timer_create(0x2, 0x0, &(0x7f0000000200)=0x0) timer_gettime(0x0, &(0x7f0000000240)) r1 = openat$full(0xffffff9c, &(0x7f0000001740)='/dev/full\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000040)) 16:07:15 executing program 0: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x1, 0xb) 16:07:15 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) prctl$PR_GET_TSC(0x19, &(0x7f0000000180)) 16:07:15 executing program 5: futex(0x0, 0x4e, 0x0, 0x0, 0x0, 0x0) 16:07:15 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) 16:07:15 executing program 2: futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, 0x0, 0x0) 16:07:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, 0xffffffffffffffff, 0x0) 16:07:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x0) 16:07:15 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f0000000040)) 16:07:15 executing program 3: clock_gettime(0x6, &(0x7f0000001540)) 16:07:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) 16:07:15 executing program 5: openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/keys\x00', 0x0, 0x0) 16:07:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 16:07:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001900)={'batadv_slave_0\x00'}) 16:07:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000009340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000009500)='TIPC\x00', r0) 16:07:15 executing program 0: timer_create(0x9e0cf4f08998ff69, 0x0, &(0x7f0000000200)) 16:07:15 executing program 2: request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xffffffffffffffff) 16:07:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002e00)={0x0, {{0xa, 0x0, 0x0, @remote}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @private2}}]}, 0x20c) 16:07:15 executing program 1: pselect6(0x6f, &(0x7f0000000100), 0x0, &(0x7f0000000180), 0x0, 0x0) 16:07:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000005740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}], 0x1, 0x20000000) 16:07:15 executing program 3: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:07:15 executing program 2: move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000040), &(0x7f0000000080), 0x0) 16:07:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x84) 16:07:15 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 16:07:15 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x8001}]}) 16:07:15 executing program 0: r0 = epoll_create(0x1) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 16:07:16 executing program 2: openat$null(0xffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1c9b01, 0x0) 16:07:16 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000001580)='ns/ipc\x00') 16:07:16 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x104) 16:07:16 executing program 2: mq_open(&(0x7f00000006c0)='/dev/null\x00', 0x0, 0x0, 0x0) 16:07:16 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:07:16 executing program 0: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xa0000310) 16:07:16 executing program 4: clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)) 16:07:16 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000040), &(0x7f0000000180)=0x4) 16:07:16 executing program 3: socketpair(0x10, 0x2, 0x2, 0x0) 16:07:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f00000000c0)="53582b1ead25c7df90f9ad23056784a2a70ea3f2", 0x14) 16:07:16 executing program 0: sync() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 16:07:16 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') 16:07:16 executing program 2: perf_event_open$cgroup(&(0x7f0000000b40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:07:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x122, 0x0) 16:07:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x0, 0x0, 0x0, 0xfff9}, 0x20) 16:07:17 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, 0x0) 16:07:17 executing program 4: r0 = openat$null(0xffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 16:07:17 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0, 0x0) 16:07:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) 16:07:17 executing program 0: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 16:07:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) 16:07:17 executing program 5: perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:07:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10142, 0x0) 16:07:17 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) 16:07:17 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock2(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x0) 16:07:17 executing program 4: r0 = gettid() r1 = openat$hwrng(0xffffff9c, &(0x7f0000002200)='/dev/hwrng\x00', 0x0, 0x0) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r2, 0x7, r1, &(0x7f0000000340)) 16:07:17 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000016, 0xffffffffffffffff) 16:07:17 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xca6f]}, 0x8}) 16:07:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)=ANY=[], 0x54) 16:07:18 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0xfffff9ca, 0x4) 16:07:18 executing program 1: futex(0x0, 0x9, 0x0, &(0x7f00000002c0), 0x0, 0x0) 16:07:18 executing program 4: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 16:07:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000000)="53582b1ead25c7df90f9ad23056784a2", 0x10) 16:07:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x20) 16:07:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x104) 16:07:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000200)) 16:07:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0x80000000, {{0xa, 0x0, 0x0, @mcast2}}}, 0x8c) 16:07:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe23794d4815f051f, 0x10, r0, 0x0) 16:07:18 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000280)) 16:07:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000001, 0x10, r0, 0x0) 16:07:18 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0/file0\x00'}, 0x10) 16:07:18 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000100)=@srh={0x0, 0x0, 0x4, 0x0, 0x40}, 0x8) 16:07:18 executing program 1: r0 = openat$full(0xffffff9c, &(0x7f0000001740)='/dev/full\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:07:18 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 16:07:18 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x41) 16:07:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:07:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340), 0x4) 16:07:18 executing program 3: pselect6(0x40, &(0x7f00000001c0), &(0x7f00000002c0)={0x1}, 0x0, &(0x7f0000000340)={0x77359400}, 0x0) 16:07:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, 0x0}}], 0x1, 0x20000010) 16:07:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000740), 0x4) 16:07:18 executing program 5: mq_open(&(0x7f0000000000)='-\x00', 0x40, 0x0, &(0x7f0000000080)={0x7d, 0x1a8, 0x8, 0x7}) 16:07:18 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) 16:07:18 executing program 2: timer_create(0x3, 0x0, &(0x7f00000005c0)) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, r0+60000000}}, 0x0) 16:07:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40001021, 0x0) 16:07:18 executing program 1: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 16:07:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0xff9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:07:19 executing program 5: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xca6f]}, 0x8}) 16:07:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)="53582b1ead25c7df90f9ad23056784a2", 0x10) 16:07:19 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) 16:07:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080), 0x4) 16:07:19 executing program 3: socket$inet(0x2, 0x0, 0x7fffff7f) 16:07:19 executing program 4: openat$full(0xffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x600, 0x0) 16:07:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, 0x0, 0x0) 16:07:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)="53582b1ead25c7df90f9ad23056784a2", 0x10) 16:07:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c00df"], 0x68}}], 0x1, 0x0) 16:07:19 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f00000001c0)=[{}], 0x1, 0xffffda44) 16:07:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}, 0x0) 16:07:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f00000003c0)="53582b1ead25c7df90f9ad23056784a2a78f5946e01178ab8b251a357052536e3e9278863e36e0a8500080edde278a5815f6b36091442db235e58fabcf79099c7b43b9be890963d935558d5f41caf404fac411edcbab08a2133bcb53918ff6642d6667c5ad5b660b036dc08b68e22e2453d98dcaee62af8ff662c7f0c7ff3c86872fc683f77edbdbe00610bed2fbd927ecd52a6fddcb642fcfa58435b7e499144e8f480000000000", 0xa8) 16:07:19 executing program 5: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x617a}, 0x0, 0x0, &(0x7f0000000180)={0x0}) 16:07:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)="53582b1ead25c7df90f9ad23056784a2", 0x10) 16:07:19 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001380)={{}, {0x77359400}}, 0x0) 16:07:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000080)) 16:07:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f00000003c0), 0x0) 16:07:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)="53582b1ead25c7df90f9ad23056784a2", 0x10) 16:07:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00', r0) 16:07:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x104) 16:07:19 executing program 5: add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)='3', 0x1, 0xfffffffffffffffb) 16:07:20 executing program 1: r0 = openat$full(0xffffff9c, &(0x7f0000001740)='/dev/full\x00', 0x0, 0x0) mmap$perf(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0, 0x40010, r0, 0x0) 16:07:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x3}, 0x4) 16:07:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) 16:07:20 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'batadv0\x00'}) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 16:07:20 executing program 0: mq_open(&(0x7f0000000040)='\x00', 0x0, 0x0, 0x0) 16:07:20 executing program 5: r0 = openat$null(0xffffff9c, &(0x7f0000000680)='/dev/null\x00', 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 16:07:20 executing program 0: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/1) 16:07:20 executing program 3: socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x8}, &(0x7f00000001c0), 0x0) 16:07:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:07:20 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080), 0x8) 16:07:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x2, [{}, {}]}, 0x44) 16:07:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) 16:07:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) 16:07:20 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f00000004c0)="bbe407b25dd7c4f7467ccac15317986858fcd924", 0x14) 16:07:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 16:07:20 executing program 5: getrusage(0x0, &(0x7f0000000440)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x384, 0xffffffff, 0x1d8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2bc, 0x2bc, 0x2bc, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00'}}, {{@uncond, 0x0, 0xa4, 0x110}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "12a845d3c7571a31bd5fed50f25446eb9b4489b83a84eaf3a00ecdbc7533633beff1e288b0196d9b972530b0571cfa27e161ad7ae17b236c991369e560d9a7a8"}}}, {{@ipv6={@mcast1, @private1, [], [], 'veth0_to_bond\x00', 'rose0\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140]}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3e0) 16:07:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0x0, @rand_addr=0x64010100, 0x0, 0x0, 'ovf\x00'}, {@remote}}, 0x44) 16:07:20 executing program 1: timer_create(0x8, 0x0, &(0x7f0000000380)) 16:07:21 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x84) 16:07:21 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10142, 0x0) 16:07:21 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000140)='fscrypt-provisioning\x00', 0x0, 0x0, 0x12, 0xfffffffffffffffc) [ 1031.523301][T32135] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:0 16:07:21 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0xffffffffffffffff) 16:07:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) 16:07:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10142, 0x0) 16:07:21 executing program 5: openat$ttyS3(0xffffff9c, &(0x7f0000000680)='/dev/ttyS3\x00', 0x40000, 0x0) 16:07:21 executing program 0: add_key$fscrypt_provisioning(&(0x7f00000023c0)='fscrypt-provisioning\x00', &(0x7f0000002400)={'syz', 0x0}, &(0x7f0000002440)={0x0, 0x0, @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}, 0x48, 0xfffffffffffffff8) 16:07:21 executing program 2: openat$full(0xffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x54940, 0x0) 16:07:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c, 0x0}}], 0x1, 0x40080c0) 16:07:21 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) 16:07:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r0) 16:07:21 executing program 0: openat$thread_pidfd(0xffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x20000, 0x0) 16:07:21 executing program 2: waitid(0x2, 0x0, 0x0, 0x2, &(0x7f0000000200)) 16:07:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [], @multicast1}, 0x0, 0x1, 0x0, 0x4}, 0x20) 16:07:21 executing program 3: mq_open(&(0x7f00000001c0)='ip6gre0\x00', 0x0, 0x0, &(0x7f0000000200)) 16:07:21 executing program 4: add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 16:07:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), 0x4) 16:07:21 executing program 2: pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) read$char_usb(r0, 0x0, 0x0) 16:07:21 executing program 0: r0 = openat$full(0xffffff9c, &(0x7f0000001740)='/dev/full\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 16:07:21 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xd, 0x0, 0x2}, 0x20) 16:07:21 executing program 3: openat$hwrng(0xffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x6c439be5db19f3fb, 0x0) 16:07:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 16:07:21 executing program 1: r0 = gettid() move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000040)=[0x3], 0x0, 0x0) 16:07:21 executing program 3: timer_create(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000000200)) timer_gettime(0x0, &(0x7f0000000240)) [ 1032.445242][T32184] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 16:07:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x104) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x104) 16:07:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000002380), 0x0) 16:07:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000005740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x20000000) 16:07:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x14, 0x0, 0x0) 16:07:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000000)) 16:07:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000009340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x0, 0x4}, 0x1c}}, 0x0) 16:07:22 executing program 2: r0 = epoll_create(0x1) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 16:07:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x60c, 0x3c4, 0x294, 0x1c0, 0x1c0, 0x0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast2, @remote, [], [], 'veth1_to_hsr\x00', 'rose0\x00'}, 0x0, 0x154, 0x1c0, 0x0, {}, [@common=@icmp6={{0x24, 'icmp6\x00'}, {0x0, "35e7"}}, @common=@srh1={{0x8c, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, @loopback}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "c21083ff328b1b2b4b59db8504b9f93ef464441892285b048c12623ff8cbfb5d1c207b189baf107ae4a5c891f5356baf192e3ceacccc2ef62f19565dbf39cc54"}}}, {{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ipv6={@empty, @private1, [], [], 'bond_slave_1\x00', 'veth1_to_team\x00'}, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'nr0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@mcast2}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x668) 16:07:22 executing program 3: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0xffffffffffffffff) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 16:07:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) 16:07:22 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000001740)='/dev/full\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) 16:07:22 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:07:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004080) 16:07:22 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 16:07:22 executing program 3: pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) read$char_usb(r0, &(0x7f0000000240)=""/156, 0x9c) 16:07:22 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) 16:07:22 executing program 4: openat$hwrng(0xffffff9c, 0x0, 0x610580, 0x0) 16:07:22 executing program 5: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$char_usb(r0, 0x0, 0x0) 16:07:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) 16:07:22 executing program 2: r0 = gettid() r1 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)) 16:07:22 executing program 1: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 16:07:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000040)={'veth0_vlan\x00', @ifru_names}) 16:07:22 executing program 5: pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x6de]}, 0x8}) 16:07:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000073c0)={0xa, 0x0, 0x0, @private0}, 0x1c) 16:07:22 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) 16:07:22 executing program 0: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)) 16:07:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) 16:07:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x1c) 16:07:23 executing program 5: socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x8}, 0x0, 0x0) 16:07:23 executing program 1: mremap(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x1000, 0x2, &(0x7f0000ff8000/0x1000)=nil) 16:07:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 16:07:23 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000240)) 16:07:23 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000001740)='/dev/full\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) read$char_usb(r0, &(0x7f0000000100)=""/55, 0x37) 16:07:23 executing program 2: waitid(0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 16:07:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000005740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c, 0x0, 0x2a}}], 0x1, 0x0) 16:07:23 executing program 1: openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) 16:07:23 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000300)) 16:07:23 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{}]}) 16:07:23 executing program 0: timer_getoverrun(0x0) timer_delete(0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0xe, 0x0, @thr={&(0x7f0000000000), 0x0}}, 0x0) timer_getoverrun(0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:07:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000005740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c, 0x0}}], 0x1, 0x20000000) 16:07:24 executing program 5: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 16:07:24 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$sock_ifreq(r0, 0x0, 0x0) 16:07:24 executing program 3: add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, 0x0, 0x0, 0xfffffffffffffff8) 16:07:24 executing program 4: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x200400) 16:07:24 executing program 2: openat$null(0xffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xb6483, 0x0) 16:07:24 executing program 0: socketpair(0x1, 0x0, 0x1d2, 0x0) 16:07:24 executing program 3: inotify_add_watch(0xffffffffffffffff, 0x0, 0x8000001) 16:07:24 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16:07:24 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000140)='fscrypt-provisioning\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x12, 0xfffffffffffffffc) 16:07:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) 16:07:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f00000003c0), 0x0) 16:07:24 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x108031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60"], 0x0) 16:07:24 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) 16:07:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000), 0x4) 16:07:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000740), 0x4) 16:07:24 executing program 2: pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x6de]}, 0x8}) 16:07:24 executing program 4: r0 = gettid() move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000040), &(0x7f0000000080), 0x0) 16:07:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) 16:07:25 executing program 3: openat$null(0xffffff9c, 0x0, 0x410700, 0x0) 16:07:25 executing program 5: r0 = epoll_create(0x6) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) 16:07:25 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 16:07:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x8c) 16:07:25 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:07:25 executing program 0: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f00000000c0), 0x0, 0x0) 16:07:25 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 16:07:25 executing program 5: r0 = socket(0x10, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 16:07:25 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 16:07:25 executing program 2: clock_gettime(0x0, &(0x7f0000002300)) 16:07:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:07:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000), 0x4) 16:07:25 executing program 3: r0 = openat$null(0xffffff9c, &(0x7f0000000680)='/dev/null\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x0) 16:07:25 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 16:07:25 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x6de]}, 0x8}) 16:07:25 executing program 1: mq_open(&(0x7f0000000000)='-\x00', 0x0, 0x0, 0x0) 16:07:25 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:07:25 executing program 0: r0 = openat$null(0xffffff9c, &(0x7f0000000680)='/dev/null\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x10, 0xffffffffffffffff, 0xe) 16:07:25 executing program 3: request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0) 16:07:25 executing program 2: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) 16:07:25 executing program 5: perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:07:25 executing program 1: timer_create(0x7, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x77359400}}, 0x0) 16:07:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) close(r1) 16:07:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10142, 0x0) 16:07:26 executing program 3: r0 = epoll_create(0x9) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000900)) 16:07:26 executing program 2: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 16:07:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@hopopts={0x0, 0xfe, [], [@generic={0x0, 0x45, "7c981698d06535f981908052b36a344ffc63e6ac8a498fcad4ccdc542b0b58a4b2cab065455bc5522f37c7286f46ef5b3b1c46ff41353c52aa8794790d13d9ce230daa7fd4"}, @generic={0x0, 0x7a8, "5a0e1999688ab01f77613ba332fd182e9b199f1e4819d7be5491e6db2c6434cbdbdaa21fba2c167aaf5ef25c4ddafa47d6376184c7efed90201a4dd6c97590464bfdb4ffb46c154627011bf1893fdc9011a7f497d5bef9b4d2801f8e50a90eba2f2ed1d0993fcfe11b4401282dffb62bee67ff64068362a33d23218e8aec10076fc09faf06eeab742935ca894317af0580ba55a3975e67d53d060ffe5f2689e1399b5c48c75cd10e092d6e85b858a285b62f368994fa97af4c1a0f96eeaa5a963110db01980e6eb3443ca3abe66a698ebf446e3272159cdb39be3c34e98e72070d55f87ca3c62d99237c8e8d285b553882a76836ed8fa2ee05598511db7a55332d70302fc7c5ab73fb107ebf6f70c440068972e4ebda322b40b3dd1cf2bc4f9e0f74f7e72aa999d866a0ae62877895c70c7ee9fafcb42535a2752b4d8bbe981eb5e30daf3453f321c8f64013d0cf0bac1765aaac11f785ef78113e519dcd953d36435374fb34d98e39a4e82866b30afd30b7f12c32dcf4787906de9c6b66b51699c7d7401f9a6c3c925661f5e2fe17ad8aa99355931edd776bdafcf78827dbfc7ffe7b6dea4ef95a8e6f935a9c5979649a7841679fdd6684ed64f8476564229c23ec1a06c3c1b374d91fb35cc9c835a2750485c607a5bf9fb4a1bf5c99b1d40ce2febbaf73bdaf9de1cd3c3e9e3e3745763c650f7e9b63092083e3d91071734d884055170256a480ba4eccfaaf9b4b9aafc686c9002cfaa4f48b91d073d9a4133c69701e6f3469fdff0c903247fe15f451d9245c2d856fec079e68d7d1ce68f00329c4e83c31f177df2a0aa45b9e976741c38d8c84d5d2831a02a333442c0b65ba30ff1237c117fc51b4b4704fb6fb3157d6619b8dd2f22e201f7f158c9a7fe5d7d3d6ac584857a3d66b622b7765ad8b4efb4b9e2f0c2a8d56df2d2a6a734463ab3ea847c1a965057886cc863765b7eca37396502ce402cbdbaefee304aa14a9926c48dba76fbf81c9ef8d26461c901003235020892564f198faad3e48d9d0a46215b38bb5b219e8d57f2a027349b654c738a2520eda93eca3f1cc9b65271f71e1d2852d6c50a96d368f089c32b3f62a7cbfc9e9129a06f09acae5baa409317dab8ac71fd86fe03ee19836783bdc686358ab9ce2340b10a2bb3c4179c0ba0522494956c7235b1e9268962b91322606ea976b60b278de20f6d0643be61fb0d1c5d772f355512f49cd9498c113a4086c11ef2d15eaed69ed57b02ed0a62d9f550aa54ebe8b4427ab59cfce81078d21618c63c1cdd2607d7df91901b9ede91084636e5cab80f2232ef38497f3fdfa761f5bc855eab93e4798de16b6d86a53cca3ed2ff6e8918405723b6fc3d764970ea7456083987ab89be73987a78bf88dfb332ad8da6370baf662f748f9ef903c60875a4df66a47aa932984c2d177b32a4e45365342a68ca10735225c364b68f5df8bbae9223a250ad2d497d22fd66e00544f1a1696c58cabc60ee00f4e26af83d9aba6813050cec4970f94e0a1f4cf290fe94b62135a0fa0e3a9f270f87bdfb7f8007c5fae59d56286643f164c703b03a6738f2aed8363091c5fda449d5feb816a4a818b5e3cf4824cd43e59266935ed481ca97b5f4b841f5767ec64416118a54293a6e4c9abeb11b414b2f737a652d6f51264b528a90a0452f55c2324a6148c8177c526fce83055c4a649f527cb372a06dcd98cc868227b5544e992ca2727204ffdfac4919176647734935befd863fe16f47f18372ff0c30f3fbea5ead3025e3a8781252379927de584b9d675245a0381c33399f53d2cf00f98a20b8f57ae19e13be8a9e993d271a3d210d05a1a50120a881e2632fde194ca549d875f561d8b9065523d67b64fb210b8a6dabc8c6e89547d0ebb35bc0681de7fe4140ba46818e064b183056668e933d04de33c94e007d76ae14fe5dbc5250cf49bce1fe8a2effad0f04ef3d796fd100cf9a42a5803f5b2e7f60c527d1463628ab6d68f9ea41155ac755417427f9030fa2228a5ba22d2aa65dcef3a91ce4630467c4822c9d879dddfa9d015db22e82548c5c15f0ac6c55d464e381a513a609e923ae2b73a6f409617cb06a2b2558b68acf418627155c77559a349821cd69e0fd00361dcf7668560a25840e609906e400958c05ed8bd13e29df6ddd1a36bb5acd80851ca731fd122dd8b8984af7b7389edaf59e4f9ab7bbdce6ade927a18d8e3df42d3a8beb25fba4fe9a2beacb57d7c03dc451258e319beba3d2da0d87146150700a0ca4dc9ce10afcb04267c6699ab6341b58bbeceb65d16b7f4299108701f552c832fa48abf93925404890ae698faa3c6caa48ee9f63e14e7861380825d0cf01c47cbd9dcdda15969265d2042ab72f76a57cb5ec7b4fba00e89af26e26339226a1ba385721ad226c58b480ff355ab6f5dc9b95ecc7fed6c0a975479e53e48ff8d63204b8b3010dfd1ac740ed38635dceb614bec27b85d40932b5226d2adf35511367a7a16985a1b3e6df46e2e8ab2c2c83b082fcd5b97c55880eaf00ee3639d2c7d6773643e8aa8c4f2c602f9305bf5ce301c029d25adfc6953f1a62ad1b773807a810c1afa79b893fb7008de900c763a32ac0bbdc8533a6820d2af70c5bc3ba8c61915b61da03fe061a7325557cacede75c525514a914348c042536d75314d6fd10d3ad8aff245c0a087fc03ac432f26869e7fb79448b2b886026b9eb0ec972a2620c2197a5b91514e3d63339215b3cbd8d43962305bb0159ee363a2202a570b"}]}, 0x800) 16:07:26 executing program 1: clock_getres(0xc07d2c96a1a3cabc, 0x0) 16:07:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) 16:07:26 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000080)) 16:07:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, &(0x7f0000000100)) 16:07:26 executing program 3: r0 = epoll_create(0x9) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000900)) 16:07:26 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:07:26 executing program 1: mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 16:07:26 executing program 5: r0 = openat$null(0xffffff9c, &(0x7f0000000680)='/dev/null\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) 16:07:26 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/mnt\x00') 16:07:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xfff}, 0x1c) 16:07:26 executing program 3: r0 = epoll_create(0x9) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000900)) 16:07:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'ip6_vti0\x00', 0x0}) 16:07:26 executing program 1: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 16:07:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000080)) 16:07:26 executing program 0: timer_create(0xbca2b2cfc6b39f46, 0x0, &(0x7f0000000140)) 16:07:26 executing program 3: r0 = epoll_create(0x9) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000900)) 16:07:26 executing program 2: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 16:07:26 executing program 4: r0 = openat$hwrng(0xffffff9c, &(0x7f0000002200)='/dev/hwrng\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 16:07:26 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 16:07:26 executing program 5: perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:07:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) 16:07:27 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000), 0x0) 16:07:27 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000400), 0x0) 16:07:27 executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0xa0000310) 16:07:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:07:27 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x54) 16:07:27 executing program 0: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f00000000c0)=0x4d1, 0x4, 0x0) 16:07:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) 16:07:27 executing program 1: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x1, 0x0) 16:07:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x1c) 16:07:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) 16:07:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000002300)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002280), 0x0, 0x10000, &(0x7f0000002340)={0x0, r1+60000000}) 16:07:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) 16:07:27 executing program 4: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, &(0x7f0000000a00)=""/4096, 0x1000) 16:07:27 executing program 1: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 16:07:27 executing program 3: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:07:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x44) 16:07:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f00000003c0)="53582b1ead25c7df90f9ad23056784a2a70ea3f2a5278f5946e01178ab8b251a357052536e3e9278863e36e0a8500080edde278a5815f6b36091442db235e58fabcf79099c7b43b9be890963d935558d5f41caf404fac411edcbab08a2133bcb53918ff6642d6667c5ad5b660b036dc08b68e22e2453d98dcaee62af8ff662c7f0c7ff3c86872fc683f77edbdbe00610bed2fbd927ecd52a6fddcb642fcfa58435b7e499144e8f48", 0xa8) 16:07:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000011c0)={r3, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @dev}, 0x10) 16:07:27 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001380)={{}, {0x77359400}}, 0x0) 16:07:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000), 0x8) 16:07:27 executing program 3: clock_gettime(0x3, &(0x7f0000001c80)) 16:07:27 executing program 2: r0 = gettid() r1 = gettid() r2 = openat$full(0xffffff9c, &(0x7f0000001740)='/dev/full\x00', 0x0, 0x0) r3 = epoll_create(0x4) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000000)={r3}) 16:07:27 executing program 5: r0 = openat$null(0xffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x21000420) [ 1038.418070][T32490] device batadv_slave_1 entered promiscuous mode [ 1038.449829][T32488] device batadv_slave_1 left promiscuous mode [ 1038.499016][T32494] device batadv_slave_1 entered promiscuous mode [ 1038.530198][T32488] device batadv_slave_1 left promiscuous mode 16:07:28 executing program 1: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000400)="260000002200470508d258002b1f00eb0101c7033500b000"/38, 0x26) setsockopt$sock_int(r0, 0x1, 0x20800000000008, &(0x7f0000000280), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = fork() tkill(r2, 0x18) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x800000000009031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r0, 0x0) 16:07:28 executing program 4: add_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="13", 0x1, 0xfffffffffffffffb) 16:07:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000380)) 16:07:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 16:07:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 16:07:28 executing program 5: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x2a8b381e, 0x0) 16:07:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:07:28 executing program 4: timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}}, 0x0) 16:07:28 executing program 2: openat$null(0xffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8c41, 0x0) 16:07:28 executing program 5: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0xffffffffffffffff) 16:07:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x1}, 0x20) 16:07:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, &(0x7f0000000140)="d5", 0x1, 0x240080d3, &(0x7f0000000040)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x80) 16:07:29 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) 16:07:29 executing program 5: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 16:07:29 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x77359400}}, &(0x7f0000000280)) 16:07:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002700)=@nat={'nat\x00', 0x1b, 0x5, 0x594, 0x478, 0x368, 0xffffffff, 0x250, 0x478, 0x5b8, 0x5b8, 0xffffffff, 0x5b8, 0x5b8, 0x5, 0x0, {[{{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@srh={{0x2c, 'srh\x00'}}, @common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, @remote, @loopback, @private0, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @private2, @mcast2, @dev, @remote, @private2, @rand_addr=' \x01\x00', @dev, @mcast1]}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private2, @ipv4=@multicast1, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [], [], 'team0\x00', 'gre0\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5f0) 16:07:29 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 16:07:29 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12) 16:07:29 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x1, 0x4) 16:07:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x384, 0xffffffff, 0x1d8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2bc, 0x2bc, 0x2bc, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00'}}, {{@uncond, 0x0, 0xa4, 0x110}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "12a845d3c7571a31bd5fed50f25446eb9b4489b83a84eaf3a00ecdbc7533633beff1e288b0196d9b972530b0571cfa27e161ad7ae17b236c991369e560d9a7a8"}}}, {{@ipv6={@mcast1, @private1, [], [], 'veth0_to_bond\x00', 'rose0\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3e0) 16:07:29 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002080)={'syztnl2\x00', 0x0}) waitid(0x0, 0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) 16:07:29 executing program 2: futex(0x0, 0xe372434a8b738520, 0x0, 0x0, 0x0, 0x0) 16:07:29 executing program 4: pselect6(0x40, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 16:07:29 executing program 0: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x5}, 0x0, &(0x7f0000000180)={0x0}) 16:07:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 16:07:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 16:07:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:07:29 executing program 2: perf_event_open(&(0x7f0000002e40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:07:29 executing program 4: mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000), 0x3, 0x3) 16:07:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:07:29 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) 16:07:29 executing program 3: socket(0x26, 0x5, 0xffffff00) 16:07:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) 16:07:29 executing program 4: mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 16:07:30 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3814, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xfffffffffffffffe}, 0x1040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:07:30 executing program 0: request_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0) 16:07:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) 16:07:30 executing program 3: mq_open(&(0x7f0000000400)='0000:00:10.0\x00', 0x0, 0x0, 0x0) 16:07:30 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000200)) 16:07:30 executing program 1: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 16:07:30 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 16:07:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/140, 0x8c}, {0x0}], 0x2, &(0x7f0000000400)=""/4096, 0x1000}, 0x7}], 0x1, 0x0, &(0x7f0000009480)={0x77359400}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x0, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x10) 16:07:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x104}}, 0x0) 16:07:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='?'], 0x54}}, 0x0) 16:07:30 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f0000002200)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 16:07:30 executing program 2: add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 16:07:30 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, r0+10000000}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000300)) 16:07:30 executing program 5: pselect6(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xca6f]}, 0x8}) 16:07:30 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002e00)={0x0, {{0xa, 0x0, 0x0, @remote}}, 0x0, 0x4, [{{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @private2}}, {{0xa, 0x0, 0x0, @dev}}]}, 0x28c) 16:07:31 executing program 0: openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x37005edf93043ec4, 0x0) 16:07:31 executing program 4: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x100800) 16:07:31 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 16:07:31 executing program 3: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x8) 16:07:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x240080d3, 0x0, 0x0) 16:07:31 executing program 4: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 16:07:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffff49, 0x0, 0x0, 0x0, 0x0, {}, ["", ""]}, 0x1c}}, 0x0) 16:07:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=@dstopts, 0x8) 16:07:31 executing program 2: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e5d391a8c951a2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:07:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0), 0x4) 16:07:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00', r0) 16:07:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000004c0)={@ipv4, 0x0, 0x1, 0x0, 0x4}, 0x20) 16:07:31 executing program 4: openat$thread_pidfd(0xffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x4880, 0x0) 16:07:31 executing program 2: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 16:07:31 executing program 1: clock_gettime(0xc782e856df6657ac, 0x0) 16:07:31 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 16:07:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='l'], 0x104}}, 0x0) 16:07:31 executing program 0: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 16:07:31 executing program 4: request_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='^&[^*\x00', 0x0) 16:07:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001340)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001300)={&(0x7f0000000380)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xe0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x29, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x29, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x684, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_6GHZ={0x12c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x49, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x29, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xfc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x49, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x4d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0xd, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}]}]}, @NL80211_ATTR_TX_RATES={0x270, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}]}]}]}, 0xec4}}, 0x0) 16:07:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r0, 0x0, &(0x7f0000000280)) 16:07:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/140, 0x8c}, {0x0}], 0x2, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000009480)={0x77359400}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x0, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x0) 16:07:31 executing program 5: perf_event_open$cgroup(&(0x7f0000001880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:07:31 executing program 4: clock_getres(0x0, &(0x7f0000000000)) sched_rr_get_interval(0x0, &(0x7f0000000040)) 16:07:32 executing program 0: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 16:07:32 executing program 2: r0 = openat$full(0xffffff9c, &(0x7f0000001740)='/dev/full\x00', 0x0, 0x0) r1 = openat$full(0xffffff9c, &(0x7f0000001740)='/dev/full\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)) 16:07:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16:07:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) 16:07:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x68}}], 0x1, 0x0) 16:07:32 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x7fffffff}, 0x8) 16:07:32 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x40009, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000500)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @dev, @multicast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000580)=ANY=[], 0x0) 16:07:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000100), 0x8) 16:07:32 executing program 5: futex(&(0x7f0000000240)=0x1, 0x88, 0x0, 0x0, 0x0, 0x0) 16:07:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000005740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, 0x1c, 0x0, 0x0, 0x0, 0x33}}], 0x1, 0x0) 16:07:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000002140)={@remote, 0x0, 0x0, 0x1, 0x9}, 0x20) 16:07:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 16:07:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 16:07:32 executing program 5: perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:07:32 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)) 16:07:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040), 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 16:07:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f0000000040)) 16:07:32 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 16:07:32 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) 16:07:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 16:07:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) 16:07:32 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x580, 0x3c4, 0x294, 0x1c0, 0x1c0, 0x0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast2, @remote, [], [], 'veth1_to_hsr\x00', 'rose0\x00'}, 0x0, 0xc8, 0x134, 0x0, {}, [@common=@icmp6={{0x24, 'icmp6\x00'}, {0x0, "35e7"}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "c21083ff328b1b2b4b59db8504b9f93ef464441892285b048c12623ff8cbfb5d1c207b189baf107ae4a5c891f5356baf192e3ceacccc2ef62f19565dbf39cc54"}}}, {{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ipv6={@empty, @private1, [], [], 'bond_slave_1\x00', 'veth1_to_team\x00'}, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'nr0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@mcast2}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5dc) 16:07:32 executing program 2: timer_create(0x0, &(0x7f0000000580)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000005c0)) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, r0+60000000}}, 0x0) 16:07:32 executing program 4: perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:07:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x9) getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, &(0x7f0000000080)) 16:07:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "1dd6a50b251ca714", "ea7ebf3e4bba5016d767f36f7d86130c8bfa8d91810878534c4292a5b4aa1647", "07871d6a", "1ead089ab644b7f5"}, 0x38) 16:07:33 executing program 1: futex(&(0x7f0000000040), 0x8b, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:07:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000005740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x24000001) 16:07:33 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@rthdr={{0x14}}], 0x14}}], 0x1, 0x0) 16:07:33 executing program 4: pselect6(0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xca6f]}, 0x8}) 16:07:33 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xf) 16:07:33 executing program 3: perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:07:33 executing program 0: r0 = openat$null(0xffffff9c, &(0x7f0000000680)='/dev/null\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:07:33 executing program 1: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 16:07:33 executing program 2: perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:07:33 executing program 4: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200401, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00', r0) 16:07:33 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, r0) 16:07:33 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 16:07:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000005bc0)=[{{&(0x7f0000000040)=@caif=@dgm, 0x80, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x1, 0x0) 16:07:33 executing program 0: futex(0x0, 0x81, 0x0, &(0x7f0000000200)={0x77359400}, 0x0, 0x0) 16:07:33 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 16:07:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev}, 0x66) 16:07:33 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x3a) 16:07:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 16:07:33 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RFLUSH(r0, &(0x7f0000000140)={0x7}, 0x7) 16:07:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000038c0)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x0, 0x0, "6e3bd1e56b6a077bfb3f93f0fa2c59db15c56748d7bca7ab1abb759e280d147f43b181704e02cc2bc31ed34cd03bc5f3a6c89cf514311ecc5f75a7cbb911a0431ee5c102d1572841c4cc677db7f3825a"}, 0xd8) 16:07:33 executing program 1: syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x0, 0x0) 16:07:33 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e40)) 16:07:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000008680)={&(0x7f0000008500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000008640)={&(0x7f0000008580)={0x14}, 0x14}}, 0x0) 16:07:34 executing program 0: syz_emit_ethernet(0x12c8, 0x0, 0x0) 16:07:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000008680)={0x0, 0x0, &(0x7f0000008640)={0x0}}, 0x0) 16:07:34 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:07:34 executing program 2: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x901, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:07:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:07:34 executing program 5: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @in={0x2, 0x0, @private=0xa010100}, @in={0x2, 0x0, @loopback}, @nl=@unspec}) 16:07:34 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000006280)={0x77359400}) 16:07:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000380)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xe0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x29, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x29, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x684, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_6GHZ={0x12c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x49, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x29, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xfc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x49, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x4d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0xd, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}]}]}, @NL80211_ATTR_TX_RATES={0x270, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}]}]}]}, 0xec4}}, 0x0) 16:07:34 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000000000)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4101000004000029c493a4567b5100000000144959645f29c4645f29c4645f010000000000040002", 0x29, 0x1800}, {0x0, 0x0, 0x3fbfd}], 0x0, &(0x7f0000000180)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 16:07:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) 16:07:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:07:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000058c0)) [ 1045.151070][ T390] loop0: detected capacity change from 0 to 1019 16:07:34 executing program 1: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8000}, 0x0, &(0x7f0000000100)) [ 1045.244657][ T390] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 16:07:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000003a40), 0x4) 16:07:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x40001) clock_gettime(0x0, &(0x7f0000000480)={0x0}) ppoll(&(0x7f0000000440)=[{r0, 0x2426}, {r1}], 0x2, &(0x7f00000004c0)={r2}, 0x0, 0x0) 16:07:34 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005d80)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e40)) 16:07:35 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x0, 0x1d5) 16:07:35 executing program 2: clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x0, r0+10000000}) 16:07:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000005d80)) 16:07:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00'}) 16:07:35 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000008100)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, 0x0) 16:07:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000036c0)) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000003740)) 16:07:35 executing program 0: openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) 16:07:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x2, 0x0) write$tun(r0, 0x0, 0x0) 16:07:35 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x84800) 16:07:35 executing program 1: r0 = socket$inet6(0x18, 0x1, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1003, &(0x7f0000000000), &(0x7f0000000080)=0x10) 16:07:35 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 16:07:35 executing program 4: r0 = socket$inet6(0x18, 0x1, 0x0) shutdown(r0, 0x2) getsockname(r0, 0x0, &(0x7f00000000c0)) 16:07:35 executing program 0: r0 = socket$inet6(0x18, 0x1, 0x0) shutdown(r0, 0x1) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10}], 0x10}, 0x400) 16:07:35 executing program 2: r0 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000200)=""/4096, 0x1000) 16:07:35 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000100)='./file1\x00', 0x200, 0x0) stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)) 16:07:35 executing program 1: r0 = socket$inet6(0x18, 0x1, 0x0) listen(r0, 0x0) shutdown(r0, 0x2) 16:07:35 executing program 3: r0 = socket$inet6(0x18, 0x2, 0x0) shutdown(r0, 0x1) 16:07:35 executing program 4: open$dir(&(0x7f0000000100)='./file1\x00', 0x200, 0x0) stat(&(0x7f0000000240)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x8) 16:07:35 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000100)='./file1\x00', 0x200, 0x0) open$dir(&(0x7f00000000c0)='./file1\x00', 0x200, 0x0) 16:07:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x8) recvfrom$unix(r0, &(0x7f0000000000)=""/119, 0x77, 0x2, 0x0, 0x0) 16:07:35 executing program 5: open$dir(&(0x7f0000000040)='.\x00', 0x2, 0x0) 16:07:36 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1000, 0x0) 16:07:36 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@in, 0xc) 16:07:36 executing program 4: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1}) 16:07:36 executing program 0: r0 = socket$inet6(0x18, 0x2, 0x0) ioctl$TIOCOUTQ(r0, 0x40047473, 0x0) 16:07:36 executing program 2: r0 = socket$inet6(0x18, 0x1, 0x0) shutdown(r0, 0x1) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x400) 16:07:36 executing program 5: recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca1) 16:07:36 executing program 1: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x11) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f00000001c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/user\x00') setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) 16:07:36 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @empty, @ipv4={[], [], @multicast2}, @link_local, @dev}}}}, 0x0) 16:07:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89a0, &(0x7f0000000280)={'syztnl0\x00', 0x0}) 16:07:36 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x4, &(0x7f0000000a00), 0x4) 16:07:36 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, '+&]', 0x28, 0x6, 0x0, @private2, @empty, {[], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}}, 0x0) 16:07:36 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={0x0, 0x0, 0x18}, 0x10) 16:07:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x8916, &(0x7f0000000040)={0x0, @ax25={0x3, @bcast, 0x8}, @l2tp={0x2, 0x0, @loopback}, @vsock}) 16:07:36 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002d40)=@bpf_ext={0x1c, 0x2, &(0x7f0000002b40)=@raw=[@btf_id], &(0x7f0000002b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:07:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) write$cgroup_type(r0, 0x0, 0x0) 16:07:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f0000000480)) 16:07:37 executing program 5: bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000022c0), 0x10) 16:07:37 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0xffffffffffffffff, 0x0) 16:07:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00'}) 16:07:37 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0xf) 16:07:37 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x3f, 0x0}}, 0x10) 16:07:37 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x2, 0x0, @private}, 0x10, 0x0}, 0x0) 16:07:37 executing program 3: r0 = socket(0x2, 0x1, 0x0) pipe(&(0x7f0000000480)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000180)) 16:07:37 executing program 5: r0 = socket(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000080)) 16:07:37 executing program 4: r0 = socket(0x2, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x120, 0x0, 0x0) 16:07:37 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "556671ea90ef4e1c174a01396c853a94ff9eaa5679e2a93ff0bedcac090d80a461c88717b753d6d2cc5e7d00f698a5e190f804e505cdf41b13f9401f36219b0b3f2b886494f12a50f6ad84019956ba3b"}, 0xd8) 16:07:37 executing program 5: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xd, 0x0, 0x0) 16:07:37 executing program 2: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x10) r1 = socket(0x11, 0x6, 0x1) r2 = getgid() r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000002300), &(0x7f0000002380)=0x60) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000000080)="ebe0c9884e35b13c6264edaf4b165f930f9617117417", 0x16}, {&(0x7f00000000c0)="da90eb948b4518cadcf00e002351d8aa4c51740f244698854cfba7dc01f1a794d99b9ef973b43719f351f604bb04a91f2e863ac2ba20f1c37bda7f3b2e071bf285", 0x41}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="3cdb3c98724b0f8b081f20d546782d6c0eb66297bc219a287de74e144524a7d0060cd3946fdf630587383eb2d0e43e79b5a42740d62a861823fbd6b07c6dde2c579a9c6a779cdae37a69d68a28c8a7cefefd8f703fbfbeaff0e3bf74f0b74e9899d98289b689c50315d66e42e6ac30113f4802a7cfbece846f7f8c312d804a17acc36f405d3d223adc821747404a183132a6ad2fb2d05648d4b84124c1e0162e31a2fbb0e3f7501c52b753b880b361483068", 0xb2}, {&(0x7f0000001200)="27cdef2987087170a75254a020a72f3ff372c2937ef9281195", 0x19}, {&(0x7f0000001240)="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", 0x1000}], 0x6, &(0x7f00000023c0)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r2}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0xb0, 0x41}, 0x80) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002680)={0x0, @can={0x1d, 0x0}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x2}}, @rc={0x1f, @none, 0xa0}, 0xffff, 0x0, 0x0, 0x0, 0xff, &(0x7f0000002640)='sit0\x00', 0x4, 0x20, 0x1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002780)={'syztnl2\x00', &(0x7f0000002700)={'ip_vti0\x00', r4, 0x7, 0xf841, 0x1, 0x4, {{0xa, 0x4, 0x2, 0x3b, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @local, {[@ra={0x94, 0x4, 0x1}, @generic={0x86, 0xd, "06724d51faf55c19e1c66c"}]}}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)={0x2, 0x100, 0x20, 0x5, 0xf4c, 0xffffffffffffffff, 0xffff8001, [], r5, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x40) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002a40)={&(0x7f0000002a00)='./file0\x00', 0x0, 0x8}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x2, 0xc, &(0x7f0000002800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7fff}, [@map_val={0x18, 0xa, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x0, 0x7, 0x7374674d9d80d35c, 0x1, 0xffffffffffffffff, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @exit, @call={0x85, 0x0, 0x0, 0x71}]}, &(0x7f0000002880)='GPL\x00', 0xfffffffa, 0x8e, &(0x7f00000028c0)=""/142, 0x41000, 0x2, [], r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002980)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000029c0)={0x0, 0x3, 0x2, 0x9}, 0x10, 0x0, r7}, 0x78) pipe(&(0x7f0000002b00)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002d40)=@bpf_ext={0x1c, 0x4, &(0x7f0000002b40)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}], &(0x7f0000002b80)='syzkaller\x00', 0xfffffff8, 0xf4, &(0x7f0000002bc0)=""/244, 0x41000, 0xa, [], r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002cc0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000002d00)={0x1, 0x8, 0x5, 0x100}, 0x10, 0x26ede, r7}, 0x78) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002dc0)={r9, r8, 0x4, r11}, 0x10) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000002e40)='gtp\x00', r9) r13 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002e80)='ns/pid_for_children\x00') recvmsg$can_raw(r10, &(0x7f0000005100)={&(0x7f0000002ec0)=@can={0x1d, 0x0}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000002f40)=""/87, 0x57}, {&(0x7f0000002fc0)=""/243, 0xf3}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x3, &(0x7f0000004100)=""/4096, 0x1000}, 0x10000) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000005200)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005140)={0x50, r12, 0x8, 0x70bd27, 0x100, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r13}, @GTPA_LINK={0x8, 0x1, r14}, @GTPA_O_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_LINK={0x8}]}, 0x50}}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000005340)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000005300)={&(0x7f00000052c0)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x994, 0x3d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) 16:07:37 executing program 0: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000080)={0xffffffffffffffff, 0x24, 0x0, 0x0, 0x0}, 0x20) 16:07:37 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000380)) 16:07:37 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 16:07:37 executing program 1: r0 = socket(0x2c, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 16:07:37 executing program 5: r0 = socket(0x18, 0x0, 0x1) accept$ax25(r0, 0x0, 0x0) 16:07:38 executing program 2: r0 = socket(0xa, 0x5, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 16:07:38 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002e80)='ns/pid_for_children\x00') 16:07:38 executing program 0: r0 = socket(0x2, 0x1, 0x0) bind$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x3}}, 0x12) 16:07:38 executing program 3: r0 = socket(0x2, 0x1, 0x0) getpeername$l2tp(r0, 0x0, 0x0) 16:07:38 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0)='gtp\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x3fe00000, 0x2, 0x8833}) 16:07:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast6-avx\x00'}, 0x58) 16:07:38 executing program 2: pipe(&(0x7f00000006c0)={0xffffffffffffffff}) connect$rxrpc(r0, 0x0, 0x0) 16:07:38 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x1, 0x0, "556671ea90ef4e1c174a01396c853a94ff9eaa5679e2a93ff0bedcac090d80a461c88717b753d6d2cc5e7d00f698a5e190f804e505cdf41b13f9401f36219b0b3f2b886494f12a50f6ad84019956ba3b"}, 0xd8) 16:07:38 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[{0x10}], 0x10}, 0x0) 16:07:38 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x6, &(0x7f0000000a00), 0x4) 16:07:38 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 16:07:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89b1, &(0x7f0000000280)={'syztnl0\x00', 0x0}) 16:07:38 executing program 2: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast6-avx\x00'}, 0x58) 16:07:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0xf0ff7f00000000}}, 0x0) 16:07:38 executing program 3: socketpair(0x25, 0x0, 0x0, &(0x7f00000005c0)) 16:07:38 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:07:38 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) 16:07:38 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x1d, &(0x7f0000000a00), 0x4) 16:07:38 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x13, &(0x7f0000000a00), 0x4) 16:07:38 executing program 4: pipe(&(0x7f0000002b00)) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 16:07:38 executing program 5: r0 = socket(0x2, 0x2, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 16:07:39 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 16:07:39 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x21, 0x0, 0x0) 16:07:39 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x3, 0x0, @remote}, 0x10) 16:07:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, &(0x7f0000000380)=0x100) 16:07:39 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x10, &(0x7f0000000a00), 0x4) 16:07:39 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 16:07:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100), 0x8) 16:07:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x84) 16:07:39 executing program 3: pipe(&(0x7f0000002b00)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000002e40)='gtp\x00', r0) 16:07:39 executing program 4: bpf$BPF_PROG_QUERY(0x21, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 16:07:39 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001c80)={'team0\x00'}) 16:07:39 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0x63}}, 0x10) 16:07:39 executing program 1: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x7, &(0x7f0000000a00), 0x4) 16:07:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x84) 16:07:39 executing program 4: socket(0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002e80)='ns/pid_for_children\x00') 16:07:39 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000080)="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", 0x5ad, 0x20000040, &(0x7f0000001080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 16:07:39 executing program 0: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 16:07:39 executing program 1: r0 = socket(0x2, 0x1, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 16:07:39 executing program 2: r0 = socket(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000040)) 16:07:39 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 16:07:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x14) 16:07:40 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x24, 0x0, 0x0, 0x0}, 0x20) 16:07:40 executing program 1: socketpair(0x0, 0xf, 0x0, &(0x7f0000000180)) 16:07:40 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 16:07:40 executing program 2: bpf$BPF_PROG_QUERY(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 16:07:40 executing program 0: bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000022c0), 0x10) pipe(&(0x7f0000002b00)) 16:07:40 executing program 5: r0 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00', r0) 16:07:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 16:07:40 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@ldst={0x0, 0x0, 0x1, 0x9, 0x4}, @generic={0x0, 0x0, 0x0, 0x9, 0x6}, @call={0x85, 0x0, 0x0, 0x9c}]}, &(0x7f0000000240)='syzkaller\x00', 0x8001, 0xbd, &(0x7f0000000780)=""/189, 0x41000, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) 16:07:40 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x11, &(0x7f0000000a00), 0x4) 16:07:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010800f0ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000200bbbbbbbbbbbb000008001b"], 0x34}}, 0x0) 16:07:40 executing program 0: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x7, &(0x7f0000000040), 0x4) 16:07:40 executing program 5: r0 = socket(0x2, 0x1, 0x0) connect$rxrpc(r0, 0x0, 0x0) 16:07:40 executing program 3: socket(0x25, 0x5, 0x4) 16:07:40 executing program 1: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x4f) 16:07:40 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 16:07:40 executing program 2: socketpair(0x2a, 0x0, 0x0, &(0x7f00000005c0)) 16:07:40 executing program 0: ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x8001, 0xbd, &(0x7f0000000780)=""/189, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:07:40 executing program 5: socketpair(0x3, 0x0, 0x61ec, &(0x7f0000000000)) 16:07:40 executing program 3: r0 = socket(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={0x0}}, 0x20000080) 16:07:40 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x8, &(0x7f0000000a00), 0x4) 16:07:40 executing program 1: r0 = socket(0x18, 0x0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 16:07:41 executing program 0: socket(0x2, 0x0, 0x7fffffff) 16:07:41 executing program 2: r0 = socket(0x2, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 16:07:41 executing program 5: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x15, &(0x7f0000000a00), 0x4) 16:07:41 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140b, 0x1}, 0x10}}, 0x0) 16:07:41 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x26, 0x0}, 0x20) 16:07:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={0x0}}, 0x0) 16:07:41 executing program 0: r0 = socket(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000100)) 16:07:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 16:07:41 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x32800, 0x0) 16:07:41 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x12, &(0x7f0000000a00), 0x4) 16:07:41 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 16:07:41 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002d40)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000002b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:07:41 executing program 0: r0 = socket(0x2, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00'}) 16:07:41 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xbb, &(0x7f00000000c0)=""/187, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:07:41 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f00000001c0)) 16:07:41 executing program 5: r0 = socket(0x2, 0x1, 0x0) recvmsg$can_bcm(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x40) 16:07:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010800000000000000000e000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000200bbbbbbbbbbbb000008001b"], 0x34}}, 0x0) 16:07:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x24}}, 0x0) 16:07:41 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002300)='ns/pid\x00') 16:07:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:07:42 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{}, "fcea265641a1a18a", "561c4794e20b090298ee13acbb9f4f6f", "e65cdcff", "1eceaff7992fcc9a"}, 0x28) 16:07:42 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') 16:07:42 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@remote={[], 0x3}, 0x0, 'lo\x00'}) 16:07:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00', r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 16:07:42 executing program 0: r0 = socket(0x2, 0x1, 0x0) recvmsg$can_bcm(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 16:07:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) 16:07:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 16:07:42 executing program 5: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x7, &(0x7f0000000040)=0x1, 0x4) 16:07:42 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x0, 0x6}}, 0x2e) 16:07:42 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 16:07:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0xc000}, 0x0) 16:07:42 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x19, &(0x7f0000000a00), 0x4) 16:07:42 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r1}) 16:07:42 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, @in={0x2, 0x0, @empty}, @rc, @generic={0x0, "df58e446d52413d1a5252de85370"}, 0x7fff}) 16:07:42 executing program 3: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002dc0), 0x10) 16:07:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00', r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) 16:07:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="3000000010000108000000000000020000a61500", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r2, @ANYBLOB="08001b"], 0x30}}, 0x0) 16:07:42 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) 16:07:42 executing program 5: r0 = socket(0xa, 0x3, 0xdd) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 16:07:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x11) 16:07:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x60}}, 0x0) 16:07:43 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 16:07:43 executing program 0: socketpair(0x26, 0x5, 0x8e9f, &(0x7f0000000000)) 16:07:43 executing program 2: r0 = socket(0x2a, 0x2, 0x0) bind$l2tp(r0, 0x0, 0x0) 16:07:43 executing program 5: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002a40)={&(0x7f0000002a00)='./file0\x00'}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000002e40)='gtp\x00', 0xffffffffffffffff) 16:07:43 executing program 1: r0 = socket(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) 16:07:43 executing program 0: r0 = socket(0x25, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 16:07:43 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000ae"], &(0x7f00000002c0)=""/213, 0x4e, 0xd5, 0x1}, 0x20) 16:07:43 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x2, &(0x7f0000000a00), 0x4) 16:07:43 executing program 2: r0 = socket(0x2a, 0x2, 0x0) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x58) 16:07:43 executing program 1: r0 = socket(0x2, 0x1, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x68}}, 0x4c000) 16:07:43 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880), 0x10}, 0x78) 16:07:43 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)) 16:07:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 16:07:43 executing program 4: socket(0x11, 0x0, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) pipe(&(0x7f0000002b00)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002e80)='ns/pid_for_children\x00') [ 1054.239310][ T3248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.245725][ T3248] ieee802154 phy1 wpan1: encryption failed: -22 16:07:43 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000500)) 16:07:43 executing program 1: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002a40)={&(0x7f0000002a00)='./file0\x00'}, 0x10) 16:07:43 executing program 2: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) 16:07:43 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000001800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) 16:07:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) 16:07:44 executing program 4: socketpair(0x15, 0x0, 0x0, &(0x7f00000005c0)) 16:07:44 executing program 5: r0 = socket(0x2, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) 16:07:44 executing program 1: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0xc, &(0x7f0000000a00), 0x4) 16:07:44 executing program 2: socketpair(0x1e, 0x0, 0xefb, &(0x7f0000000000)) 16:07:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x8916, &(0x7f0000000040)={0x0, @ipx={0x4, 0x0, 0x0, "822720cc1226"}, @l2tp={0x2, 0x0, @broadcast}, @vsock}) 16:07:44 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x4, &(0x7f0000000a00)=0x7, 0x4) 16:07:44 executing program 5: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x9, &(0x7f0000000a00), 0x4) 16:07:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'tunl0\x00', 0x0}) 16:07:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x10043, 0x0, 0x0) 16:07:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8911, &(0x7f0000000280)={'syztnl0\x00', 0x0}) 16:07:44 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 16:07:44 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 16:07:44 executing program 5: socket(0x2, 0x5, 0x0) 16:07:44 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10062) 16:07:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 16:07:44 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x26, "fe4c4d6096d1d77dc4829416a882894a02e7fe04c6320f10710eecdb9df18246", "c6295931402f3ed404d8c37c8a6d52689ef37598affe6b8f527357af448c3a57", "dc2029ef20d50a9724c14620c3595b0e134ebfbfb7cd192f94840ba6f7e6f0e7", "f090d3f51186b137c763bc0656ac0056baba9f0200aa2e40393518d961e10e7d", "f303a9a39a48e6ec07c0d36b21fc09f86e6d297ad66d0d55ff4ed3af1f6e0659", "7bffe6d9e73a3dea8c3bc3f4"}}) 16:07:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x3e, 0x0, &(0x7f0000000080)) 16:07:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f000000a980)=[{{&(0x7f0000000400)=@in6={0x2, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x80, 0x0}}], 0x1, 0xc010) 16:07:44 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000400)="a1", 0x1}, {&(0x7f0000000680)="e4f87c313140dcea0fa0cc33ad0f79d2a55bd52b2d563c41c9af41578f22d1526b656823333303d61eef9ac7352f56ed96cfa3bb270668ada5d673629deec63a208eff0df7c43fe44c24d5511a7c1afa3da870d8f31dc9ee546a93c619398cfacdf22c31e5fddc224de31165030a7e827fe5775c08742fa329acc072dc12cd890edb8c2f624b25bb9b8752aa9a4c2576d68197344f9c3c03cb79f47cd199a686a845cec67945d809738ea387a6d73423e0c2920d8e36c8ff381600c51f8bb6ecf1dbf98791bb13c4a2b0a8f22a7f17cd2807b0f201715292b68e2a732caa2a96e8fdb9dd7971cf0a7300354df17546d99460ab71211ebcea69151a1cbeaedb379646abaa53d2ef43fe1fe9716cb4eae6649862223730c696c3de547f4e2a37181347c2b1ce5f598d5a93c036e3b1777b963177bb2f66a7eef48055ae4baf527ce0365ed3f67b879de79cd972d9372c741469a445bf6d34b80182fcc34a097e87d425704cf1dc7112ee4a2f1e74673bd26da81b5a92357112286ef77f0a0f5443bdf0c01643ecfd08ed7f88c72e2dedcf4a1490adeb6816e27f5fe47d32830a36b76da62df5df555e9e700cdd0b4680554886d1957b665da54125977483da3ac7fa42e59562b02391679e90259aac3f78642cc2709287e2d290c6ff9bc30b7ab51f0f3e992892533c7bc17390e20487a22d6ac5ca3babda29bdeb450591d73326ec5025efc9cf2413121c54e3cdaf2a46566aad7095c7648c859a679a4d58b136f8a6da369cfe36c04dd19dd5d0050648783a8acfdeb74771d137884e5b2c44cf886194f4d4bd5384ae6ee1c1e8efba4d95348054fe73951454718e90eb5e96106d919bd5869b584459ceb5a9d2c4db24e3a9519ea22d1d3ac22fa1bf4045baa637d6cb4f8d950b8f01c2352cae61fdeb1360ace71dac99a2df60e126b5f4680e5e492287712a4c630754b0fefa4d7e48df2746994abfceaac83236251797404d4774b7b7935788aa88538b9b7f015cb9ad729eee0991534c3e27106c3767364d54f15b24bcb7427d59e27099e8e8815037b6448e3565961fb56f3e452a898a30e7fc303e0f13b44db86072ecddc5fa13e97f5db42691cf5d2a13e2736f849b1b224ff13f2ca98c073c2d8d911a6525d93ea999dca7ee90ed4e7844c97ffb9bee4631180440adc1bb72068479c4a105d82f33d3b61390a8bd9ac88b9f6fc326509440ded327eeb694333ee2fa44d544faa8cfb4d2064c321c22ad4d04d40adcef6ba55b1ffdfcbb77ce82658470b8c051d8af91fbb63584ff10577080db01dddd217134a262a54a813eb9d3ba5ee2697c77028fe1f5a6e34ee50318fb0878d5526d50743775bbd2bcf4f851ab8d526aaef663ce4aec046ab0197fd295aad3441aaa6e88e2da069a41cbc7ef3e9925378162e59f478cd29ac2dc3d60a21df31f38bedde43a6e8bc3358fc24d498baaded3b6b991aba46db9f67350d5f6c6178cf555cf15bf64492236fbba387c20aefc0047e5bf83c70e7b1ccd3cc9509c941b45e97c42c26ffb2b0bafc20827cd079dc9580bfb53af1ad67fa6b80c1551f7c8f22855229c8637a4badaeeac584e990a7cba42b1749a8c7b3b2e9ad92f52f60b3ca1830550d13c0d80edbf821e0ada525429f67539d6446e8cae56d1c0b1b58748b26da365b80ab9326df118596f954e7312a1c53315f8b99ef2cc49be19f5f2d60e12d7157c4eeb3c1d9baceabfe39cb8fcbfee176492f594ec95b791f147f9a284c1b25ce0f7946c734eac81f6a8be577a5656a68e74a979a2adeda533023395cb846c1172d935a1168d3c5af09b3bfe6004762ef93c358c67c6e864e0ccf826476e7024032d18424afeeb54f723d03a67f4bd1e51b895615e0b276fe356fb51f1a30a7b3b0a8bd4ff3ed5b2391ee452fc2e0a7827051ae07bed0833b0583785c5884a0b6764688fdf19a4e9da4b0bb1718609482d5595cecdbc621bdceab52dccac81dd1d2793b769bb2cf39578d049e63a5fad3f612a5cf832890219a6c8998641fab5e698ffe09333cf9562b68eb67b8523b7f661c753fbf991881c96e6e3b3f074ed21cc8cecddd4c78e945df09aa5c2e5de62ae6a0ee96ba081f49cd3085e57deeb13200ac317521a284ab199d15116bc699164f6a5c3e4cf8782d486e0c9aff9b94bd8f5e83376684c879d7fab975a6562b855281ba42e8944d3c5eea94fd43bebeacbf92984b87175b64a7aee8916b85c296ddd31c21c9396283c3d7ba9f0d69825ebfa61294d4ac1941ad75d3691eb974ed5cc681260e1f3a55957a330e0687903eb3aaaa2c83693dd8f2bee3e5734ef78215bdbdfb50f6b006740608086466e92508b9089053882c9d9eafd128b2f48eb984461f3320cc988b0bdbac629fccea86a6dd91e015a5609b66f21a58195aad0bd17a6989f49208d2aa8b70b9e21aaef9a1ba242a752df222713a02565640f799c07bb87b70419859f99911dab12b61a702e58ce6c89aa5b47f1fcfed390b53081acb919e812cbddd2fa4b3ef57c75734b966496dc3d3e1dd14798818fe20fb10477e7b47c35814179738dbd6f70e2b0a39145b6511949286f7eea683deba07edf60e6bf3c4a62bdafecffaf3c739854bed951806e9e8a3ee794b8d1ff96650ccf659c0e16f27dc3c8b0a2e2a3a25d708377e2f54fbad18fe058b7a7a60e62b53877a2708a2c1760d5b6735caf7c381c9163a5d9ca09078fd1a2a8543ea5972727b1ea9cb0751cd8c52bdca11c076a52776d439fc9e546e76d03b9e8d1a124d4c24be8c626340aaf413c35aaf08dfd0f394cf7bf3d88246c98db1a3d15e74fff8469e95ea5c32ecad754df4ca74282360d547077b3aa999255e980cc7d58521845cc278b576fa25024e1773df989764e2f6140ede97e75826b8876d062ac72d63a9f915e28645ad403b5fb89f67c04db3ef155bc7b0bc9de31141950a34dd3911bb17bb056d20ee5fb77dc414729fec089a37738d964951456813e156ca604fd4b639d364ff6205ec5c75d67cab8e13e01b798127763791a427347fd47065ab2999e1c117e948e977d89a78be292f82eaf62fc5be200e261dbc33f89140ca5a6fac226c26d613143cc4c4b982bd6cb832188da37e6710a37b023616d8cb355401fdf80a381bd8aa03e103499514aa50f0f6cedb0fdba119ada2f7b8cdfdf061e6a142baccfa8898badf85ca18384799f8b15f2ef97288c08b4d4666b7cf02e1a7b6e48a3837c334a4f10afa9c94c01bd851eeb28e5ae7859c04587f9d2a35a3466d6fadf360a0b9f2b239415f20c9c0df1dde139b0088781e7a4da60ed05f6a1e2fa780cc095906978c231c5635a6843bf7380e83a002e56d6f876b0d2fc59806d42bd604aa542670fa2c03391e1194f93b0fa7a738d13f2a55d48ed4ad96ae6b5e96c1547f8a4f38ecf31b76d2ab6fe44df546e2bc8bdfd1567f1e5768311d88f952138a644be924eda737cfcad6063804b429461f7a018d8851d4a2e90e39ae8bd97f12a6434d2e753050510e924d9b701d5cf5e524d6bf8f5b8dba8b400de87b1dd78dc141ae7504d8b2a0917fb978210eef6b6d7375a2e554d9a471baba15175b2a264b301523390758372e643a588be0e1188ca64a04e09f9814aed20c3086de4115cef5dba95f5f07786cfb293805d9638685a77a47b4560aafc410c2076db3c87fcdfd25ed5c7f082a3703c03f552712cb75a27e652f88faf1eb572ad10e6fed757dc5052374d356f3a484b89e1ad2fa7dfc027aef0867322e004b754ee250e22dfcd6216a7a1e63f694eb4a8d80ba5e82111d7d507a81fd40441bbd1b0c090ab4139adb975f2a9390e75439a7c06cdfb9d3b5914148df0df2201aaabc61d81918a815665e036ede80210cee55281d00e54a47e76452e504d0b6b9cbe77d3135463eceacaf5a0819a6da1e3af40840dbf78bf76f6ab90d7a036aebdf55aa8d35c58e81b04a779ee7871129ecc2a2cad98136eebb17595fe0236c827628508628fcf136aa2b182a34acbf0fd2f30f51de2cc6e8938e91182cf568dee1da8ac0a65e0f1e6259cd7e7e42e76e1973668cad3af89e786333c326d72d18bb7723ef5f5a9eaa577f602a258fb1f72f8ccfb0fe385d0361098bf470812947db15fdc8c66b2ea5f53d1859b652f7c11a931d05fbe2a664e4aba8201d44460f096a25117667db17a4f98396e832f6d847b4530a8caab6f9083b1eca37b3568f5b0dd396718a0e0a268b7d4c182c03c513e5bc098f51f9e74fbc3292337c16cf784cebe971807f9970d4676e6bd77c269e09dcc423e1c21eaff32e785f81e7f7a724561bcb3043652c4d01e0cd44d97113d419c3c3453f801f38ac4c41c0955ad878ac11ed7fd4841d2047b9a0eeb5ba1df645bd8c0e21c7e6398695d4cffccce85e10e6efaf6e756da86753c8be65224702d96a3c03d184b147bea722effda18320de80a2f87b0dc1b17a9bfa554b577137680507ebf0d8bf480ef83ed461ce37a65b10c6bd3e38acc068936ced8c528fd0ff614f4c0298edb98322f98a73b9d87846d585c9dfcc42411ab04a4448163e5e9147dcfc0a598cc4827e88c38a11b94624308ffa7fcc2c8d1e75bddc480f2d75e0de046d8c88f92ee2af6a18777903f646ae377c381b41b9ca9688d867615cf8f74a6b829dece9eb5664bebff339319a12d778378cada5ff2dc20946d611af679125d5aee5d4b6652c1fe2fd5f843d85bc32ec7b6a95ee12a77adc72dd73a00085bd0737c7bbf870154c9a579871919b377af3caccce773031904cbede27b0e09efcde6b96cdd016a5d16733aa4487f1801f2fba8581df28e6963e4419da7425eba801e9e726251b015abf66d7b17fc1cd8101f912aaf3c76243a4fdd434c14708393d9da5d1b74dd89588d5bc7e3d0aa195bf5e6a64f2bb280165e0f88d2d3f04e4107e58482f86043187775d038d524df0926ba651c8ecfea80e3acaa9ae78f71278dd0dd0d5b8718f06e72413251b4eb739231381b60178a8f261e9821c110c3280ddd12cc6f9d9e7eaced760cb820a7da246aa32e67d823e97b5883aed94a49f823f2084d8b4b955755fc6312f72fe02bfe3b90c5023a1343be6b27369f99f3b94d652aa5210a4daf6e34255b09bea073d76c138905fee7124168e368b6e5f5b6cc5d97cc1a5a8811224b6855c070c6a2d11d0c31ae207732640a4ce1891b553546f3a94ba7b753856c39ee2531047d927e66df4466cd4a2396510f5a7c58f498f33c108d48a6d4703a1babc92d22de7e89c03037a2ea19143fdf803710664dda980e31bbca1625ae153827bbe0bcfb7dc8b8c19f99a120e96c2dede3af56745dc93445599d7e52d7c6008f25ff989cddfa715aa914e4bde6c9349a3f4147c9df34bcc013b49247223761bc20a52f681fc509a236dd1aa242c32e505cf5cc9e769ac90270768ec0b0221d7318101c52499f20b5d01f72a7731cd6ee3b7005102704c6ca23b42c31b5ca36fc669a097c6a7ccf1a4542cb72db35e44af4eb7d65589cb63ab23f6c4ad21174fcfd09e45d782f9637f7bff67b1d7f83655eced3cd20912f6972836f1ea7085c4d243d4d491cebf0518b751f641ab34473ee2d8cd5f00ff9256645bb96f09d1e6a280df3083045c023839061aaa05e1d97bad21df0c538f59d32a1ff008c4ee327ff5012594883f02b2449337909efb3e0691a9b3d191b3b1a1350af4d1656e845ea00876694eef3e482d0c2b8a2b40a4ca495832b75b7588dcf879d3d4a4290176ae95ba3bec5db0becc635a9a6", 0x1000}], 0x2}}], 0x1, 0x0) 16:07:44 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x890b, &(0x7f0000000140)={'geneve1\x00', 0x0}) 16:07:44 executing program 1: bpf$PROG_LOAD(0x21, 0x0, 0x0) 16:07:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x11, 0x0, &(0x7f0000000080)) 16:07:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@caif=@util={0x25, "5b3a2b674ec36314b94e3da1598b8211"}, 0x80) 16:07:45 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x9, "fe4c4d6096d1d77dc4829416a882894a02e7fe04c6320f10710eecdb9df18246", "c6295931402f3ed404d8c37c8a6d52689ef37598affe6b8f527357af448c3a57", "dc2029ef20d50a9724c14620c3595b0e134ebfbfb7cd192f94840ba6f7e6f0e7", "f090d3f51186b137c763bc0656ac0056baba9f0200aa2e40393518d961e10e7d", "f303a9a39a48e6ec07c0d36b21fc09f86e6d297ad66d0d55ff4ed3af1f6e0659", "7bffe6d9e73a3dea8c3bc3f4"}}) 16:07:45 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000400)="a1938b4b925608dcc5c6e39232e77afd716105b469a506fe85bad9ceb3b21b7c289e41a167dba231035118ca10f58c2155a944c512520c3274eb1e62661484792325f2", 0x43}, {&(0x7f0000000480)="3b5480343af603ff769a3daed9491546b17670781d35d7eef9ef026cdae7c8dc19e95349fff5c48bae4e014673da292d", 0x30}, {&(0x7f0000000500)="350621136ea40c4ac43b71da9ee7e388d94956db06bc51db02c106b420bb05cabcc4c35d2b88e9bd1140972495c190b9219aa493e98e74e6aec1dd8cc6b4ec17cd38b209d1fb346293d66123035521ecc967657924d48db4c2783be6770bf626becb234ff3d0e1fa9e51e737e83691e2e9e80b", 0x73}, {&(0x7f0000000580)="d7dc779781c7115e31695ab27745d043e5bedf13bbc54457ad055727b33ec9b0f07b6b1ed366c5eb74919c429c48b0dcebfd4c124242d479c606f9b70dbf8050b6db116026420c2ce9e81843dcf48e254893570cca637c198deddcbf7a606b3aa40afb18534af62a7c1a8cb789f1b6", 0x6f}, {&(0x7f0000000680)="e4f87c313140dcea0fa0cc33ad0f79d2a55bd52b2d563c41c9af41578f22d1526b656823333303d61eef9ac7352f56ed96cfa3bb270668ada5d673629deec63a208eff0df7c43fe44c24d5511a7c1afa3da870d8f31dc9ee546a93c619398cfacdf22c31e5fddc224de31165030a7e827fe5775c08742fa329acc072dc12cd890edb8c2f624b25bb9b8752aa9a4c2576d68197344f9c3c03cb79f47cd199a686a845cec67945d809738ea387a6d73423e0c2920d8e36c8ff381600c51f8bb6ecf1dbf98791bb13c4a2b0a8f22a7f17cd2807b0f201715292b68e2a732caa2a96e8fdb9dd7971cf0a7300354df17546d99460ab71211ebcea69151a1cbeaedb379646abaa53d2ef43fe1fe9716cb4eae6649862223730c696c3de547f4e2a37181347c2b1ce5f598d5a93c036e3b1777b963177bb2f66a7eef48055ae4baf527ce0365ed3f67b879de79cd972d9372c741469a445bf6d34b80182fcc34a097e87d425704cf1dc7112ee4a2f1e74673bd26da81b5a92357112286ef77f0a0f5443bdf0c01643ecfd08ed7f88c72e2dedcf4a1490adeb6816e27f5fe47d32830a36b76da62df5df555e9e700cdd0b4680554886d1957b665da54125977483da3ac7fa42e59562b02391679e90259aac3f78642cc2709287e2d290c6ff9bc30b7ab51f0f3e992892533c7bc17390e20487a22d6ac5ca3babda29bdeb450591d73326ec5025efc9cf2413121c54e3cdaf2a46566aad7095c7648c859a679a4d58b136f8a6da369cfe36c04dd19dd5d0050648783a8acfdeb74771d137884e5b2c44cf886194f4d4bd5384ae6ee1c1e8efba4d95348054fe73951454718e90eb5e96106d919bd5869b584459ceb5a9d2c4db24e3a9519ea22d1d3ac22fa1bf4045baa637d6cb4f8d950b8f01c2352cae61fdeb1360ace71dac99a2df60e126b5f4680e5e492287712a4c630754b0fefa4d7e48df2746994abfceaac83236251797404d4774b7b7935788aa88538b9b7f015cb9ad729eee0991534c3e27106c3767364d54f15b24bcb7427d59e27099e8e8815037b6448e3565961fb56f3e452a898a30e7fc303e0f13b44db86072ecddc5fa13e97f5db42691cf5d2a13e2736f849b1b224ff13f2ca98c073c2d8d911a6525d93ea999dca7ee90ed4e7844c97ffb9bee4631180440adc1bb72068479c4a105d82f33d3b61390a8bd9ac88b9f6fc326509440ded327eeb694333ee2fa44d544faa8cfb4d2064c321c22ad4d04d40adcef6ba55b1ffdfcbb77ce82658470b8c051d8af91fbb63584ff10577080db01dddd217134a262a54a813eb9d3ba5ee2697c77028fe1f5a6e34ee50318fb0878d5526d50743775bbd2bcf4f851ab8d526aaef663ce4aec046ab0197fd295aad3441aaa6e88e2da069a41cbc7ef3e9925378162e59f478cd29ac2dc3d60a21df31f38bedde43a6e8bc3358fc24d498baaded3b6b991aba46db9f67350d5f6c6178cf555cf15bf64492236fbba387c20aefc0047e5bf83c70e7b1ccd3cc9509c941b45e97c42c26ffb2b0bafc20827cd079dc9580bfb53af1ad67fa6b80c1551f7c8f22855229c8637a4badaeeac584e990a7cba42b1749a8c7b3b2e9ad92f52f60b3ca1830550d13c0d80edbf821e0ada525429f67539d6446e8cae56d1c0b1b58748b26da365b80ab9326df118596f954e7312a1c53315f8b99ef2cc49be19f5f2d60e12d7157c4eeb3c1d9baceabfe39cb8fcbfee176492f594ec95b791f147f9a284c1b25ce0f7946c734eac81f6a8be577a5656a68e74a979a2adeda533023395cb846c1172d935a1168d3c5af09b3bfe6004762ef93c358c67c6e864e0ccf826476e7024032d18424afeeb54f723d03a67f4bd1e51b895615e0b276fe356fb51f1a30a7b3b0a8bd4ff3ed5b2391ee452fc2e0a7827051ae07bed0833b0583785c5884a0b6764688fdf19a4e9da4b0bb1718609482d5595cecdbc621bdceab52dccac81dd1d2793b769bb2cf39578d049e63a5fad3f612a5cf832890219a6c8998641fab5e698ffe09333cf9562b68eb67b8523b7f661c753fbf991881c96e6e3b3f074ed21cc8cecddd4c78e945df09aa5c2e5de62ae6a0ee96ba081f49cd3085e57deeb13200ac317521a284ab199d15116bc699164f6a5c3e4cf8782d486e0c9aff9b94bd8f5e83376684c879d7fab975a6562b855281ba42e8944d3c5eea94fd43bebeacbf92984b87175b64a7aee8916b85c296ddd31c21c9396283c3d7ba9f0d69825ebfa61294d4ac1941ad75d3691eb974ed5cc681260e1f3a55957a330e0687903eb3aaaa2c83693dd8f2bee3e5734ef78215bdbdfb50f6b006740608086466e92508b9089053882c9d9eafd128b2f48eb984461f3320cc988b0bdbac629fccea86a6dd91e015a5609b66f21a58195aad0bd17a6989f49208d2aa8b70b9e21aaef9a1ba242a752df222713a02565640f799c07bb87b70419859f99911dab12b61a702e58ce6c89aa5b47f1fcfed390b53081acb919e812cbddd2fa4b3ef57c75734b966496dc3d3e1dd14798818fe20fb10477e7b47c35814179738dbd6f70e2b0a39145b6511949286f7eea683deba07edf60e6bf3c4a62bdafecffaf3c739854bed951806e9e8a3ee794b8d1ff96650ccf659c0e16f27dc3c8b0a2e2a3a25d708377e2f54fbad18fe058b7a7a60e62b53877a2708a2c1760d5b6735caf7c381c9163a5d9ca09078fd1a2a8543ea5972727b1ea9cb0751cd8c52bdca11c076a52776d439fc9e546e76d03b9e8d1a124d4c24be8c626340aaf413c35aaf08dfd0f394cf7bf3d88246c98db1a3d15e74fff8469e95ea5c32ecad754df4ca74282360d547077b3aa999255e980cc7d58521845cc278b576fa25024e1773df989764e2f6140ede97e75826b8876d062ac72d63a9f915e28645ad403b5fb89f67c04db3ef155bc7b0bc9de31141950a34dd3911bb17bb056d20ee5fb77dc414729fec089a37738d964951456813e156ca604fd4b639d364ff6205ec5c75d67cab8e13e01b798127763791a427347fd47065ab2999e1c117e948e977d89a78be292f82eaf62fc5be200e261dbc33f89140ca5a6fac226c26d613143cc4c4b982bd6cb832188da37e6710a37b023616d8cb355401fdf80a381bd8aa03e103499514aa50f0f6cedb0fdba119ada2f7b8cdfdf061e6a142baccfa8898badf85ca18384799f8b15f2ef97288c08b4d4666b7cf02e1a7b6e48a3837c334a4f10afa9c94c01bd851eeb28e5ae7859c04587f9d2a35a3466d6fadf360a0b9f2b239415f20c9c0df1dde139b0088781e7a4da60ed05f6a1e2fa780cc095906978c231c5635a6843bf7380e83a002e56d6f876b0d2fc59806d42bd604aa542670fa2c03391e1194f93b0fa7a738d13f2a55d48ed4ad96ae6b5e96c1547f8a4f38ecf31b76d2ab6fe44df546e2bc8bdfd1567f1e5768311d88f952138a644be924eda737cfcad6063804b429461f7a018d8851d4a2e90e39ae8bd97f12a6434d2e753050510e924d9b701d5cf5e524d6bf8f5b8dba8b400de87b1dd78dc141ae7504d8b2a0917fb978210eef6b6d7375a2e554d9a471baba15175b2a264b301523390758372e643a588be0e1188ca64a04e09f9814aed20c3086de4115cef5dba95f5f07786cfb293805d9638685a77a47b4560aafc410c2076db3c87fcdfd25ed5c7f082a3703c03f552712cb75a27e652f88faf1eb572ad10e6fed757dc5052374d356f3a484b89e1ad2fa7dfc027aef0867322e004b754ee250e22dfcd6216a7a1e63f694eb4a8d80ba5e82111d7d507a81fd40441bbd1b0c090ab4139adb975f2a9390e75439a7c06cdfb9d3b5914148df0df2201aaabc61d81918a815665e036ede80210cee55281d00e54a47e76452e504d0b6b9cbe77d3135463eceacaf5a0819a6da1e3af40840dbf78bf76f6ab90d7a036aebdf55aa8d35c58e81b04a779ee7871129ecc2a2cad98136eebb17595fe0236c827628508628fcf136aa2b182a34acbf0fd2f30f51de2cc6e8938e91182cf568dee1da8ac0a65e0f1e6259cd7e7e42e76e1973668cad3af89e786333c326d72d18bb7723ef5f5a9eaa577f602a258fb1f72f8ccfb0fe385d0361098bf470812947db15fdc8c66b2ea5f53d1859b652f7c11a931d05fbe2a664e4aba8201d44460f096a25117667db17a4f98396e832f6d847b4530a8caab6f9083b1eca37b3568f5b0dd396718a0e0a268b7d4c182c03c513e5bc098f51f9e74fbc3292337c16cf784cebe971807f9970d4676e6bd77c269e09dcc423e1c21eaff32e785f81e7f7a724561bcb3043652c4d01e0cd44d97113d419c3c3453f801f38ac4c41c0955ad878ac11ed7fd4841d2047b9a0eeb5ba1df645bd8c0e21c7e6398695d4cffccce85e10e6efaf6e756da86753c8be65224702d96a3c03d184b147bea722effda18320de80a2f87b0dc1b17a9bfa554b577137680507ebf0d8bf480ef83ed461ce37a65b10c6bd3e38acc068936ced8c528fd0ff614f4c0298edb98322f98a73b9d87846d585c9dfcc42411ab04a4448163e5e9147dcfc0a598cc4827e88c38a11b94624308ffa7fcc2c8d1e75bddc480f2d75e0de046d8c88f92ee2af6a18777903f646ae377c381b41b9ca9688d867615cf8f74a6b829dece9eb5664bebff339319a12d778378cada5ff2dc20946d611af679125d5aee5d4b6652c1fe2fd5f843d85bc32ec7b6a95ee12a77adc72dd73a00085bd0737c7bbf870154c9a579871919b377af3caccce773031904cbede27b0e09efcde6b96cdd016a5d16733aa4487f1801f2fba8581df28e6963e4419da7425eba801e9e726251b015abf66d7b17fc1cd8101f912aaf3c76243a4fdd434c14708393d9da5d1b74dd89588d5bc7e3d0aa195bf5e6a64f2bb280165e0f88d2d3f04e4107e58482f86043187775d038d524df0926ba651c8ecfea80e3acaa9ae78f71278dd0dd0d5b8718f06e72413251b4eb739231381b60178a8f261e9821c110c3280ddd12cc6f9d9e7eaced760cb820a7da246aa32e67d823e97b5883aed94a49f823f2084d8b4b955755fc6312f72fe02bfe3b90c5023a1343be6b27369f99f3b94d652aa5210a4daf6e34255b09bea073d76c138905fee7124168e368b6e5f5b6cc5d97cc1a5a8811224b6855c070c6a2d11d0c31ae207732640a4ce1891b553546f3a94ba7b753856c39ee2531047d927e66df4466cd4a2396510f5a7c58f498f33c108d48a6d4703a1babc92d22de7e89c03037a2ea19143fdf803710664dda980e31", 0xeab}, {0x0}, {&(0x7f0000001680)="e2", 0x1}, {0x0}, {0x0}], 0x9}}, {{&(0x7f0000002f00)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) 16:07:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreq(r0, 0x0, 0xc, 0x0, 0x0) 16:07:45 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001800)={&(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000000040), &(0x7f00000000c0)=0x18) 16:07:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x5, &(0x7f0000000300), 0x4) 16:07:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) 16:07:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r0, 0x0) 16:07:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000280), 0x98) 16:07:45 executing program 1: pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) 16:07:45 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) 16:07:45 executing program 2: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 16:07:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, &(0x7f0000000140)="b8", 0x1, 0x100, &(0x7f0000000240)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 16:07:45 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000002980)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) shutdown(r0, 0x1) shutdown(r0, 0x1) 16:07:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xc) 16:07:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) madvise(&(0x7f00006de000/0x4000)=nil, 0x4000, 0x2) 16:07:45 executing program 2: pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, 0x0, 0x0) 16:07:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000)="9916d822169dced9ef13e19e13c826146a18daeabb7c3f4ec6f40c976e4d0aed4a88f281c74554f141134de79984e6832b53a12f9942eef1be908275f7d16a6731c7f148243a26c67d", 0x49, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 16:07:45 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000140)="fd", 0x1, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) 16:07:45 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000580)=@file={0x13}, 0x13, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000001b80)=[@rights, @cred, @rights, @rights, @rights], 0x8c}, 0x0) 16:07:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000300)={0x0, 0x1000}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) 16:07:45 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) 16:07:46 executing program 1: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x3}) 16:07:46 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff) 16:07:46 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x10001, 0x4) 16:07:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 16:07:46 executing program 5: open$dir(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) 16:07:46 executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x3000) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 16:07:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}, 0x10) 16:07:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvfrom$inet(r0, 0x0, 0x0, 0xc2, 0x0, 0x0) 16:07:46 executing program 3: setitimer(0x0, &(0x7f0000000000)={{0x0, 0x5}, {0x0, 0x18}}, 0x0) 16:07:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) 16:07:46 executing program 0: recvfrom$inet6(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1c, 0x1c, 0x1}, 0x1c) 16:07:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f00000000c0)="9d5564e1a7691fd207e6bf6a399199b676418e65a39cffdef88dd7fba563e185c150b6acce489a9c52e7ae36a7abf12ad8f033aaeeb940eb19694e2b67fc1fad13d4113c51d10795785e43dbdce81677d0f14553ead45dab6df42774d70c03cfb2f121fce479a6eb104e8b45ca9f0ec5a014a3a808f5d2554fbef44c8ebd18af7a325cb5acf9f1de414ff3e5bf07552f153becb94a15fe7e0d5be2150310dab4f60485fbdfc8bc57f7c1", 0xaa, 0x101, &(0x7f0000000300)={0x10, 0x2}, 0x10) 16:07:47 executing program 1: getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180)) 16:07:47 executing program 4: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x9) 16:07:47 executing program 5: setgroups(0x1, &(0x7f0000000300)=[0x0]) 16:07:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 16:07:47 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @local={0xac, 0x14, 0x0}, @broadcast, @multicast2}}}}, 0x0) 16:07:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, 0x0, 0x0) 16:07:47 executing program 4: getresgid(&(0x7f0000001d40), &(0x7f0000001d80), &(0x7f0000001dc0)) 16:07:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000)="9916d822169dced9ef13e19e13c826146a18daeabb7c3f4ec6f40c976e4d0aed4a88f281c74554f141134de79984e6832b53a12f9942eef1be908275f7d16a6731c7f148243a26c67de0bb0769297561", 0x50, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 16:07:47 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, &(0x7f0000000000)={0x0, 0x0, [], [@ra]}, 0x10) 16:07:47 executing program 5: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{}, {0x0, 0xfffffff9}}, 0x0) 16:07:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@cred], 0x18}, 0x0) 16:07:47 executing program 1: syz_emit_ethernet(0x26, &(0x7f00000024c0)={@local, @empty, @val, {@ipv4}}, 0x0) 16:07:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) 16:07:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f0000000100), 0xc) 16:07:47 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f00000000c0)="d2", 0x1, 0x2010d, &(0x7f0000000040)={0x10, 0x2}, 0x10) 16:07:47 executing program 1: lchown(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0xffffffffffffffff) 16:07:47 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x0, 0x1, "e2"}, 0x9) 16:07:47 executing program 3: getresuid(&(0x7f0000000000), 0x0, &(0x7f0000000080)) 16:07:47 executing program 2: syz_emit_ethernet(0x331, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffd847cb1d9ff881"], 0x0) 16:07:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f00000000c0)="9d", 0x1, 0x101, &(0x7f0000000300)={0x10, 0x2}, 0x10) 16:07:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000200), 0xc) 16:07:47 executing program 0: clock_getres(0xf, &(0x7f0000000100)) 16:07:47 executing program 1: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @empty, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast}}}}, 0x0) 16:07:48 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0x1c, 0x1c, 0x2}, 0x1c) 16:07:48 executing program 2: sendto$inet(0xffffffffffffff9c, &(0x7f0000000000)="452c19c4d8efb825afdf37592a1190567da222d113af9490bb9562bc01b0b993c393f812528febd6f216440294f69c881f2fc58debcfa4db2481fcec525f56fde570d4e06511526602ffe2997f3900e37cc63fe0c21b3c4cacd7ddd693c6bb111306f2202fe5718bc273dd04a06744629d7dcba496820617b9ed127128d4bb60f3b1f895c23cd6973b99ffb60319a1f6", 0x90, 0x100, &(0x7f00000000c0)={0x10, 0x2}, 0xfffffffffffffd89) 16:07:48 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @local, @val, {@ipv4}}, 0x0) 16:07:48 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000000)={0x0, 0x2, "832a"}, &(0x7f0000000080)=0xa) 16:07:48 executing program 0: openat$ptmx(0xffffff9c, &(0x7f0000001380)='/dev/ptmx\x00', 0x1, 0x0) 16:07:48 executing program 4: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 16:07:48 executing program 1: flock(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmget(0x1, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 16:07:48 executing program 2: select(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, 0x6}) 16:07:48 executing program 5: syz_emit_ethernet(0x2bb, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100300086dd6bd71610028106ff20010000000000000000000000000000ffa8"], 0x0) 16:07:48 executing program 3: faccessat(0xffffffffffffffff, 0x0, 0x0) 16:07:48 executing program 0: faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 16:07:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), 0x98) 16:07:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0), 0x10) 16:07:48 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket(0x1c, 0x2, 0x0) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x13, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB='\x00\b1'], 0x8) 16:07:48 executing program 3: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) 16:07:48 executing program 5: open$dir(0x0, 0x2, 0x0) 16:07:48 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000001180)="86", 0x1, 0x0, &(0x7f0000001100)={0x10, 0x2}, 0x10) 16:07:48 executing program 4: pipe2(0x0, 0x100002) 16:07:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x101, &(0x7f0000000300)={0x10, 0x2}, 0x10) 16:07:49 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @broadcast, @empty, @local}}}}, 0x0) 16:07:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x0) 16:07:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) 16:07:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 16:07:49 executing program 4: utimensat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 16:07:49 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000580)=@file={0x13}, 0x13, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000001b80)=[@rights, @cred, @rights, @rights, @rights, @cred, @cred], 0xb4}, 0x0) 16:07:49 executing program 3: pipe2(&(0x7f0000000500), 0x0) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/127) 16:07:49 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random="dbcd0adc9f06", @val, {@ipv4}}, 0x0) 16:07:49 executing program 0: lchown(&(0x7f0000000180)='\x00', 0xffffffffffffffff, 0x0) 16:07:49 executing program 5: setgroups(0x3, &(0x7f0000000080)=[0x0, 0x0, 0xffffffffffffffff]) 16:07:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x10, 0x2}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 16:07:49 executing program 1: flock(0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 16:07:49 executing program 3: readlinkat(0xffffffffffffffff, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x0) 16:07:49 executing program 2: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0x40, 0x0, 0x0) 16:07:49 executing program 5: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0) 16:07:49 executing program 0: open$dir(&(0x7f0000000040)='./file1\x00', 0x200, 0x0) open$dir(&(0x7f0000000100)='./file1/file0\x00', 0x0, 0x0) 16:07:49 executing program 4: getgroups(0x1, &(0x7f0000000040)=[0x0]) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, 0x0) 16:07:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180), 0x84) 16:07:49 executing program 3: open$dir(0x0, 0x0, 0x0) lchown(0x0, 0x0, 0xffffffffffffffff) 16:07:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights], 0xc}, 0x0) 16:07:49 executing program 0: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 16:07:50 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 16:07:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f00000000c0)="9d5564e1a7691fd207e6bf6a399199b676418e65a39cffdef88dd7fba563e185c150b6acce489a9c52e7ae36a7abf12ad8f033aaeeb940eb19694e2b67fc1fad13d4113c51d10795785e43dbdce81677d0f14553ead45dab6df42774d7", 0x5d, 0x101, &(0x7f0000000300)={0x10, 0x2}, 0x10) 16:07:50 executing program 3: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7) 16:07:50 executing program 0: socket$inet6(0x1c, 0x3, 0x4) 16:07:50 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @empty, @val, {@ipv6}}, 0x0) 16:07:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f00000000c0)="9d5564e1a7691fd207e6bf6a399199b676418e65a39cffdef88dd7fba563e185c150b6acce489a9c52e7ae36a7abf12ad8f033aaeeb940eb19694e2b67fc1fad13d4113c51d10795785e43dbdce81677d0f14553ead45dab6df42774d70c03cfb2f121fce479a6eb104e8b45ca9f0ec5a014a3a808f5d2554fbef44c8ebd18af7a325cb5acf9f1de414ff3e5bf07552f153becb94a15fe7e0d5be2150310dab4f60485fbdfc8bc57f7", 0xa9, 0x101, &(0x7f0000000300)={0x10, 0x2}, 0x10) 16:07:50 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='x'], 0x78}, 0x0) 16:07:50 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f00000015c0), &(0x7f0000001600)=0x8) 16:07:50 executing program 3: getgroups(0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]) 16:07:50 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) 16:07:50 executing program 2: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, 0x0, 0x0) 16:07:50 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000240), 0x4) 16:07:50 executing program 3: setitimer(0x0, &(0x7f0000000140)={{}, {0x0, 0x621eb8dd}}, 0x0) 16:07:50 executing program 0: syz_emit_ethernet(0xa2, &(0x7f0000000080)={@broadcast, @local, @val, {@ipv4}}, 0x0) 16:07:50 executing program 2: utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={{}, {0x0, 0xffffffff}}, 0x0) 16:07:51 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=[@rights, @cred], 0x30}, 0x80) 16:07:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, 0x0) 16:07:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000000)=@in6={0x9, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000003c0), 0x98) 16:07:51 executing program 1: setgroups(0x5, &(0x7f0000000080)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) 16:07:51 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000140)) 16:07:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)=',', 0x1}, {&(0x7f0000000240)="88", 0x1}], 0x2, &(0x7f0000001d80)=[@cred, @rights], 0x28}, 0x80) 16:07:51 executing program 5: select(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x6}) 16:07:51 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x0) 16:07:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0xd, 0x0, 0x0) 16:07:51 executing program 5: flock(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 16:07:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r1, r0) 16:07:51 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x0) 16:07:51 executing program 3: clock_getres(0x0, &(0x7f00000000c0)) clock_getres(0x0, &(0x7f0000000100)) 16:07:51 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 16:07:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000)="9916d822169dced9ef13e19e13c826146a18daeabb7c3f4ec6f40c976e4d0aed4a88f281c74554f141134de79984e6832b53a12f9942eef1be908275f7d16a6731c7f148243a26c67de0bb0769", 0x4d, 0x1, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 16:07:51 executing program 2: socket(0x0, 0x0, 0xff) 16:07:51 executing program 1: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x410, 0xffffffffffffffff, 0x0) 16:07:51 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000003c0)={0x0, @in, 0x0, 0x200}, 0x98) 16:07:52 executing program 0: open$dir(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) lchown(0x0, 0x0, 0xffffffffffffffff) 16:07:52 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 16:07:52 executing program 5: setitimer(0x1, &(0x7f0000000000)={{0x29}, {0x0, 0x18}}, &(0x7f0000000040)) 16:07:52 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @remote, @val, {@ipv6}}, 0x0) 16:07:52 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, 0x0, 0x0) 16:07:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) 16:07:52 executing program 0: msgsnd(0x0, &(0x7f0000000380), 0x4, 0x0) 16:07:52 executing program 2: pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:07:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x5, 0x0, 0x0) 16:07:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f0000000000)={@multicast1, @remote}, &(0x7f0000000040)=0xc) 16:07:52 executing program 0: syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @broadcast, @val, {@ipv4}}, 0x0) 16:07:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0xf}, 0xc) 16:07:52 executing program 4: socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 16:07:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)=@in6={0x1c, 0x1c, 0x1}, 0x1c) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000003c0), 0x8c) 16:07:52 executing program 5: syz_extract_tcp_res(0x0, 0x0, 0x8000) 16:07:52 executing program 1: utimensat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0) 16:07:52 executing program 0: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) fchown(0xffffffffffffff9c, r0, 0xffffffffffffffff) 16:07:52 executing program 3: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x55fb99714dbbe905) 16:07:53 executing program 4: fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200) 16:07:53 executing program 5: fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000001700)) 16:07:53 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000000)={0x1}, &(0x7f0000000040)={0x3}, 0x0, 0x0, 0x0) 16:07:53 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) signalfd(r0, &(0x7f0000000480), 0x8) 16:07:53 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 16:07:53 executing program 3: syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x3, 0x200) 16:07:53 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x4, &(0x7f0000001400)=[{&(0x7f0000000100)='\b', 0x1}, {&(0x7f0000000140)="1a", 0x1}, {&(0x7f0000001140)='Z', 0x1}, {&(0x7f0000001200)="d0", 0x1}], 0x0, 0x0) 16:07:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000000c0)) 16:07:53 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000001400)=[{&(0x7f0000000140)="1aeba1e4900309bfe89ca0172853b7439c9edcfc7a44007a440c2aeadfbc392430d21dc016de019b1909d85cf5d9dd64e8ba6f11bea5f19115e2854b557408f63d49b8b49959aa28dfc21934a34f0c4f9cb1aa1995a2730037ef431af3947812c6aca6ad7bbe7d6b688e1473b80fb8099b543a1a8232754592fdd1ecd3e4c1dacc26b35b7bbba50b80759a80356b4b0ab9b9c89b875108940be8e1e0e2184f7b9d5a2f843242f76eda1e63fe9cce8407b47aa57957455663eeb703b85f6e12d9ee6d806b0a8464199e56aa1aa9416a9f655299b8d1db2d31ba18421fb9a016763c663888802b39de04793d56f35423c11e38e42d8fdf04c3c2f6a68060d15f56ffbdf41d8539129f90998547adda5a6ca3c66c8ff0ef74537fbef6d4b3bbb65638e2f8ada662860edc1f3082dbdaa2da71c5827956823fdda337de29f5bbb1111bccdfa2161de0db0eb7690dc77bc7225ffa254249b6ea2dd576212207ccf918baa6f2aeb9804911e8eda88498f553d813471801cc3d94bca905097c3c330a11630515460fea8a058f08c7fcfc9c9c326f99f5041844b5505e1dcbd303052ded95fec644282254cefcda2b61cdfd7978967997388367c05044a90b8d91c2f33d2e14969da6de5845846b8c4680b5b3562d65010043431cb1db9ab2aa03690cf18a8248f3abd097fe30530c1544689454abc24b51cd4e371870b4e66152b2a9753126e23148924446079d509b135080a3bd7ec8a17dee2b2859978302e96f894aac5cb941c11966030eeac0161418e4274e2ca3bdbd291796a8f345e8d04b0f394f08cd4639a4ba58f0ce8ee83197b51a0f89ee4f7d5751b5c823442ba4ab60e20e00deb6465376d2ca758d4a75bf0f96b696a26cf2bafb8e1d13d88841d11a84aa31082fe0cdd8aec68262fe561998f2cbd316d3ec017c9fe814541d710593d97b274d8f5ec36c951378516f231054c99f40175be79c238bbd40f51ef545103f243d2613f600d329de581cc39d4acc8e91692e19d01b24eb435657602b428f807de1c07dbbe94e9c27761ae7164f73c6aa521dd044b464a2e71133ef2d94e432afda467e93c4bc1237d3b3832fd7b95eefd7a039769ff533fe0b56af09252a6f113ee9d226e208c97e04b22d44530eef9d45158b1cee4a211c50097ab62a8e208e87b424e9f7071b0fe64a393df30d2e7134365d263e687c4e974fefba91edb4d703a7738890f6e14f4e6bf105ff1703a97a8fcfa6baa6f590c14a40052b154778ae4449ce78c8d7ad4e96b363e3ac8b492caa5fb21fab7be6a4ab58ba082ab3bfab752df1ccdd8a5752221b983928f2d3a069974548f1410b359a593c1d290e7091eed1db31ad0c7866c58d13491e23873d3ef3508bbd7d2fe8d559f7a75b2f93a6b03d035a21b4f40a5254fdc774fe1972e5d9c1713aacbaf24a1eec443c09c4709746f39882617d127301eca60c7aac4713cae6541500bb426145452314e87286754718cfe57a9e8b51d665bc7c58d4133e2d154293e36331aeb59650459971e539c15bb3ed7b7428654ee24b7f39e3dad88172210f78d0f6479cebe7693f5553657eef6b856f199f3262403a34ab33a0a52462b3b85079d35155618f49c36063bb51e80cbeb4df51d75e58ea5264731c6c0272e50f71caf33666ff731dfb941773e4036c779c49758cdcef6f223a3daefaf2844382a5ae9b7dc7c6f81c36f2b256b0eabb1abcb7987f0f184cb3dfa513fde08bd6bfcb1f50ef065f2dcdc8558f6c1ec0293983ff92e72b728f9a2703aa7a9c3e7ffa0ac94828c35991a1ef266701439d2e064e240b626e2f410ddc49dccb7ee2162440a272306947fce530b8d25a0acbb97ef359d806fe8f12b1a552a09f45633dba28d0f6ec7c18f53cf9399590f91663dfba5a7e18c5050a16efeb8fb57e76c056d48ca71793e2c67e2e142a586c462f33464b83797774a5455817f58ddc1de49e847b6f4f3b876baa46e91d73cb066a7d37542b0095a9707ee60975eed840332eda05e9cb8e89e70ae1eb284056f97a001f58152c745a0ca18e30ca749a226be8c6339864466edd24fa3ee42282827a25d1f4198d83c6ddfbc5b08281fc6b90b1ab7e02d9853a2d942b8eea5dcb5953ad6d19b50352ea0bb917f5ffee1f3e6ca51f27aaeaa1349d435ad378d76c691b0a525ceb63c0fd8183749090fe478c8f701283be659f8c58507e6d37ada7af90239ca7670043b265206d6df7c5ab958837addc2e31fda6eb42454c02dea39f84f1ae33224aea448df4566b1f6f526b501099ada59c05094213da5f82d5a917f921d3e600a80339ee412a7528f43fc15b2fef89adc9bf9a888eb7de8c3ca6ab035f3d10cc46b4f803c37f59284b880e9a4ee16803e096e5ee09efcc4237498b2daea2026b37aed90821eebbc4a9b37709f2d1159fb1175bc34bf6e295496305a8db026566fba581a388589ae30984363bca9ea5456fee1210a15c286cd36a09294591fc5560326f8d920847faeccfb169c57860501b03c607074e2f69e3f28bb608ef94b487da1156d78008cd6b5bafecc1b8edd9b32ab919b77627e640e802a64b28ab03cd7deb3f37f6916a18387e6e5b42ed966d5f71802e76fcda1686d4cf0b363fc35aa38d411345f0c69f1c239a8ebbf65be6a47be57c1abd6d630d80729e34a51014cb46171e5cb62b01b7c03b39c3461769f0001f1ff9fccf32bff93f4f89c78fac59d24c2ee0577ed19fe4652b2f33fd495fa934fcfd15e92261ecee54a85f81c8e6a0fcddf47e82c1ad09e1013b4a1afe1975583635181330f0e2aa4f3e548f1726bda01b62ec70726748a32d5671b4a182102ce972760eaf10eeb4731ec9a5da185e91f7aad21644149d37044b7ac8e4e9197a6f7d308850e64ab2881d8d8cc4760f67963719a303065e747c3c88f9fbf6b7365115652a50eed5d5beb6d27b5c7a08b5de68f8a9e3ab79b451c92a848808aa806bc6e0ee36728b2cdc75f7f1e8576b2b982375ebf954f27aef33e12a648e41d09ce6bec73308382deceba75a1ce425ff590daabbb4ef9cf18422f20aafa02397958b9463d3b047e3d8e02b475b1c55218d8df1c27bc84830ed2bb7f88d534514927ae236217124d6145e527de78dec9d8b681d843b8db2fd88024efb86d228b4d63d77542bd8a62bb5e83bf31d3808b682ac5d0d53f24c129ad8eb1d4fb2ae4b57faef29161e6aa7e03d23b7699a85d4ab429ac197bdaa3c95db21aa3cc0076880c3ed0960d0414cda07b6b177bef13a682a41da3bc8ef3d839dbd3fa320395b5e78cd620708af3a76e2a2839e7d99408eecf96eae872a9f7363fb41696e8aa91107d4cc13edd5bf454e1f8bb6f8963c88b3c1cdbee8db50a53cc613f4ae5f737ac88d59dd850afb6983e8690575e51951a4b42923e3f5fae5dac45a85d5fddd7681f4eba4b796e8192f25c0879bdf5b8d26f6ac9c511fa325c67698a7cc9d83978a6807494f9753662def129c1a94585983418252440cb3910aba3921637369b848d68091bcff51312d1262c7cde946118d68780beb13e0eefcffa5e31e5828b07f7c90cc4c319b9b6268987621ffdd2baf79c0c8fb8496d6133a6d1712cf82d1c12cbc2383acfee5f45dea90ddbce55cff45aeb769b143872421b5cbec162870813e72ca1d723e7bd82dd46560c055be4ae93fc950acdc91e8974405afa982b205faa97e9d3b9dbe3c08d65ac8008154e31e19e0b125d90bbf170474d07305bab83b12b3089a636e32c88b8a0416f5aa936c90603cfa8738f17de35fbcab372fb6cf0418f9b8b3b0b75520d48d8adc466e2ad7961e6be8b144b4aec8321b4a216d152d1e277efb191db75ff012f836a70d75625b3bc98687485753a1deeb303f174b758a8b71f89e3865d61d4763cc7663048b702ead84732438c202eb647ed2a5f13b2853cfecc11a435ac23840e5b5a141f758157c1fc7535af5ebbb3692570de69b32edd198f5299122fb03b05aebee45674ad580340034f0e3bdb8919322d45371865e94672bc3173feed4a398d5ce8e916417300d1767f57d8714ab1850ad73005e34f78c19b4a000de8b8355c54cc6916628dad078e0e644976130804541ed7ee922feffe0c2718ec2660bdc2ffb9277daa2461d012b726cabc35f756e78f573980f76706ada741c61f8fd3a2328257e8c42992b16acf9bf8f5f369be31a3b3ec56bddb136d1cf6ba75e6fa3fde33ad315f9782337e031ac0e4f8672fe346653e76637330a6fb15dc986f73dd5f4416e587f8657d36292eaab1a25d94e6a4ea9420616c7b499e4c05de147f1a5c9528d8d48f7f4b237b3ea275fbcd86f1da98a47ef69e34cb666f70f7f149015998f39df3ea062a2af62b3866e6d69a3c16fd7234a27b2621396b8b1a6ffa2208b4c5f5c9a3e83632a69fb5d47fc5418515e5bdd96b3cb6f7fff6c9e86f1d7c8c96e3cfbe2cacea05422b713ad0e5516f109ea151327c0c5d6cb762154478d808bf0a4e89b65852401773d7bd88f7c5d6d6e5d954de1c2f52effd8cd6c191ebf57b8bfc344eb0758011f7acb0a7baf3f1ed1a31bc7df57671f8253888fe18b7f01341cf0eb45e8704ed5433c1a642a5c39f5eddcb05de656006cbbb0254531056ac5c690e1ed6f248753101a75bd26f4a4f959671033360e2983677735f66b487842e4c7aeeec80b6848adf3792c695ebbf671b50b4411126997a3fc1f9663e5e58004c61176f02ba40a07d5fbb054a8600e1ac451363f9a08857ffbea3be3cca74cdf06d1ce9bd69ad599a31525d14811c775b32c86ff9da6852b339e2cb2f65a49b6705ab57a1fca74ea28d51849e5ae64a02acc7abff731761dbbc408f9445c5954bf964728f4b6b9882fb3e76961d4fc77027d0290493c4166111e71644aecffd274c55af929ebab86ed798569cc335716f4bbd105bcf801fe054f6041fc06af38ccf59758384e631ab5b81026cc6c801d3eeeea25aae2dc98aa47f69326eeb0cf9023ce5e11c86c177f109ab3a9fbde5ed60652574a98a3b40917afe14f1922859b003b49e207e813c6aed1da8683b70850a5602599dad4f00c631d2a4c998e0c6b2d2e7cf24415a6f3839295984c39676bfe448060dd01d48dcc398548e9cf669a4aa90aa12df2319a20c3894e1a518fe61c988235bb5b327bea07cb9a9b9f54beab2138375090ac8bf0769cd09fe591a6da3e023185c1846a3d652ee375e744deca2e1d6f5ae5fd8b282dabbab3347d9ee748a93b8a6e6b2f2e5608f5ae345911410066bbb2379fad0e728ab6a848dd692791c97829584a0ddf504d333a7052f8be8a7259deb015ac13a5773305f0c54bf3b55d2e03c5856efc4691b2bd1168b9a3740f27221f577139c35401944c451c72e5c48c11a13984982e5a0a62baa2a3c10eab5969126fbf85c6efff20bd3d4c7b58a368655b70a2a73950dcba9fa7f3958ed0736f1e100a708d796441866bbcc814847c5e00c6cb38b498005d13c949596d6907b3ed1b494bf32d2a42433677cd81b83325946967918c0c0291ff193ed5e4a3eb7d684eaca7546686910c546002bd33a2cff48dcc21545c8250a4aba21cca69a73c8c97801b920d8ff28fac96150ac925f5d9e0e7c60bfa5307933a4e6d821f441023128155ff9e1abc24e88598409e0d41de6b3ddac068e4005fb9371fa2b094ed14811f262935fc97db9a1f737e81a4d0fc6bd9b40de9d38c59b05c931ca913e88cf5395566a866ae3414e5bc34bd4c68883076e29e0e400067c00b776b0faf38988eb2", 0xffb, 0x6}, {&(0x7f0000001140)='Z', 0x1, 0xffff}], 0x0, 0x0) 16:07:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='/th0\x00') 16:07:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000300)) 16:07:53 executing program 3: r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r1, r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 16:07:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', 0x0, 0x0, 0x2, &(0x7f0000001400)=[{&(0x7f0000000140), 0x0, 0x6}, {&(0x7f0000001140), 0x0, 0xffff}], 0x40, &(0x7f00000014c0)={[{@dioread_nolock='dioread_nolock'}, {@norecovery='norecovery'}, {@init_itable_val={'init_itable', 0x3d, 0x17}}, {@sb={'sb'}}], [{@subj_role={'subj_role'}}]}) 16:07:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x203, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x66}}, {0x8}, {0x6}, {0x8}}]}, 0x54}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0x1000001bd) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e17a5", 0x58}], 0x1) 16:07:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001400)=[{0x0, 0x0, 0xffff}], 0x0, &(0x7f00000014c0)) 16:07:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001400)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009809328a8e9c0edeee0200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000010000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) io_uring_enter(r2, 0x302, 0x0, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000005f80)='./file0\x00', 0x400042, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000005fc0)='fuse\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000045c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0xee00, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000088c0)=[{0x0, 0x0, 0x0}, {&(0x7f0000003c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004d00)=[{&(0x7f0000003d00)="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", 0x1000}], 0x1, &(0x7f00000082c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="000000001c00000000000000010000123b40e611", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x40001}, {&(0x7f0000008380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000008880)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x8000}], 0x3, 0x0) [ 1064.330338][ T1331] loop2: detected capacity change from 0 to 255 [ 1064.414253][ T1336] loop4: detected capacity change from 0 to 255 [ 1064.461270][ T1331] loop2: detected capacity change from 0 to 255 16:07:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000b40)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) [ 1064.511754][ T1345] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1064.642508][ T1352] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 1064.652514][ T1350] loop0: detected capacity change from 0 to 255 16:07:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001440)={&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0}, 0x0) [ 1064.689446][ T1350] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 16:07:54 executing program 3: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x4c, 0x0, 0x3, 0x0, 0x1ff, 0x41c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0), 0x8}, 0x40018, 0x6, 0x4, 0x6, 0xff, 0x8000fff, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net\x00') r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, 0x0, 0x815202f) keyctl$chown(0x4, r1, 0xee01, 0x0) keyctl$assume_authority(0x10, 0x0) personality(0x800000) ptrace(0x11, 0x0) fchdir(r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={0x0, 0x185, 0x55}, &(0x7f00000009c0)=ANY=[@ANYBLOB="80b25e9ef88813da71054ed27172906a0700d7d7ba5b2a435c0d6b01f73fce7cacd9906580da4a5234a379033e110a17390a78b434d98382aebb81cf1e01ab44ff0000000000000049f68a06305c51328664def2a73364d3e04f2ed17307821173ff3ec7bbf6373dc0edbfb02d5af849f0dc7e42e36b53c57dc0efad39fd5b4391650a58a4fdd4ad0b16056067650c17c500efdef71b1db94da24ab71905a3a314ba8ed67d7085431a42c7881b9c8ecddf1f17ab7cd32ed30299e92d5ed01cdf2e0b54d428312304cc9044372f2ba19da46a4fff9cd47166ea70"], &(0x7f0000000800)="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", &(0x7f0000000780)=""/85) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x43, 0x11, 0x4, 0x14, 0x0, 0x7fff, 0x604, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x0, @perf_config_ext={0xf326, 0x144}, 0x1bd01, 0x7fffffff, 0xffffffff, 0x4, 0xfffffb7ffffffff9, 0xb718, 0x338}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0xc00) syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') preadv(r2, &(0x7f00000001c0), 0x0, 0x3d74, 0x0) read$alg(r0, &(0x7f0000000540)=""/208, 0xd0) prctl$PR_SET_FP_MODE(0x2d, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0xfffffffe, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xa00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="0300400d0314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) ioctl$CHAR_RAW_HDIO_GETGEO(r2, 0x301, &(0x7f00000002c0)) clone(0x3a000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1064.749113][ T1350] loop0: detected capacity change from 0 to 255 [ 1064.761465][ T1350] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 16:07:54 executing program 0: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) [ 1064.880491][ T1364] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1064.985319][ T1368] bond0: (slave veth3): Enslaving as an active interface with an up link [ 1065.040266][ T1367] loop3: detected capacity change from 0 to 5 [ 1065.040862][ T1368] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 16:07:54 executing program 0: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:07:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000b40)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) [ 1065.295355][ T1383] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1065.402938][ T1384] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1065.424660][ T1367] ldm_validate_privheads(): Disk read failed. [ 1065.477966][ T1367] loop3: p2 < > 16:07:54 executing program 5: inotify_init() r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 1065.522727][ T1367] loop3: partition table partially beyond EOD, truncated [ 1065.537039][ T1387] bond0: (slave veth5): Enslaving as an active interface with an up link 16:07:55 executing program 0: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x4) 16:07:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000b40)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) 16:07:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:07:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$cgroup_freezer_state(r0, 0x0, 0xf0ff7f00000000) [ 1066.162459][ T1406] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1066.327708][ T1410] bond0: (slave veth7): Enslaving as an active interface with an up link [ 1067.143074][ T4855] ldm_validate_privheads(): Disk read failed. [ 1067.170525][ T4855] loop3: p2 < > [ 1067.188952][ T4855] loop3: partition table partially beyond EOD, truncated 16:07:57 executing program 1: io_setup(0x6, &(0x7f0000000080)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x3004, 0x0) io_submit(r0, 0x1, &(0x7f0000000b40)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 16:07:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20}, 0x0) 16:07:57 executing program 4: r0 = socket(0x11, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0xffffffffffffffff, &(0x7f0000000000)) 16:07:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000b40)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) 16:07:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4a, &(0x7f0000001280)={@remote}, 0x14) 16:07:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000000)={'\x00', @ifru_data=0x0}) [ 1068.008004][ T1436] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 16:07:57 executing program 0: socketpair(0x10, 0x3, 0xb, &(0x7f0000000000)) 16:07:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x12, &(0x7f00000002c0)={0x77359400}, 0x10) 16:07:57 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x9}, 0x0, 0x0, 0x0) 16:07:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x6, 0x1e, &(0x7f0000001280)={@remote}, 0x14) [ 1068.115149][ T1442] bond0: (slave veth9): Enslaving as an active interface with an up link 16:07:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4, &(0x7f0000001280)={@remote}, 0x14) 16:07:57 executing program 2: pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0xffffffffffffffff) 16:07:57 executing program 4: io_setup(0x6, &(0x7f0000000080)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f00000000c0)="00c90222da43ff4107b167000054bd87", 0x10}]) 16:07:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x3d, &(0x7f00000002c0)={0x77359400}, 0x10) 16:07:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$'], 0x24}, 0x8}, 0x0) 16:07:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}, 0x4) 16:07:57 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x32071, 0xffffffffffffffff, 0x8000000) socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)) 16:07:58 executing program 2: syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000240)="80ad45319544744955", 0x9, 0x480}], 0x0, &(0x7f0000000040)) mkdir(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:07:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004cc0)=@deltfilter={0x24, 0x8}, 0x24}, 0x8}, 0x0) 16:07:58 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 16:07:58 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x109842, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ftruncate(r1, 0x2008000) sendmmsg(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000050c0)=ANY=[@ANYBLOB="90"], 0x90}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 16:07:58 executing program 5: io_setup(0x6, &(0x7f0000000080)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) clock_gettime(0x0, &(0x7f0000000000)) io_getevents(r0, 0x7, 0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x0) 16:07:58 executing program 3: io_setup(0x6, &(0x7f0000000080)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x7}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 1069.036934][ T1473] loop2: detected capacity change from 0 to 4 [ 1069.109171][ T4855] ldm_validate_privheads(): Disk read failed. 16:07:58 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x0) [ 1069.177242][ T4855] loop3: p2 < > [ 1069.219481][ T4855] loop3: partition table partially beyond EOD, truncated [ 1069.226919][ T1473] BUG: spinlock bad magic on CPU#1, syz-executor.2/1473 [ 1069.233965][ T1473] lock: 0xffff8880b9c31d60, .magic: 00000000, .owner: /-1, .owner_cpu: 0 [ 1069.243220][ T1473] CPU: 1 PID: 1473 Comm: syz-executor.2 Not tainted 5.12.0-rc6-next-20210409-syzkaller #0 [ 1069.253168][ T1473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.263259][ T1473] Call Trace: [ 1069.266548][ T1473] dump_stack+0x141/0x1d7 [ 1069.271001][ T1473] do_raw_spin_lock+0x216/0x2b0 [ 1069.275930][ T1473] ? rwlock_bug.part.0+0x90/0x90 [ 1069.280985][ T1473] ? alloc_pages+0x194/0x2a0 [ 1069.285712][ T1473] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1069.291447][ T1473] erofs_pcpubuf_growsize+0x36f/0x620 [ 1069.296918][ T1473] ? erofs_put_pcpubuf+0xa0/0xa0 [ 1069.301878][ T1473] ? mark_page_accessed+0x273/0x1ad0 [ 1069.307235][ T1473] z_erofs_load_lz4_config+0x1ef/0x3e0 [ 1069.312710][ T1473] erofs_fc_fill_super+0xe84/0x1d10 [ 1069.317927][ T1473] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1069.323723][ T1473] ? set_blocksize+0x1c1/0x3b0 [ 1069.328563][ T1473] get_tree_bdev+0x440/0x760 [ 1069.333255][ T1473] ? trace_event_raw_event_erofs_readpage+0x5a0/0x5a0 [ 1069.340054][ T1473] vfs_get_tree+0x89/0x2f0 [ 1069.344531][ T1473] path_mount+0x132a/0x1fa0 [ 1069.349126][ T1473] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1069.355392][ T1473] ? strncpy_from_user+0x2a0/0x3e0 [ 1069.360614][ T1473] ? finish_automount+0xaf0/0xaf0 [ 1069.366624][ T1473] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1069.372901][ T1473] ? getname_flags.part.0+0x1dd/0x4f0 [ 1069.378296][ T1473] __x64_sys_mount+0x27f/0x300 [ 1069.383076][ T1473] ? copy_mnt_ns+0xae0/0xae0 [ 1069.387692][ T1473] ? syscall_enter_from_user_mode+0x27/0x70 [ 1069.393768][ T1473] do_syscall_64+0x2d/0x70 [ 1069.398199][ T1473] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1069.404161][ T1473] RIP: 0033:0x46797a [ 1069.408409][ T1473] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1069.428118][ T1473] RSP: 002b:00007f1ff94fcfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1069.436553][ T1473] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000046797a [ 1069.444543][ T1473] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f1ff94fd000 [ 1069.452620][ T1473] RBP: 00007f1ff94fd040 R08: 00007f1ff94fd040 R09: 0000000020000000 [ 1069.460699][ T1473] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1069.468690][ T1473] R13: 0000000020000100 R14: 00007f1ff94fd000 R15: 0000000020000040 16:07:58 executing program 1: io_setup(0x6, &(0x7f0000000080)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000280)={0x0, 0x0, 0x2, 0x5, 0x0, r1, 0x0, 0x2}]) 16:07:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@timestamping={{0x14}}], 0x18}, 0x4004040) [ 1069.775602][ T1473] erofs: (device loop2): erofs_read_inode: unsupported i_format 44416 of nid 36 16:07:59 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0, 0x5}}, 0x0) [ 1069.842107][ T1479] loop2: detected capacity change from 0 to 4 16:07:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004cc0)=@deltfilter={0x24, 0x10, 0x5765}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000004100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x2, 0x46, 0x0) 16:07:59 executing program 2: io_setup(0x6, &(0x7f0000000080)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000000)="00f0ffffff7f", 0x6}]) 16:07:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x30, 0x0, 0x0) 16:07:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x6, 0x16, &(0x7f0000001280)={@remote}, 0x14) [ 1070.023316][ T1509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1070.077599][ T1509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:07:59 executing program 1: futex(0x0, 0x8c, 0x1, 0x0, &(0x7f0000000400), 0x0) 16:07:59 executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x8, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000240)=@string={0x4, 0x3, "1b27"}}, {0x12, &(0x7f0000000300)=@string={0x12, 0x3, "6d52c3c1d670d6580ff91d27c5dc82ad"}}]}) 16:07:59 executing program 4: r0 = socket(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xf0ff7f) 16:07:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x2d, 0x0, 0x0) 16:07:59 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0, 0x4000}}, 0x0) 16:07:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$bt_l2cap(r0, &(0x7f0000000000)={0x10, 0x0, @none}, 0xe) 16:07:59 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@hci={0x1f, 0x3580, 0x4}, 0x80, 0x0}, 0x0) 16:07:59 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) 16:07:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8912, &(0x7f0000000080)={'bridge_slave_1\x00', @ifru_data=0x0}) 16:08:00 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x1e9640, 0x0) 16:08:00 executing program 5: r0 = socket(0x1, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x0) 16:08:00 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) 16:08:00 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x32071, 0xffffffffffffffff, 0x8000000) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1070.838505][T31057] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1070.857019][ T4855] ldm_validate_privheads(): Disk read failed. [ 1070.865254][ T4855] loop3: p2 < > [ 1070.869523][ T4855] loop3: partition table partially beyond EOD, truncated [ 1071.108424][T31057] usb 1-1: Using ep0 maxpacket: 16 [ 1071.248595][T31057] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.259661][T31057] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1071.458957][T31057] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.40 [ 1071.468092][T31057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.476849][T31057] usb 1-1: Product: syz [ 1071.481158][T31057] usb 1-1: Manufacturer: 剭쇃烖壖羅✝궂 [ 1071.487430][T31057] usb 1-1: SerialNumber: syz [ 1071.768566][T31057] usbhid 1-1:1.0: can't add hid device: -22 [ 1071.774642][T31057] usbhid: probe of 1-1:1.0 failed with error -22 [ 1071.783433][T31057] usb 1-1: USB disconnect, device number 92 [ 1072.518480][ T9778] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1072.758538][ T9778] usb 1-1: Using ep0 maxpacket: 16 [ 1072.880458][ T9778] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.891687][ T9778] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1073.058626][ T9778] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.40 [ 1073.067704][ T9778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.076663][ T9778] usb 1-1: Product: syz [ 1073.081410][ T9778] usb 1-1: Manufacturer: 剭쇃烖壖羅✝궂 [ 1073.087576][ T9778] usb 1-1: SerialNumber: syz 16:08:02 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@var, @volatile]}}, 0x0, 0x36}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:08:02 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10001) 16:08:02 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@nfc={0x27, 0x2}, 0x2c, 0x0}, 0x0) 16:08:02 executing program 3: r0 = socket(0x11, 0x3, 0x0) write$bt_hci(r0, 0x0, 0x0) 16:08:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) 16:08:02 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 1073.378542][ T9778] usbhid 1-1:1.0: can't add hid device: -22 [ 1073.384578][ T9778] usbhid: probe of 1-1:1.0 failed with error -22 16:08:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="20000000000000000100000001000000995d"], 0x78}, 0x0) [ 1073.422474][ T9778] usb 1-1: USB disconnect, device number 93 16:08:02 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1f) sendmsg$sock(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 16:08:02 executing program 5: socketpair(0x1e, 0x3, 0x0, &(0x7f00000000c0)) 16:08:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000001c40)={&(0x7f0000000080), 0x9, &(0x7f0000001c00)={&(0x7f0000001b80)={0x14}, 0x14}}, 0x0) 16:08:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000480)={0xfffffc01, 0x94f, &(0x7f0000000340)="d4a5345bd268d4d8b8f7cfce73df10fd04ea640245d573eb5ff8abe5cd9e97bfc266e5d3853fe2a711e60d6f5b9e3a1d0ad873486e21a11a3ef163312c9181b0d5b0a2c3898bbf5b1c010c5788e56028db7ba80ca94139273baefa88328f", &(0x7f00000003c0)="2b115657c3cc40c1218fed7736a52e9665cb97806094d8e5b8d6c0fd947d9d5c352481bc62ca22883662dea4e30d514ebd3fdcc2b086d476a7a2776ffca3a847665a794dbe75f67fcc40f890148cc3a5ac3c2eaf07e1c0fa04ef2d034761ee590480d0673775879921d0017e3b11565ad332c0224e994af8aba508e9544414c1aeb2", 0x5e, 0x82}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"9697d7ee2201656b9d91aef08e2ba062", 0x0, 0x0, {0x100000000, 0xed}, {0x403, 0x7}, 0x200, [0x1003, 0xe7, 0x4215e837, 0x4, 0x100000081, 0x4, 0x4, 0xffffffff, 0x7ff, 0x7, 0x8, 0x8, 0x7a0, 0x8, 0x0, 0x7ff]}) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000900)={0x18000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)=0x0, {0x6}, &(0x7f0000000740)=""/234, 0xea, &(0x7f0000000840)=""/87, &(0x7f00000008c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0xa}, 0x58) sendmsg$nl_route(r1, &(0x7f0000000a40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@setlink={0x68, 0x13, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8140}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_MAP={0x24, 0xe, {0x1, 0x9, 0x2, 0x800, 0x5, 0x3f}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7ff}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 16:08:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="03"], 0x24}}, 0x0) [ 1073.486465][ T1594] ptrace attach of "/root/syz-executor.0"[1590] was attempted by "/root/syz-executor.0"[1594] 16:08:03 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x7fffdf003000, 0x0, 0x32071, 0xffffffffffffffff, 0x8000000) 16:08:03 executing program 3: r0 = socket(0x2c, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x0) 16:08:03 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x15, 0x0, 0x0, 0x0}, 0x20) 16:08:03 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x5411, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_mtu}) 16:08:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) [ 1073.682422][ T4855] ldm_validate_privheads(): Disk read failed. [ 1073.696745][ T4855] loop3: p2 < > [ 1073.705260][ T4855] loop3: partition table partially beyond EOD, truncated 16:08:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x22, &(0x7f00000002c0)={0x77359400}, 0x10) 16:08:03 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x109842, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x2008000) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000002d80)) 16:08:03 executing program 4: io_setup(0x6, &(0x7f0000000080)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x3}]) 16:08:03 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', r0) 16:08:03 executing program 1: io_setup(0x6, &(0x7f0000000080)=0x0) socketpair(0x29, 0x6, 0x1f, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000240)=""/13, &(0x7f0000000280)=0xd) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000009c0)={'TPROXY\x00'}, &(0x7f0000000a00)=0x1e) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, @in={0x2, 0x4e21}, @l2={0x1f, 0xbe44, @none, 0x2, 0x1}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3}, 0xfffe, 0x0, 0x0, 0x0, 0x1008, &(0x7f0000000180)='tunl0\x00', 0x2, 0x80000001, 0x40}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000200)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00', r2) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x42, 0x0) getsockopt$inet_opts(r2, 0x0, 0x1f, &(0x7f0000000440)=""/45, &(0x7f0000000480)=0x2d) io_submit(r0, 0x2, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0xf, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r6}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x1f8, r5, &(0x7f0000000340)="fd282c0cdc17eea0bd7fd3dba8a4af193cc9db1f6887f7a7bb236a9867a65735fbd63ef0c3627f18ab176793b2a1782bb0ffb68ffcf6394c05360869a38e3937e280bd156fdc4fb1cb23c8b0db811389906cc7a4ac3aeb31fa614ec3b6ff1e0b3efdae7c243f1f270cea65fbee871e07b64e00c1e905d8f616b3d435a7cd53232bd04849ba0c1a312762e3ab0e66fef605306e034741e53603c8cae16e4e55d8e3822af71f92c3c408e2882a85db0eccc3eb314f9b4b8b6065fc66b9a6d656f36d9241189c9f99c4c3c700086264df8d9012ed5443d2cc", 0xd7, 0x3, 0x0, 0x1}]) 16:08:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f00000002c0)={0x77359400}, 0x10) 16:08:03 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:08:03 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, 0x0) 16:08:03 executing program 5: io_pgetevents(0x0, 0x0, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180), 0xfffffffffffffffd}) 16:08:03 executing program 3: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:08:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1a, &(0x7f0000001280)={@remote}, 0x14) 16:08:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 16:08:03 executing program 0: perf_event_open(&(0x7f00000003c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:08:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x6, 0x0, 0x0, 0x0) 16:08:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 16:08:03 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) 16:08:03 executing program 2: r0 = socket(0x2, 0x3, 0x100) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48011) 16:08:03 executing program 0: socketpair(0x0, 0xd8171439d541a931, 0x0, 0x0) 16:08:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100000201010400000000000000000500000680000d8008000100ac1414bb14000500fc00000000000000000000000000000114000500fc00000000000000000000000000000008000200ac1414aa1c000380060001004e230000060001004e230000060002004e20000014000500fe8000000000000000000000000000bb14000500fc000000000000000000000000000000640002801400018008000100ac14143a080002007f0000010c00028005000100010000000c00028005000100860000002c00018014000300fc02000000000000000000000000000114000400fe8000000000000000000000000000bb06"], 0x13c}}, 0x0) 16:08:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x6, 0x12, &(0x7f0000001280)={@remote}, 0x14) 16:08:03 executing program 3: socketpair(0x1, 0x80805, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={&(0x7f0000000080), 0x2000008c, &(0x7f0000000200)={0x0}}, 0x0) 16:08:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x6, 0xc, &(0x7f0000001280)={@remote}, 0x14) 16:08:03 executing program 4: pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x0) 16:08:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2, &(0x7f00000002c0)={0x77359400}, 0x10) [ 1074.431563][ T1684] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 16:08:03 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x4000844) 16:08:03 executing program 5: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 16:08:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000100)=""/177, 0x2e, 0xb1, 0x1}, 0x20) 16:08:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000080)=""/55, &(0x7f00000000c0)=0x37) 16:08:04 executing program 3: io_setup(0x6, &(0x7f0000000080)) socketpair(0x29, 0x6, 0x1f, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000240)=""/13, &(0x7f0000000280)=0xd) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000009c0)={'TPROXY\x00'}, &(0x7f0000000a00)=0x1e) ioctl$sock_SIOCADDRT(r1, 0x890c, &(0x7f00000000c0)={0x0, @in={0x2, 0x4e21}, @l2={0x1f, 0xbe44, @none, 0x2, 0x1}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3}, 0xfffe, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='tunl0\x00', 0x2, 0x80000001, 0x40}) socket$packet(0x11, 0x2, 0x300) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000200)) 16:08:04 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001940)={0x14, r0, 0x201, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 16:08:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x24}, 0x8, 0x0, 0x8000000000000000}, 0x0) 16:08:04 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, &(0x7f0000000100)=""/177, 0x32, 0xb1, 0x1}, 0x20) 16:08:04 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) 16:08:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004cc0)=@deltfilter={0x24, 0x10, 0x5765}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x46, 0x0) 16:08:04 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) 16:08:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000005c0)={&(0x7f0000000340)=@generic={0x0, "91bc14a54a0824b8ca01ae2db55fd817c447fccdd534d385b8ce0fade48c2859eddf65e12bdf6657428b785b1ef89e0682f3576532003a298514fb659faabb992d1772ef49e96b786091d1eaee04e2d3629bab0c56b6d4b74f7a7f48001e952e294b805c6286d34edb4d2826ccd4501aa287bc2dbba61e83c2aa436ee602"}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[@mark={{0x14}}, @timestamping={{0x14}}], 0x30}, 0x0) 16:08:04 executing program 2: io_setup(0x6, &(0x7f0000000080)=0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r1 = socket$packet(0x11, 0x2, 0x300) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 1074.837735][ T1722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:08:04 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001840)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:08:04 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x32071, 0xffffffffffffffff, 0x8000000) [ 1074.883737][ T1722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:08:04 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={&(0x7f0000000080), 0x2000008c, &(0x7f0000000200)={0x0}}, 0x0) 16:08:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001280)={@remote}, 0x14) 16:08:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[], [{@seclabel='seclabel'}]}) 16:08:04 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x6400, 0x0) 16:08:04 executing program 4: futex(0x0, 0x8c, 0x0, 0x0, &(0x7f0000000400), 0x0) 16:08:04 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xf0ff7f) 16:08:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xc, 0x0, &(0x7f00000000c0)) 16:08:04 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f00000012c0)={[{@fat=@fmask={'fmask'}}]}) 16:08:04 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) 16:08:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:08:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') read$char_raw(r0, &(0x7f0000000600)={""/46109}, 0xb600) [ 1075.195084][ T4855] ldm_validate_privheads(): Disk read failed. [ 1075.217147][ T1751] FAT-fs (loop5): bogus number of reserved sectors [ 1075.229498][ T4855] loop3: p2 < > 16:08:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x6, 0x7, &(0x7f0000001280)={@remote}, 0x14) 16:08:04 executing program 2: r0 = socket(0x11, 0x3, 0x0) bind$bt_hci(r0, 0x0, 0x0) 16:08:04 executing program 1: io_setup(0x6, &(0x7f0000000080)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) [ 1075.243503][ T1751] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1075.251115][ T4855] loop3: partition table partially beyond EOD, truncated [ 1075.306869][ T1751] FAT-fs (loop5): bogus number of reserved sectors [ 1075.318114][ T1751] FAT-fs (loop5): Can't find a valid FAT filesystem 16:08:04 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6480) 16:08:04 executing program 2: r0 = socket(0x1, 0x3, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000040)) 16:08:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, &(0x7f0000000100)=""/177, 0x3e, 0xb1, 0x1}, 0x20) 16:08:04 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x32071, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x32071, 0xffffffffffffffff, 0x8000000) 16:08:04 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000240)=@string={0x2}}, {0x2, &(0x7f0000000300)=@string={0x2}}]}) 16:08:04 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x7}, 0x0) 16:08:04 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x7) 16:08:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001940)={0xf}, 0x14}}, 0x0) 16:08:04 executing program 3: clock_getres(0x0, &(0x7f0000000080)) clock_gettime(0x6, &(0x7f0000000040)) 16:08:04 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x8}, 0x0, &(0x7f0000000180)={0x2}, &(0x7f0000000200), 0x0) 16:08:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x11, 0x0, 0x0) 16:08:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:08:05 executing program 4: r0 = socket(0x1, 0x3, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000000a00)) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 16:08:05 executing program 3: io_setup(0x6, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) io_setup(0xffff, &(0x7f0000000380)) 16:08:05 executing program 1: io_setup(0x6, &(0x7f0000000080)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000000)="dd7610b7bc128f", 0x7}]) 16:08:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\n\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf250e0000000800", @ANYRES32=0x0, @ANYBLOB="0c00990004"], 0xa38}}, 0x0) [ 1075.878871][ T8] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1075.912393][ T4855] ldm_validate_privheads(): Disk read failed. [ 1075.919664][ T4855] loop3: p2 < > [ 1075.923336][ T4855] loop3: partition table partially beyond EOD, truncated [ 1076.086691][ T4855] ldm_validate_privheads(): Disk read failed. [ 1076.093730][ T4855] loop3: p2 < > [ 1076.097432][ T4855] loop3: partition table partially beyond EOD, truncated [ 1076.128467][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1076.163140][ T4855] ldm_validate_privheads(): Disk read failed. [ 1076.170541][ T4855] loop3: p2 < > [ 1076.174176][ T4855] loop3: partition table partially beyond EOD, truncated [ 1076.248508][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1076.328520][ T8] usb 1-1: language id specifier not provided by device, defaulting to English [ 1076.458601][ T8] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.40 [ 1076.467713][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.476301][ T8] usb 1-1: Product: syz [ 1076.480951][ T8] usb 1-1: SerialNumber: syz [ 1076.520456][ T8] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 1076.724282][ T9813] usb 1-1: USB disconnect, device number 94 [ 1077.498438][T31057] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1077.739045][T31057] usb 1-1: Using ep0 maxpacket: 16 [ 1077.859280][T31057] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1077.909168][T31057] usb 1-1: language id specifier not provided by device, defaulting to English [ 1078.039374][T31057] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.40 [ 1078.048749][T31057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.056752][T31057] usb 1-1: Product: syz [ 1078.061306][T31057] usb 1-1: SerialNumber: syz [ 1078.100086][T31057] usbhid 1-1:1.0: couldn't find an input interrupt endpoint 16:08:07 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x8}, &(0x7f0000000140)={0x8}, &(0x7f0000000180)={0x2}, &(0x7f0000000200), 0x0) 16:08:07 executing program 4: r0 = socket(0x11, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 16:08:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x18, &(0x7f0000001280)={@remote}, 0x14) 16:08:07 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x2000046c}}, 0x0) 16:08:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0x0) 16:08:07 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @fixed}, 0xe) [ 1078.308735][T31057] usb 1-1: USB disconnect, device number 95 16:08:07 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x5, &(0x7f0000001600)=[{&(0x7f0000000180)="8a6b55621fd2d14a6f1dfafe6656fb704c8b390cc33c570db23c2cd48637e45df09a2c3a4d77b7b4953cb6e3ab16b61824a9269a09c4dbed599e2f1c531accf74d291f74926f9b7ae4f2126048697c5f501cabd155dccb6a44b52d3db5195cf8da", 0x61, 0x6}, {&(0x7f0000000200)="bf0d30e3b6eeeef20ac003", 0x8400008, 0xfffffffffffffff8}, {&(0x7f0000000440)="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", 0xff9, 0x8}, {0x0}, {0x0}], 0x0, 0x0) 16:08:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001880)={[{@fat=@uid={'uid', 0x3d, r1}}]}) 16:08:07 executing program 4: socketpair(0x10, 0x2, 0x3, &(0x7f0000000100)) 16:08:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @private1}]}, 0x30}}, 0x0) 16:08:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) 16:08:07 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast1}}) 16:08:08 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) tkill(0x0, 0x0) 16:08:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x464, 0x1}, 0x10}}, 0x0) 16:08:08 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:08:08 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x109842, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ftruncate(r1, 0x2008000) recvmmsg(0xffffffffffffffff, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000005180)=[{0x0}], 0x1}}], 0x1, 0x0, &(0x7f0000002e00)={0x0, 0x989680}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 16:08:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004cc0)=@deltfilter={0x24, 0x10, 0x5765}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000004100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0, 0x0) 16:08:08 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5411, 0x0) [ 1078.806886][ T1902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:08:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000001280)={@remote}, 0x14) 16:08:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0}, 0x1, 0x0, 0x6105}, 0x0) [ 1078.861840][ T1902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:08:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a1, &(0x7f0000000040)='bond0\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000043c0)={{0x2, 0x0, @multicast2}, {}, 0x20, {0x2, 0x0, @dev}, 'macsec0\x00'}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0xffff, 0x4) 16:08:08 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@hci={0x1f, 0x1, 0x4}, 0x80, 0x0}, 0x0) 16:08:08 executing program 0: io_setup(0x6, &(0x7f0000000080)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]) 16:08:08 executing program 3: perf_event_open(&(0x7f00000003c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1079.181810][ T4855] ldm_validate_privheads(): Disk read failed. [ 1079.188915][ T4855] loop3: p2 < > [ 1079.192581][ T4855] loop3: partition table partially beyond EOD, truncated