040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000100)=0x7f, 0x4) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x6ea000, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, '/dev/dlm-control\x00'}, {0x20, '/dev/dlm-control\x00'}, {0x20, '/dev/dlm-control\x00'}, {0x20, 'em0em1^bdevppp0vmnet1\xcavboxnet1[[vboxnet1\x1dvmnet1securityem1loself\xafkeyringmime_type)proc/lo'}, {}], 0xa, "4315715ec7e35ca10c1af3f829ee1dfa33b1551b"}, 0xb0) socket$nl_generic(0x10, 0x3, 0x10) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x60002, 0x0) open_tree(r3, &(0x7f0000000080)='./file0\x00', 0x89101) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 709.202676][ T4122] usb 5-1: Using ep0 maxpacket: 8 [ 709.246787][T11863] usb 6-1: device descriptor read/64, error 18 [ 709.282377][ T3705] usb 2-1: Using ep0 maxpacket: 8 [ 709.334752][ T4122] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 709.343294][ T4122] usb 5-1: config 0 has no interface number 0 [ 709.349502][ T4122] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 709.359397][ T4122] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 709.370491][ T4122] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 709.403570][ T3705] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 709.411651][ T3705] usb 2-1: config 0 has no interface number 0 [ 709.418436][ T3705] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 709.428318][ T3705] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 709.439447][ T3705] usb 2-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 709.482838][ T4122] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 709.492427][ T4122] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 709.500612][ T4122] usb 5-1: Product: syz [ 709.509463][ T4122] usb 5-1: config 0 descriptor?? [ 709.541168][ T3705] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 709.550479][ T3705] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 709.558836][ T3705] usb 2-1: Product: syz [ 709.565365][ T3705] usb 2-1: config 0 descriptor?? [ 709.712376][T11863] usb 6-1: device descriptor read/64, error 18 [ 709.982329][T11863] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 710.064698][ T3705] usb 5-1: USB disconnect, device number 30 [ 710.076062][T11866] usb 2-1: USB disconnect, device number 36 [ 710.252204][T11863] usb 6-1: device descriptor read/64, error 18 10:10:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:10:41 executing program 1: getrusage(0xffffffffffffffff, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:10:41 executing program 2: timer_create(0x0, &(0x7f0000044000)={0x0, 0x1c, 0x0, @thr={&(0x7f00000002c0)="e2c1faaa81e8e69480920a380a389e344d21d358ff5951dc1179539c61f1715e22fe265f507dc58b75f5a492b8bdacbf02be0dcaaa3acb29de95efecdc5ad462a2c923d4f552dd87a48e351ad93fe2f75d0137ae919806160f4739520933ec7b5abde6afa7f1be669ec9dcf6a617ffb055cdb3b5e85803000000f33d8534", &(0x7f0000000400)="6b0a32eefac510b5712b079d614f3263ac16a1fc8ff4d77c95eed49169974907ed57d535dd61c37caee74a67f8d4432fc6adedd5d8de5865f1b4fe001f334eda73dc9883194382cbef0fc08e5f5a9c27b22ef95240b69cd267aafd1909b98d1a1b26faf5c52c42"}}, &(0x7f0000044000)) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x490963a1d93432ae, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'eql\x00', 0xd102}) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, &(0x7f00000000c0)={0x8}, 0x8) dup2(r0, r1) r2 = gettid() r3 = socket$inet(0x2, 0x200000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCGETS2(r6, 0x802c542a, &(0x7f0000000180)) bind$inet(r3, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000200)={{0x2, 0x4e20, @multicast1}, {0x6, @random="796355f35b1b"}, 0x0, {0x2, 0x4e21, @local}, 'ifb0\x00'}) tkill(r2, 0x1000000000016) 10:10:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:semanage_store_t:s0\x00', 0x26, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) 10:10:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000100)="20aaace31e0f1ed94be523a88318c04e4d7d9f9e8b9e5f31c9999a6ce6a4ef835d0cf79585de8c71e523d27ca566dcbd3d779eb2e8ef40ed08bca30e5893b2b2e5854c8b607987c68176d215268d057771064adb9fa7846ea7d76faf78d8f6da9c460a2334b4f2082d0f29a264b48efb0332f194184de9b5945a1d217ad8463c68ed9fc2a535a3c922db92497312e761951df04a6e005c3c3698a0edd1a232eae682bd1c", &(0x7f00000001c0)=""/222}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 710.643214][T11863] usb 6-1: device descriptor read/64, error 18 [ 710.679167][T21405] openvswitch: netlink: IP tunnel dst address not specified [ 710.763082][T11863] usb usb6-port1: attempt power cycle [ 710.982261][T11866] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 711.222212][T11866] usb 2-1: Using ep0 maxpacket: 8 [ 711.342315][T11866] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 711.350612][T11866] usb 2-1: config 0 has no interface number 0 [ 711.357017][T11866] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 711.366881][T11866] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 711.378023][T11866] usb 2-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 711.462821][T11866] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 711.472242][T11866] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 711.480395][T11866] usb 2-1: Product: syz [ 711.485668][T11863] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 711.494111][T11866] usb 2-1: config 0 descriptor?? 10:10:42 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) tkill(r1, 0x3c) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)={0x2}) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000180)=0x10) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x7) 10:10:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x9, 0x0, 0x8, 0x9, 0x1a, 0xa, 0x2, 0x3, 0x4, 0x0, 0x9, 0xffffffff}) 10:10:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:10:42 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x100, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xc75c, 0x81, 0x4, 0xfffffffc, 0x6}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x2, 0x4}, &(0x7f0000000140)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair(0x18, 0x1, 0x8, &(0x7f0000000180)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'vat\x00\x00\x01\x00\x00\x00\x00\xa8#\x00', 0x43732e539841ef18}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) close(r3) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) [ 711.764330][T11863] usb 6-1: device descriptor read/64, error 18 [ 711.828025][T21426] binder: 21422:21426 ioctl c018620c 20000100 returned -1 [ 711.830011][T21430] openvswitch: netlink: IP tunnel dst address not specified [ 711.857949][T21435] openvswitch: netlink: IP tunnel dst address not specified [ 711.895689][T11866] usb 2-1: USB disconnect, device number 37 10:10:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2a, 0x91, 0x13, 0x8, 0x1908, 0x1315, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2d, 0x7f, 0xab, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "ee90ef2bb25cda"}]}}]}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) [ 711.948962][T21432] Unknown ioctl 1074025674 [ 711.964642][T21432] Unknown ioctl 25648 [ 711.989979][T21432] Unknown ioctl 1074025674 [ 712.001165][T21490] Unknown ioctl 25648 10:10:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x93, 0x10001) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x2, 0x4043, 0x1, 0x5, 0x8, 0x3, 0x1}}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x401, 0x800) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:10:43 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000e665746800cc000018000200140001000000000000000010000000000000000000007bf5222f5ca762a05171d8983591dcde0a7b4e60da090514077e52d5ada23f6c871e37b16ec4b9515e4f2a01b04f0d275a0a3229c7cf88bc1cccd763fc9fdde78e59cef5265890cf490335ce3db0", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) accept4(r3, 0x0, &(0x7f0000000080), 0x80000) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) socket$inet6(0xa, 0x3, 0x6) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x1ff}, 0x0, 0x0) 10:10:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{0x0, 0x2a6}, {0x0, 0xfffffffffffffe48}, {0x0}, {&(0x7f0000000040)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0xfffffffffffffe5f}], 0x1121, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x488b83) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000100)={'security\x00'}, &(0x7f0000000080)=0x54) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xce, 0x44003) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000001c0)=""/67) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 712.196369][T21547] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 712.312726][ T4122] usb 1-1: new high-speed USB device number 42 using dummy_hcd 10:10:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x207, 0xffff, 0xfffffff7, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x8, 0xfffd}, &(0x7f0000000180)=0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 712.552380][ T4122] usb 1-1: Using ep0 maxpacket: 8 [ 712.672683][ T4122] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 238 [ 712.685926][ T4122] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 712.696613][ T4122] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 712.705785][ T4122] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.715747][ T4122] usb 1-1: config 0 descriptor?? [ 712.754948][ T4122] usb-storage 1-1:0.0: USB Mass Storage device detected [ 712.766990][ T4122] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 712.955762][T21526] openvswitch: netlink: IP tunnel dst address not specified [ 712.965258][T11866] usb 1-1: USB disconnect, device number 42 [ 712.998087][T21564] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 10:10:44 executing program 2: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x202000, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa7000000000000070200f0fff48a6a72bbb7f39fb6aa0dccf8ffffff79a4f0ff00000000b7060000a2e89ee86d640500000000006604000000ffffffd6040000ffffff80b7040000100000206a0a00fe0000005d46a5de002e000000a000000021865bfa27d641da6d967a9211f1286784f52b273eae54191e78af81324645ac58ab89c9643a2c688a2e24c9955a03968a9012e29e7885a8deb557012e0edb62b920b8f71190f6af7903d2434e812383b1a9f5916bcd386d0b8996b89e6bf2f46910274818aac73cc908bd2bfa4ec3a16c61f6970de950cb767f7b2f68d1b1cd0e5d26e1d485d706d2179d11c9dea3fbadb7a68f7a0b43d2750f1e0d3cd0c3113908750501a8f00e5e22a97bfeb9d6b92ded912c22e61e362de55cdcfd095362f164aadfa539c3e1c4dffab85a647d038ab58329e3afeea0756f5970e58e233c0615e5ea1f5fd1f9ff0c6787fb1f3d7077f823c8a973602a"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) 10:10:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x2, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x400001f4) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0287000902007d182ee8b29ef3686fef"], 0x10}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000100)=0x4, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x42402240}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x34aefdfa9694eff8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:10:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:10:44 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) r3 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r3}], 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) r4 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r4}], 0x1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r5 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r5}], 0x1, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r8) getpgid(r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r11, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r11, 0x10, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$TIOCGPGRP(r14, 0x540f, &(0x7f0000000140)) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r15, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r15, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r16) r17 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r17, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r17, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r18) r19 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r19, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r19, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r20) r21 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r21, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r21, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r22) r23 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r23, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r23, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r24) setpgid(r8, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r25 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r25, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r25, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r26) r27 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r27, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r27, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r28) prctl$PR_SET_PTRACER(0x59616d61, r28) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r29 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r29, 0x0, 0x0) tkill(r29, 0x3c) ptrace$cont(0x18, r29, 0x0, 0x0) ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r29, 0x8, 0x0) 10:10:44 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x83) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x23, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xfffffffffffffdb9) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) [ 713.742532][T11866] usb 1-1: new high-speed USB device number 43 using dummy_hcd 10:10:44 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x6, &(0x7f0000000100)="64eb18450b83c1558bb6b0ffb819ebdfaeb5c4e0d8a30d8a044a0a052f28ce6715740a14398415cb404065bd4d239fc47c56fbf032c3fcc014dd326f78b65e9effacdf4d662e378552bd2ec45370553df44b73481cdbf6e244556dab7aa6b01d9d95e089b6b7371758b5eb5229e9e04a52678d0c35a8848ce7a34dc6a94cbb9231af28ee92fbdcf52330ff61b78ba781609dbe2790b5605917b954bb5139f1fe8a269f45526dd4fe88cd2a9e50") ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:10:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000400)=0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r3, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000380)="18", 0x1}]) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffffffffffffffac) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0, r7, 0x1, 0x1, 0x3f00}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r7, 0x1a}}, 0x10) dup3(r1, r2, 0x0) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000340)={0x6, 0x9, 0x1, "f1181f096669541192e8aaedf4fc55152b8e64fcdad22440fff6e7498fe3c0ab", 0x38416761}) io_destroy(r3) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x10000, 0x0) 10:10:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x32, 0x119, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1003, @ipv4=@multicast2}, @nested={0xb2, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10040812}, 0x0) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040), 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffea6}}], 0x549, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) setsockopt$inet6_tcp_buf(r3, 0x6, 0xe, &(0x7f00000000c0)="f79ce6326b273b77819360380396354d9e239093f8ba979a0f05f32d020865c85a44b961edb7e9b10a7b61d5ad5435746875844e115b82fd61f70edab8d614", 0x3f) 10:10:45 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="128100007a0715206d0492084cc00000000109021200010000000009041a0000af0db200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 10:10:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r2) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x3, 0x4, 0x683a, 0x1, r2}) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r4}], 0x1, 0x0) close(r4) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) keyctl$join(0x1, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0xfffffffffffffffd, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) [ 714.206019][T21598] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:10:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a89907853639", 0x1}], 0x4, 0xc) ptrace$setopts(0x4206, r0, 0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x91, 0x0, 0xfffffffffffffdcc}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 714.295514][T21603] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:10:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 714.472272][T11863] usb 2-1: new high-speed USB device number 38 using dummy_hcd 10:10:45 executing program 2: eventfd(0x9981) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)=0x1) socket$tipc(0x1e, 0x5, 0x0) gettid() setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xe5, @empty, 0x7}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x8, @loopback}, @in6={0xa, 0x4e24, 0x7f, @loopback, 0x600000}], 0x64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x8403, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000140)='security.SMACK64\x00', &(0x7f0000000180)='\x00', 0x1, 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000001c0)=0x3, 0x3, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x8, 0x101800) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000240)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='smaps\x00') setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x0, [{}]}, 0x88) prctl$PR_GET_NO_NEW_PRIVS(0x27) r4 = accept$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000480)={0x9, 0xff, 0x2, 0x5, 0x2, [{0x3f, 0x800, 0x7fff}, {0x8, 0x1ff, 0x1, 0x0, 0x0, 0x2800}]}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r5, 0x322, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbbc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x4000) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x84000, 0x0) ioctl$TIOCSRS485(r6, 0x542f, &(0x7f00000006c0)={0x2, 0x4, 0x56a}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)={0x0, 0x0, 0x1, [0x5b27]}, &(0x7f0000000740)=0xa) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000780)={r8, 0x9, 0x3, 0x1}, 0x10) r9 = syz_open_dev$sndpcmc(&(0x7f00000007c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0xb0004) getresgid(&(0x7f0000000800)=0x0, &(0x7f0000000840), &(0x7f0000000880)) ioctl$TUNSETGROUP(r9, 0x400454ce, r10) lsetxattr$security_smack_entry(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='security.SMACK64MMAP\x00', &(0x7f0000000940)='/dev/snd/pcmC#D#c\x00', 0x12, 0x2) llistxattr(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=""/160, 0xa0) 10:10:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000380)=""/232) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) r3 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="572598cb3977b24fbf6bf41c893590526f924cb28d1c08", 0x17, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r3, 0x88, 0x68}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'cbcmac-aes-ce\x00'}}, &(0x7f0000000240)="1eb8a34661e52d203a145e42ec4d7cfc0572be6b380c257f714c22ab7662a2e4c1a65807d7c67e532e5acc4d6700f25c6c7d59bd953e3a1bd88546c187ecfcd7f256715758dcddc0a873377a4e23813efe0d1226cf8e4165c21426e9b34adf68eff784a92625319f0a3a72eadbfde157d641cace30948d5b26b859196407e3b1718099779263c601", &(0x7f0000000300)=""/104) [ 714.618754][T21621] openvswitch: netlink: IP tunnel dst address not specified 10:10:45 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000440)=@gcm_128={{0x304}, "7491ff595ec84d44", "05acea5e3b60c5e6d609c3611edf6a0a", "ea2ec248", "317c41856c293b66"}, 0x28) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0xc0984124, 0x100000000000000) open_by_handle_at(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="ad000000a2d1275c785ab92d07051affa5c91f7eec7481f2dc30f491a460a9c6ab66df1893ba59f013b0e92e4546c89d08f7995584005979fe9eb94947d2fe9dca76c7dcea501c81094e56bb77959a8d450518347970ea1395966e180f23c4a85de82c50bc1a4d2a9ac296fa831e6a8b60fe458a0c8e6767ef45f5238ce6439282c55ff52f3043a9ffcc4c92c6e6b0e1ca4535538628a00bb7cac34def"], 0x200000) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r4, 0xeb, '\x00r%', "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"}}, 0x110) ioctl$UI_DEV_DESTROY(r0, 0x5502) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)=0x7fff) socketpair(0x1, 0x1, 0x2e, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f00000003c0)=')security\x00', 0xa) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000400)=0x2, 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) [ 714.664545][T21621] openvswitch: netlink: IP tunnel dst address not specified 10:10:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x5}, {0x0}, {0x0}, {&(0x7f0000000040)="a48b12f728db4b2b5d2f2fbaaf4cf9f43b113665000000000000000000ce0000", 0x20}], 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r7) ptrace$setopts(0x72e0f8e6f527dddc, r7, 0x0, 0x37c5a3d1a8845d48) tkill(r0, 0x3c) r8 = getuid() ioprio_get$uid(0x3, r8) r9 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000180)=0xe8) sendmsg$nl_netfilter(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0xf, 0xedda49e3d0c4e517, 0x6c9bf871e6e54ece, 0x70bd2c, 0x25dfdbfb, {0x5, 0x0, 0x2}, [@typed={0x4, 0x76}, @typed={0x8, 0x2, @uid=r8}, @typed={0x8, 0x63, @uid=r10}, @nested={0x18, 0x2e, [@typed={0xc, 0x34, @u64=0x80}, @typed={0x8, 0x69, @pid=0xffffffffffffffff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x2800) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x20000000000, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$TCSBRK(r13, 0x5409, 0x10001) [ 714.764210][T11863] usb 2-1: device descriptor read/64, error 18 10:10:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24c70000330019010000000000ffd38d9b0c0001000800100004000600"], 0x24}}, 0x0) [ 714.862194][T21628] IPVS: ftp: loaded support on port[0] = 21 10:10:45 executing program 2: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000500)={0x2b1, &(0x7f0000000480)}) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xa87d}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dsp\x00', 0x420040, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000540)=0x1) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x55f0, 0x400100) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNGETIFF(r2, 0x800454d2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x106400) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) r4 = socket(0x1e, 0x1, 0x0) sendmsg(r4, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) setxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000440)='./file0\x00', 0x8, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="9f191f530db28925bd0d3f5122871cf0febdb45eec34eaa0a9ea387c7512893a60ac022b78e36628d1a1f678d89dbb9f5656c73be088a3dac5980ed15acdddfc402a589e00ba7b02c44995aafafad1e54c752778a6d8ac2e98b2ce29abff222a9c3f86ef70", 0x65) 10:10:46 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x60000, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000080), &(0x7f0000000200)=""/128, 0x80}) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000100)) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000140)=0x3, 0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0xffffffffffffffff, 0x1) 10:10:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 715.182172][T11863] usb 2-1: device descriptor read/64, error 18 [ 715.415194][T21647] IPVS: ftp: loaded support on port[0] = 21 [ 715.472334][T11863] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 715.742212][T11863] usb 2-1: device descriptor read/64, error 18 [ 716.142235][T11863] usb 2-1: device descriptor read/64, error 18 [ 716.264809][T11863] usb usb2-port1: attempt power cycle [ 717.002209][T11863] usb 2-1: new high-speed USB device number 40 using dummy_hcd 10:10:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r5 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000340)={@dev, @local, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000740)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockname$packet(r11, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x14) r13 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) getpeername$packet(r2, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000006980)={0x0, @initdev, @loopback}, &(0x7f00000069c0)=0xc) getsockname(r1, &(0x7f0000006c80)=@hci={0x1f, 0x0}, &(0x7f0000006d00)=0x80) r18 = socket(0x11, 0x800000003, 0x0) bind(r18, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r18, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r19, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) r20 = socket(0x11, 0x800000003, 0x0) bind(r20, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r20, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r21, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000006e00)={@local, 0x0}, &(0x7f0000006e40)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000007200)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000007300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000007340)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000007440)=0xe8) r25 = socket(0x11, 0x800000003, 0x0) bind(r25, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r25, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r26, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000007b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x7000a00}, 0xc, &(0x7f0000007b00)={&(0x7f0000007480)={0x674, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r7}, {0x1dc, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0xffff, 0x0, 0x69, 0x2}, {0x7, 0xb0, 0xaf, 0x3}, {0x51f, 0x0, 0x5, 0x10001}, {0x5, 0x7, 0x3f, 0xffffffff}, {0x9, 0x1, 0x3, 0x200}, {0x9, 0x5c, 0x20, 0x1}, {0x3, 0x8, 0x2, 0x7fffffff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffa}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r14}, {0x1f4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xac27}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2116effe}}}]}}, {{0x8, 0x1, r19}, {0x78, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}]}}, {{0x8, 0x1, r22}, {0x170, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r23}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r26}}, {0x8}}}]}}]}, 0x674}, 0x1, 0x0, 0x0, 0x18000}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x33, 0x119, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 10:10:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{0x0}, {0x0, 0xfffffe82}, {0x0}, {&(0x7f0000000100)="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", 0xf3}], 0x81, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) prctl$PR_SVE_GET_VL(0x33, 0xa055) ptrace$cont(0x7, 0x0, 0x0, 0x0) 10:10:48 executing program 5: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000340000000000069078ac1414bbac1414bb00004e20", @ANYRES32=0x41424344, @ANYRES32=0x42424242, @ANYBLOB="800200009078000008960000bfe6f7bd65b182034cac968b6d1c7a1a76702e77fb30ca9b518367694122e663a05eff65179a42334b6a621b8e38481954a3170ebd65b7a8cf70bd107fdd10580124977938394a6fe8cb66f9c3d6efd737be90ed94bee78843f0f3e452815b88ebfa169df20455f941597b47afcccef76b956e6c8fe8506636364a08a9457a180f363ea4342a3754b2659300e85a60"], 0x0) 10:10:48 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000080)={'\x00', './file0'}, 0x442) 10:10:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:10:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000000)={0x6, 0x7, 0x5, 0xd}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000270000002300066cfb05386801e5a91be5a58f682c36f5c8aa9b66ceba8b28b0"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 717.272202][T11863] usb 2-1: device descriptor read/64, error 18 10:10:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x800001000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") syz_open_dev$hidraw(&(0x7f0000000580)='/dev/hidraw#\x00', 0xff0000, 0x20000) unshare(0x42000000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="50030000", @ANYRES16=r1, @ANYBLOB="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"], 0x350}, 0x1, 0x0, 0x0, 0x40848}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="30000001030000000000000000000000040000000000f75a2e29f24da9800011a36d30766d2e6594d56aac9b1308598c"], 0x30) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) 10:10:48 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000180)="fff61795ebfba6b8238bc1ead79ec4884cc44818d7ec5feb4c796bca4668851a5749c0b6b467bae01cc471636828909697b7cffde8467e3062496b141506829437f8e4852b5c8ab20e29ba7bf58ad038f4d06e96b112d05a405d9bc70fbac68e52e725e4effa812199a7aa5b5e324ca0b035c031a99e0436b7ff191b827eb39a62d60be80f3919043127337dc9485fd631c6a0456344c2f30ea3fb91756c82d239f55cce0bb7564f60683deefed2fbe15cbbec55a300d46d8942affd0ac55ae5742d002a0bceeb", 0xc7) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r3}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e23, 0x1, @remote, 0xb6}}, [0xf7, 0xaa44, 0xfffffffffffffffc, 0x4, 0x100, 0x5444, 0x9, 0xfffffffffffff821, 0x9, 0x5, 0x6, 0x9, 0x4, 0x80, 0x6]}, &(0x7f0000000000)=0x100) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008b33ea08eb03376090cd595eeea5e4632402002d4a00007f0109021200014000"], 0x0) [ 717.567958][T21746] IPVS: ftp: loaded support on port[0] = 21 10:10:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r5) write$cgroup_pid(r3, &(0x7f0000000040)=r5, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 10:10:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, 0x33, 0x119, 0xfffffffd, 0x0, {0x2}, [@nested={0x2c, 0x75, [@typed={0x18, 0x22, @str=')trustedcpuset+em0\x9f\x00'}, @typed={0x8, 0x64, @ipv4=@rand_addr=0xffffff28}, @typed={0x8, 0x4e, @uid=r3}]}, @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x4c}}, 0x0) 10:10:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400200, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @dev}]}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000140)={0x3, 0x3, 0x3, 0x8000, 'syz0\x00', 0x8}) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 717.863311][T11863] usb 2-1: device descriptor read/64, error -71 10:10:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 717.933897][T21785] openvswitch: netlink: IP tunnel dst address not specified [ 717.946657][ T12] usb 3-1: new high-speed USB device number 20 using dummy_hcd 10:10:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000033041901000000000000000002000000ffd38d9b38bd3188153040bf343a92c65ccc11005f0000"], 0x2c}}, 0x0) r3 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000080)=0x2e8, 0x4) 10:10:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x331}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) [ 718.132225][T11863] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 718.192520][ T12] usb 3-1: Using ep0 maxpacket: 8 10:10:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000330019fa000000000000520002000000ffd38d9b0c0041000800100004000600b584ed31316f7ac0147ffd449a5358ff4e50f0adc2f838b0a40e2fe72195dacf890f382aa89c709a5035e0b314513133d32ef6ec916dc1bb9468f10c7d6424f8f3a2a8da716b66783d2dc8c8d69973c68f42525a8d4aab6a72a77f2b9795b6108b128c5c6d1f821cf71f4110e7d80f78c8e01c3dc19a65a26116bdd24e2efe88bd9f005a89fde18c0739bab49eafadb0879397d968ff3f569dee99d466bb8d2f7297e178d8df2326d56c3a1fa18c4e4edd7be7bfcc15434a4e2a3edfe30db9c7fdc1ea36c1c1b37b"], 0x24}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x11, 0x800, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x200280, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0x2000, 0x1000, &(0x7f0000000fc0)=""/4096}, {0x4000, 0x2d, &(0x7f0000000180)=""/45}]}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@ipv4={[], [], @loopback}, 0x7f, r7}) [ 718.232629][ T12] usb 3-1: too many configurations: 165, using maximum allowed: 8 [ 718.352593][ T12] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 718.360394][ T12] usb 3-1: can't read configurations, error -61 10:10:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() sched_setparam(r1, &(0x7f00000003c0)=0x3ff00) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000005c40), 0x0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, r4, 0xdd42ddecb798d42f, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21021c08}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x23c, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff4d1b}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0xfffffdd2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0xfffffffffffffdaa, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x77}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x51}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x949}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x686}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbfe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa8}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x4}]}, 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x1) [ 718.412196][T11863] usb 2-1: Using ep0 maxpacket: 8 10:10:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x13, &(0x7f0000000080)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) [ 718.552653][T11863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.562189][ T12] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 718.563767][T11863] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 718.584235][T11863] usb 2-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 718.593556][T11863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.639568][T21811] openvswitch: netlink: IP tunnel dst address not specified [ 718.669068][T11863] usb 2-1: config 0 descriptor?? [ 718.812668][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 718.852414][ T12] usb 3-1: too many configurations: 165, using maximum allowed: 8 [ 718.972763][ T12] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 718.980459][ T12] usb 3-1: can't read configurations, error -61 [ 718.988140][ T12] usb usb3-port1: attempt power cycle [ 719.173693][T11863] hid (null): unknown global tag 0xe [ 719.179083][T11863] hid (null): nested delimiters [ 719.187573][T11863] hid-generic 0003:1E5E:0313.000A: unknown main item tag 0x2 [ 719.195343][T11863] hid-generic 0003:1E5E:0313.000A: unknown main item tag 0x0 [ 719.203066][T11863] hid-generic 0003:1E5E:0313.000A: unknown global tag 0xe [ 719.210349][T11863] hid-generic 0003:1E5E:0313.000A: item 0 1 1 14 parsing failed [ 719.218701][T11863] hid-generic: probe of 0003:1E5E:0313.000A failed with error -22 [ 719.389337][T11863] usb 2-1: USB disconnect, device number 41 [ 719.702260][ T12] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 719.942213][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 719.982496][ T12] usb 3-1: too many configurations: 165, using maximum allowed: 8 [ 720.102462][ T12] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 720.110118][ T12] usb 3-1: can't read configurations, error -61 [ 720.172128][T11863] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 720.262262][ T12] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 720.412191][T11863] usb 2-1: Using ep0 maxpacket: 8 [ 720.502210][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 720.532204][T11863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.543421][T11863] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 720.552492][ T12] usb 3-1: too many configurations: 165, using maximum allowed: 8 [ 720.556599][T11863] usb 2-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 720.573443][T11863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.583722][T11863] usb 2-1: config 0 descriptor?? [ 720.742353][ T12] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 720.750062][ T12] usb 3-1: can't read configurations, error -71 [ 720.757940][ T12] usb usb3-port1: unable to enumerate USB device [ 720.894065][T11863] hid (null): unknown global tag 0xe [ 720.899453][T11863] hid (null): nested delimiters [ 720.919022][T11863] hid-generic 0003:1E5E:0313.000B: unknown main item tag 0x2 [ 720.926780][T11863] hid-generic 0003:1E5E:0313.000B: unknown main item tag 0x0 [ 720.934535][T11863] hid-generic 0003:1E5E:0313.000B: unknown global tag 0xe 10:10:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:10:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) r1 = getpid() ptrace$setopts(0x4206, r1, 0xfffffffffffffffc, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000080)={0x4}, 0x4) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r6) ptrace$setregs(0x1a, r6, 0x8000, &(0x7f0000000100)="3f017042bdc4722f0212b178f8a3148ef3fcf6f8b6b87fd1691ed26900a7452d0fe85ca939d3938307aa1b5639fbeecd74ab973b44cabb4f0438fb37fbaa8c30e8e33c76c99e87b2081d564fa6b02b9c89158fe720d6bea9d52cf8bd39562973c2a8f97bc64a57df4f5815ef9ed012a819302ec993f60b40321d84264f751f6eb4d706e3a982ffa5938c9dda4a1bff9ca0e4b992c4ce98459759e0fa56bf5dd0e0eb51a3baf3a8741d31a79f0552d15eaf86b1cbfd3262f341aaf44a0a52b5f354fe4651d394f963f9f6a74ee0498e2c95f71f1823f8ab944783b51730aee829e8f2207e05") tkill(r0, 0x3c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r8) ptrace$cont(0x9, r8, 0x6, 0x76) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ptrace$cont(0x20, r6, 0x80, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0x1000) 10:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getuid() ioprio_get$uid(0x3, r3) r4 = getuid() ioprio_get$uid(0x3, r4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000007300220300000000000000000d00000000008f00", @ANYRES32=r4, @ANYBLOB="9b140aab392fb97ed77bb8b995ccd000000000000000002f9d8c56e78b3c1ad0479fcb50a64c55ab32d3fc4200b687bb93b9cf49687369115ebccb716025e2d4ace17b7e08cb01d7a5020522148b4ccf7e7fbf471605758e77bb5823a3c313caea4f2e673a04a020f00a14ab05ee4f805a8017ba3a64"], 0x24}}, 0x0) write$P9_RREAD(r2, &(0x7f0000000100)={0xdd, 0x75, 0x1, {0xd2, "c18a90c79cc3dcd95208ba349f83a484f9ad3692e117553bed44ea0a086d814ebdccd087477b9fc6720c761c23238348d7bd3dcdc2fb542555758d6a66ebd05305cc1a42e265a74d033f672db7e4d18ad89287dffa51fbf1b375c6dd05d82752f6ba044380a3ce9e4e65a06b056e89dad4499e84a108c35499c98b83de61eacc69880600aa6593868ae25e6c4b269b3477dadde8d15437b0a116391a81440f7413caee844028a93446ba1ac4250d0fe4fced7450a4db9f8e64c84066a5553b0ade15f6a6fe25fd9443f576723d47b3dfeeaa"}}, 0xdd) write$P9_RCLUNK(r2, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) 10:10:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfffe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0xfa}}}}}}}]}}, 0x0) 10:10:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0xff, @multicast2, 0x4e20, 0x0, 'wlc\x00', 0x2, 0x81}, 0x2c) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0xe30, 0x46, 0x7}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x1, @local}}, [0x20, 0x0, 0x9, 0x6, 0x40, 0xffffffffffffff00, 0x6, 0x471, 0x10001, 0x4, 0x4, 0x8d, 0x4, 0x8, 0x8]}, &(0x7f0000000440)=0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000002100000127bd7000ffdbdf2502341408030000000f0000000800012008000f000000000008000200e000000108000200a91414aa"], 0x1}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000014c0)=ANY=[@ANYBLOB="c40f0000000000010000000000000000b40f00b715d24c8b50c4320ef3b64471ff00b9009c05bfdf91a5c2c439ed8b11fe06a2e52ac611123e7a83c6"], 0x1}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000180)="bb0e8ce57e56b80a26ab4ede4b78b5d0610d3943ec1c1de93ee5c2412135cadd95629366d473f4de2d21ce5d2657dbf68017aa89ded54842ecca52ec084b589a8e10cfe7a916a33a4dd036592a1160b3cea6ae5c835a04f8ef321fd0ce6e653bbe87a591ce24f08120b2330bffeeff7bb96db8ff2dcab1859cde308e797cc4abfb7735f14b952b30c871a5c58d007b56f0f80c876042ccfa180925328b0101471e7059db425dc76f0ae59a8fc6bb8f28cb18") setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x400}, 0x2c) 10:10:52 executing program 2: r0 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) r2 = eventfd2(0x0, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000100)={0x18, 0xd, 0x2, {{0x49, 0x1, 0x7}, 0x100}}, 0x18) poll(&(0x7f00000002c0)=[{r2}], 0x1, 0x0) syz_usb_connect$uac1(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYBLOB="769abf9d38c9b8693da9eba8081aa2e1233dcd680ea4766a5f9b8d99c6ad6c3b2c5dfc7662c1bd5329af1633232fe895c0d3c5c698f27eba0e13edc6c69ebfb427e3c9e1d198027daf4c1b7c4d2184682f131b3aa75f2fbb32b8061f569b77aac8d208f355b6560960bf0a3c4d", @ANYRES16=0x0], @ANYRESHEX, @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR, @ANYRES16=r2], @ANYRESDEC, @ANYBLOB="49f2ee9fb2276a4436fe116e180d0b6775823ffb9fd342fc3f0989107194eaad1b8c811d792603366d0ef888b94f3cf62944402066925f5ccaec657d3c33d32c2b959612eebe7be2f2f1b461eead036c7d8938d6c5b46a0ba8ab9d133f2f325d9d8c46496e164c2c7d025c4c4352f484b8ec57edee8021eaba5c90bc8279a616a2083bc4ca8fb9cce0"]], 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) [ 720.941774][T11863] hid-generic 0003:1E5E:0313.000B: item 0 1 1 14 parsing failed [ 720.950021][T11863] hid-generic: probe of 0003:1E5E:0313.000B failed with error -22 [ 721.012796][T11863] usb 2-1: USB disconnect, device number 42 10:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000033001901000000000000000002000000f6030000000c00010008001000040006"], 0x24}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='trustedeth1jeth0@,nodev\\$]}posix_acl_accessvboxnet1\\,^ppp1:%vboxnet0\\$.\x00', r5}, 0x10) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000180)=0x4) 10:10:52 executing program 1: setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64IP\x04UT\x00', &(0x7f0000000100)='+\x00', 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'bond0\x00\xe1\x00\n\x00!!\x0f\xdb\x00', @ifru_names='bond_slave_1\x00'}) 10:10:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@remote, @multicast2}, 0x8) r7 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r7}], 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r9) fcntl$setown(r7, 0x8, r9) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCFLSH(r6, 0x540b, 0xffffffff7fffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r10 = syz_open_pts(r3, 0x108000) ioctl$TIOCMGET(r10, 0x5415, &(0x7f0000000040)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x2) [ 721.225919][T21842] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 721.263287][T21846] bond0: (slave bond_slave_1): Releasing backup interface 10:10:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00', &(0x7f0000000140)='mime_type\x00', 0xa, 0x2) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r2) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 721.283090][T21850] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 721.323326][ T12] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 721.410106][T21855] ptrace attach of "/root/syz-executor.3"[12052] was attempted by "/root/syz-executor.3"[21855] [ 721.433336][T21851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 10:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 10:10:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x509e80, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 721.467732][T21846] bond0: (slave bond_slave_1): Releasing backup interface [ 721.574270][ T12] usb 6-1: Using ep0 maxpacket: 16 [ 721.582853][T21866] openvswitch: netlink: IP tunnel dst address not specified 10:10:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:10:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0xe000000b, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 721.677414][T21851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.691246][T21860] openvswitch: netlink: IP tunnel dst address not specified [ 721.692816][ T12] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.709739][ T12] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 721.719759][ T12] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 10:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7fff, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)={0x1}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x101c, 0x33, 0x119, 0x0, 0x25dfdbfc, {0x2}, [@generic="ffd38d9b", @nested={0x1004, 0x1, [@generic="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"]}]}, 0x101c}}, 0x0) [ 721.902827][ T12] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 721.913799][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.921890][ T12] usb 6-1: Product: syz [ 721.926367][ T12] usb 6-1: Manufacturer: syz [ 721.931067][ T12] usb 6-1: SerialNumber: syz [ 722.232865][ T12] cdc_ncm 6-1:1.0: bind() failure [ 722.242762][ T12] cdc_ncm 6-1:1.1: bind() failure [ 722.252867][ T12] usb 6-1: USB disconnect, device number 28 [ 722.962278][T11866] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 723.202314][T11866] usb 6-1: Using ep0 maxpacket: 16 [ 723.322383][T11866] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.333940][T11866] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 723.343877][T11866] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 723.512388][T11866] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 723.521673][T11866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.529923][T11866] usb 6-1: Product: syz [ 723.534290][T11866] usb 6-1: Manufacturer: syz [ 723.538960][T11866] usb 6-1: SerialNumber: syz [ 723.812559][T11866] cdc_ncm 6-1:1.0: bind() failure [ 723.821733][T11866] cdc_ncm 6-1:1.1: bind() failure [ 723.832159][T11866] usb 6-1: USB disconnect, device number 29 10:10:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x9, 0x802041) setsockopt$inet_dccp_buf(r0, 0x21, 0x14, &(0x7f0000000180), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x299}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4000000000000003) connect$caif(0xffffffffffffffff, &(0x7f0000000140)=@dgm={0x25, 0x3, 0xff}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9091, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x803, 0x0, 0x0, 0x800000000006, 0x3, 0x8}, 0x0, 0x0, r3, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:10:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r3, 0x5501) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000040)={0x1, 0x2000}) 10:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1024, 0x10, 0x318, 0x0, 0x0, {0x2}, [@nested={0x1004, 0x96, [@generic="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"]}, @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x1024}}, 0x0) 10:10:55 executing program 2: syz_usb_connect(0x7, 0x47, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xa6, 0x59, 0x8, 0x2040, 0x5200, 0xa3ab, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4e, 0x0, 0x0, 0x85, 0x2c, 0x19}}]}}]}}, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x1, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x81, 0x20000) ioctl$RTC_PIE_OFF(r1, 0x7006) 10:10:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe735"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:10:55 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="737461636b20263a0ad09cd372c2ef5505db8ab24e300d5944df8f346497da98f0b453ad6d8a2fcb127375b2ae8bfc030e9a230514289d300b06774494f1ee8ad5379dfed204dd4ee8d1bb83d594cc2086c630750d4c2e9af281fa937d1b0100008000000000baec736202c183a1a0689c60948f3cd9c5f318fe02a98cbefad7c7e6f3f4cd05f5f1e0d23b6e3d245fc76153e613ae187222e4d5f2352378cf0443fcd24b9a4c42931dc0bc58c3bf53ca2b0f34d84557f9ba4d79a9e877734d42aa8163a9d670026ea166ae325820354f616deb57144f837f5839b0b3901c315f72c8733dc6b5"], 0xe6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r6}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x54, 0xc300, 0x6, 0x5, r6}, &(0x7f0000000080)=0x10) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6000, 0x0) ioctl$HIDIOCINITREPORT(r7, 0x4805, 0x0) [ 724.152348][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 724.152398][ T30] audit: type=1400 audit(1571998255.198:31): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=263A0AD09CD372C2EF5505DB8AB24E300D5944DF8F346497DA98F0B453AD6D8A2FCB127375B2AE8BFC030E9A230514289D300B06774494F1EE8AD5379DFED204DD4EE8D1BB83D594CC2086C630750D4C2E9AF281FA937D1B01 pid=21900 comm="syz-executor.5" 10:10:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f0000000080)={0x3, 0x101, 0xb421}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003300180140c8484faaeb42000000000000000003000000"], 0x14}}, 0x0) [ 724.301730][ T30] audit: type=1400 audit(1571998255.298:32): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=263A0AD09CD372C2EF5505DB8AB24E300D5944DF8F346497DA98F0B453AD6D8A2FCB127375B2AE8BFC030E9A230514289D300B06774494F1EE8AD5379DFED204DD4EE8D1BB83D594CC2086C630750D4C2E9AF281FA937D1B01 pid=21900 comm="syz-executor.5" 10:10:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x6, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_REGISTER(r4, 0xc0385650, &(0x7f0000000040)={{0x2, @name="014fc3d8084cc0a0480b22f57f1b7b175a32fa1dc9a17811a1f16cb38e44270c"}, 0x8, 0x9, 0x401}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@setneightbl={0x24, 0x43, 0x100, 0x70bd28, 0x25dfdbfe, {0x1e266ce994ab2b1e}, [@NDTA_THRESH1={0x8, 0x2, 0xfffffffd}, @NDTA_THRESH2={0x3be, 0x3, 0x3f}]}, 0x24}}, 0x0) 10:10:55 executing program 1: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000001380)) syz_usb_connect(0x0, 0x1340, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xaf, 0xdf, 0x44, 0x20, 0xc0b, 0xa109, 0x9da1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x132e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa4, 0x0, 0x8, 0xbf, 0x61, 0xd8, 0x2, [], [{{0x9, 0x5, 0xe, 0x1c, 0xee, 0xfe, 0x4, 0x4b, [@generic={0xde, 0xc, "1f05a404c97680b63576e2d4e47eebeb450aa461fdad2bb985291d86037a5a6c7be2827496066ae8cc645d3cfd539b4a3aabd4d88487cb234ba37d4cff16775fc03fc2e6d15b3f360b41ebe4cc1c742b7d85fa715cb05dc9de8e65be1b87162ad2be30dad6299fd12182357cb4a121a4b82ac1ce1122340ba1d7b95abc84c3a69cd297bbbbcf0dde6fccbda598267235c370c1d350b49c36e173f9c79fed4a85119cd6e77fcec6a4d80aa651c5876be6ab660f51309db5549de788da45ebcb3b62b9f1dfa0cb7e1005f9f798d52a8dd3bca2267e97b08403182e4b3b"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x126, 0x2, 0x7e, 0x7, [@generic={0xd2, 0x5, "f42629bae5ad35a11de2a02ffb2f9d630cc675320ea5858a06c87a2f05ba82cb1eb9e3cac2dd8e763fe57b1366ec3faf6e400e404f8ee0f5335b33d106b3b6608477054cf996ac342b5c2156999ed3368ebca2dc963ee3edd9d4a587990e2919f5a721c0458dd9dd309d4c8de9ef8715ca354277d793d4833c2c508ed1e7de01e88c0a0ca2bfd81f3dee7a0a302ad58b6682ecb46e5ab75275278080135a6b17f3375a1a184cfa4e1e5c11f253f555cab49363eee026c2003c29e73189ec9d19658c6f312a42ebcd1b620526af08bc51"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x6}]}}, {{0x9, 0x5, 0xf, 0x3, 0x4, 0x1, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x6, 0x6}]}}, {{0x9, 0x5, 0xc, 0x0, 0x203, 0x81, 0x3, 0x7f}}, {{0x9, 0x5, 0x6, 0xf, 0x18f, 0x0, 0x6, 0x3, [@generic={0x1002, 0x19, "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"}]}}, {{0x9, 0x5, 0x82, 0x1, 0x1f6, 0x6, 0x7, 0x25, [@generic={0x32, 0x0, "133d4a9dc8801111d0b9806d10aa2b0187850ee70173b1fc2fd11e727d96853aab4efcfd77cb54a24c8669d280849e3b"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xd0}]}}, {{0x9, 0x5, 0x7, 0x0, 0x1bf, 0x0, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x104, 0x6e, 0x101}, @generic={0xc6, 0x4, "ad60a78cb215851b0f85f8ddd125f6434db84f1f8a0bd6d94c90d2c772b2108d8b1f23e352af46deb97c022804519a3cb9e8c7f98427a21204c22bf10b77356186c645ccffc28d0dafd74eacd6c86cebf748d102aa67b91072de0169c62898cf7c449e4171b564f119b02b2c8346f0f2a793e9d24183b31072d5ec241b20d48c389a3df1be187a34c65efa30e910c95bf1a79f735fb886739a668dc836df24f0b09ac192a628edfd201a070d99b9a1d1697ae2d416bf5479e41b31ba14c1f3bd8ef89cc9"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x21f, 0xc1, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x2}]}}]}}]}}]}}, 0x0) [ 724.355713][ T12] usb 3-1: new high-speed USB device number 24 using dummy_hcd 10:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0x1, @loopback, 0x7c6}, @in6={0xa, 0x4e22, 0x3, @rand_addr="c5b7ea76cd1c64979e53c0496370763a", 0xfffffff9}, @in6={0xa, 0x4e21, 0x9, @rand_addr="b0d4564949fc4e0c5481960efb2abe34", 0x8}, @in6={0xa, 0x4e21, 0x1, @empty}], 0x80) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) 10:10:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b113665", 0x1f}], 0x4, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:10:55 executing program 5: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'yam0\x00', {0x2, 0x4e20, @local}}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x20000, 0x4) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) r3 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r5}], 0x1, 0x0) r6 = dup(r5) ioctl$CAPI_CLR_FLAGS(r6, 0x80044325, &(0x7f0000000180)=0x7) r7 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d77f70a7c0f30f66157a96aae00000000ceb29700", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ff055339b083cbda58b188105829576904e70bfeb59800f97c97644ab8a7"}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x18) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000001300110700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c000100aaaaaaaaaabb00001400030076657468315f746f5f7465616d00000018021600140001001000f2ff00"/64], 0x58}}, 0x0) [ 724.588747][T21923] openvswitch: netlink: IP tunnel dst address not specified [ 724.603214][ T12] usb 3-1: Using ep0 maxpacket: 8 10:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x200, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x210, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) 10:10:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe735"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 724.722732][ T12] usb 3-1: config 0 has an invalid interface number: 78 but max is 0 [ 724.731009][ T12] usb 3-1: config 0 has no interface number 0 [ 724.737407][ T12] usb 3-1: New USB device found, idVendor=2040, idProduct=5200, bcdDevice=a3.ab [ 724.746831][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.772447][T11866] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 724.793418][T21931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 724.858194][ T12] usb 3-1: config 0 descriptor?? [ 725.032361][T11866] usb 2-1: Using ep0 maxpacket: 32 [ 725.122639][ T12] dvb-usb: found a 'Hauppauge Nova-TD Stick (52009)' in cold state, will try to load a firmware [ 725.134336][ T12] usb 3-1: Direct firmware load for dvb-usb-dib0700-1.20.fw failed with error -2 [ 725.143733][ T12] dvb-usb: did not find the firmware file 'dvb-usb-dib0700-1.20.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 725.168104][ T12] usb 3-1: USB disconnect, device number 24 [ 725.202404][T11866] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 725.210731][T11866] usb 2-1: can't read configurations, error -22 [ 725.363423][T11866] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 725.612356][T11866] usb 2-1: Using ep0 maxpacket: 32 [ 725.782226][T11866] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 725.790331][T11866] usb 2-1: can't read configurations, error -22 [ 725.797485][T11866] usb usb2-port1: attempt power cycle [ 725.892224][ T12] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 726.132284][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 726.252408][ T12] usb 3-1: config 0 has an invalid interface number: 78 but max is 0 [ 726.260575][ T12] usb 3-1: config 0 has no interface number 0 [ 726.267019][ T12] usb 3-1: New USB device found, idVendor=2040, idProduct=5200, bcdDevice=a3.ab [ 726.276346][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.286339][ T12] usb 3-1: config 0 descriptor?? [ 726.512228][T11866] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 726.542432][ T12] dvb-usb: found a 'Hauppauge Nova-TD Stick (52009)' in cold state, will try to load a firmware [ 726.554086][ T12] usb 3-1: Direct firmware load for dvb-usb-dib0700-1.20.fw failed with error -2 [ 726.563467][ T12] dvb-usb: did not find the firmware file 'dvb-usb-dib0700-1.20.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 726.581893][ T12] usb 3-1: USB disconnect, device number 25 [ 726.762172][T11866] usb 2-1: Using ep0 maxpacket: 32 [ 726.932313][T11866] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 726.940464][T11866] usb 2-1: can't read configurations, error -22 10:10:58 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x35c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="a69215d66d4a464b71947a54c7887c4b9c8aa5e01353a843034dd0a5ab21aed9cc60a21415057e1531d1176e688c8ad3dad2d727d9483bd4a59d7bc58856ef2f0db4c363e22788c9eeb35a957762178f1d8df427870875dc3ae1560bea768823e9f207efc6ae2b76bb3a3b6be2c2bb34eaebe1ee41377522290c00aba1964d9c63e4a01ed6e491b9e0693ee1f87b56f2bbb722761d2936da993145099514535787a2a123fc54a1b8e3ed391c3ac1aa548f8fdcafadf2835aa5cbc663e41380f12d48339f24b2221861100b76ef5bfec07a62245e8949d0aa9e4f0c740b4659541b4c09ce3e66f69bab0c04ac0e1cebdd371a6e31f2580bdcc0262db8f90334a9f54f2c7859c6d67877b4ebf9731f3d6e702bc2e78d0e0a9daecee218911d71b7f7ad1bb14f4eba3cd933976bdbc4ce18ea52a9c5b021d5fda7418a155c4059907964e21f58fb4b48f887c97f7bb007775043c2e75cf0d450b8c40c3b8ae26051081e17c5b2092ead0e7756a5ab3a6177d4eee21dc4e3ec2e9f22e4eca3cd7dd98d484f79e61ca4d4b47f53fd1538c361016f687ed8bbd626b4322284905fc87054f1eebbf470bab5c7dd273d99efa62ccd6b4524fec4072993e7996190097e0d48d162e945883821de5a2563fbfa166f659e9964ed7ee17650851e84d17fbac9b249d0ba3dff0eaed3aeafc876cf1a095da9c490796fa860b9b7a39e81955768276ce72346585093b3eb833636c58ca8031ac31943c39758bc25348e3fd13f8f317f86c0c6cbb75c774ced9d5c7ac3c2136152f59bd32574bc00f8c262fc7eae8d926c416385103cf67a17d452a82cde3256fe7bec3ad91ab017be7c68dadda762061fec9315c104c656413474c600cb1ee9bb81a8abbe205f779718aa75aaebbe6f9183e1d182d04c9c498cc8c6828c4b6a3de8c905d7729fd4e82d05fe1ad027a2b2b489ea575e978c8d7e39091d0e324344ba5ee7b6087ed98165e23cd05204787b46b11643f3680d2a3ac363ce537c234c3e68f829c0a321bbaa612ddf06c6fa4997795306bc70487f37c2df8e66170028717680d5c0ede474daa7e019b845dcca26a1acffccc0e41a278b4df2d4de602ceae6f7031c9515c9b2f65e7a4e674a5bb6b9f037b9e8cc65dbf868c89c24e93e91ba28f016e6c11c98a91a8637cd5abbb906d7634edf961ca423a610e7ddf3b323f6946d6f012abdaa7e49797df3412e4f86f39578d5e4d8368ba7703cf8975d78039117be4b8bc4a19caf1695ad30f2b3c6d71a8143d0c3d46631d5f9a78d5dbed8a991d561dfe342a9195c3c5a727955c66f6fae32d4f2de0d16c7823ea96e337a48816e714733095197ea8cc4ce612d0ae1a1331f30258dc7994cd885120591096f234a95bb2c488073b4dd7ea53132d5992642bc6e93825fb43fa745f8203e5f926d4f29cf0f77e207bf4e7ee98850c423d6f8fee07cf680dc1bffbeab98e8bc85942b1fa62d4849e3f776c898c5676f90b45e9f29a2840856523582f6f40df123ca84ec44ba73e75365e8de3933b75aed611d4dfa915184dd4a6260261c58899ba666aedc2c7e874c6da3a4084404f8ab7953e6cfca6cea5c4eae9c75c504b9ab6d6c22cb564d25129fac5301e670e565168887a01aa780fc0c1b9dc233aa8aff11f3d92c05ec18e7f7b36d0c6ada355e26a35416ecc10959151b4ff57f72be59a605bc7baf31f5469eca826f677094d0708d9ba933c4a12f7e7071c29843c4ef5fe883eee907b19998ead8b759ae1e0b0330299f6bc51828c796cfc6657f0a822d139f5d6f5f2650f0523511be5a67e33e6d1d23d02b26c9a20fab2eb6dbf29591052e71fc3647ef60c364f7be2604de96c6a87eceb34795ef47541122aa59263b3126807c70ed6935c4826573d70ccecd7c340c37015a30f4bfafa789c66477b12646315d78fd0e1dc8af1870574bd793f9da7a2314f9e3269e70bbbae59e4c95151a8919c4e68fc7c077ab86a2a12b78c3177103856c52874a57a440f9f0ffd91fb84e56c5ceb5e5b771e90e9d3d412f7258e4ff7180ee79f444013de8de7401fa2c5139977821cf6456d2547c23e143e8de59b5256eb5b40c3e557e7b32492b01101218ad6ae0ded216365541dd24927da665fcde04d19b4a45277c3d1f23c09ec1498cd83dc544c0b9799077ed9248006d6589a1d1d2da4fabe3f823d600f127a42745634c2b4670dbb7e2d97c1660c2e343924c46f05534a0627a995a44ea9019a0fe0ffce729f0bb36ca9875f941659717ef4c91a52f128104e1b9d99e5f6b9fa7ddd6a12fbe0b59a4e062595615972f26a35804c52716b414c69c736bca6ea95ac4ce278a9085b2f69baf97f6804ef60dfd44a6994c734a953e92c336a8a82503cccbb9049edd15152eda82f8a979452ef063fbb3dcf4d7ae6eb724632650f13ecb05ca8b945ed9de1270a0396263187a3ccae8fdfe19c6b7f870d4ad7cea4e8c35e1a4f60122b0e25dc2802bf47fe7dfdd8598c62f7f00000000000000ffa071bc4a031771479d470eed23853000256263335939d1605d7cac3b02eda33bda996a72bab926f13c6ded5138f24f66a716e59f093ee8c11f0cad28784799d02a53d863bdd38cfe686403aa18cab6ad295c64ed6ee46b17dac2e764315fd1f8be4636fa4fc6cfcf2c7d471c09806f6e25d01eb16003b4ce1b7ab8cb3153ac8b26558a8e879672e24be6e03a8f3f8217f925844c59602db90282e83d8a0f5b5b780c1d11dbdb6c41cb8bbacbcf5c7b161080c418463cae57f2e613af09b056d6d2c0abc253e27aef25be5745b0ee738e91ef0b10ff2444cd18377081e02a553b4048d5acc0917394e8a66010ecfdf19b89944eb8c5fce6dc44128346a83b880b3a685a0433a36d5d80f5e487eac9608afd087121db30ed62257f679a5ff9dc55289d2832b1f8d01d45d581948fbfd92b6fc66446bae91f9a64f36079c0c4507fe725fff8754e8b4c0ac43f35264bdc35581ed126e5a123ced96977f7b635a2b2b3a425916a3ad4f679603e5d48e807cc29157bb2766af309f197124c1581fe8c4a25aad35d914847b36e6e6ae8d7d478eba682ad617994d42a13109923934941891e74384c80b28450c0f38ffb69a2810b7fc3cf22b6b672e1752a62a8a6feabd41cd969f9a995056d8a163a5261b51bfee975bf88f055e6b99467b1097f15fd1e17a201acaebc3b4e662d7e7e25d0ee87b3926beb5254aa3c91cc64ddb8b6f63966aa63e7a07fdf86be57b2370b523ce72f3f0872ebc7d084d1e62352ef93ec1e5ce14f335bd126c48997e2d72ae2d9534264df2b22cc009a30240eca7063cf2d917647a47d694b8fe3db3f56455c16ae73948bf3cf4914df0965b1f27035f3a6a0bc1934d2c5a808218ed95aea8fdb831302a13da63cc29ab53ad8c8bea2c1f31a52e99fc7a3e559583f2932b48b50740c44b68185098fe083a804ea0fe6b10c925f8ad83c8dfe10022daca1f8371fb1b21255497e39c5f6b86851dbfd0aec2b3726e10646481309aab27af09792352afc419094e0a0c8daf827fe4ad055f9182fd8fdb2b9ecfe63e043b721998a3f36be1796c6734b8f5a013d3053f59048bfd55f35f75c9bc058cec776fe7ff19f95f771c59a6d61638ee125fd93f192eaeddbed8edb179711c67e25dc2a6de074781ae95d350a780c2c65222129ef25709eb6b524fb40110bbb0cec647b4a3c438b59ae5d122a8396de50977e0878c82e612dc905c3904f7a52fb33fb18c1984a2135ea2870bceed3363fb879ac46b3990ec382971c4ac997a1ea118758600cd2bf6207d9b9d1ffee823473757304ba050cd2145320b9bef31f80edc6d610f488d5da6bc802cff3c3a0c3b6d1bd6e46126e8794b98364d1326372f4a72c7294a7c722cdc3e17ecd8d7375df3529bdf3535cca1295f4d724c3f4247d71b0b0fffec8789d52e4ce80f831ce8eec5aeb2e4cdc8047a56a752b79e1e7a76e9f612b59e60bf2bb0fd789566fb432db0cbcf4231747fe31b6d55f590541be04a3e35068789a359b64fcdcd4c0c318aae00e7252798340d39581f68c201627c39c3c7e2c198f30b369508bb3889edd1bedd6b4940bdcc65439f4f7da78c448f346f05f1ec9c2b145530fdf31dcc26adf6cb5c5628fe91b38c6be11eab4f632b19befe6e33f0e3f198fdc67f5e41b48f98c5db2bb2a1439fa7117a3fe9f05893b0af1ebb4f9288ae09358898588f516444a99e2e70afff88a4e20b11eb8d2ab2f2913278e83ef45c64d7ee28d57dc29dd527c47cad3727009aeb642e1ad6d6f85c48fb7fcd0b62d3b18c48f82fd1d8511556209001cdb44792e0c523448c141140d4556cfdd67aa3d61ed773228bb4aed8374510b59637997be05105856c31c666c9b2de7bafe0f437e"], 0xca5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:10:58 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000140)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[0x7, 0x2, 0x9, 0x0, 0x5, 0x7fff]}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 10:10:58 executing program 5: faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000000), 0x4, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) socket$rxrpc(0x21, 0x2, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) 10:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r4 = socket(0x1e, 0x1, 0x0) sendmsg(r4, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) getsockopt$inet6_mreq(r4, 0x29, 0xa, &(0x7f0000000140)={@rand_addr, 0x0}, &(0x7f0000000180)=0x14) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r12, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'bcsh0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)={0x290, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0xd4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x100a, 0x5, 0x8e, 0xffff}, {0x7, 0x3}, {0xfff, 0x9, 0x7, 0x9}, {0x8001, 0x6, 0xf3, 0x81}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x198, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffc}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x4001011}, 0x20040012) 10:10:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe735"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 727.098445][T21956] openvswitch: netlink: IP tunnel dst address not specified [ 727.106613][T11866] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 727.161487][T21954] IPVS: ftp: loaded support on port[0] = 21 [ 727.362299][T11866] usb 2-1: Using ep0 maxpacket: 32 10:10:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0x3, 0x2) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="100000e916020007002e2f66696c6530b421785ed9e95cb9954fd12b7e9125bd935564561fa02339ed610885f7f063c5aa8bac6327f19708d2"], 0x10) io_setup(0x9, &(0x7f00000002c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x80, 0x0) r6 = eventfd2(0x0, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000340)='&{trustedcgroupuser/\x00', &(0x7f0000000440)="bf18de42f7b8b33e90af8179f461f41f31998178d5c833b1724f0a6c9b99a81bf059", 0x22) poll(&(0x7f00000002c0)=[{r6}], 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, r5}]) [ 727.453479][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 727.459744][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 727.466113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 727.472314][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 727.478585][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 727.484729][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:10:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000440), &(0x7f0000000480)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r6, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r6, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r7, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x82}, 0x80) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e601000000000000003ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35b08ff7e8f32cad9b13a719c053724c5666747ea7723ef96ff4508ed4fcff49b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) [ 727.606676][T11866] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 727.614584][T11866] usb 2-1: can't read configurations, error -71 10:10:58 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f00000000c0)={0x2, 0x2}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x111653) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120101006b40480b030500000000000109021b40010000000009046c00015e5305008eb976f224509d8cf2cb5005764630f801cd90f594a78200000000994c0000"], 0x0) [ 727.666384][T11866] usb usb2-port1: unable to enumerate USB device [ 727.715383][T21957] openvswitch: netlink: IP tunnel dst address not specified 10:10:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 727.768235][T21954] IPVS: ftp: loaded support on port[0] = 21 10:10:59 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xaa, 0x7a, 0x82, 0x10, 0x1604, 0x8005, 0xeec4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x26, 0x0, 0x0, 0x93, 0xd3, 0xd0}}]}}]}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./file0\x00', 0x5cf7039539ab6ba8, 0x0) [ 727.907813][T22074] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 727.943664][T22080] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 10:10:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000000)) ioctl$UI_DEV_DESTROY(r0, 0x5502) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0xf, 0x40, 0x4, 0xab8a06cb215eb045, r3}) [ 728.052399][ T12] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 728.133685][T22088] input: syz1 as /devices/virtual/input/input20 [ 728.209644][T22088] input: syz1 as /devices/virtual/input/input21 10:10:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0xff, &(0x7f0000c8d000)={&(0x7f0000000080)={0x18, 0x2, 0x1, 0x800000001, 0x0, 0x0, {}, [@nested={0x4, 0x2}]}, 0x18}}, 0x0) [ 728.292455][T11896] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 728.322375][ T12] usb 4-1: device descriptor read/64, error 18 10:10:59 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') sendfile(r0, r1, 0x0, 0x88004) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "3ef31d8e77b9541b", "e80e338d18b05228717ce4950fad6abb6c52c78c1b429cce80c3ad6ed06d9d16", "57d2af98", "fa76fa7af5fa03dd"}, 0x38) syz_open_dev$midi(0x0, 0x0, 0x0) 10:10:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 728.532221][T11896] usb 3-1: Using ep0 maxpacket: 16 [ 728.652771][T11896] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 728.661115][T11896] usb 3-1: config 0 has no interface number 0 [ 728.667581][T11896] usb 3-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=ee.c4 [ 728.676855][T11896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.687399][T11896] usb 3-1: config 0 descriptor?? [ 728.712322][ T12] usb 4-1: device descriptor read/64, error 18 [ 728.940044][T11896] usb 3-1: USB disconnect, device number 26 [ 728.982389][ T12] usb 4-1: new high-speed USB device number 23 using dummy_hcd 10:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000140)=[0x0, r3, 0x0, 0x0]) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000140)=[0x0, r4, 0x0, 0x0]) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000140)=[0x0, r5, 0x0, 0x0]) setresgid(r3, r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000033001901000000000000000002000000ffffff00000000000000100004000600c9326b096e3b8059626b4e61ef337898cbdae5b4c0ce12a60f78"], 0x24}}, 0x0) 10:11:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x80c, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bd00", @ANYRES16=r3, @ANYBLOB="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"], 0x3}}, 0x8081) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20020000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xa4, r3, 0x42a, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0xaea5ed55ee3a1668}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040}, 0x8000000) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f00000000c0)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 10:11:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:00 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000fc5237085d050190cd800000000109021200010000c4125c1c00000904000000473eff00c28df6cc1b1c188cdf116fd14059b8d0088d888a3cbab6fb1539bac7db5719f3bcbd7c1f56ce7b8cc56eb570fae9bacc6e226104083819aa6d1c6de0ce3f8cd6d202000000a410b85c352fe33200b89f64c17972f16832845866c1f5418c7134fb36cf245ceac41b36a1d9052eb13f041e0196082e006d447e932c26155ccd552831423cbb63a7a42e7b8e78bb3880d22d74e55cc93699c0d178ca5bce561c4f48e23bbcc39d6fb5a5bde2ab6ca75131c27afc04db7e2f1f2a4412f6c62fdcf16f40d571eb91668d45c3c1ffa2c62f92bab578ced3450909cf3c88ce8bd3b9ded0b7722003cbed3f27371c94c263465491442f12bdcb609e577705b2cbb8"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xd0, 0x80, 0xfa, [{{0x9, 0x4, 0x0, 0xc7, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x222, 0x1f, 0x7f, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x294, 0x5, 0x5}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x20, 0x3f, 0xab, 0x20, 0x8}, 0x1e, &(0x7f0000000040)={0x5, 0xf, 0x1e, 0x3}, 0xdc}) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x2000) getsockname$tipc(r0, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, 0x3, {0x7, 0x1f, 0x474, 0x40000, 0x9, 0x200, 0x10000, 0x8}}, 0x50) syz_open_dev$char_usb(0xc, 0xb4, 0x9) [ 729.193931][T22111] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 729.225282][T22111] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_pgetevents(0x0, 0x1, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x5}, 0x8}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000001000000000000000002000000ffd38d9b0c00820008001000040006e53ce56ca87e3b2606cbd3afa2a800"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 729.254207][ T12] usb 4-1: device descriptor read/64, error 18 [ 729.482224][T11896] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 729.642325][ T12] usb 4-1: device descriptor read/64, error 18 [ 729.712246][T11863] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 729.722695][T11896] usb 6-1: Using ep0 maxpacket: 8 [ 729.763150][ T12] usb usb4-port1: attempt power cycle [ 729.842537][T11896] usb 6-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config [ 729.853863][T11896] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 729.863147][T11896] usb 6-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=80.cd [ 729.872347][T11896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.881777][T11896] usb 6-1: config 0 descriptor?? [ 729.962212][T11863] usb 3-1: Using ep0 maxpacket: 16 [ 730.082671][T11863] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 730.090833][T11863] usb 3-1: config 0 has no interface number 0 [ 730.097250][T11863] usb 3-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=ee.c4 [ 730.106446][T11863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.117137][T11863] usb 3-1: config 0 descriptor?? [ 730.133078][ T3705] usb 6-1: USB disconnect, device number 30 [ 730.366122][ T3705] usb 3-1: USB disconnect, device number 27 [ 730.492241][ T12] usb 4-1: new high-speed USB device number 24 using dummy_hcd 10:11:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000000)=0x4) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='vcan0\x00'}) sched_setparam(0x0, &(0x7f0000000100)=0x1) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x22000) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x480, 0x280, 0x0, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000080), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast2, 0x4, 0x100000000}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@dev={[], 0x2b}, @dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0xb}, 0x2, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x13bb041744706ebd, 0x0, @mac=@remote, {[0x0, 0xff, 0x0, 0x0, 0x7f]}, @mac=@broadcast, {[0x0, 0x1fe, 0xff, 0xff, 0x8199da222cdc1185]}, 0x3, 0x1, 0x9, 0x6, 0x6, 0x8, 'vcan0\x00', 'batadv0\x00', {}, {0x1fe}, 0x0, 0x85}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 10:11:01 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f00000001c0)=""/159, 0x9f, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0x8}}, 0x20) r1 = gettid() write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x4d, 0x1}, 0x7) r2 = socket(0x1e, 0x1, 0x0) shutdown(r0, 0x1) sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) read$alg(r2, &(0x7f00000002c0)=""/115, 0x73) setpgid(0x0, r1) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x7, 0x1, 0x1, 0x0, 0x0, 0x3, 0x80003, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000080), 0x9}, 0x800, 0x0, 0x400, 0x7, 0x10000, 0x0, 0x7}, r1, 0x5, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net\x00') fstat(r3, &(0x7f00000022c0)) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000000)=""/1) unshare(0x40000000) [ 730.772613][ T12] usb 4-1: device descriptor read/64, error 18 [ 730.819147][T22138] bond0: (slave bond_slave_1): Releasing backup interface 10:11:02 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000001440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x61) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='nv\x00', 0x43) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f0000000000), 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)}, 0x22000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x5d0, 0x408, 0x408, 0x228, 0x228, 0x408, 0x538, 0x538, 0x538, 0x538, 0x538, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f0, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'bridge_slave_0\x00', {0x0, 0x3c7, 0x10, 0x6, 0x0, 0x238, 0x6, 0x5, 0x80, 0x18}, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x4, @rand_addr=0x5, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xd0}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @loopback, @gre_key=0x800, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x80, 0x0, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x11, @ipv4=@local, @ipv4=@empty, @icmp_id=0x68, @icmp_id=0x68}}}, {{@ip={@multicast2, @remote, 0xff000000, 0x0, 'rose0\x00', 'bond0\x00', {}, {}, 0x0, 0x2, 0x40}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x0, 0x800, 0x1}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4, 0x3}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @icmp_id=0x64}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x630) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@broadcast, @empty}, &(0x7f00000001c0)=0x8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, r4, 0xdd42ddecb798d42f, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe4, r4, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x91}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa328}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r6, 0x403, 0x0, 0x0, {0x3}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r7 = socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r10, 0x80045301, &(0x7f0000000540)) sendmsg(r7, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r7, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r7, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) accept$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) fsconfig$FSCONFIG_SET_BINARY(r10, 0x2, &(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)="5d6047b957088037a8796fac2c8b8112ea293c738df58b71ed552a3b5d7f4aa33b3b06507aa930c6ec873ad31cff0c1eef2fb7fdfbe93129bd38bf21927a671015636f1ac39369005f03df520679feedc4b27445957173bdf29bdc8da5", 0x5d) fchmodat(r2, &(0x7f0000000300)='./file0\x00', 0x20) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r6, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr="c5e8b7fc1adf730c86603a9237d49c72"}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0x20010}, 0x4000000) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x80000000}, 0x8) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000033001901000000000000000002000000ffd38d54220010000400"/39], 0x1}}, 0x0) [ 730.901942][T22135] IPVS: ftp: loaded support on port[0] = 21 [ 730.904322][T11896] usb 6-1: new high-speed USB device number 31 using dummy_hcd 10:11:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 731.128492][T22247] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 731.274808][T11896] usb 6-1: Using ep0 maxpacket: 8 10:11:02 executing program 3: unshare(0x400) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x40, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) flistxattr(r0, &(0x7f0000000000)=""/87, 0x57) 10:11:02 executing program 2: clone(0xd825e900, &(0x7f0000000040)="3c9a03eff6b9328ac3e9918d3db9e4e7d1f8e4734a254bd5b306e4625508000000238354bf1fb61999318e6d18b8571377ff8b88ba8e3c9e013aa24ddb4dda84ca71fc4dfc3a629cbea05c1769c9946098dafc496087b14f6e6ca40ca365d2dbe5b9d5b8f99deb5be03c103d0892f03cd419221970bb5e975ac36cc4a6606bf387d54028993df65a56a73f", 0x0, 0x0, 0x0) r0 = gettid() wait4(r0, &(0x7f0000000100), 0x40000000, 0x0) [ 731.401060][T22247] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 731.415655][T11896] usb 6-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config [ 731.426274][T11896] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 731.435816][T11896] usb 6-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=80.cd [ 731.435950][T22139] IPVS: ftp: loaded support on port[0] = 21 [ 731.445020][T11896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:11:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000100)={0x5, 0x3, 0x8, 0xbad}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000010002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1) r2 = gettid() ptrace$setregset(0x4205, r2, 0x201, &(0x7f00000000c0)={&(0x7f0000000040)="6bbae683dbcae0275bd634543fa08d828a20fb168f1781a536a5395fa03f64e237cd1fa08e3105db318da0c7464391c0f379e69123708b5f919de04f08593493514596057316cbb58345ba11b9ca8884e38cabee0e9c31e29a40fab21c30e4df1b630db14b3e06", 0x67}) [ 731.498405][T11896] usb 6-1: config 0 descriptor?? 10:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x80000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x10001, 0x34800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x501, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}}, 0x3fe}}, 0x0) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, &(0x7f00000001c0)=""/171) r5 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x481002, 0x0) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000300)={'bcsf0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r7 = eventfd2(0xfffffffe, 0x80802) poll(&(0x7f00000002c0)=[{r7}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) write$UHID_INPUT(r1, &(0x7f0000000680)={0x8, "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", 0x1000}, 0x1006) fcntl$setown(r7, 0x8, r8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0xfffffffffffffcc3, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) 10:11:02 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000000c0)={0x6, 0x5, 0x4}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000001400210100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="080008000000000014000200fec0ffff00000000004b0000000000011400010000f70000000000000000ffff390c2dfc33b2c1ac1e000114000600000000000900"/75], 0x5c}}, 0x0) [ 731.743620][T22341] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 731.753079][T22341] device gretap0 entered promiscuous mode [ 731.759869][T22341] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 731.850917][T22373] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 731.861125][T22367] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 731.871053][T22367] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:11:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106e05fc0000007e6868a1330ecbab0100000000090400000903000000092100000001222200090581030000000000040e4c00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:11:03 executing program 1: capset(&(0x7f0000000000)={0x24020019980330}, &(0x7f0000000140)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0662bc45ff810500000000000058000b480400945f64009400050028925ae9ffffffffffffff8000f0fffeffe809000000fff5dd0000001000010008081000414900000004fcff", 0x58}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f0000000080)={0x2, 0xfffffffd, 0xc20}) 10:11:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a91fe8f532368812b0f383b5d2c33f1ad6bfe32db5301"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 731.936754][T11896] usb 6-1: USB disconnect, device number 31 10:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) r3 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x406, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000300)=0x14f61a3362cb2e4f, 0x2) r7 = accept4$inet(r3, &(0x7f0000000380)={0x2, 0x0, @local}, &(0x7f0000000340)=0xffffffffffffff96, 0x80000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioprio_get$pid(0x2, r8) r9 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_opts(r9, 0x29, 0x39, &(0x7f0000000680)=ANY=[@ANYBLOB="2c0a040501c809001d06df4b7535595d21f2dfb6c89b1f5d00000000000000000000000000000001ff01000000000000000000000000000100000000000000000000ffffffffffffff020000000000000000000000000001261870fc1ea187607e24ae80534dba6695fbb74c96e493ceb8dc654129ead257534dda194408a330ee1f5b157bb3ec74eb229cf09f8d686532735d4a676f21ae32fd7ee257fee0e17a1e6832d8eb776b70a5f98ffc0a9531c2cd9137747f619d01ed4a800ca6d7f8fb44f57fec64fd87e2307ca78bde3e9e57c27e0b8a5a2fca90e06ad157"], 0x58) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000ff06040006fb08cb4e4f1471cda8957120fc52cf00224ffce3951270be06459f0e1da8a3200ab43c8da30cabf90698528f576bdbb51f54c7cf0c62c6ca26905dd5076c8bcd341536ae5693b3d8a215d45c710be10ffe7c92baecceb5191ff01699dfdc08e2164379c3f9cd5d109762d412882892f16920df0574630e6580649f6aa65fa5bb042e6256bad37cddfe4894e74c547e38f69f1518afc32448baef3854dfd3524f97443f90620d39dc7470e8b68d73cc119998dd02a40310d7"], &(0x7f00000001c0)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$BLKPG(r12, 0x1269, &(0x7f0000000500)={0x129, 0x1, 0x63, &(0x7f0000000480)="1a8c20527560de12984aa2d3bebc400d4f388a958427669ed3a0820c0de2316cb7dc78e29fbb60d2121c21d073bffb45d44112353491761a35d0c9755abf76a22fd4e5c65f6e6a0a9086ece67631c5ba8f00aef4f8f8577b89bd67c225753e67c714df"}) r13 = dup2(r1, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = fcntl$dupfd(r15, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000459e3ef4c92731284b128c084d1c49955aea88e15eb4b3b0ce055fff1d8302f0400a4eba1c8367be0ecabf7420a4350a70ce44e167c3e81a24fdd5e52a22892a5bea66436029293371beb1335eec773b0d2d0acb9875951ab48440393385c8b766f5cdbe5de293d7c8de7f35b190b3174b6319a63218bfea7d8673aa6ead8cadab3ff610955ad7503630389670f6b0bc7531c8e9c42594788a1063865a278eb17ee0040bb00c7a7c4f4bd7d339aae76e247df7977ef1af68dc81dd5b2f31050a558009a27b0f285d96e53f8dfb9bc445ef11e2af3a12e78b4649c3a72e264e31a8fd6d396", @ANYRES16=r18, @ANYBLOB="3f02000000000000000001000000000000000b0000000003001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r16, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r18, 0x700, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r13, 0x84, 0x15, &(0x7f0000000080)={0x6}, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) [ 732.044669][T22389] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 10:11:03 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc2, 0xb1, 0xb0, 0x8, 0x596, 0x1, 0x9fe2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xdc, 0xae, 0x36, 0x0, [], [{{0x7, 0x5, 0x8000000081}}]}}]}}]}}, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4a0502, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000680)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000130000000000000000070000000400000080040000400100000000000080020000000001f2009804000098050000000000ba92f417942ea5223df646628723feefc1196e39442ee5f8f8be704661c49ddedf7975c84a1cc04ddc08f700039d90a3751f077b091de3bb9ee710bc73b7d596968b940f62ac378b7c3f5333415f6bc40d834da6ae04b50dcf7ef21b887f7061ac0a937bd71e9405af5cde84f3124c8526fe785ea941d4b8212e94ba8c0c976662312e879f62bc3c71ecca667641a038cc1ccc9c842a5739042e8140fcaec284e8a1ceb7270f8aac1b3b494e2c03232d87bc9b5f749edc00abee26d5351fdf6bd367dd4f4d9e341535eb40", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000180c20000000000000000000000000000000000000000000000000000000000ffffffffac14140b0100000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000180c2000001000000000000000000000180c200000200000000000000000000e0000002000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000201000104050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d0) 10:11:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xe9f0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000002c0)=0x3) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{}, {0x0, 0xffffffffd927d9bc, 0x0, 0x0, 0x0, 0x0, 0x62c}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f00000009c0)={[], 0xfffe, 0x7f, 0x7, 0x0, 0x6, 0x2000, 0x10000, [], 0x9}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@dev, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dsp\x00', 0x80, 0x0) recvfrom$unix(r7, &(0x7f0000000580)=""/65, 0x41, 0x40, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000033001901000000000000000002000001ffd38d9b0c0001f60700100004000600"], 0x24}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:11:03 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x26, 0x7b, 0x4f, 0x10, 0x1b80, 0xe309, 0x502b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x33, 0xb1, 0x49, 0x0, [], [{{0x9, 0x5, 0x85, 0x1}}]}}]}}]}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x87, @loopback, 0x9}, {0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}, 0xbe3c, [0xd3ff, 0x1, 0xd52c, 0x3, 0x5, 0x0, 0x45, 0x2]}, 0x5c) 10:11:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004840)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0, 0xfffffffffffffeec, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000290000003700000089000000000000002400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=0x0], 0x3c}}], 0x1, 0x0) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) flock(r1, 0xd) 10:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x1015, 0x2, 0x5, "998bcb96e15838cfd6c1d8832b8a3093", "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"}, 0x1015, 0x1) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) r2 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r2}], 0x1, 0x0) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000003300190100008cd07fb978ea74ffd38d9b0c00010008001013c5a5652dcc794fa2c23896fd00040006005948cb19ec6393776b2b49244b6323c7da470a648be8150f0d14ea861e7bc9c1f097d35b5dc7086ce364c11cf8c38d20b8b39d0689395ab51717a972d060d44cda7060212add2a3640a8e753887a3fa2c5ada85c03f91da30cf2ab75882754c856aa555a"], 0x24}}, 0x0) [ 732.452409][T11896] usb 6-1: new high-speed USB device number 32 using dummy_hcd 10:11:03 executing program 1: ioperm(0x5, 0x3, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x260, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000200)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000240)=[{0x100, 0x5, 0x2, 0xfffffff7}]}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4002000000000000000000000005630440000100000c630000"], 0x59, 0x0, &(0x7f0000000100)="67453440c8791b622b8532c84e2347ff9e6275acd1b320ba89995d2141688b3010b8f336e75d0dfe45cf947bf302bda369ad5f56251de1012a39083fbf44ca86dac84d6968de6a54fe086f32ae81fa8cc56b3b79295bad8b60"}) 10:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0xfffffffd, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) [ 732.613065][ T4122] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 732.621111][ T12] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 732.715442][T11896] usb 6-1: Using ep0 maxpacket: 16 [ 732.753781][T11896] usb 6-1: too many configurations: 161, using maximum allowed: 8 [ 732.769246][T22514] openvswitch: netlink: IP tunnel dst address not specified [ 732.822388][T22518] openvswitch: netlink: IP tunnel dst address not specified [ 732.882283][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 732.887745][ T4122] usb 4-1: Using ep0 maxpacket: 16 [ 732.893912][T11896] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 732.901596][T11896] usb 6-1: can't read configurations, error -61 [ 733.023010][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.033270][ T12] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=9f.e2 [ 733.042541][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.062343][ T4122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 733.073707][T11896] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 733.082381][ T12] usb 3-1: config 0 descriptor?? [ 733.252619][ T4122] usb 4-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=50.2b [ 733.261852][ T4122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.270135][ T4122] usb 4-1: Product: syz [ 733.274523][ T4122] usb 4-1: Manufacturer: syz [ 733.279220][ T4122] usb 4-1: SerialNumber: syz [ 733.285627][ T4122] usb 4-1: config 0 descriptor?? [ 733.332335][T11896] usb 6-1: Using ep0 maxpacket: 16 [ 733.343056][ T12] usbtouchscreen 3-1:0.0: Failed to read FW rev: -71 [ 733.350227][ T12] usbtouchscreen: probe of 3-1:0.0 failed with error -71 [ 733.367084][ T12] usb 3-1: USB disconnect, device number 28 [ 733.379112][T11896] usb 6-1: too many configurations: 161, using maximum allowed: 8 [ 733.502752][T11896] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 733.510517][T11896] usb 6-1: can't read configurations, error -61 [ 733.517322][T11896] usb usb6-port1: attempt power cycle [ 733.526180][ T3705] usb 4-1: USB disconnect, device number 25 [ 734.122321][ T12] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 734.232661][T11896] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 734.292293][T11863] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 734.362260][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 734.472345][T11896] usb 6-1: Using ep0 maxpacket: 16 [ 734.482706][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.493419][ T12] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=9f.e2 [ 734.502758][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.512672][ T12] usb 3-1: config 0 descriptor?? [ 734.517938][T11896] usb 6-1: too many configurations: 161, using maximum allowed: 8 [ 734.552135][T11863] usb 4-1: Using ep0 maxpacket: 16 [ 734.642287][T11896] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 734.650083][T11896] usb 6-1: can't read configurations, error -61 [ 734.692829][T11863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 734.772460][ T12] usbtouchscreen 3-1:0.0: Failed to read FW rev: -71 [ 734.779678][ T12] usbtouchscreen: probe of 3-1:0.0 failed with error -71 [ 734.791958][ T12] usb 3-1: USB disconnect, device number 29 [ 734.804398][T11896] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 734.882462][T11863] usb 4-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=50.2b [ 734.891878][T11863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.900144][T11863] usb 4-1: Product: syz [ 734.904484][T11863] usb 4-1: Manufacturer: syz [ 734.909115][T11863] usb 4-1: SerialNumber: syz [ 734.915905][T11863] usb 4-1: config 0 descriptor?? [ 735.052330][T11896] usb 6-1: Using ep0 maxpacket: 16 10:11:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a91fe8f532368812b0f383b5d2c33f1ad6bfe32db5301"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:06 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0x8, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000180)='./file0\x00', 0x20) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000840)={'batadv0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000440)={0x0, 0x1}) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000480)) ioctl$KVM_NMI(r3, 0xae9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:11:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r3}], 0x1, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xb37, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x100, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000100)={0x5, 0x30, 0xd, 0xa, 0x7, 0x4, 0x0, 0x13}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x400, 0x0) readahead(r5, 0x1000, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0x10, 0x1, [@typed={0xc, 0x10, @u64=0xfffffffffffffff8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 735.152765][T11896] usb 6-1: device descriptor read/all, error -71 [ 735.160566][T11863] usb 4-1: USB disconnect, device number 26 [ 735.166069][T11896] usb usb6-port1: unable to enumerate USB device [ 735.190044][T22535] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. 10:11:06 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x5, 0xa003) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x82, 0x69, 0x74e, 0x0, 0x0, 0x5, [], 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) r3 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r6}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e22, 0x21b, @mcast2, 0x30}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001440)={r7, 0x1000, "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"}, &(0x7f00000001c0)=0x1008) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000200)="2ab2a97b8751bd86991a443575d7006e79838121c6486a00500000", &(0x7f0000001340)=""/248}, 0x20) 10:11:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000a261e31dc2f82d300000000000000007c4321713d7f20cfe9005a2e6f26c3a72e769f"], 0xfe9a}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2008ffbd00fddbdf2504000017106d65a28c0f2bbe9737ce71a408000300010000007cb953074f1c6dbb0f774bb35d918314083044d2dfa61aacb8e1ea574bbd050e8f88af533c43a61fde1db938fb56e64a305f974f084544532f8c28ae8b038315eadf576f8815ecbfc854707db012fa8dcc9c942b78c555a0a246a479dd019b6c51b5f77ad0b834b84e8bc208e60539a9da538905bdb8cb231a00623278af8de51ca699b695df8951a8ce876bc2b47c9ab5abad3ce83c0dccdb9cd756c40060bb012e88e17c02fd2efa8c6eef77ca7380"], 0x38}, 0x1, 0x0, 0x0, 0x100081d1}, 0x40) 10:11:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0xa, [@typed={0x8, 0x10, @fd=r2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x240488d1}, 0x0) 10:11:06 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="230100003b21b8086004040090520000000109021b00010000000009045c00017f63070007058bff000c07000000000000000bf90d2930f9636e02873672763277e67c2eddb665a2156e39d6e38026847ee0370700779410329cf0d8a3d4ec13322d685d380a5c8a193c3011460438cd338254394efbcae96ba06fb14ddc44f7c5142e163fca7186f0"], 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000740)='/dev/input/mouse#\x00', 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x7f, 0x60, 0x1, {0x22, 0xb8}}, {{{0x9, 0x5, 0x81, 0x3, 0x238, 0x9, 0x20, 0x7f}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x1, 0x4, 0x6, 0x8, 0x8}, 0x34, &(0x7f0000000080)={0x5, 0xf, 0x34, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x9, 0x1e000, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0xc, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x1, 0x1, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x6, 0x8, 0xffff}, @ss_cap={0xa, 0x10, 0x3, 0x3, 0x8, 0x3, 0x40, 0xffff}]}, 0x7, [{0xf0, &(0x7f0000000240)=@string={0xf0, 0x3, "15925629a73b93debbfdb605fdef778a8335fdaf2db53d119a69f31dffab89f9af9950a0680d4eba259cb8060b55c1b37c11ce1cfa18fe8162bd60ab48550cb799d3eff036c2d3cde38145ca8cf0b426160e9476043724cf44e9dec10b6af98b1bd59d46ddf79640a6a914195d0647d8c7ef2b303c5a1e7f46a919fc83052a5d236ccb650ae41b41f38f22d0d47c17f56fb30b5ce3bf1046b913850475bb7c662b416cb09cd28e28b54eab3bc74853712f91e8a81350f0758e4b9cf01c09ff81054713b9e9d2e1bf89422b93945298c28b4701f478bda4bc222f6d57189e33c9f0397dca9157c34bf2ed61a06a5f"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x94, &(0x7f0000000340)=@string={0x94, 0x3, "e27b15b1bf65f40344ea9c211d6d3d27faeed2c18ad2dcaf1fd16f2167cfea74bdfe9386c3d59ce5e9adbe7a53b1469fa15fa5d5dd12792dd78d0877ae1e16c94640ac1a8cc40de86076e9f97a69286408721540c113fd313c018aac9df4437c8a4511487fe6a677328d1692565fce62a974cbb0a26836805fd195408332343c8d77007b41a60ba8828e883888e729720963"}}, {0xf5, &(0x7f0000000480)=@string={0xf5, 0x3, "c5903bcf9a067243d409e7f3a7edb05e66cbedf9bc7d21c07df5574f5951f7d262a3033e5feade09bb649a67dcc9155074bf6e4bf02ea3219f2f4b9d72d809e252b89c42215ef988e37fdb20fec171ad432314116de1d8ea1e0d7e103f1d2101fd82197792fef9149af8ec151d1bb0be4d0b50a0dc74424a1c92c9a7c576da00ef38b1905f1511bcf9e61e396b41d56bbc5c9428af599008044468e58d7dd06d109a5187a7dc86d5e72ae9dd66707729aed5b62154ed63c64c7dece1587a157095e7d67608402222a5bc42c46fcb46be0274bbc037875ccaaa818d24ae05667f913070e2276732be6d1d1cce1183b7adbef734"}}, {0x5f, &(0x7f0000000100)=@string={0x5f, 0x3, "7d4b33bdf035602689fc18601b617828bfa9fd40ece5d8961be479b651de2f7c777bf9d82bdc86afbbc95f5709ce5ac4feb71335fef96e6b55d8aa7cca2e8b1a1a64d9e3e111f6c598569e1d92b8bc93ae05bb703e2d94a9de5f69ad0b"}}, {0xde, &(0x7f0000000580)=@string={0xde, 0x3, "47f4c5943384c5e668bf8a3f53da9174bdac35345eea59e94951f348087aa70c658b6e7b60b90bcdc84d8c56e8ef2e2c1dfe5253eaf1096e5288fb3dd8610a897a9da34069d898ed09f02585612c24215fc78f5ad3ee1d3bcc0d8c60c2521b8e60b34b442e26ba6ec398f16ae812e746582ff8029218e00974dad1739825ad60499faa1485f99d226d22462ae19e57473f678021aa72db02657add2e5c7a18795d0e7cc1a4ef9531db95843d539181744791736a0bc12433715d8e4915dbe25023b26f552ca6eb944c217b41fe7c23bff3053eea735c6c5632fbed6d"}}, {0x94, &(0x7f0000000680)=@string={0x94, 0x3, "60618800af9bd6a1d5377c110bb1bd4f57f251e35c529cd141d82ca6ca41a3bd200f1e0209bc876e6e9a39481168708ee62ee76d82e4e22bb156b846bc749b0e6914fc8e8555bdbc8c4c905232e684627000f24b447609808d36987d848b11ce5b689cc42bf3d45c27eeca1d9bd2eaee0955bea202da85db111d0293663a17432fded8cf78f4ef1bbde5851f5fbb66b6864d"}}]}) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) dup2(r2, r1) 10:11:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={@empty, @broadcast, 0x0}, &(0x7f00000002c0)=0xc) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000300)={r2, 0x1, 0x6, @random="2841b85aec59"}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r3, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x4) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r6, 0x5606, 0xc8) r7 = socket(0x1e, 0x1, 0x0) sendmsg(r7, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r7, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r7, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) bind$isdn(r7, &(0x7f0000000000)={0x22, 0x0, 0xff, 0x3, 0x7}, 0x6) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) [ 735.527469][T22552] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 10:11:06 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x80ffffff, 0x75}, [@ldst={0x3fd}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_dev$mice(&(0x7f0000000640)='/dev/input/mice\x00', 0x0, 0x484000) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000680)=0x1, 0x4) 10:11:06 executing program 2: syz_open_procfs(0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f0000000300)=[{}]}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) [ 735.643291][T22555] input: syz0 as /devices/virtual/input/input24 10:11:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 735.774380][T11863] usb 4-1: new high-speed USB device number 27 using dummy_hcd 10:11:06 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2102, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x6, {0x0, 0x1, 0x4}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_UNIQUE(r8, 0x40106410, &(0x7f00000001c0)={0xda, &(0x7f00000000c0)="ab433c9a833477a040c71391256ad256c4c4b058d9a5034e9217f99dc602dda682ef742f77ff6615b46afe505737b8b9b9e1b56c857904e9ae6af958e77294e492feef283d8a53873d263b5f68b60e55bf659d95a03413f2f3b564849021cb314c9af8d6e80957dcbff07704cbb436c3d335c3603c8d0ea8b016ff1ceb27cf644c1c8e71b7246cfecb0b6bdd5c5cdae480647236bf7a97d34ae06368e7f655a322578908da01160336b2fade93fe1e834d6ca5bfde8589e71fe5458107714781b533741b2d8c6370306ad8833d590f6c3c5dda10b91c3f7910ad"}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r3, 0x805, 0x0, 0x0, {{0x1, 0x40030000000000}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) 10:11:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={r8, 0x1, 0x6, @dev={[], 0xe}}, 0x10) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 736.042314][T11863] usb 4-1: Using ep0 maxpacket: 8 10:11:07 executing program 1: syz_usb_connect(0x1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cb28f40640e0003911a0000000109021b00e50000000009040e00010cb2e70009cf07000401000000"], 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x800) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) 10:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0x4, 0x1}]}, 0x1c}}, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r4 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r4}], 0x1, 0x0) r5 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r5}], 0x1, 0x0) r6 = syz_open_dev$midi(&(0x7f00000009c0)='/dev/midi#\x00', 0x2, 0x80400) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000140)={0x0, 0x329, &(0x7f0000000340)={&(0x7f0000000b40)={0x20, r8, 0xdd42ddecb798d42f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0xb825}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0xffff8001}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0xb90}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x0, 0x2, @in6={0xa, 0x4e22, 0x4ba9, @remote, 0x800}}}}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x4bb6}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x40}]}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0xe}]}, @TIPC_NLA_BEARER_NAME={0x0, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100004}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="e1ffbf03", @ANYRES16=r8, @ANYBLOB="02002bbd7000fbdbdf250c0000000c00060008000100000000882800050008000100657468000800010075647000140002000800030000010000080004008d000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r9 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r9}], 0x1, 0x0) r10 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r10}], 0x1, 0x0) r11 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r11}], 0x1, 0x0) r12 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$HIDIOCGFIELDINFO(r15, 0xc038480a, &(0x7f0000000980)={0x2, 0xffffffff, 0x1, 0x6118, 0x5, 0x200004, 0xfffffffa, 0x4, 0x1, 0x22e, 0x400, 0x8000, 0x1, 0x9}) poll(&(0x7f00000002c0)=[{r12}], 0x1, 0x0) io_submit(r3, 0x6, &(0x7f0000000940)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0xa, 0x6, r4, &(0x7f0000000440)="21370c6bdb51f61c63ddb2299e8c6571d4ba41162b33687d425c9fdefcd4a0372a54f1b82e46e74448d184037b222d62ee0c0193e953f3b91de2640040e25c31fea1b0cae7d26f317f178867c592cd822ad55579a497495431b696851a876dd05d7fa7523be4e16b44ab61816965530850e1064d1c417365fae0280a927284fe33", 0x81, 0x7fffffff, 0x0, 0x3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x8, r5, &(0x7f0000000500)="1c67521aec748a3203bfc7c496fac2054ca3bf276e482c49b19a942bd260fd144f3232f475abb5f91096c7f21ae15db403cc01517eaeb543eee0331aefccdd192ebd9c055fb07a7347ab3fc2a0090e46b2ea68c47875c6d2eeb9de9e71866d2c2b412be6787844c763a20e4d6c1bbce52cfc027a5494aa0a6a53aaeff5b1103bb115227e2f0f", 0x86, 0x20, 0x0, 0x3, r9}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f00000005c0)="a1760f558b3d5a886e19dfc7ac2b89d592bc275723508cc8420c6ece615d9948758cb53262087398776c5cdbf01d8faf328ded09534541a03a54fde59f485d0fe18c14aac7fd821cff78d6dd4780525da7acdfcf494f840189e6b26c6a1c7c6b5211f01d82109698e8bb0e5d5426f0a048a6448f7d2ac1b737bee8ebd601231b12645d991864a6790b8d2f89c59c965630e18055ef31e93817400efac2f090eae3f100ed1fd10dd210447881b64c558008365d7c98d9b69edb64728f75caa036add0f113899d316ae7498d6a5c05d5b5f7a2be01ad9beac8d5bb", 0xda, 0x2, 0x0, 0x0, r10}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000000700)="46acac677b0c3b48a499f491d713d74e53415d5b88e238", 0x17, 0x7, 0x0, 0x3, r2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x45e, r11, &(0x7f0000000780)="62382747559ac2544a867c99cafcad6d815c9dbffc5f6701a352977c86a36eab988b630df4c1c556738b6e15981272181f08676a591933b62042adbc97fe8deba509fd47f42b8a82e15bbecf35d9a293a4427a66b1d360c7359f7e0cc84c4bbd3e7f7f5c43fba0cbc86a4309be", 0x6d, 0x101, 0x0, 0x1, r2}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x5, 0x200, r1, &(0x7f0000000840)="9af71719b1f46e0fb5b7236c0581019ba9318fda382f821ce62e823f2ff3f24ef1150a1e2bbf6363965beb7e5cdc19b7ef90fb1f1d6e6ff5db01a8a7232d1febecceaed303955e921a95ab7880b8a2c00c689855d6465234808d3b4c4cb3d929a7e1cec791e403615acec054a6b2bb5e7694b45d3877a10d2c9551f1453bacb8ca5883a05b6192e20cfb32764af245ca670ccc05c8df7dbe3eef", 0x9a, 0x100, 0x0, 0x2, r12}]) r16 = socket(0x1e, 0x1, 0x0) sendmsg(r16, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r16, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000280)={0x84, 0x9, 0x2, 'queue0\x00'}) write$binfmt_elf32(r16, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r16, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000000100)=0x8) [ 736.172485][T11863] usb 4-1: config 0 has an invalid interface number: 92 but max is 0 [ 736.180691][T11863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.191157][T11863] usb 4-1: config 0 has no interface number 0 [ 736.197482][T11863] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=52.90 [ 736.206776][T11863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:11:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="660f3882bc4fd40f20c06635020000000f22c00f01caf30f1276d42e0f01c566b9800000c00f326635000400000f300fc73dbaf80c66b8beab658e66efbafc0cedc432baa100ec", 0x47}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x302, 0x0) close(0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 736.258393][T11863] usb 4-1: config 0 descriptor?? [ 736.312320][T22586] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 736.314311][T11863] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.92/input/input26 10:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x233, 0x19d, 0x0, 0x100800, {0x13}, [@generic="a33346ac2c391f634e0a549b6d1eadb14dbcc6ce2e3132f3f852242cebfedf87ca32", @nested={0xc, 0x5, [@typed={0x8, 0x11, @ipv4=@multicast1=0x4000600}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c820}, 0x8040) [ 736.513851][T11863] usb 4-1: USB disconnect, device number 27 10:11:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 737.112209][T11863] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 737.352207][T11863] usb 4-1: Using ep0 maxpacket: 8 [ 737.472330][T11863] usb 4-1: config 0 has an invalid interface number: 92 but max is 0 [ 737.480619][T11863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.491125][T11863] usb 4-1: config 0 has no interface number 0 [ 737.497366][T11863] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=52.90 [ 737.506561][T11863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.516016][T11863] usb 4-1: config 0 descriptor?? [ 737.567382][T11863] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.92/input/input27 [ 737.804258][T11863] usb 4-1: USB disconnect, device number 28 [ 738.572651][T11863] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 738.812169][T11863] usb 4-1: Using ep0 maxpacket: 8 [ 738.932377][T11863] usb 4-1: config 0 has an invalid interface number: 92 but max is 0 [ 738.940578][T11863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.950941][T11863] usb 4-1: config 0 has no interface number 0 [ 738.957238][T11863] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=52.90 [ 738.966474][T11863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.975877][T11863] usb 4-1: config 0 descriptor?? [ 739.017444][T11863] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.92/input/input28 10:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000080)=""/59) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) 10:11:10 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100006d8a7e40030448cd09f5000000010001aa14ed0007050a13000800"/45], 0x0) 10:11:10 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0x1, &(0x7f00000004c0)) 10:11:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000003c0)={0x6, 0xffffff53, {0x54, 0x1, 0x80, {0x4, 0x3f}, {0x6, 0x2}, @rumble={0x6, 0x5277}}, {0x7, 0x7fff, 0xff69, {0x9, 0x1640}, {0x401, 0x4}, @period={0x75, 0x8cc4, 0x0, 0x400, 0x9, {0x5, 0x1, 0xfff, 0x2}, 0x6, &(0x7f0000000000)=[0x2, 0x827a, 0xb0, 0x3, 0x200, 0x8]}}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000380)=0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, {{0xa, 0x4e22, 0x2, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in={0x2, 0x4e21, @multicast1}], 0xee) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x800, 0xfffffff7, 0xfffb, 0x4, 0x0, 0x4, 0x1000, {0x0, @in={{0x2, 0x4e22, @local}}, 0x5, 0x2cee74b2, 0x6, 0xff, 0x8c70}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r5, 0x5}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_CROPCAP(r8, 0xc02c563a, &(0x7f0000000180)={0xb, {0x8, 0xffffffff, 0x2, 0x56fc}, {0x8, 0xfffffff7, 0x200, 0x885}, {0x5, 0x6}}) r9 = socket(0x3, 0x3, 0x6) r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000040)={r12}, 0x8) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r14, 0x84, 0x71, &(0x7f0000000040)={r15}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r13, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r15}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000040)={0x9, 0x800, 0x4, 0x8612, 0x7, 0x4, 0x4, 0x1f, r12}, &(0x7f00000000c0)=0x20) r16 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r17 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r17, 0x84, 0x71, &(0x7f0000000040)={r18}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r16, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r18}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000440)={r12, 0x7fff, 0x100, 0x9, 0x1, 0x6, 0x101, 0x9, {r18, @in6={{0xa, 0x4e20, 0x81, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x88}}, 0xb94b, 0xff, 0x7, 0x7}}, &(0x7f0000000500)=0xb0) r19 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r19, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 10:11:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a91fe8f532368812b0f383b5d2c33f1ad6bfe32db5301f593d265c68faf66cbd5d7022b6fd411c9700c4ae172"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8001) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x20a000, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xa, 0x2, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x395600) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0xa000, 0x0) ioctl$KVM_GET_DEBUGREGS(r9, 0x8080aea1, &(0x7f00000000c0)) setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000040)=0xd3, 0xfffffffffffffe73) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e20, 0x4, @mcast2, 0x2}, {0xa, 0x4e23, 0x3c, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, 0x14fe, [0x2, 0x52, 0x0, 0x6, 0x7, 0x5, 0x1, 0x81]}, 0x5c) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00000c0001007f6f6e64000000001400000000000000", @ANYRES32=r10, @ANYBLOB='\x00'/22], 0x44}}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='/dev/vcsa#\x00', r0}, 0x10) r11 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r11, 0x4024700a, &(0x7f00000003c0)={0xc, 0x3b, 0x15, 0x1b, 0x9, 0xff, 0x4, 0x2b, 0xffffffffffffffff}) r12 = socket$inet(0x2, 0x800, 0x6) ioctl$sock_TIOCOUTQ(r12, 0x5411, &(0x7f0000001e40)) [ 739.353644][T11896] usb 4-1: USB disconnect, device number 29 [ 739.440933][T22719] openvswitch: netlink: IP tunnel dst address not specified 10:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x9, 0x76, 0x2, 0x21, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x6e6bbf, 0xffffffff, {0x6, 0x2b, 0x1f, 0xe, 0x0, 0x6, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x5541a7678aa1a20d, 0x0, 0x0, 0x0, {0x6, 0xff, 0xc3, 0x80, 0x0, 0x80000001, 0x0, @in=@multicast2, @in=@remote}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bb4, 0x7, {0x6, 0x32, 0x5, 0x4, 0x0, 0x1000, 0x0, @in=@multicast1, @in6=@loopback}}, @sadb_lifetime={0x4, 0xe, 0x3, 0xffffffff, 0x1ff, 0x7}, @sadb_address={0x3, 0x17, 0x6c, 0x80, 0x0, @in={0x2, 0x4e21, @rand_addr=0x9a1}}]}, 0x108}}, 0x53698b308803871b) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) 10:11:10 executing program 2: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x96, 0xb7, 0x93, 0x8, 0x1286, 0x204e, 0x498d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) [ 739.661775][T22819] openvswitch: netlink: IP tunnel dst address not specified 10:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x100, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000240), 0x4, 0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e23, 0x49, @loopback, 0x81}}}, 0xa0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r4, 0x8}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000033001901000000000000000082000000ffd38d9b0c0001000807100004000600"], 0x24}}, 0x0) 10:11:10 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x80000, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x10031, r3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0x15}], 0x1}, 0xc100) sendmsg(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002e00)="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", 0x2b7}], 0x1}, 0x8000) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d09a0e633a476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd3238d03dbb686df460963245dedf2013ee555af99499e44ad420dbf65fd46fbc99a1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb264eddea60b18e16c31aa5e200000491634ac2fd10e2cd30bcd7fede24263a7fff16e53ea293f3551b7147c33a44ea437fb1515c3e8d4f162fdebf8ebe11ae6fcd9372c8d8f19556ae091fe94215ae9434da412f6fa4cb6561e5f78ff9707844ee5d573fb294437722d9a06dfa61748c32c73d759933a8dd344c947d3efdbe90d0eb049df5fbb0c19f6785264b619c530d97395d44b04f7e2a280d658c7871ad373b792678c49227999651ef3b2ee1bc2b8f3035db376e8e09aa3837233c8713065a8ad131d24f6c42a3220d0e07c3d3e95d59a5dd10c09716b5f874ecf53aadfa5050ff40f2c3c4a629b6445e5836100afff5a8977583653b40ca316f8f11416e5c1bd5499636ddae25fc4970b37209cf5c0bf8e432160c258d14223baa52798e09858645773dd97e68a9531072713cff077b2e73e03ed4f145e9199c126a7f235e5674a3c7f5c7129ac7c1a3319590249b6d34ef6c3d8b94c6fc7cdcbddb053243053f7bc1f230d3bc7dfc4359e33992d0a3946b914a093287a76ac4a249b5b86cc75476466e409553355fefab75e9268a8751ffc9481fcff1f49c475699595b315e2147eebe8b7291600c6b1cf7c8f24d587b9464a67e5ccec17820e711b98f4f7d5053642068a3fff704c3fe35ba862b53e2622d6e8b4a4c815fb2ea90ef63e141209dd29254e5ab5bde9c6857b3cb184586049e7741b2d8b5b1a19e99e1834a25959155720c1c0ef84d9d3c42e1ba282847d476cef0228b1422aba08e5f3c1cd279bbd1c5303c2e9c16a0da4f88f770fca118b09e92b51a33970e32ade0c74eee1b31a420d7914c9d75db25855ae32798edc1b47e0f0f88429b2b60ae63", 0x2d5}], 0x1}, 0x0) r5 = eventfd2(0x0, 0x0) r6 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r6}], 0x1, 0x0) r7 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r7}], 0x1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4702, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000100)=0x1c, 0x80000) poll(&(0x7f0000000180), 0x0, 0x100) lseek(r5, 0x0, 0x4) [ 739.743068][T11863] usb 6-1: new high-speed USB device number 36 using dummy_hcd 10:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_delrule={0x9c, 0x21, 0x1, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x5a9eb619fbf5c651, 0x3, 0x3, 0x0, 0x0, 0x6, 0x12}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e21}}, @FRA_SRC={0x14, 0x2, @mcast1}, @FRA_DST={0x14, 0x1, @empty}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x4}, @FRA_SRC={0x14, 0x2, @mcast1}, @FRA_DST={0x14, 0x1, @ipv4={[], [], @loopback}}, @FRA_DST={0x14, 0x1, @ipv4={[], [], @broadcast}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x9c}}, 0x4008004) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) 10:11:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 739.976812][T22877] openvswitch: netlink: IP tunnel dst address not specified [ 740.003759][T22913] openvswitch: netlink: IP tunnel dst address not specified 10:11:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000033300190100000000000000000200004600d38d0004000600"], 0x24}}, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0xa, [0xc2d, 0x7f, 0x6, 0x6, 0xd03a, 0x1, 0x400, 0x2, 0x3, 0x100]}, &(0x7f0000000100)=0x18) [ 740.062398][ T3705] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 740.163008][T11863] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 740.170787][T11863] usb 6-1: can't read configurations, error -61 [ 740.302165][ T3705] usb 3-1: Using ep0 maxpacket: 8 [ 740.342711][T11863] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 740.422605][ T3705] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 740.430953][ T3705] usb 3-1: config 0 has no interface number 0 [ 740.437265][ T3705] usb 3-1: New USB device found, idVendor=1286, idProduct=204e, bcdDevice=49.8d [ 740.446549][ T3705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.456382][ T3705] usb 3-1: config 0 descriptor?? [ 740.499015][T11866] usb 3-1: Direct firmware load for mrvl/usbusb8997_combo_v4.bin failed with error -2 [ 740.509091][T11866] usb 3-1: Failed to get firmware mrvl/usbusb8997_combo_v4.bin [ 740.516910][T11866] usb 3-1: info: _mwifiex_fw_dpc: unregister device [ 740.698795][T11866] usb 3-1: USB disconnect, device number 30 [ 740.772386][T11863] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 740.780355][T11863] usb 6-1: can't read configurations, error -61 [ 740.788550][T11863] usb usb6-port1: attempt power cycle [ 741.472181][T11866] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 741.502344][T11863] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 741.712519][T11866] usb 3-1: Using ep0 maxpacket: 8 [ 741.772460][T11866] usb 3-1: device descriptor read/all, error -71 [ 741.902340][T11863] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 741.910212][T11863] usb 6-1: can't read configurations, error -61 [ 742.062224][T11863] usb 6-1: new high-speed USB device number 39 using dummy_hcd 10:11:13 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x0, @vbi}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x800, 0x61ce], 0x3, 0x2ab6, 0x0, 0x0, 0x5, 0x8000, {0x0, 0x3, 0xfff8, 0x0, 0x6, 0x1, 0x4, 0x8000, 0x0, 0x8000, 0x7, 0xd4, 0x6, 0x3, "ab3f17485f38f82e9c22fc5340000023112b00"}}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000040)='loginuid\x00') ptrace$cont(0x3, r2, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x21, 0x0) unshare(0x40000000) ptrace$setsig(0x4203, r2, 0x7ff, &(0x7f00000002c0)={0xc, 0x3ff, 0x8}) 10:11:13 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x8) syz_usb_connect$cdc_ecm(0xcd84db678fe82854, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x82, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2f151000, 0x0, 0x0, 0x6}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x42}}}}}]}}]}}, 0x0) 10:11:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r4, &(0x7f0000000100)="da9207fdbeee850c3356c1f92402162f8884c616b56508f5039ff96064fc9988058f0e7c5d33573cb7187d89ad419f4b2f6786edd3f55120546b7d593696c95258c98fe2afd36ea8c2f1e41cb1b6782d73904d8ec50eaf08eb9f7c945f9f3361d669937be220827549d6e1d1dea131a033975504bed05be113103f8fa80e642618eb4f24", &(0x7f00000001c0)=""/77, 0x4}, 0x20) r5 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) 10:11:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:13 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x4000c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x14}) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x2000) socket$inet6(0xa, 0x6, 0x14) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xdd, 0x1, {0x101, 0x7a5b}, 0x3}) ppoll(&(0x7f0000000140)=[{r1, 0x6002}], 0x0, 0x0, 0x0, 0x0) epoll_wait(r1, &(0x7f0000000200), 0x22a, 0x0) [ 742.442672][T11863] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 742.450351][T11863] usb 6-1: can't read configurations, error -71 10:11:13 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) r2 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r2}], 0x1, 0x0) r3 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r3}], 0x1, 0x0) r4 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r4}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000200)='\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[]) read$FUSE(r0, &(0x7f00000030c0), 0xfffffed0) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a') dup2(r5, r0) [ 742.509594][T22975] openvswitch: netlink: IP tunnel dst address not specified [ 742.516288][T11863] usb usb6-port1: unable to enumerate USB device [ 742.565027][T22977] IPVS: ftp: loaded support on port[0] = 21 [ 742.567642][T22980] openvswitch: netlink: IP tunnel dst address not specified [ 742.765361][T23087] IPVS: ftp: loaded support on port[0] = 21 10:11:13 executing program 5: syz_usb_connect(0x5, 0x0, &(0x7f0000000000)=ANY=[], 0x0) r0 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)) 10:11:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80000, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={r6}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) write$cgroup_pid(r9, &(0x7f00000001c0)=r10, 0x12) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r6}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000100)={r6, 0x16, "3875ba7cb97828efaf43c4eb11218ad58691946addee"}, &(0x7f0000000140)=0x1e) 10:11:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x15, 0x35b, 0x0}) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000140)={0x50, 0xffffffff, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0xfffffffffffffe04, 0x0}}) write$hidraw(r1, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) [ 742.945383][T23093] openvswitch: netlink: IP tunnel dst address not specified [ 743.016241][T23096] openvswitch: netlink: IP tunnel dst address not specified 10:11:14 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) r2 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r2}], 0x1, 0x0) r3 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r3}], 0x1, 0x0) r4 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r4}], 0x1, 0x0) r5 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r5}], 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES16=r2, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRES16, @ANYRES64, @ANYRES64, @ANYRES32=0x0]], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 10:11:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a91fe8f532368812b0f383b5d2c33f1ad6bfe32db5301f593d265c68faf66cbd5d7022b6fd411c9700c4ae172e57ac6d94e2949067fff31"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000033001901000088534d7b388a8369f4f1dcc000000000000002000000ffd38d9b0c0001000800100004000600"], 0x24}}, 0x0) 10:11:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) r2 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r2}], 0x1, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x200000) r4 = dup2(r0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) 10:11:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'syzkaller1\x00', 0x2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r5 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r5}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r5) sendfile(r1, r2, 0x0, 0x2000005) dup3(r0, r1, 0x0) [ 743.413626][T23214] openvswitch: netlink: IP tunnel dst address not specified 10:11:14 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x40000000, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e00000033000503d25a80648c6356c10324fc00030000000a000a00053582c1b0acea8b0909098004021700d1bd", 0x2e}], 0x1}, 0x0) timerfd_create(0x5, 0x100800) [ 743.493462][T23219] IPVS: Unknown mcast interface: syzkaller1 10:11:14 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x20, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000440)=0x14) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000500)=0x18b) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40a10035}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x28, 0x2a, 0x0, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf, 0x9}, {0xb, 0x10}, {0x2}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000480)={r5, 0x0, 0x5a61, "b20e7215f58032da8f0e27e7ba27e61eb43a2b4f0dbba6271c8335f313c640bd6bd097e06910cd57dca237825b4e626f070854d5fedc7d146826e936d360f61b8e7bfdc58b38982c9d0b50c34f8fb1faa02273ea5af79583c94766d199366ef2236450aa9ba7766e3c05b3724d510586aecd18"}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x2010, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) [ 743.595499][T23225] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 743.604356][T23225] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 743.651762][T23228] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 743.660356][T23228] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. 10:11:14 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r1, 0x49b, r2) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_keyring_id(0x0, r3, 0x100000000) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) io_setup(0x3b24, &(0x7f0000000740)=0x0) io_submit(r4, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000780), 0x4000}]) [ 743.729356][T23227] openvswitch: netlink: Key type 8208 is out of range max 29 10:11:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2002, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000180)=""/246) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x3c0) 10:11:15 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x47, 0x8, 0x1c, 0x8, 0x257a, 0x3607, 0x8043, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x92, 0x36, 0x1d, 0x0, [], [{{0x9, 0x5, 0xb, 0x2, 0x128}}, {{0x9, 0x5, 0x8a, 0x2, 0x1}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) 10:11:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) waitid$P_PIDFD(0x3, r5, &(0x7f0000000140), 0x80000000, &(0x7f0000000280)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r7) r8 = syz_open_procfs(r7, &(0x7f0000000080)='cgroup\x00') setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) 10:11:15 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000025f42010b1134200d9fd0000000109021b0001000000000904ad0001ac8f0400090503000000000000"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/71, 0x47) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x206) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) 10:11:15 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x1000000000000002, 0x0) r2 = geteuid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', r2, r3) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x700, 0x0) getsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000440), &(0x7f0000000480)=0x4) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002a00)}, 0x0) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) 10:11:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x5, @vbi}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc446d000a917e37d) mq_unlink(&(0x7f0000000100)='loginuid\x00') ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000540)={0x1, 0x402, 0x7}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000340)=""/255) r4 = gettid() r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000300}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x54, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4f20}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1d}}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}}, 0x4044000) syz_open_procfs(r4, &(0x7f0000000040)='loginuid\x00') ptrace$cont(0x3, r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f00000000c0)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) [ 744.402472][T11896] usb 3-1: new high-speed USB device number 33 using dummy_hcd 10:11:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x37, 0x119, 0x0, 0x0, {0x2}, [@generic="c08f00184d3acf9b83d4041a4eaaff745f", @nested={0x4, 0x1}]}, 0x2c}}, 0x2000000) [ 744.555883][T23391] IPVS: ftp: loaded support on port[0] = 21 [ 744.575785][T11863] usb 2-1: new high-speed USB device number 47 using dummy_hcd 10:11:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100), 0x0, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x1, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200200) ioctl$EVIOCGID(r6, 0x80084502, &(0x7f0000000140)=""/49) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RMKDIR(r5, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x0, 0x0, 0x2}}, 0x14) [ 744.718008][T11896] usb 3-1: Using ep0 maxpacket: 8 10:11:15 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bd00", @ANYRES16=r3, @ANYBLOB="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"], 0x3}}, 0x8081) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x972c3defd57f6e4e, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc041}, 0x20000004) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfffffffffffeffff}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r5 = dup2(r4, r4) sendmsg$tipc(r5, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fe", 0x1}], 0x1}, 0x0) socket(0xa, 0x3, 0x20) sendto$inet(r4, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) [ 744.842264][T11863] usb 2-1: Using ep0 maxpacket: 16 [ 744.846633][T23471] net_ratelimit: 4 callbacks suppressed [ 744.846654][T23471] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 744.862650][T11896] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 296 [ 744.872721][T11896] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1 [ 744.882727][T11896] usb 3-1: New USB device found, idVendor=257a, idProduct=3607, bcdDevice=80.43 [ 744.891920][T11896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.927772][T23473] IPVS: ftp: loaded support on port[0] = 21 [ 744.994130][T11863] usb 2-1: config 0 has an invalid interface number: 173 but max is 0 [ 744.994970][T11896] usb 3-1: config 0 descriptor?? [ 745.002799][T11863] usb 2-1: config 0 has no interface number 0 [ 745.002917][T11863] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=fd.d9 [ 745.023258][T11863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.058590][T11896] option 3-1:0.0: GSM modem (1-port) converter detected [ 745.099229][T11896] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 745.146026][T11863] usb 2-1: config 0 descriptor?? 10:11:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x87?\x82\x0f|@\x00', 0x2000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000040)) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @remote}, 0x10) close(r1) r6 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) sendmsg(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="2446dfb35a2ce1dc61e0e9783e3ada8304b3959834436045d97d8bd5c2e01847a0721751513ea7a3271921f649eb68ed4016d453d8ab094461220330dc36b87411ef20a6eaf7c670c1f4ad15445acb2d54a7d73aefad876abc265c84f23acecf9e9ca42d897073525cf31021d5550a", 0x6f}, {&(0x7f0000000080)="d55b77bf830c67d70e052fdd319e8ff2f3670db4b9e947c4405c685cdb0c481fdadf3f03a41d0b65a974c119325cb53e3276e4b849c9a5f320", 0x39}, {&(0x7f0000000180)="17963d9c9a58ba39a00b55e42b7c92e7f383e6e78fbff854b259c6e558dac0cbbcb5db88afa628ca53896325f5100045de904b98ff3f2b5fc959a9e8c31de38b625a15a42d7de63a15f58c2694db0732c583b8d6ccabbac65b4e6bf91b621170ff87d060f8ec5f80216088e6bfa8a1248554ab1cf26141b06a0923d0947ef9fa55637ac5655106824deb4b", 0x8b}, {&(0x7f00000002c0)="58092cb46451425d6e19634486b9e2d7cd04b7a30682af11a5491aea87e829fea328b492cf6efdb216d9ce91c0e1139feceb10c5dacf280f59ea59da66b8e16212910820f2639ea016f4e0bbaceb1ab83dd6cf26cf6b64695f200568446d90cbac1279e62eacb8a3648ba6661c2d926921383592b3537a0aeae744eaca65013f8b926a92c3dc32a198ed1ef28b7a", 0x8e}, {&(0x7f0000000240)="2df1d0089e60ea15de682b22c9e933593aeb295d84772a36611c28c78dcda312864be4614553ac2ad78c18b8143054252a553c5ff1d741249fed891cfe3da9", 0x3f}, {&(0x7f0000000380)="41aa22e31f2c88908892227ecdb69a08bd3117a62723ac6602013b1f65eb4bb0335d120c54abaa424fa80638e184626f1f58056a1d1dec71adedc45d92c8844c6c495b69450de95d76704c0085cd2673dceae635093d86267bcb716168387dacb945650731f5771ea70f4bb6d5800433b038f2207a4d018d81f387ae2b4d7a7f4937c7b6774b1f3842ddb01bf6eff64be016f0114e602591c65cf183d4267740ce8d05e6a751ebf6628d78b185a4f008d32e5880037b5d39a0dddb87d6949592ebcc9937a9601cfa86c99a7f17", 0xcd}, {&(0x7f0000000480)="81c3fb056d9ecfc8aff062255290354634483863b62edb7f288d71028ebc44e2002393bb376574a1310cd8b4ccdf3cc092d9f94a927ac4ab436d487bd0901ef2b3283ae2db73dee1566eebfc3e997350e445e1becef27636ca27f64b1fabcadbfbcb5d5138b47404ec386b241c6de6bd85c48582505833e2fdd481a064c58e0704431507230c6938c9708baf11f5cdae433ce2d2958a5ee7af628a1a038cbed158d538c649e160814177a3cab0cfd568ae769d4427fd9becd930e71607357a2fe39a79242590ae64bffbc088", 0xcc}, {&(0x7f0000000680)="995262c501b7987b1019af85f026fcda0a103c8ab8fd801f7db643a0189e71b4b6e3a25767daedd438a059bf3e99689db6854e6b394e9e40d7a771e452bded6b989cec2865658ea4370c1d802ed165091b74e001dbc842d4419b5520db23c6f2d695549d9da61ea95e6b970e17405e4acf836f0b9ae28099b636bd5507bbfd82effa518825f7b9dc090420571e5678859cad68bd0cf4300e9ffe58f49a5ea5f6ae3c401e097c", 0xa6}], 0x8, &(0x7f0000000740)=[{0x100, 0x10e, 0xfd66, "45bcfefc122acbd392cfb227263533ac9df1caebee5965abfe8ae05be209f642f160e8ea81ef054e3df12f6ae28d72f324b02948b0854f123ff5c0b3e0bb62146e49da9e8d79df8b82e6783e04be310eee25d50cfb45550f6e83833898ce3e3ebef7db8a11ee29a3a993507544bbad759fc68c02fa7698a2a564efd5c3d1b4db7b552b2708eb8b14e7e6ed4c05e2846ed782b5578ddb41b3394bae8cfe76c68b1f6b93fea1545449a5d7a979c7a82cb33836ce1407a67f14cfc605edd4a11904574a3c471fe5acd5f1359c1da7b5fbfe7a1f80d03d6ca32cca03b3f657f6c3c7818cf96746a9ae8cbfb9e5e5cb733ad0"}, {0x108, 0x113, 0x9, "d1cffc556ff1b0729a95b5359e870655fc16c12e426c9b892a4777e2bbeac546f8ec0a02a8128df35fb5e82df2d9fce2d0c119b1fb6c78bb88df36a19acf2a38bc8cbc1a41e6f710e9946dccf335d0c5ba4536311395f66c1d5b3ef23f6e9387298d4528cb9a46b79660bb0c3b23bdb2c0650b2e599d266d5966a5147be7750169883c8d9d0ef6e03e30cdaa466d0a53db8c19eace4fc85486133e0f200643cb8166702a7333d3967e76e076d6e84d8bae738db50f419b381b19efc7512f54b5143331c5294c31ef7a6f2ca51733cab2685c55af8fed3cf8a3fb85b84e4a8c76840756f5533bd621916423fa5a0fc466f0db5bbd8468fe"}, {0xa8, 0x10f, 0x3ff, "b50f114b8c4c4a7e49497a1e4b6f6da374194f1c09a8adf594e9568ac508b1a4afdb23d1477f4e32e03dd9c098811102bb851b9214b7d43fa57776a94a8ece0ee10a0b76137d7a9547917e6679db96382a8273b4115353b713b659ed3c570cdd215952f46930860ac5d13e45ae4fc279d4688b11a385b921b83aae9e0da26f01704afd0f58db56aa63b8d8a46c4b16ae80c1bf"}, {0x18, 0x114, 0x7, "bb487cff010000"}, {0xb8, 0x105, 0xb9, "396159a8a27abc3686446bd0c44742ccf4cd3876c32c07186bfac2a42b58efdf3bc813bdf274e5c447bd98b9872c2e098a0a43681fabe610cd353079c289e9db642abe8c791e3f65ae935a72f2ee512148a3d4918d4bceea61b49051ad618fed47ee45e05f93f2ca92190f7f0c201086a7cc638c63288d59cb851ef2a76cbeaca329fba3a284ecf25faa418cb6f077d5c93d1115f95a6183cb64305b8f160209df"}, {0x30, 0x1f9, 0x8, "0c5604fd864e49bde27d3ce01242f48b183632b8526b8b625ceb"}], 0x3b0}, 0x8804) [ 745.233930][T11863] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! 10:11:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)={@empty, 0x0}, &(0x7f0000000580)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000980)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000009c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000ac0)=0xe8) r14 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r14, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) getsockopt$inet_pktinfo(r14, 0x0, 0x8, &(0x7f0000001d80)={0x0, @loopback, @local}, &(0x7f0000001dc0)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = fcntl$dupfd(r17, 0x0, r16) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) getsockname$packet(r18, &(0x7f0000001e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001e40)=0x14) r20 = socket(0x11, 0x800000003, 0x0) bind(r20, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r20, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r21, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000022c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1008}, 0xc, &(0x7f0000002280)={&(0x7f0000000fc0)={0x3f4, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0xac, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1d4, 0x2, [{0x3c, 0x1, @user_linkup={{{0xfffffffffffffe76, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xffff, 0x0, 0x8, 0x3f}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @user_linkup={{{0x0, 0x1, 'user_linkup\x00'}}, {0x0, 0x6, r21}}}]}}, {{0x8}, {0xfc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r19}}}]}}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) r22 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) [ 745.280108][T11896] usb 3-1: USB disconnect, device number 33 [ 745.283531][T23579] device syz_tun entered promiscuous mode [ 745.308570][T11896] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 745.319190][T11896] option 3-1:0.0: device disconnected [ 745.339029][T23562] device syz_tun left promiscuous mode [ 745.390583][T23585] device syz_tun entered promiscuous mode [ 745.401675][T11863] usb 2-1: USB disconnect, device number 47 [ 745.407912][T11862] usb 2-1: Failed to submit usb control message: -71 [ 745.415109][T11862] usb 2-1: unable to send the bmi data to the device: -71 [ 745.422400][T11862] usb 2-1: unable to get target info from device [ 745.428861][T11862] usb 2-1: could not get target info (-71) [ 745.434873][T11862] usb 2-1: could not probe fw (-71) [ 745.435730][T23562] device syz_tun left promiscuous mode [ 745.550968][T23588] openvswitch: netlink: IP tunnel dst address not specified [ 746.062213][T11898] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 746.182237][T11863] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 746.312379][T11898] usb 3-1: Using ep0 maxpacket: 8 [ 746.432340][T11863] usb 2-1: Using ep0 maxpacket: 16 [ 746.432462][T11898] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 296 [ 746.448050][T11898] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1 [ 746.458023][T11898] usb 3-1: New USB device found, idVendor=257a, idProduct=3607, bcdDevice=80.43 [ 746.467522][T11898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.477118][T11898] usb 3-1: config 0 descriptor?? [ 746.526772][T11898] option 3-1:0.0: GSM modem (1-port) converter detected [ 746.537944][T11898] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 746.574395][T11863] usb 2-1: config 0 has an invalid interface number: 173 but max is 0 [ 746.582808][T11863] usb 2-1: config 0 has no interface number 0 [ 746.589044][T11863] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=fd.d9 [ 746.598380][T11863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.608408][T11863] usb 2-1: config 0 descriptor?? [ 746.656911][T11863] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 746.725814][T11863] usb 3-1: USB disconnect, device number 34 [ 746.736950][T11863] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 746.747118][T11863] option 3-1:0.0: device disconnected [ 746.855683][T11866] usb 2-1: USB disconnect, device number 48 [ 746.862821][T11940] usb 2-1: Failed to submit usb control message: -71 [ 746.869662][T11940] usb 2-1: unable to send the bmi data to the device: -71 [ 746.876980][T11940] usb 2-1: unable to get target info from device [ 746.883606][T11940] usb 2-1: could not get target info (-71) [ 746.889549][T11940] usb 2-1: could not probe fw (-71) 10:11:18 executing program 5: syz_usb_connect(0x0, 0x31e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xba, 0x4c, 0x6c, 0x400000000010, 0x10cf, 0x8064, 0xf8f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xec, 0x84, 0xc6, 0x0, [], [{{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x9, 0x0, 0x4, 0x400, 0x6c}, &(0x7f0000000140)=0x98) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'irlan0\x00', r2}) 10:11:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:18 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x40084146, 0x400000) r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000100), 0x80800) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000001c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x800) syncfs(r3) sendmsg$nl_xfrm(r2, &(0x7f0000001300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x107c}, 0x1, 0x0, 0x0, 0x10}, 0x3fa614083520cde) 10:11:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = clone3(&(0x7f0000000240)={0x4000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), 0xa, 0x0, &(0x7f0000000100)=""/46, 0x2e, &(0x7f0000000180)=""/142}, 0x40) r2 = getpgrp(0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) kcmp(r1, r2, 0x5, r3, r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@setlink={0xa0, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0x80, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x74, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}]}, 0xa0}}, 0x0) 10:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x2, 0x0, 0xa8}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10c, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xf4, 0x1, [@generic="1163f1cff99b70d202a4996128852afff4fd9907f171bdec155d6820678dd8975e4ad3b955ea636c11ef636012ade657edeca9199544cfe6dbd30dc97fc7a1c77f1d0f04fce61d23d879d29f5b7b9d79e96d3823208a9e102317eef3fe963a819ae902458af9ce531a204172eec90141d5f965cd3583368da05000a676e7026db8325be0aa3d5163b7f86fed8e0c128967aaee5693baf786dcd63477eb16ed70deace91ba2f7bfcb4056c3cc08a7b7fee22dc61fee78b3d625348cbb17cce40a2ef21ec5f411bb41616b3d665fe695f3b0e8b8e3390866df38fe63f1172b00b28640b17c3543cfe935c891010f"]}]}, 0x10c}}, 0x0) 10:11:18 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x7, 0x140) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x20280, 0x0) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000380)) fcntl$setstatus(r0, 0x4, 0x42000) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) bind$tipc(r1, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1}}, 0x10) connect$rxrpc(r4, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @mcast1, 0x9}}, 0x24) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/snmp\x00') preadv(r5, &(0x7f0000000500), 0x0, 0x0) r6 = getuid() ioprio_get$uid(0x3, r6) r7 = getuid() ioprio_get$uid(0x3, r7) r8 = getuid() ioprio_get$uid(0x3, r8) setresuid(r6, r7, r8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000004c0)={0x5, 0x3, 0x6, 0x1722, 0x4, 0x401}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = fcntl$dupfd(r16, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000740)=0xfffffffffffffe84) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29bb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb593d67d7bceaec72aad3447cf9c40bdcb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38cc59aee44e1f7e4f090ecf60605f3d912967eba82e48f12cec5dd199e0f2d8781fa4892f00857c3d10199182df6c8234d67ab35dd36fd53e37e5beea54e8b0ce488501035cc5bf88c63e1533abb4503fafccee999a3c"], 0x18}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000480)=0x3, 0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x2, 0x2) r18 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') preadv(r18, &(0x7f0000000580), 0x0, 0x2) ioctl$RTC_UIE_ON(r18, 0x7003) [ 747.412253][T23614] openvswitch: netlink: Message has 240 unknown bytes. [ 747.433721][T11898] usb 6-1: new high-speed USB device number 40 using dummy_hcd 10:11:18 executing program 1: syz_usb_connect(0x2, 0x48, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xc3, 0x92, 0x64, 0x20, 0x8086, 0x181, 0x468f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x0, 0x4, 0x13, 0x1a, 0xaa, 0x0, [], [{{0x9, 0x5, 0x8}}, {{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x87}}, {{0x9, 0x5, 0xee73dd15b2b98c8d}}]}}]}}]}}, 0x0) syz_usb_connect(0x4, 0x21b9, &(0x7f0000003dc0)={{0x12, 0x1, 0x200, 0x8, 0x8e, 0x3, 0x45bb2407a6605d14, 0x471, 0x311, 0xf01b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21a7, 0x1, 0x1, 0x7, 0x40, 0x8b, [{{0x9, 0x4, 0x85, 0x1, 0x9, 0xd1, 0x7d, 0x80, 0x1, [@generic={0x6e, 0x24, "b02290884edc911680e00b5603cb217d48cec0c8e8f3025113214b8652679d8b2f2773c239f561fcd1b72c1aa929f5d531b003bf41ca7e72c2fe7454314bb1a26c81093f9b4652271ba75a3072dc6393a9d9a21a6f3463d7517d67ecbdf058849cc4afafb9cdc6f7fdd2c3b5"}], [{{0x9, 0x5, 0x8, 0x10, 0x1c3, 0xf8, 0xff, 0x1, [@generic={0x7b, 0x25, "c6357ea3db88dc9b060547253e40e9d556a806006a07e8091e020180746dcfea4aaade916829fba86e6a635b6978d046498eafc0bf12bd0055a306060f0e128260f6d8920af5e7b19eb23129a659632cdf3badb9cb8eeada5bb8496bd1169786d95c714956db3afd6d920d6f29ceb3c0cc823de7c6f553c548"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x104, 0x7, 0x5, 0x57, [@generic={0x2, 0xa90d4c7120691f6b}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3, 0x1, 0x6, 0x6b, [@generic={0x40, 0x2679dab3d631cfbe, "5610986c96eec04c9d5fd568ed8f7b467616c67218dea13a414f4ec165e59be47fc77945bfa3b4d9f7baf4d5325e2f20bfad6d00b9614eef7b230874b4ae"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x321, 0x9, 0x37, 0xe5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0xce}]}}, {{0x9, 0x5, 0x17, 0xc, 0x2e5, 0x20, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x6c}]}}, {{0x9, 0x5, 0x4, 0x0, 0x150, 0x0, 0x2, 0x1f}}, {{0x9, 0x5, 0x7, 0x0, 0x105, 0x19, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x3, 0x33c, 0x5, 0x0, 0x7f}}, {{0x9, 0x5, 0xb, 0x0, 0x3d1, 0x9, 0xab, 0x4, [@generic={0x1002, 0x6, "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"}, @generic={0x1002, 0x23, "d8530c9cb4c958786b2700259511d3dd66601c441a48fcbb3e75788964473f75a4218f746dc632db036464d005b34790de8cdea1eeefd5207e9515426b7b8f90e9e2cbee16f412bfd178b9a8cc3c5ac02d4ad09dc4a6861841b9268c61d72d74ec0ff29fa18a1a4962494cfe3cf14cc9fbcd431f080c7d1b72a17b1de52b029e3d536a49bccd7b0c941e902ce9a538692237d53b73d71f69e6d64d5fc1b55c8ddf8742247bdee2e00db5d656812546fb09f5676f7b25b94663e98e2410a9f04b0f2b3ffc5686fbf18df2277db3176afd2583879e08c10879299286598ac7224e42bd58374e3f89cc6bd63eabe4616fc1f6b86d106701eee3c35c941829262e1c98f2d5e53554c4a1673615806f01dacb0f780acde83b2ae2de91d65b4c8a8b3f0c1cd2fb798066f0b25b42af22f24de84922a2a4d91f6c4b7c4f3ee43b915f95ad53ae17e459173fdad96d33ad995db59c41765b28f28e9309b1d8fe128bab2df36c1ad7fa8de845b3faa9fdcb02a47c5583834896d94bcfd4156f1a32fb758f246dc762092efdf9a306a583e507f5c7360d2265a462bc975d4f88a41416f032c2d44b87fe83db7f9d2df658c9308fc86fae34925093f350329c59af97791b678e46651115731f8836fe2c70fe29ef2f197fa3cee39d3ad9a3c14e359e3b9b4e90cd7be9d947f905fde79292aa1521887fcbe57967c332dc25a64bfefb963f3194a82601ea5dd3a1185efba669424397ace38d7c4056403e7de8313a7ae33db7abb00ca09764cbd0abbe6e5aa36f0016a916f500f871e4009aab574a7edc35fd959300639132daaa143c53977fd2df0e7f355eec571b2d60333704c6dda2513608a8de2a25806bfabb0ad66d10e569128e10b03520f64827ba2c830e440a78499de4f8f10ec9b44e3439e675ce798b531c020fb652df4f7b8fb84810fe7597dfaa01fc3859b6218d1017f854e16fd61e7c9271102e849c1d39c4b9582ff6a57bd8614dd51d6add56997f9b95a0e4431734d1656d1e938f922ab11c119b01c82d8284c8609b5fa9cff834ed38dbd7a4be856608eec0f8b1dfdb4b47544807a30110c2ef615849a33f91fbfdcc2442914827fb18a127a3a4368ba6830b4f598e52c3ebdfe3023c47cd30a566e552e4e1633b334e14619fdef4623217f921c6bd42d3014e4340823e50d6d8573bacee9e2cb603a468647f169e06a9547dbdaeef7701551a94411cbd949649b774c7b76e61af1375c6664f63498b926623f89b25752e610b29b686e7fb83fddca60192f3c16b4089d2107a15319e721d21062e0f39a7cb19f30f691e2955fdecf6aa5b2a3320205d242ae74a2a3fe8160bdf8c9cca8a97696c9d17ca5017e3c1855bd473fafe5baae4af683ab16b089acd9115746784fc346f9c1b8c3299cf35021991c8fe3ba4e96cc258f6071e80d9024ecc096692d1ed06729c784e0dd2a31084d7cf12af445540f44b9ad6dceaaa944640aa208f8d0c2d14472cda35b71781353f88a7d266b9c2813c16ea8e7eda0520ed327230b61d285c5ba4dbdcf5c4c20e434e3d0eb97bb507735e63f721d753d2eb2032d5dc048ec537212efc0150bebf01469b5b8ed15bea815a3a7dc8833158046f1a11bbb40d2b31200f07faec0a92f8b2cf8c2461049a9a8681a7da485b82369089556ca31a04eb24296df10a9df4e63c8f6e05b8700e3cc952615ac3ca99fc9233dcff4b83a595e10535165626f1489f2bda3acd8a63e63e857c9bf10690d31d11dff64cb8ad64b76fea517e69461d69906993b2864eeb971cebe1e03377b070720037dc4223e3e6071e17d4ba7125ea86f903e11c8a0eb9b113c72bd2072952a774fc1972aad2a1335677804a798957def1f5fb2bc0a4d9568b51c9b382fd6d0a2b9bc755212b0c0e1f7cb6b6dcc5acb8d838a4de210d3b802623490dc9b2445ffffe1ad3ffabb2ef5ef4eefc956434482ded7e2c326a6eacd57f0d9f174d5309863a71d497324f8adfe4aed5163967aa4d60d016ac092582411ef30dd04f3b86d0da67a286d8eb5d5afe16f4492063478cf9d4079a1b892bd3c26fc74be35d3ee4899af98cccd1609b18ce8b81075d414752c6b1d308df6d989c394ec217bece8de66483104ae2c2825941f2998395895168c95d33c29555e2077384975657105b8287c1ef6d15ec19d8d88a8fa2e491935e5c072a6e0e25ef3422b4470ef0751e636f7f33555fd194d54c86a67a2451031fe0c9dbe5830d3cf0441260edf0dbdb256497464dd77226c154e2454bfca8af14078aad18322a8ef87e0582e62c3e89c63e177b995c4853c934cde599c5f3a3553e0f1e99818fda0889343c4084c3d53a1b93735e44a463ed0142dfa0f4267040fdf211ad1dde09bae9cfc349ab98606b892c7151e5017706e102511f8d49404c8f6f15e53ce27e3251e8e06a52382491889a3fbb49852d23802ec8917fb8ccb5e4847be7064f291f4a2690f1216ffcfb5ff1e3f318e66784a6cc4774e64af2efebff1e97cb899ccab4c329290debf6f583cd4858ec0347eca4686bd4e5c61613f396feb9bf7646dda2728621d6c091dee2029d0b74443b465a14fce63acaafecedd26671dadc6c86dcdc5ac48c034850d78d2d92546d5fba598b2fc97d5a6f8dabb282dd69c35406f4cb93b6befce08b562b6d941f514263b2ef2b6d6d26426be2c925344b6f0f7e9c3cf638413aefbdc7e8e1c0cdd8065b5302bd931f75b8d065dc374cb5d0f62ca084404cab1fc137961f1d1dbb3c5ac070c6956f0184d00549aa3aacd20b25c014aab4957e8c475a1f8f1ac8d59ad76c2ee74c14b28025a2bdbb04ae681f053ac2987c1c9b06f33d897cb7ca71e633d7f5605ff89c6fd0cc110cfa097559055b92761c82fbb7255a9172d809f42688b3bffee48c7199e5cbfd1de9d183bfc5b7b4f04cc812ca4fb00c7f62d0195b8f1569247ae4631d135790b50b7c790ce075941d2bbbb4c7b0146ffe1d48345c35ad797560ef4ddd6c11ad0a50c2e83675d23ff1e186d9d9ddf74f9b1f98c9839b2d90846e7847515b3d9280997cb90f866517f9fe1be28b89b2eb151e8406df455b0543b61b894459d087a2ce65cd09c94b6db4efae6ffa9b1d67ab290ebfdb914a0fe6cf3cf45a34c9c1433850484a34d9c5f2adc1ae8a4a0e1cc44496f426d5598ef944798922e1866a3d289b57b0a360a06a27d0d887bb403630194953cb0c067da23870420b46f0309b29d4a97ba01da7b9aa0b90fdda5af9825edf0bed60e65de395a9cc3b03b5c9a65714ec7358da9b9f6837c4952a6d653dd93257b0e346e57c82cb81de8034358866691f437bd93bf9169c546019724873a82362e1908641db911105a7b69b138e96e8d2d027e971a29f6dda43d3f0dff6623cc630221a3baac5c74cf0ecd08e4d54df0e10613e9f17a64539d8303d3f308c0dc1f555e17914df38e5927777855187f860726521385f07431ed295305eb43522d32cc423d69d7d6c09df8746cfea8993d113e18616a29c8e39d5e68bf42fd858a18aade7c9f15f1ae7f0f62cd842f98f0604a47295853185b378e0a96e4cfef5745d0bf7625efe46469057201c6d7cce1a49f8ac8bbdeee4900443dc104db8e510043b10e33c29ab8f60032405332f30eb30ad74911179143614962244e36e2caec3e087c1e8b31ab7ea38e8286aeb41515deaa6de61991dd1751b09b0ec52d84f521a703a9bf2b20b242c2a7e437d1e7d683c23fd5d5d8dc82b02470deb978b0f5b84e6e7552f1006c00ed00dc8c8e6fc8be7d70b8773d7929ca0f950f01d6e3b9d25ca6219fb09634c30c0f24bac061aa16aeafea4cf94ff96a6e776a29abb559620de97984e54208be3423bae771d5948ff0314b8235745e6d6d6e2ef8253176d40720a851ae4df9413790c8eac926728efc4e0c70d42a671a3e142f7c7ff6f4c60aab54ca0bbc90c49674c3db1cbfe3da878ab510c6d41e1adbfcc467c3caaab9308925af9e33fc5cd0420489e003045dd010390fdd736d96f20e849ca2456c1893c6dd58b0237189a00606c7fc5dc522381f2e9b98ba2722b6e1842b43f0d5d64684817d2dc2818664ca5dac0fc54f070c22ae4a682afe67f26addc23880bdd4e990693072ac8cbe0cbee64ff84fe67351f85508cf4a5312d740de7fb2096dfd2cc548d52f5b512d0d581b75a3db1b67761c478b54f697cbe78349b6e0ee7aa28acc58fb6d53bb531ba750c8a6d8c7c7f918136052998f37bc2399eeb3d4d7c633aaed980704732b7642436cf916378abdf89b0ca53bd0fd153a9989c6d87bd0969d9c000f3d41ee92833c9ef2871d46d9809bc8fbf8d5e3da71c815f84f8c3607f1529be154dc8287daa55d94e4f8c32aaaa2ee832b82550c234f8a0408ade2ca7f363abe5c82c064863e1d8d128fb331fc19f5a3e7b17c1084d5e61f323e84a86dff030ff1cfa9347db9511ce88060aef2536fc63e06bf5769a5dc0d1008f0154fe538f35e3b30a8459dd0d0eb8b951dfab7fa83d3e5eee24af5c91ae47deeff708396a43dedd1956dff9294c7d8185b02eedaa246ad11c81c2d490a990cc27b1fcb62bc17496a73dbbb1b9eb7623cd260a231d7f003efd3ea50d979ac9106367e6b1460ce9a7c4898b0184e8c935536ec121b0120ce82c085542a50b2f89430df984ba2d9fedd0c49e559eb60ff2a8070ea855ff897b055fcace8445bf92b304305811b04a71a17856939eb9cdf7c67437398004fc239f0a6d2da8f1bb90fe3c2fc513c8c6cc9f5c51e18a08687aa20d6f00a551576b0e483f2ae1481d88a5e86b615b244bc47f0d46ff2a6030cc61f5d8ec5e71e1cab95f8e58d1bb791c0e9d4a1f193b28ae7015bf385df016de9104e5fc2bc60f53d3f2cd240164cf42f5beb53682df55d85f4e902f226e016b60e1e0c1c50cb6094c3199933837aae1e9cec800cad33cd11dc15b82d0e49a008e5196a239dba7f3bc551ade39c5c9c5bdd4b9114de54be009eba3a5919602fe30e9b772a5ec3d171bd17186211ac79b01a7fb14176524ddbeaebfaf8057c1a6eb0786aed424a95e65055f0d648661379e6d97c47d91b5ba357b6c553c10c23e23353b3682a9a4c634da1641d0ec353132754db7aac837b488c4413cbe0c69667087edf919d0d8981f48f5ee4e12c671e47cce6ff37a6f419342112f53531d8a20aea5fb20e882886b9b8fa6842223914b771f9602ab3a094864b568a62147abc7b9cc3252d2607870a50e5f78e8ce4385846890e1f3f3159b36d4a6f5295f0361b65e0f75fdf616e1adadf22246574bf13fd210c1e206495128c7ab61c13db5d00e04c464ab3f3147b71e1b54d1749b548da526d81d8eb177163227edf27e1aa56954614e8b443904b9483554d975f1f5382222b684ca576efbcb9ad29e9b4d4c3095a6398136405e808250591023e957e7beb16f48ba519b21b719f8dba92f5ea991b4437dcfb3f9da8803ef052125a609e681426b51684fbfdc9a299921889ff396fecab7b063bcde07e647ed96ad74690ca827b8bda85cbd9e94a45d046e78f224236f7cf575a05e11967412e5d08f5107b6ab6b5a2400c12e2d5f5219ea0583b19f9bffcfd914b5915d5961b246e8f67edffb189effd4c1869968e0637151f5840ee1395f025eda61b5ee13b205ebcd18b933c0c2762427acd7525312b841c92c3082a2acc0a9e0809866dbdd4c521a2e1eff8c59b04706ef7c0c6baf05a03a89d0ece77061a4453b338bbd3473d95aa0d641a363a38795e86aa45544d5d2d6f9e82e6d8e16"}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x150, 0x81, 0x3, 0x2, 0x40, 0x9}, 0x5d, &(0x7f00000000c0)={0x5, 0xf, 0x5d, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "1a99f104510f5e7c8b6e80836d3ac045"}, @ssp_cap={0x24, 0x10, 0xa, 0xd4, 0x6, 0x825c, 0x50599f818fe8396b, 0x9, [0x0, 0xff0030, 0x3f00, 0xc000, 0x30, 0xf0b400ff52ca379b]}, @ss_cap={0xa, 0x10, 0x3, 0x4, 0x0, 0x3, 0x9b, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x42, 0x40, 0xfe, 0x4, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x31, 0x9, 0x5, 0xdc, 0x48}]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x400) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 10:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_CTRL(r5, 0xc008561b, &(0x7f0000000440)={0x2, 0x7f}) sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmsg$nl_generic(r2, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x250, 0x17, 0x0, 0x70bd28, 0x25dfdbff, {0xc}, [@typed={0xc, 0x71, @u64=0xff}, @generic="d6e56af211e4afcfd2cb0e698ed723c4f72fc8993549bbef00087030672a2ab146368e9c9ee233a3dfeda523afe517adbf4f89ecbdff26ce7dea1dc78d1de4a1386392e129b9ff88244e4e3af36e12a9d5bfad2b02fa2fc883324ae25bfcfa005ed06407097c3c8300fa7fae77f2fe0cbaeda10b4bc167f575634c1dd8ba350fc7264bb377b1895090ce7b9dbd0967998b99c097bd6036b993a4e4b660effc12f9c974e88fa6fae692b63bb7629135cc6fafab44f29c01bd9063496b57e9f3bcb16949ee7a5185", @generic="3a67bf0a98e2a3b10cbcae0ee732517f616dbdd5131eb6f23f6d8caeb48c532678dc0776ec653d9396c3a4d4e19b1bbc262bccd50f68738bbc8c13949d09f66a5ff9f39fa7ac1bc183e422655c255b784c98c4992d3ddd5a96340cc133577bf635b6d179b41d03a0e5553368dc035c5347997097d52b847be8fb3c709773dd0187650b4edf05a1454a1c5ecd8e0158cc28e5bcb9db5d4dca3b69", @generic="de054a6aae3f32322a10675952eb03d2d0df59bd7612536e8dbeaea7ebfa0748cb7a3bb5f685aa31be4ffc7e2e2a881fe671b0d2c7a3e0806e841983141bc90fda33cdc40e8c93c78104c7a82ecb0b98a9f85736347503251bde68714f561bad7b82c54c8b52ee1f69de78e20b873b2615d94adb7c3da66a103f2ccbb8a41aed4a09384010e80c35aa492a4b97d5a45d5d8e93e9abe865335d099741f775db68fbb41aded9a575ad097289837170930294d123297a8c392fb5cf9e2dedc991b83167130a9902918e47fc1319"]}, 0x250}, 0x1, 0x0, 0x0, 0x8000040}, 0x800) r6 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8c8d5ec003183aef, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) [ 747.675526][T11898] usb 6-1: Using ep0 maxpacket: 16 10:11:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:18 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x42, 0x95, 0x8, 0x46d, 0x896, 0x8e42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x81, 0x7a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x11, "3d0bac252af6fe71bb5025bda7dfbc4da0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = dup(0xffffffffffffffff) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/81) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0xac, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 747.792916][T11898] usb 6-1: New USB device found, idVendor=10cf, idProduct=8064, bcdDevice=f8.f7 [ 747.802758][T11898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.839136][T11898] usb 6-1: config 0 descriptor?? 10:11:18 executing program 2: r0 = memfd_create(&(0x7f0000000680)='t!\xac\xba\a\x1b\x98\r\xb1\x13g\xa6\x05\x14!\x92\x8bTdQ\xc6: \xae\xd4\x8fZ!eU\xa7\xfbf\xc1\xfc-\x93\n~Y\xf1\xb9?\x18a|\xa9\xc4\xd4\xe2\x8eC\x9a\n$]f\x95a\x97\xe5\x1a\xc2\x948\xe2N\x97B\x12\x01_\xd3\f5\x14f\x02\x12\x17\x81\x0f$e\x95U\x86\xc7\xa0gr\x8a\x1d&\x17w\x92\x92\xc2\x99EF\x17\xeeL\x05\\\xd9ZB\x17\x87P\x1a\xf1\x1e\xa49\xea\x88\x87\x8a\xe4vgR\xc3\xe3Ee}T>\xc8#E\x1b6\x9b\xe9\x83\x06', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000040)='t!\xac\xba\a\x1b\x98\r\xb1\x13g\xa6\x05\x14!\x92\x8bTdQ\xc6: \xae\xd4\x8fZ!eU\xa7\xfbf\xc1\xfc-\x93\n~Y\xf1\xb9?\x18a|\xa9\xc4\xd4\xe2\x8eC\x9a\n$]f\x95a\x97\xe5\x1a\xc2\x948\xe2N\x97B\x12\x01_\xd3\f5\x14f\x02\x12\x17\x81\x0f$e\x95U\x86\xc7\xa0gr\x8a\x1d&\x17w\x92\x92\xc2\x99EF\x17\xeeL\x05\\\xd9ZB\x17\x87P\x1a\xf1\x1e\xa49\xea\x88\x87\x8a\xe4vgR\xc3\xe3Ee}T>\xc8#E\x1b6\x9b\xe9\x83\x06', 0x8e) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 747.871716][T23727] openvswitch: netlink: IP tunnel dst address not specified [ 747.892558][T11863] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 747.902448][T11898] vmk80xx 6-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 748.027375][T23731] openvswitch: netlink: IP tunnel dst address not specified [ 748.099590][T11896] usb 6-1: USB disconnect, device number 40 [ 748.262185][T11866] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 748.283077][T11863] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 748.291448][T11863] usb 2-1: config 0 has no interface number 0 [ 748.297821][T11863] usb 2-1: New USB device found, idVendor=8086, idProduct=0181, bcdDevice=46.8f 10:11:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc0000003100000828bd7000fcdbdf25000000007c00010010000200000008000300cd20000000001400000000000c000100706f6c696365000000001400080000000c000100736b626564697400000010000500000008000300ff000000000010000800000008000300ff070000000010001f0000000800030003000000000010000c000000080003000500000000002c0001001400050000000c00010067616374a353f5b0ed000000090000000c000100736b626564"], 0xbc}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x88020, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x200000, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f00000001c0)={0xa, @capture={0x2000, 0x1, {0x4, 0x4}, 0xffff, 0xd1c}}) [ 748.307067][T11863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.321887][T11863] usb 2-1: config 0 descriptor?? [ 748.389509][T11863] i2400m_usb 2-1:0.216: device not connected as high speed [ 748.398897][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.407404][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.415865][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.424385][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.432947][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.442809][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.451144][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.459558][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.468334][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.478502][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.486910][T11863] i2400m_usb 2-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 748.497842][T11863] i2400m_usb 2-1:0.216: warm reset failed (-8); trying USB reset [ 748.505904][T11863] i2400m_usb 2-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 748.514643][T11863] i2400m_usb 2-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 748.525187][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.533643][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.542543][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.550962][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.559441][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.567921][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.576447][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.584864][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.593300][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.601622][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.610073][T11863] i2400m_usb 2-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 748.621080][T11863] i2400m_usb 2-1:0.216: warm reset failed (-8); trying USB reset [ 748.629632][T11863] i2400m_usb 2-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 748.638062][T11863] i2400m_usb 2-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 748.648480][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.656855][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.656966][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.657081][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.673595][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.689959][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.698391][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.706820][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.715453][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.723950][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 748.732422][T11863] i2400m_usb 2-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 748.743316][T11863] i2400m_usb 2-1:0.216: warm reset failed (-8); trying USB reset [ 748.751155][T11863] i2400m_usb 2-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 748.759645][T11863] i2400m_usb 2-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 748.769885][T11863] i2400m_usb 2-1:0.216: Timed out waiting for reboot ack [ 748.777189][T11863] i2400m_usb 2-1:0.216: read mac addr: bootrom init failed: -110 [ 748.785334][T11863] i2400m_usb 2-1:0.216: cannot setup device: -110 [ 748.792156][T11863] i2400m_usb: probe of 2-1:0.216 failed with error -110 [ 748.839917][T11863] usb 2-1: USB disconnect, device number 49 [ 748.922588][T11866] usb 4-1: Using ep0 maxpacket: 8 [ 749.052633][T11866] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=8e.42 [ 749.061793][T11866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.088524][T11866] usb 4-1: config 0 descriptor?? [ 749.112197][T11896] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 749.136888][T11866] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 749.352289][T11896] usb 6-1: Using ep0 maxpacket: 16 [ 749.472599][T11896] usb 6-1: New USB device found, idVendor=10cf, idProduct=8064, bcdDevice=f8.f7 [ 749.481836][T11896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.507379][T11896] usb 6-1: config 0 descriptor?? [ 749.568032][T11896] vmk80xx 6-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 749.592185][T11863] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 749.761412][T11896] usb 6-1: USB disconnect, device number 41 [ 749.962365][T11863] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 749.970756][T11863] usb 2-1: config 0 has no interface number 0 [ 749.977276][T11863] usb 2-1: New USB device found, idVendor=8086, idProduct=0181, bcdDevice=46.8f [ 749.986508][T11863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.021254][T11863] usb 2-1: config 0 descriptor?? [ 750.066186][T11863] i2400m_usb 2-1:0.216: device not connected as high speed [ 750.075214][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.083748][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.092189][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.100536][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.109465][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.117942][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.126613][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.135083][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.143597][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.152175][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.160515][T11863] i2400m_usb 2-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 750.171571][T11863] i2400m_usb 2-1:0.216: warm reset failed (-8); trying USB reset [ 750.179605][T11863] i2400m_usb 2-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 750.188111][T11863] i2400m_usb 2-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 750.199023][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.207589][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 10:11:21 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040)={'syz0'}, 0x4) ioctl$KDSKBLED(r1, 0x4b65, 0x8001) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) setsockopt(r0, 0x1, 0x2, &(0x7f00000001c0)="77763215", 0x4) setsockopt$sock_int(r1, 0x1, 0x80000000f, &(0x7f00000000c0)=0x5c69, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) 10:11:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:21 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b02, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000003c0)={0x0, 0xe, 0xfffffffffffffef2, {0x22, 0x23, "5cdba0d5b2f22fea542b2388675e925daab1f5649a605d68bdf1cbd052f37fec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 750.216019][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.224448][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.232880][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.241214][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.249687][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.258145][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.266600][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.275047][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.283448][T11863] i2400m_usb 2-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 750.294341][T11863] i2400m_usb 2-1:0.216: warm reset failed (-8); trying USB reset [ 750.302476][T11863] i2400m_usb 2-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 750.310807][T11863] i2400m_usb 2-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 750.321188][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.329605][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.338266][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.346679][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.355080][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.363484][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.371839][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.380263][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.388677][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.397079][T11863] i2400m_usb 2-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 750.405496][T11863] i2400m_usb 2-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 750.416381][T11863] i2400m_usb 2-1:0.216: warm reset failed (-8); trying USB reset [ 750.416478][T11863] i2400m_usb 2-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 750.416517][T11863] i2400m_usb 2-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 750.416551][T11863] i2400m_usb 2-1:0.216: Timed out waiting for reboot ack [ 750.416587][T11863] i2400m_usb 2-1:0.216: read mac addr: bootrom init failed: -110 [ 750.416729][T11863] i2400m_usb 2-1:0.216: cannot setup device: -110 [ 750.433051][T11863] i2400m_usb: probe of 2-1:0.216 failed with error -110 [ 750.492543][T11866] gspca_vc032x: reg_w err -71 [ 750.497605][T11866] vc032x: probe of 4-1:0.0 failed with error -71 [ 750.517267][T11866] usb 4-1: USB disconnect, device number 30 10:11:21 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x2) sendto$inet(r0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000000)={0x20, 0x1, 0x1, 0x38, 0x2}) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20020, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x1, 0x4) socket(0x1000000010, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000001700)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000300)) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f0000000240)="240000001a0025f07e9451f68f2e9c920a0b49ffed0000", 0x17) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='\x01S\xb8\x00\x00', 0x152) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 750.585540][T11863] usb 2-1: USB disconnect, device number 50 10:11:21 executing program 5: syz_usb_connect(0x7844ab4bfcdecc7b, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a24121086d04b7087cda0000001f0902120001000000000904000000bd2c0500"], 0x0) 10:11:21 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) syz_emit_ethernet(0x9a, &(0x7f0000000080)={@link_local, @dev, [], {@ipv4={0x800, {{0x1f, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @local, {[@end, @ra={0x94, 0x6, 0x2}, @rr={0x7, 0x23, 0x0, [@broadcast, @broadcast, @remote, @multicast1, @local, @broadcast, @loopback, @rand_addr=0x7fb]}, @end, @timestamp={0x44, 0x10, 0x81, 0x1, 0x9, [{[], 0x6}, {[], 0xcd5272d}, {[], 0xe031}]}, @ra={0x94, 0x6, 0x4}, @end, @generic={0x88, 0xd, "69224850dca2bd247aa3c0"}, @rr={0x7, 0x17, 0x0, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x3]}]}}, @dccp={{0xfffe, 0x0, 0x4, 0x60, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', 0x0, "cd98e8"}}}}}}, 0x0) [ 750.744286][T11896] usb 3-1: new high-speed USB device number 35 using dummy_hcd 10:11:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38f37fdba040c4d5415a871b0f015ffb"], 0x0, 0x10}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x100000, 0x2000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r5, &(0x7f0000000140)="18acc57906390d69da6bac0faa5d69ec3bfacd3e8f522ed0dadaa28a459e45afd11dfdc9135ea8660c93f27eb8bb656e1ec82833620213252967a47dcf00a007967e1a64b2b10e009b0a2f54883f87f323", &(0x7f0000000380)=""/83, 0x4}, 0x20) r6 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000900)={0x0, 0x2}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000980)={r7, 0x9}, &(0x7f00000009c0)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$LOOP_GET_STATUS64(r10, 0x4c05, &(0x7f0000000800)) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000006c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@dev={0xfe, 0x80, [], 0x19}, @in=@remote, 0x4e21, 0x80, 0x4e23, 0x7, 0x2, 0x80, 0x20, 0x32, r11, r12}, {0x20, 0x5, 0x3, 0x1, 0x1ff, 0x23, 0x8, 0x3e91f242}, {0x7, 0x2a0000000000000, 0x8000, 0x4}, 0x4, 0x6e6bba, 0x1, 0x0, 0x1, 0x780661fbf1d1e13c}, {{@in=@multicast1, 0x4d4, 0x33}, 0x2, @in, 0x3507, 0x0, 0x1, 0x5, 0x9, 0x5, 0x8}}, 0xe8) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) setsockopt$bt_BT_CHANNEL_POLICY(r15, 0x112, 0xa, &(0x7f0000000a00)=0x3f, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x2}, [{}], "", [[]]}, 0x178) [ 750.992371][T11896] usb 3-1: Using ep0 maxpacket: 8 [ 751.112405][T11896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.123656][T11896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 751.136739][T11896] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 751.146041][T11896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.201678][T11896] usb 3-1: config 0 descriptor?? [ 751.242176][T11863] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 751.482468][T11863] usb 4-1: Using ep0 maxpacket: 8 10:11:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 751.622552][T11863] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=8e.42 [ 751.631864][T11863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.679573][T11863] usb 4-1: config 0 descriptor?? [ 751.727100][T11863] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 751.944483][T11896] usbhid 3-1:0.0: can't add hid device: -71 [ 751.950865][T11896] usbhid: probe of 3-1:0.0 failed with error -71 [ 751.993729][T11896] usb 3-1: USB disconnect, device number 35 10:11:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xffffffffffff0001, 0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001600)=0x14) sendmsg$xdp(r8, &(0x7f0000002840)={&(0x7f0000001640)={0x2c, 0x1, r9, 0x4}, 0x10, &(0x7f0000002800)=[{&(0x7f0000001680)="bb31f2c4b4d041f7faadc8e2245c89a66869426df9791922c01f024100916fcb30abbde9e80a06712d2906b834c8f67916ac28ec49878e43f18976231ed1520ee4257d993bd4417d5ea9a5b17ebd477f47b11725b663710f170e20e547379d862bc53c9a6210d10d2150c29ae0a9fef8ce4b72e29e90beaa0dfc26d5f2be7daad2929c158e81a058897eff56db9400f51e84c0b6f5", 0x95}, {&(0x7f0000001740)="e1c0d6d509c5f3fc9299db84737e765a29c1eac4929fcee4fcc4201f7a17a9de5e92b1f97ad375798143cbd06a3dd673449e592929b57ac6063768d15fa50cc667b9ee453350b5c6d325d23a135b139d411b65005ed4068b301c6e5e336bd0906b69ab3df563002a2030b0c9143d908952f0f5ea4c562994bbee2bca29f83d7480e88fdd35e8c25fdc102607e2f99cc373ab5e1e6423c83cc9eb3ea6cb04832a544147f4b30e41601235817013efdc6a746ce5f0c500e58fca5443ea34613b5efde78d62d318c7a37bf18cae54ed89c6f40d9f7587021e1244adf094e9707560174d53d5823313fbfd9f792382b4d891047f4d541f02e0fbd9ced65087578793bf2f794fb1956745746a0a457d52f46cf7cc5da77e7b8ab4d2ed024e7b809af16bbcb783fcc1f1e04b60db5b53fa36262e109f98d92d15f80d4c5b86e74ee5dc5f232a5afdf76a7b5abc25a92db5e2067dc423423518c4d902b10459ec0a832bd9f830d608ffb74ca3c2a4dbfa0dcf79c6bd07ab28a5fa7d63caa45fe67d127eafb95f1011d8662ab08e903b8f63a0aabdc38abf58106eaef9d1fa1c0942695695e8234d538eb3d6dedf6f49e70894537a0416444214db5ca3b9d95c1d3c91e93c70bec2dda795a0c1bd18f8bb7658360cc5c9b1be5dbe2f0dbe5f86286e104ae6f74ea007f6ce4fbe0196d89fefe2a28a1d06889e78ad2aa8268bc3aa11f7c91b7ba36b267110c42057671125c9d5e63d64e1f80df815aef78c8fc1a9ee620c7b17b2a4df1c02b57a0e87645f4c8dbb412d56972dfbb9c02bbd427aec11a4442254e5915657d8e88aaa61e90887a66f5b5f7905eefdec89001a721ae33982c3c654992c0729145772dd3678d76365acedc3bcc276d6e4b311c4e11ef3a4ec2d0c78b7827e9e1f7bc12f9a0f9cbdf0571c09e288c58c9f6c62195ff0e09c2a0764ac08bd100ed741d3cb0c0d771ce0aa72fbe982215a1ae4f34c3ea2b5b79900bd26420ba7423efb8d5383ed99adc5e4d9325b0b18063b518fec8742f0f8ead91f9ba3ff9a80bd9b4034c5417fc53283f54415b2c4d033973bfca862dc231936e4d212b997dfd9c05f2a969fb2877b6c36016c696c0b01da1864429c726127d3cdcac7b410d49b91a0843ae4af32b556191b8d39a7fd2f46636aa270d5d4ada5089503d9cb41f6b75fa5e0c42ec4a2a9c470a905933652b1b760fbe941901b659ed4af2a9a554361f30b60ef6cd7a6799023fb18a791dde644752cb1f87154d169a447b98368b72f13ec20341929ca1a3dab1090b094962cc81cb6825d8199507a4663df802f08fa2987c28da5c2a3a8cc87ef3ed6d4e7d9f3d824f917fa48b9a2a2d2f281d8a6bea6972839b0843160bdc5d26bb1a2c0a2c631b36a6aac2c759d38426de47f31ece01f2817a690a3a89ca95bfb0f082eb66d3a50ce83e81bc76c1991694177a61177aa468f6b7177943bfa1654ce723c7c7a3886b3dc4470b8dcf4c3491102acc298315cfd12cb973399977c8511cf04a94fff0a6252bf7c9b4d67bc9430754ded48f9434260b87738c20f1ea151796b9fddeb688bd6258ebd2568dccf76a4fb72091e7220b2177659ca7fcdbc23af033aed83cc09decee3219042c7da35a94758f5cbd98bfe862c95fec03c74b43d28e3ed56670c45be6eed6f233c67e8887d20d72906be0a04f1f4b0f44b51dd6db908149ca2a5c6288669fc65b3f667eb2c59b72951fc5c7ca7367d5f6448c8668cb78288b61bdd9cb13dd874485109d01d82d261404f275b03487e7fc007fa83eb9305401008b4d0980755a5676b09e74902827947c7eb64928dc3559bb3c35b5c995eb54dfb47047234ba7d06be970c6dc9d0fe262061a22849ea3700dc504d533baf20734cf6fca4b6cf3c961605ce6b44dd14408927844372df631a8064640c88eaf15c206579ef5b0ad4c8b5812a39cac9738b1a125191c4be91d148db787f13d64bbbe581daea43239233dd91bf40a3be27677b3c9325fd3c1e7c6fd864f0aac2973caf60ac2b352b029908b5abf48888ce1b95d1e867325d1828d09e3a3a3481d213474e266a8fc95f1ee6a620cead13758c0e7d6ca1168cf87e5b8845d171cee3da496eb04d10dbc419e7b180969fa4a3bccf44a8b6eee8e905f8e59ffde59e88e39ed1c1ab7d8ee15f4137027d151ac8cdb6cb5778648e44e33d40f1c03ddba7725fc2331d352f95471d8c6919033186eefd7f78642ffa8de8b86057af34fb836891cc8d17c5822da5e45b8139335bd73719dd99a5415f2b38a61f3485d87f2ee2c472434caf8c71cc5bf80b7584333080c791dc0e2a5620289627bda6b4024f27675f83096db982dbe34a873a17453248cdb0190e84daa01745ad966890a2c98ab93bb82e7264f9b2ade4265138a405da9c67d8e4ed4449a4ea81214ad273f059f1ba60a68d9a39e89f759aad4353f3f2c55fc47f350e961c4296aa5abb30df7e6add618e325954d3b304d09dc63da86fd9cf9b464cd11738cd24d96383f50bb0028db39525122551ed8062c0d40fa547eda2c2b65b71da323caef10a92b1bc6e93de51c175ca423a4b286d4a78672ca3cfdc69699a9593de108318219c8be7a2cb9931b53da442def2887ed982953bd28fecd0d5954543359f6847143f736be0ece976a1fae6c796428d69370752c6f5ce2805d0100527258fb654a5d439802cc8cb0311c9a85ddec0a3958777b22870890987ccf4a5ba5e2c309ec3ea37b87f3fca55cfddc071b71d1418db46a4e352b23e7e2b0ed67e791711f1af3b2a00253f165634eec20dfe2515baeb1346fe0b6c424c25651f6c82c417f4ad838f0ed8749f4a08a3c74274ae01d74d19e3975bbbfe035ecb50d5c3ab17f57b605e7957d085fbd0714f6a1fee781962eb5111a081eaf5e5f33e3bf6f028bb9641a622ed95140d517fbb90c0d95c7d9e1d083ecbec007f674e6d499dc391fade195c4276117f2a7a455fae7b8f9019b8c53f47b7e7744f209d26aa3ac3918664780a78daa351984e6477a5846da1e65c2f084021ab4462da2f3eca04d7334ea613aec526b801463a00a54d45b1f8d058d65b277dac4030330b5691153f1753c983fa1aba3c16214d4e224b9eb9ad69d11ec26fd25dd86f962f09f918d65299f05a7487a8c5f68a2eb780a2da71228775e26caac8b71b24818a0feba425e3bb6eee636d666aef4cbadfe7fb4fcc4b520cf3b6d8db898dadcee343de8821446a67f0e26d5197742d76c3c40382a8d2692e1f663816bfa869e915bbf355a10fc3ecd6dcab025be290837f2d27da6b8ad5fee93598e84c5a93426016d7d35783b738cefd87a9a94d8eb2c0a240fca2932fc11bc1cb1b46acc6774b5c987ba069f39daed0ef49459a0a7532c37898bb26525a741e51667d6507f4c03eaae2335eab790eec76d400fc05d7a57279152d447ec70d40529403216be1d094845ec9ca196ce3bdfdf316ddf56dd84d34839ebdf1d55fbfccaaa60decb7939257ea0701c2a9458aa25bbcd379697df69f3ba53f89a143216a55d1cac69a34dfa53190c6c85bae62997293bb2dee29e8eeab48bb6b332117d3f76ff1bc41609945277f6b0e3c44ac3617a5de5c8b8e55fbfc9c3a20b00cd335208f159f3c4c413d1b939981a558208c782c16dc58ab23b9196a5cfbd632d5e71744a707f6a2ecafebf26038598df80d0c889663360aa38b86d42fd1d01b665942a7acac59029666ec14970f8f2095199ba0417d38c6b67c86f4baccdfefbf7171343a7ffdb46db968c076bd9400960be77a8ab787b051ff843eb0fcc9814db862d57f645345ee0f3ca72722972350b663142d9cb0407e1014efe282dfab2b75e56766fd93948287f81524226ae0d89970fb3f5b512e3816c58ced5ef2b186ac4d9f1faea9a847fb776ff4e69d4f084822571705c74081245629611e9eb7d6df45b3c3ee3844bafd2dc39b85ee2d3cd1100d913f0b63ab38ffd5e93c2dffb37e93ef15748c94886dd14e362b7b25937bfa161a4456bcee1bae3e1b0f631103e844945197676797c7dffc26caea3aa03b51069161e7dd9d3b7c36446c2b0f65d3969a3665467ae92cadca3f96c1b289b7f0b6d5226f1d06190fbe7ec52ff659abd8440a2b93f3ba0b1d96b7a6a2bb9ac1cd53c5bdff2bdb4825f39675a7c9997f58410ecd189d87245707f6e8cbc608f661b0633125f685eab2d0d6e93e58ee6bfd10daa4e80dd8fab07ee38030af9b74ba7f71db2f560c1b431e687e9688313e16d603341b8fd91a492337666cde275aac4aa5f6531c215d29bbedbbf4dda29c4b44c3f9d55cc5e0ed2143cd015cb5c9f622a831c785793e9cebb571e4adfae6781dfa48d29dbb953f00979281b8a10f3b67697ef28334c41211d8d76e9c8fe94cc5ddb47836611fac750677bec6aa767cffc13fc14f55430f9a6859ec010d97ab43c3d3c28023c4bbe74581b0d7467c7975f6c1f49b75e5c8e7ebefa395e7aa470656116eb15b21aca840231d4f82d1d8ee2062d6b6add37679928ed877a3b106745bbb60ebdac63a852bef029fd7a507efa444d7bc280df986d8c604311f4a9e0e5cbd34bb5d72ff49df6609d3728a0c3e8e136b9e8a5fee6a4ac26ff0210ca9f4fe6f8f9d1075dbb9dcfc7f2d9419b9a18e8ae46c8f5d59f92001e7b9968a302caef83b412b5e0551de85de449406b178e0733a546cd9cfd0a322792cd19a305c1f3cc54a0d7154c10e1f51bc476ae2b8784b760bb381212c5e89430764efaf5a161326397eab3307f8762776e4b14064caa5f5fa5ab8490e93a42e94a5f02940eef9847b4d8306ab1f568628d31da53c82ce376db8229aa42473806456da6c8eea83567c084734ff1266143711e2c1614aadcd5ccd0a5fc8b8a3352138c6652a8687ca6e7e8ccf9c447cc878b3f5b897d64298fd2757fd7ff257ff68736e3f3d54ebbec0e8d5d8381c9a798ee910017330cbdb3bd46c307d0f0f5c627e4acf176a220625aaa7f6a611ec7e09b1ee606eb2fe9a6be63568722e83c518acec5bc86ea6276c90e66450e1ebc8f0b0f83a935ed3eec12cdd2fdb3a1cdecdb091168c1dc881134e1d57b250d4d215a18b19a2384f93d2655090bc3fa4a883fb5d40e5ec93db5025fda45992cb686b6211395450692f4897a76721c2ec53c9132ff5045ea001bada48d98ddb9500e35d9b12d271b57efdbae96fbb1c0304800f4b3ba084556cf203f7233136a62b22739141d60ddc068b401b580cd68003a3205ea79e16c3e32f7c7a7f653f7669e097b5c6276a47d720b18e2737f6307ed6105e387c6a98c3bbc2e33f4200a32e45e5ede336ff488733a6b1bdc428c02f6138301657849f7d365c811470a02d5edf345739ef7941d8b3f820218834e96421bbb763bc2912ea753120bb936131239dbeb3db000c456250798a6c3d17e61de83b4e069751928f4b332b270f4243ef5058bcd0a59f88670b723c87a175c0c4f4214a801811c8eda44741096cb8bfd13c9cb5fecf6fd0006aad7ff6c55a7a85fff6923de84d8cab5ba69cf846a6a131e8cfc4a8d67798f46d93aa197daf55c1d27e8ef8320e37ff8c6e0eaa7ddb6dc04bebf103b3ebfb602074242482bb7aae901123eb57ea3416843774225082fdf7e75561c272430bbe3ee7c688120a6d0a0fd0c0f5b420eec324a3b739478e7d5951f4b69abb4ba1067bde5c8763b68007851f527bcdb956c4907adab0cf2a3cf74043f992600452fc4a40bb49cd14d64e97a69981bf7744af5740c8bd6605fc621716744f3afec21011", 0x1000}, {&(0x7f0000002740)="adea6199970bfdf12febcb064a2652c289d7907406f83cc137632ccd64b863a9361e9fa66e9b27d33ac7a5ad11b368e2988ef3c976e282b93216ac33d4d9afb338f07ed77e28f77d6d75973c915112cfd8b0236a35f730269cbc3b4dd739d6783362856fe179e550c59ff9ab428aeb5c6a51826a635d97303082a20965dcffcaea2183f0bba92cd7ef47c74b861d187eb74e24e610a24b773cc1197dad2c9f96", 0xa0}], 0x3}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) [ 752.092731][T11863] gspca_vc032x: reg_w err -71 [ 752.098002][T11863] vc032x: probe of 4-1:0.0 failed with error -71 10:11:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f00000005c0)={0x4, 0x5, 0x2}) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000100)) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) read(0xffffffffffffffff, &(0x7f0000000300)=""/247, 0xf7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x2, @empty, 0x5}}, 0xffffffff}, &(0x7f00000002c0)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x141401, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x40, 0x0) write$binfmt_misc(r5, &(0x7f00000004c0)={'syz1', "e701c8f197d62d75b5549f36010595e2a635afa652f656888e51a583e58ed2b6688cda18f296344795e8497901d8abd573073001da1d907731050260ed83c2a3f2c30d374ed34a5255bb99a145efbb4d4cf011b65f34f350787a72620a36dc01a53ca4763a66c0c3a54dc95c3c71f18bc58d2e5407c514210b8232fa1b03ef566297da5294cc5d2907450ca495a48f3cf91c2b6b9bd57fbaa638c7b23e4d579e96431c7b677ff777783cf3f630a7eb18f05dd860731439b8ac71363225ce7ca5f8992b22bb8269cf128771e36fa1e5c5fec01a47ac7e"}, 0xda) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000240)={0x0, 0x6, 0x531, [], &(0x7f0000000140)=0x86}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) creat(0x0, 0x49) socket$inet_tcp(0x2, 0x1, 0x0) [ 752.138625][T11863] usb 4-1: USB disconnect, device number 31 10:11:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a91fe8f532368812b0f383b5d2c33f1ad6bfe32db5301f593d265c68faf66cbd5d7022b6fd411c9700c4ae172e57ac6d94e2949067fff31318f11203b89c09ecb"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:23 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000900)=ANY=[@ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f00000002c0)={"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"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) accept$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000000)={{0x9, 0x7}, {0x80, 0x7}, 0x5, 0x1, 0x7}) 10:11:23 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x2f1, &(0x7f0000000300)=[{&(0x7f0000000000)="2f0000001800030007fffd946fa283bc8020000000040005031d85680c0009000800000016ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000001400)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0x2, 0x6, 0x63, 0x2, "6d822c71326e90dac8b650ecfad7d871f4f59642de4f7d2fb323c2623f0d5b8c53d04514f2e121f2eb11c65422f9053c89dfc834455965f15af622d1917a63", 0x17}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="9998fef602a387669a51faf7e55c2fda793947ac211b71e8a04a262b6d25e83a317dca835560368209383b8772d6228757f3c1fa6db99b814458d7c00d38fac29b146760b9f4556571f2a56cf325f1687bbc9b9d78c7066fe8c02a52760f54af7b9e5ff7d1ab1a0de6e08554e504509f996d58509c81247e9be497eb0484b3620d88e9a7d821234be73011019793a428908ded541dfdcdc0f4cf4f2114092898df109966b4b285b6bfe1aebc965edf834a83e7e7589c43bc59c7", 0xba}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="57d74d1d3b2793ca50ebced8a94c3ffc9eba1f867120682bfc087462da7255604bdc72e709a17425de5e00d8e60aac7fb581661d506482755fbe8fa6c28760aeaf4134ecf33dd0274cd0856e6949e0b6114cbdef8ade1a03956bf932ba80e7680c237c1b586d27cc4513a05cd5cf29b0edecb9077a6981af4a7a05d6c4fe5a3daecd0e1ce25339f5b0a74feaffcde765757e0067ac", 0x95}], 0x2}}], 0x2, 0x40000040) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000001480)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f00000000c0)) [ 752.580588][T23946] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 752.618194][T23946] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 752.652784][T11896] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 752.892195][T11896] usb 3-1: Using ep0 maxpacket: 8 [ 753.012427][T11896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.023614][T11896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 753.036823][T11896] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 753.046233][T11896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.056226][T11896] usb 3-1: config 0 descriptor?? 10:11:24 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000c77f1e101097307735b80000000109021200010000000009041d00003a5d5400b2096436419c47a7a817ffc16350ee7ee25081a92e7fe347eef784e94394dfc882f0c1d308d62adeff8c803e5ce9f34e11ec41141935e360e536bfb358709f6c54520a8a8333a3b30518cd98dbba3b9d14a93f4cc1b2ff2c6d2c1469f52c81749f4ee11a3636873e74566af7bb107d871262156d98a7393aafd2a4ff8ce38d9e15b12e7038643104eb0db16e98e9caf99ca541a851ffe7c7cb9b4c70e8a6b89f48b5455962a6fa4f90521f3155a10ef9fb09457f2b11bc3b77b35a96b02dce786fff4129896ed79ba95ab518d69866bba3a4115dc187f90b19226882d748951a05a60b9ba46baee147"], 0x0) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) r2 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r2}], 0x1, 0x0) r3 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r3}], 0x1, 0x0) r4 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r4}], 0x1, 0x0) eventfd2(0x0, 0x0) poll(&(0x7f00000002c0), 0x0, 0x0) r5 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r5}], 0x1, 0x0) r6 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r6}], 0x1, 0x0) r7 = eventfd2(0x27f, 0x80000) poll(&(0x7f00000002c0)=[{r7}], 0x1, 0x0) r8 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r8}], 0x1, 0x0) r9 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r9}], 0x1, 0x0) r10 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r10}], 0x1, 0x0) r11 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r11}], 0x1, 0x0) r12 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r12}], 0x1, 0x0) r13 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r13}], 0x1, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003380)={0x84, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRES16=r13, @ANYPTR, @ANYRES32, @ANYRESDEC=r7, @ANYPTR=&(0x7f0000000540)=ANY=[]], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:11:24 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x88, 0x4000) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40000, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xa2a5, &(0x7f0000000100)={&(0x7f0000001900)=ANY=[@ANYBLOB="5000000010000307ebff000600e7000040040000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:11:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:24 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r3}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r3}, &(0x7f00000000c0)=0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r5) rt_sigqueueinfo(r5, 0x26, &(0x7f0000000300)={0x37, 0x7}) ustat(0x1ff, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0, 0x7ff}, &(0x7f00000002c0)=0x8) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @link_local, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @empty, {[@rr={0x7, 0xf, 0x5, [@local, @empty, @remote]}]}}, @tcp={{0x0, 0x4e20, 0x42424242, 0x41424344, 0x0, 0x0, 0x5, 0x1a}}}}}}, 0x0) [ 753.512529][T11896] usbhid 3-1:0.0: can't add hid device: -71 [ 753.518930][T11896] usbhid: probe of 3-1:0.0 failed with error -71 [ 753.561004][T11896] usb 3-1: USB disconnect, device number 36 [ 753.575272][T24058] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 10:11:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x200) ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f0000000080)=0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x1f2, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000066000b0500002067002000edffffff00", @ANYRES32=r4, @ANYRES64=r4], 0x74}}, 0x10000) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x3, 0x300000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 753.671291][T24074] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 753.707824][T24058] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 753.762256][T11863] usb 6-1: new high-speed USB device number 42 using dummy_hcd 10:11:25 executing program 3: r0 = syz_usb_connect(0x0, 0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e210000010000000000004a2f72801e876031fabb12d8dae6acb89d5f6dd5008c37a6ed5e5517d97c7367775d770f719977e1dae22e4f4c2280c0a702a3a2967427a715249537044f53a011332e5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/84, 0x54}], 0x1, &(0x7f0000000340)=""/109, 0x6d}, 0x4e4}, {{&(0x7f00000003c0)=@ethernet, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000540)=""/146, 0x92}, {&(0x7f0000000600)=""/199, 0xc7}, {&(0x7f0000000700)=""/223, 0xdf}], 0x4, &(0x7f0000000840)=""/4096, 0x1000}, 0x712}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001840)=""/90, 0x5a}, {&(0x7f00000018c0)=""/220, 0xdc}], 0x2}, 0x9}, {{0x0, 0x0, &(0x7f0000001a00), 0x0, &(0x7f0000001a40)=""/146, 0x92}, 0xffffffff}, {{&(0x7f0000001b00)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001b80)=""/68, 0x44}, {&(0x7f0000001c00)=""/228, 0xe4}, {&(0x7f0000001d00)=""/84, 0x54}], 0x3, &(0x7f0000001dc0)=""/33, 0x21}, 0xfffffffe}], 0x5, 0x60000000, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000001f40)=@req={0x3, 0x0, 0x4, 0x554}, 0x10) 10:11:25 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xff, 0x1b, 0x78, 0x20, 0x1199, 0x68a3, 0x57c3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3e, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x187, 0x2}}]}}]}}]}}, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) timerfd_settime(r0, 0x2, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000000c0)) [ 754.002155][T11863] usb 6-1: Using ep0 maxpacket: 16 [ 754.124735][T11863] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 754.133081][T11863] usb 6-1: config 0 has no interface number 0 [ 754.139333][T11863] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=b8.35 [ 754.148604][T11863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:11:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 754.193507][T11863] usb 6-1: config 0 descriptor?? [ 754.302606][ T3705] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 754.310730][T11866] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 754.425146][T24174] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 754.564559][T11896] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 754.583969][ T3705] usb 3-1: Using ep0 maxpacket: 32 [ 754.703208][T11866] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 754.711486][T11866] usb 4-1: config 0 has no interface number 0 [ 754.717929][T11866] usb 4-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 754.729127][T11866] usb 4-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 754.740239][ T3705] usb 3-1: config 1 has an invalid interface number: 62 but max is 0 [ 754.748593][ T3705] usb 3-1: config 1 has no interface number 0 [ 754.754993][ T3705] usb 3-1: config 1 interface 62 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 754.765053][ T3705] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=57.c3 [ 754.774394][ T3705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.812450][T11896] usb 5-1: Using ep0 maxpacket: 8 10:11:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) [ 754.852797][T11866] usb 4-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 754.862395][T11866] usb 4-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 754.870697][T11866] usb 4-1: Manufacturer: syz [ 754.880584][ T3705] sierra 3-1:1.62: Sierra USB modem converter detected [ 754.932345][T11866] usb 4-1: config 0 descriptor?? [ 754.933312][T11896] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 754.945969][T11896] usb 5-1: config 0 has no interface number 0 [ 754.952588][T11896] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 754.962481][T11896] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 754.965290][T24178] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 754.973565][T11896] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 755.008146][T11866] usb 4-1: BUG? WUSB host has no security descriptors [ 755.032599][T11866] hwa-hc 4-1:0.66: Wireless USB HWA host controller [ 755.048536][T11866] hwa-hc 4-1:0.66: new USB bus registered, assigned bus number 41 [ 755.070806][T24180] batman_adv: batadv0: Adding interface: veth7 [ 755.077487][T24180] batman_adv: batadv0: The MTU of interface veth7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.094667][T11896] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 755.103180][T24180] batman_adv: batadv0: Interface activated: veth7 [ 755.111953][T11896] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 755.126762][T11896] usb 5-1: Product: syz [ 755.144534][T11863] usb 6-1: Cannot set autoneg [ 755.149550][T11863] MOSCHIP usb-ethernet driver: probe of 6-1:0.29 failed with error -71 [ 755.163616][ T3705] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 755.190740][T11896] usb 5-1: config 0 descriptor?? [ 755.213158][ T3705] usb 3-1: USB disconnect, device number 37 [ 755.223137][T11863] usb 6-1: USB disconnect, device number 42 [ 755.231598][ T3705] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 755.241914][ T3705] sierra 3-1:1.62: device disconnected 10:11:26 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="5f454c44065b05007311"], 0xa) close(r3) r4 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000002840)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000002880)={r6, 0x3}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000040)={r6, 0x2}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x2b1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x5, 0x0, 0x0, 0xa64}) ioctl$DRM_IOCTL_AGP_FREE(r9, 0x40206435, &(0x7f0000000100)={0x400, r10}) ioctl$USBDEVFS_DROP_PRIVILEGES(r9, 0x4004551e, &(0x7f0000000000)=0x1000) 10:11:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1b96, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RWRITE(r3, &(0x7f0000000000)={0xb, 0x77, 0x2, 0xb02e}, 0xb) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000760000003800bedc2a54431e640a7807dd51ea6221d59b8f08dc6e99dd329f2baa"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 755.445935][T11896] usb 5-1: USB disconnect, device number 31 [ 755.652880][T11866] hwa-hc 4-1:0.66: Cannot set WUSB Cluster ID to 0xfe: -71 [ 755.660516][T11866] hwa-hc 4-1:0.66: Wireless USB Cluster ID set to 0xfe [ 755.667642][T11866] hwa-hc 4-1:0.66: startup error -71 [ 755.673284][T11866] hwa-hc 4-1:0.66: USB bus 41 deregistered [ 755.681662][T11866] hwa-hc 4-1:0.66: Cannot add HCD: -71 [ 755.689513][T11866] hwa-hc: probe of 4-1:0.66 failed with error -71 [ 755.702855][T11866] usb 4-1: USB disconnect, device number 32 [ 755.752375][T20720] usb 2-1: new high-speed USB device number 51 using dummy_hcd 10:11:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 755.952479][ T3705] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 755.982589][T24189] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 756.002515][T20720] usb 2-1: Using ep0 maxpacket: 8 [ 756.122466][T20720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.133997][T20720] usb 2-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 756.143314][T20720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.146315][T20720] usb 2-1: config 0 descriptor?? [ 756.192943][ T3705] usb 3-1: Using ep0 maxpacket: 32 [ 756.222337][T24189] usb 6-1: Using ep0 maxpacket: 16 [ 756.314978][ T3705] usb 3-1: config 1 has an invalid interface number: 62 but max is 0 [ 756.323264][ T3705] usb 3-1: config 1 has no interface number 0 [ 756.329512][ T3705] usb 3-1: config 1 interface 62 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 756.339625][ T3705] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=57.c3 [ 756.348883][ T3705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.357933][T11866] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 756.382811][T24189] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 756.391105][T24189] usb 6-1: config 0 has no interface number 0 [ 756.397538][T24189] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=b8.35 [ 756.407102][T24189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.422665][ T3705] sierra 3-1:1.62: Sierra USB modem converter detected [ 756.430995][T24189] usb 6-1: config 0 descriptor?? [ 756.442718][T11896] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 756.612648][T11866] usb 5-1: Using ep0 maxpacket: 8 [ 756.625164][ T3705] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 756.637235][ T3705] usb 3-1: USB disconnect, device number 38 [ 756.649494][T20720] ntrig 0003:1B96:0005.000C: unknown main item tag 0x0 [ 756.660054][T20720] ntrig 0003:1B96:0005.000C: unknown main item tag 0x4 [ 756.667352][T20720] ntrig 0003:1B96:0005.000C: unknown main item tag 0x2 [ 756.674530][T20720] ntrig 0003:1B96:0005.000C: unknown main item tag 0x3 [ 756.681604][T20720] ntrig 0003:1B96:0005.000C: bogus close delimiter [ 756.688453][T20720] ntrig 0003:1B96:0005.000C: item 0 2 2 10 parsing failed [ 756.696254][T20720] ntrig 0003:1B96:0005.000C: parse failed [ 756.702303][T20720] ntrig: probe of 0003:1B96:0005.000C failed with error -22 [ 756.721692][ T3705] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 756.731923][ T3705] sierra 3-1:1.62: device disconnected 10:11:27 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1ae7, 0x9001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42b}}, {0x6, &(0x7f00000001c0)=@string={0x6, 0x3, "8acde1c9"}}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r1) ptrace$getenv(0x4201, r1, 0x401, &(0x7f0000000040)) [ 756.792810][T11866] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 756.801639][T11866] usb 5-1: config 0 has no interface number 0 [ 756.808315][T11866] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 756.818360][T11866] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 756.829562][T11866] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 10:11:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000080)="3500002000660f3880b906000000f30fc7b30e0000000f751df5ffffff0f5598caca4400032e360f01c4f336f20f205f65f20f2cd20fc71b", 0x38}], 0xbe9, 0x68, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0, r7, 0x1, 0x1, 0x3f00}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e24, 0xfffff85a, @rand_addr="afec9a2fedb03ff1357a0ed3b01ac393", 0x8}, r7}}, 0x38) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6006f5260008110000000000000000000000000000000000ff0200020000000000000016fd965e905e004e2200089078"], 0x0) [ 756.851249][T20720] usb 2-1: USB disconnect, device number 51 [ 756.852600][T11896] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 756.865476][T11896] usb 4-1: config 0 has no interface number 0 [ 756.865596][T11896] usb 4-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 756.865678][T11896] usb 4-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 756.932719][T24189] usb 6-1: Cannot read MAC address [ 756.938602][T24189] MOSCHIP usb-ethernet driver: probe of 6-1:0.29 failed with error -71 [ 756.953145][T11866] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 756.954642][T11896] usb 4-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 756.962525][T11866] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 756.971487][T11896] usb 4-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 756.979777][T11866] usb 5-1: Product: syz [ 756.987956][T11896] usb 4-1: Manufacturer: syz [ 757.009080][T24189] usb 6-1: USB disconnect, device number 43 [ 757.023631][T11866] usb 5-1: config 0 descriptor?? [ 757.042488][T11896] usb 4-1: config 0 descriptor?? 10:11:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0xf0ffff, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 757.088996][T11896] usb 4-1: BUG? WUSB host has no security descriptors [ 757.162287][T24190] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 757.186601][T11896] hwa-hc 4-1:0.66: Wireless USB HWA host controller [ 757.248258][T11896] hwa-hc 4-1:0.66: new USB bus registered, assigned bus number 41 [ 757.269295][ T12] usb 5-1: USB disconnect, device number 32 10:11:28 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/282], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0xfffffffffffffe3e, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x22, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, '\x00', "022000"}}, 0x0}, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000300)="48acc7e50994ac73634edd79af2da242b09c16ed8f6551d25a3cf61b93d08bdf43a2f612a684ebc4c06e86483f50442bf14b450efc8a0298a5b9e7d9146924fc732ec67343eda2ba4c31d96676c36fdd16cab0be34378425126fd2ed62e6370f55c11acecc84324cad07236abe528f2fc675619f46f2c8d13e75cba3291f7c351f") syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x0, 0x83, {0x83, 0x0, "b24aa67be06392dec5ec2f69d14c0a0dc2760482eef164105b1bf2b7c520b255b46b463f23edcaea567e9a16183e7094d5ef0a11614603f866fea4c5b27c20d604248b2e7af1bcc34c6ad8aa3681ae7e1108283b1db6b33555b8334846248ea81b7da87e439d6de347f215b0c99fd9756e4c0de3270d5ecd9d94ad5c785dc01a57"}}, 0x0}, 0x0) [ 757.356172][T11896] hwa-hc 4-1:0.66: error commanding HC to reset: -71 [ 757.363673][T11896] hwa-hc 4-1:0.66: can't setup: -71 [ 757.369109][T11896] hwa-hc 4-1:0.66: USB bus 41 deregistered 10:11:28 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f616020808161a02d905fffb000109021b0001f2da43f7de1518000000000904c502000a9bae000905"], 0x0) [ 757.402229][T24190] usb 1-1: Using ep0 maxpacket: 8 10:11:28 executing program 2: r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x10000, 0x80) fcntl$setstatus(r0, 0x4, 0x41800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000001c0)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/51, 0x33}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="120100406b1d010140000102030108025f000301000000010100000a240100000002010209040100000102000009040101010102000009050109070000000007250100000000090402000001020000090402010101020000090582090000000000062501000000785500000000009add1ace26c4d09d8f3c058e84cffe"], 0x0) [ 757.459611][T11896] hwa-hc 4-1:0.66: Cannot add HCD: -71 [ 757.501747][T11896] hwa-hc: probe of 4-1:0.66 failed with error -71 [ 757.523786][T24190] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.550401][T11896] usb 4-1: USB disconnect, device number 33 [ 757.574117][T24190] usb 1-1: language id specifier not provided by device, defaulting to English [ 757.622560][T24189] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 757.702621][T24190] usb 1-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.40 [ 757.712177][T24190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.720331][T24190] usb 1-1: Product: 춊짡 [ 757.725166][T24190] usb 1-1: Manufacturer: Ы [ 757.729776][T24190] usb 1-1: SerialNumber: syz [ 757.736052][T11866] usb 6-1: new high-speed USB device number 44 using dummy_hcd 10:11:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 757.862274][T24189] usb 2-1: Using ep0 maxpacket: 8 [ 757.892408][T20720] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 757.932411][T11896] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 757.982431][T24189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.993691][T24189] usb 2-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 758.002998][T24189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.012295][T11866] usb 6-1: Using ep0 maxpacket: 8 [ 758.020003][T24189] usb 2-1: config 0 descriptor?? [ 758.063164][T24190] usbhid 1-1:1.0: can't add hid device: -22 [ 758.069445][T24190] usbhid: probe of 1-1:1.0 failed with error -22 [ 758.085191][T24190] usb 1-1: USB disconnect, device number 44 [ 758.122356][ T3705] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 758.134298][T11866] usb 6-1: config 242 has an invalid descriptor of length 222, skipping remainder of the config [ 758.145159][T11866] usb 6-1: config 242 has 0 interfaces, different from the descriptor's value: 1 [ 758.182428][T20720] usb 3-1: device descriptor read/64, error 18 [ 758.192630][T11896] usb 4-1: Using ep0 maxpacket: 16 [ 758.274181][T11866] usb 6-1: New USB device found, idVendor=1608, idProduct=021a, bcdDevice= 5.d9 [ 758.283630][T11866] usb 6-1: New USB device strings: Mfr=255, Product=251, SerialNumber=0 [ 758.292289][T11866] usb 6-1: Product: syz [ 758.296573][T11866] usb 6-1: Manufacturer: syz [ 758.332657][T11896] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 758.341054][T11896] usb 4-1: config 0 has no interface number 0 [ 758.347648][T11896] usb 4-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 758.357032][T11896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.365862][T24189] ntrig 0003:1B96:0005.000D: unknown main item tag 0x0 [ 758.373180][T24189] ntrig 0003:1B96:0005.000D: unknown main item tag 0x4 [ 758.380259][T24189] ntrig 0003:1B96:0005.000D: unknown main item tag 0x2 [ 758.387501][T24189] ntrig 0003:1B96:0005.000D: unknown main item tag 0x3 [ 758.394727][T24189] ntrig 0003:1B96:0005.000D: bogus close delimiter [ 758.395453][T11896] usb 4-1: config 0 descriptor?? [ 758.401844][T24189] ntrig 0003:1B96:0005.000D: item 0 2 2 10 parsing failed [ 758.414495][T24189] ntrig 0003:1B96:0005.000D: parse failed [ 758.420559][T24189] ntrig: probe of 0003:1B96:0005.000D failed with error -22 [ 758.430984][ T3705] usb 5-1: Using ep0 maxpacket: 8 [ 758.494232][T24189] usb 2-1: USB disconnect, device number 52 10:11:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf80000000109021200010000000009040000002e5d8b00c6f6d94ae9bf368fe68678cd3fd548842e031a2e192a70d68fdf26d53737954acf851f0bf6e6c80628bb8fd1e7b3d9f61dee02cabfbab33ace0844db0f1e95457e9c532b91a94388"], 0x0) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = socket(0x1e, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x1, 0xde, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x1, 0x1, 0xff, 0x40, 0x1e, [{{0x9, 0x4, 0x0, 0x59, 0x3, 0x2, 0x6, 0x0, 0x1, {{0xb, 0x24, 0x6, 0x0, 0x0, "583d293b040e"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x40, 0x81, 0x80}, [@mdlm_detail={0x74, 0x24, 0x13, 0x8, "4616bac5b49d1103ecb0ca58a0b14d0770066107430f234a5f88ae13dcb74a40cb69b3048a9c2f41f2ac55d4ef790bf073a38629905b2250b19f99592d0f7f54b5cecf1207afa0e032f916ba41f9ddcb376f35b1bb951c7dfac253239a76770cf5f1051738875525860dbd77afb97f38"}, @ncm={0x6, 0x24, 0x1a, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x2d, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x1e5, 0x9, 0x1, 0xff}}], {{0x9, 0x5, 0x82, 0x2, 0x389, 0x20, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x30a, 0x81, 0xfd, 0x6}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x0, 0x5, 0x0, 0x40}, 0x1f, &(0x7f0000000300)={0x5, 0xf, 0x1f, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "d2c0cc950aed7591b002a8274312a195"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0x2, &(0x7f0000000340)=@string={0x2}}, {0x27, &(0x7f0000000540)=@string={0x27, 0x3, "2f5e42a0c8ce6b2343e5b8ad3a365c5856ca61fb82da6936b0c7a240251cf8a5953bba1f25"}}, {0x27, &(0x7f0000000580)=@string={0x27, 0x3, "ddc86a1029d149e8cbe9851fb7e6f7416ee8c67f34417540fa7909a5e32dc020fb7ad54a46"}}, {0xc5, &(0x7f00000005c0)=@string={0xc5, 0x3, "8bedc68f26b6ed6c7cfb8db4fe04d0d1a3abb9528ff92399db60ddcce8436a19d12fa57a0b7f133284947612d8307502371d633e02ae5e709901cb392cc67e80562c031b12a011cac9ac60acf34894ab29be328c8a220b9a147ec861e0ae7a77cb010319a797f6a19cea9587023cc1726a3fa572951887f95a1b211995f9b231e02c0f4cefe58b7cc2d0bc36fe34cf62b1c2495ed9327d8333d8637daa2d8a2a5d1c79d325b816e5cdbf2f597e320516952272f7a4971eb42aa28debeda177d4bba542"}}, {0xf, &(0x7f00000006c0)=@string={0xf, 0x3, "0e1dbd70d83e37999cf99053c0"}}]}) sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r6}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000840)={r6, 0x83a2}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000008c0)={r7, 0x0, 0x7f, 0x100}, 0x10) recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r8 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) recvmmsg(r8, &(0x7f0000002b80)=[{{&(0x7f0000001380)=@tipc=@id, 0x80, &(0x7f0000001540)=[{&(0x7f0000001400)=""/211, 0xd3}, {&(0x7f0000001500)=""/38, 0x26}], 0x2, &(0x7f0000001580)=""/174, 0xae}}, {{&(0x7f0000001640)=@nfc, 0x80, &(0x7f00000017c0)=[{&(0x7f00000016c0)=""/6, 0x6}, {&(0x7f0000001700)=""/163, 0xa3}], 0x2}, 0x8}, {{&(0x7f0000001800)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001880)=""/14, 0xe}], 0x1, &(0x7f0000001900)=""/24, 0x18}, 0x4}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/181, 0xb5}, {&(0x7f0000002a00)=""/102, 0x66}, {&(0x7f0000002a80)=""/20, 0x14}], 0x4, &(0x7f0000002b00)=""/75, 0x4b}, 0x1}], 0x4, 0x4, &(0x7f0000002c80)) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000002cc0)={@empty, r9}, 0x14) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f0000003040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r10}], 0x1, 0x0) r11 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r11}], 0x1, 0x0) r12 = dup3(r10, r11, 0x80000) ioctl$KVM_GET_REGS(r12, 0x8090ae81, &(0x7f0000000780)) [ 758.552984][ T3705] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 758.561278][ T3705] usb 5-1: config 0 has no interface number 0 [ 758.567812][ T3705] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 758.577985][ T3705] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 758.589091][ T3705] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 758.625517][T11866] usb 6-1: USB disconnect, device number 44 [ 758.672217][T20720] usb 3-1: device descriptor read/64, error 18 [ 758.683694][ T3705] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 758.693123][ T3705] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 758.701296][ T3705] usb 5-1: Product: syz [ 758.708072][ T3705] usb 5-1: config 0 descriptor?? [ 758.802492][T24190] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 758.952589][T20720] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 758.966292][T11866] usb 5-1: USB disconnect, device number 33 [ 759.002732][T24189] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 759.052813][T24190] usb 1-1: Using ep0 maxpacket: 8 [ 759.092556][T11896] gtco 4-1:0.219: Collection level already at zero [ 759.100462][T11896] input: GTCO_CalComp as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.219/input/input29 [ 759.172860][T24190] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.223234][T24190] usb 1-1: language id specifier not provided by device, defaulting to English [ 759.234746][T20720] usb 3-1: device descriptor read/64, error 18 [ 759.296180][T11866] usb 4-1: USB disconnect, device number 34 [ 759.322574][ T12] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 759.344363][T11866] gtco 4-1:0.219: gtco driver disconnected [ 759.354755][T24190] usb 1-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.40 [ 759.364137][T24190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.372901][T24190] usb 1-1: Product: 춊짡 [ 759.377404][T24190] usb 1-1: Manufacturer: Ы [ 759.382085][T24190] usb 1-1: SerialNumber: syz [ 759.387485][T24189] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 759.396847][T24189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.409395][T24189] usb 2-1: config 0 descriptor?? 10:11:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 759.592309][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 759.632226][T20720] usb 3-1: device descriptor read/64, error 18 [ 759.693250][T24190] usbhid 1-1:1.0: can't add hid device: -22 [ 759.699644][T24190] usbhid: probe of 1-1:1.0 failed with error -22 [ 759.716211][T24190] usb 1-1: USB disconnect, device number 45 [ 759.734103][ T12] usb 6-1: config 242 has an invalid descriptor of length 222, skipping remainder of the config [ 759.745237][ T12] usb 6-1: config 242 has 0 interfaces, different from the descriptor's value: 1 [ 759.765908][T20720] usb usb3-port1: attempt power cycle [ 759.822535][ T3705] usb 5-1: new high-speed USB device number 34 using dummy_hcd 10:11:30 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000000)={0x0, 0xf000, 0x3, 0x2, 0x5}) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r1, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x8b3e) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0xfffffff8}], 0x3b6) [ 759.873498][ T12] usb 6-1: New USB device found, idVendor=1608, idProduct=021a, bcdDevice= 5.d9 [ 759.882978][ T12] usb 6-1: New USB device strings: Mfr=255, Product=251, SerialNumber=0 [ 759.891426][ T12] usb 6-1: Product: syz [ 759.895879][ T12] usb 6-1: Manufacturer: syz [ 759.922761][T24189] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random 10:11:31 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfffffffffffeffff}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r1 = dup2(r0, r0) sendmsg$tipc(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fe", 0x1}], 0x1}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) clone3(0x0, 0x0) r2 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r2}], 0x1, 0x0) open_by_handle_at(r2, &(0x7f0000000280)={0x8d, 0x1, "e812e6360c13382027ac7ca96edff4c219a15a8ea9289163887111cfbeb03d00ac65a476292d0e7b21a629377236bd89b777da9178426c145fc7efe401fa1a04c97d33d07abb476f943b3974b11916fb2efaf1defc60fc000f37257fc68f463b8ec80b002e288cf7c32439b81470d31a5ff7dc335edc352e29caf56ccad889b51049ba4c3b"}, 0x10002) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0585611, 0x0) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) [ 759.956980][ T30] audit: type=1804 audit(1571998291.008:33): pid=24252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/389/file0/bus" dev="ramfs" ino=73619 res=1 [ 759.979116][ T30] audit: type=1804 audit(1571998291.018:34): pid=24252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/389/file0/file0/bus" dev="ramfs" ino=73622 res=1 [ 760.072342][ T3705] usb 5-1: Using ep0 maxpacket: 8 [ 760.082501][T11866] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 760.204988][ T3705] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 760.213238][ T3705] usb 5-1: config 0 has no interface number 0 [ 760.219438][ T3705] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 760.229531][ T3705] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 760.240610][ T3705] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 760.354969][ T3705] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 760.364689][ T3705] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 760.372949][ T3705] usb 5-1: Product: syz [ 760.382510][T11866] usb 4-1: Using ep0 maxpacket: 16 [ 760.384301][ T12] usb 6-1: USB disconnect, device number 45 [ 760.417537][ T3705] usb 5-1: config 0 descriptor?? 10:11:31 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000080)=0x3) r3 = socket(0xa, 0x802, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000100)={0x7, {{0xa, 0xfffc, 0x0, @mcast1}}}, 0x88) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x80006933, @hyper}, 0x10) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x200, 0x0, 0x8, 0x1f, 0x400}, 0xc) [ 760.526036][T11866] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 760.534410][T11866] usb 4-1: config 0 has no interface number 0 [ 760.540644][T11866] usb 4-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 760.550013][T11866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.559797][T20720] usb 3-1: new high-speed USB device number 41 using dummy_hcd 10:11:31 executing program 2: syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000179ef20240400ecb5f70000000109021200010200000009042e00002494ce03f4f6fbf0d3a4a17c125e39d872e162bccc52b0472e0e47e6b2a33ec536cb315648fb08c3e2ee78697abb973013e148859b0c6018ff81f04529d9"], 0x0) 10:11:31 executing program 0: capset(&(0x7f00000fc000)={0x800000019980330}, &(0x7f000047efe8)) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="140000000000000010000000070711040000000000090000"], 0x18}}], 0x2, 0x0) [ 760.682269][ T3705] usb 5-1: USB disconnect, device number 34 [ 760.753305][T11866] usb 4-1: config 0 descriptor?? 10:11:31 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) open(&(0x7f00000002c0)='./file0\x00', 0x101000, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4) r4 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r4}], 0x1, 0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000380)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r8, 0x1, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BLKBSZGET(r7, 0x80081270, &(0x7f0000000240)) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="24000000020307031dfffd946ff20c0020200a8009000200021d8568001baba204003df0", 0x24}], 0x1}, 0x0) r9 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x402041) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r9, 0xc058534b, &(0x7f00000001c0)={0x400, 0x6, 0x1, 0x1, 0x7fffffff, 0x80000001}) 10:11:32 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000100)=0x1, 0x4) r1 = syz_usb_connect(0x0, 0xfffffea9, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x8, 0x572, 0xcb01, 0x4a75, 0x0, 0x8, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x32, 0xa5}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r1, &(0x7f0000001f40)={0x2c, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="00030000000000000400"], 0x0, 0x0, 0x0}, 0x0) [ 760.936574][T24272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:11:32 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000f875b08570520784e9e0000000109021b0001fc00000009046200015e3ef90009058112000000000081ad07983aa737698ef54ae627976088f5646ec64899b1a3d2e623067fbfd991fac11a390c102a83ee0d07207aae403ba5b8e6339bbe6a38fae89b635f2409660782150a3535c4853b8e630ecf3c0fd560a6ea53d457f1e4d10c0799abfb8e23868792a8292c6abc89681ca3a3707e5718d2832d59b58b26d145bef14a2eef063a65b71610dfc4fdfec580f6136619f13698a5609197c70cc2673f42504518dc782e4ba2af7088df23d9e3f8520e51c298908375851623ad8f641afa9ecc0d722df9f219f5fc787c3c46e4ce41abef744e7b466a4735921b25a43a2210d47b4ebff685e82e75bcf7d9d2abd454fb0fd362dd0228fb77349e8a841872ac857b2fb397b59acb33922a90d9fe6c634eddc09e5066705a2c54a6e3c6a07b3066c07468b1a14463545692"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) getsockname$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) [ 761.025102][T11866] gtco 4-1:0.219: Failed to get HID Report Descriptor of size: 129 [ 761.033675][T11866] gtco: probe of 4-1:0.219 failed with error -5 10:11:32 executing program 5: socket$isdn(0x22, 0x3, 0x21) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) connect$netlink(r1, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) [ 761.080855][T11866] usb 4-1: USB disconnect, device number 35 10:11:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 761.382551][T20720] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 761.432488][ T3705] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 761.472695][T20720] usb 3-1: Invalid ep0 maxpacket: 32 [ 761.478409][T11866] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 761.487240][T20720] usb usb3-port1: unable to enumerate USB device [ 761.552429][T24190] usb 5-1: new high-speed USB device number 35 using dummy_hcd 10:11:32 executing program 5: syz_usb_connect(0x6, 0x31, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8d, 0xd1, 0x47, 0x10, 0x41e, 0x4017, 0x2e61, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe6, 0x79, 0x6a, 0x0, [], [{{0x9, 0x5, 0x8e, 0x1a, 0x8, 0x0, 0x0, 0x0, [@generic={0x4, 0x5, "a1e2"}]}}]}}]}}]}}, 0x0) 10:11:32 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x20000, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r2}], 0x1, 0x0) open_by_handle_at(r2, &(0x7f0000000100)={0xf6, 0x400, "5a2d21b17752890b2b7f643524868b6b54f04a82afee11fb562980101c54a38095c1cafb1d470b8903efab344a0b4841e74bedcb2e84f5a0022b49444f1a0b7c51a6dcd8b1424a6d24ce7541856487a081bf95a9b7fe69c08dc948ebbd9ad19bc2dfa50471504c044288330f1913ff09a514590ab03be94b4e7e7bbefb4ddce2d3fa56777561690ad97fa367f56d7f5e9869a573bb056977fbdce77a946dd92da14866a204edac57513fbb45fe678066c6b6b1bc31e708c283ce0a87621d752a3fc1e46aef3a7146acaff4ce5ffe3781367771ee05c7673ab08b27e0e79fc178534f2a8f00568c684791a4d810a7"}, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x80}, @ptm_cap={0x3}]}, 0x1, [{0x1, &(0x7f0000000300)=@string={0x0, 0x3, "1646ba467c00422cd6e50c7ef024194c7e9f7d91a2fb03fb9ca0e3fd5cdf10937accacde95bf762bf158fb10556aed620844ebd4489b097b26156682be2b1b09587535595a4e3ac9503514f88d670e89bd215e68"}}]}) [ 761.652815][T24189] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 761.663044][T24189] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 761.700328][T24189] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 761.722821][ T3705] usb 1-1: Using ep0 maxpacket: 8 [ 761.728350][T11866] usb 4-1: Using ep0 maxpacket: 8 [ 761.738376][T24189] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 761.748829][T24189] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 761.783101][T24189] asix: probe of 2-1:0.0 failed with error -71 [ 761.794728][T24189] usb 2-1: USB disconnect, device number 53 [ 761.802940][T24190] usb 5-1: Using ep0 maxpacket: 8 [ 761.842728][ T3705] usb 1-1: config 252 has an invalid interface number: 98 but max is 0 [ 761.851099][ T3705] usb 1-1: config 252 has no interface number 0 [ 761.857910][ T3705] usb 1-1: config 252 interface 98 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 761.868075][ T3705] usb 1-1: New USB device found, idVendor=0557, idProduct=7820, bcdDevice=9e.4e [ 761.877350][ T3705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.922684][T11866] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 761.930923][T11866] usb 4-1: can't read configurations, error -22 [ 761.941550][ T3705] mos7840 1-1:252.98: required endpoints missing [ 761.964428][ T12] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 761.983021][T24190] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 761.991151][T24190] usb 5-1: config 0 has no interface number 0 [ 761.997548][T24190] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 762.007583][T24190] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 762.018744][T24190] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 762.122435][T11866] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 762.130746][T24190] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 762.140083][T24190] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 762.146730][T11896] usb 1-1: USB disconnect, device number 46 [ 762.148444][T24190] usb 5-1: Product: syz [ 762.168890][T24190] usb 5-1: config 0 descriptor?? [ 762.212227][ T12] usb 6-1: Using ep0 maxpacket: 16 [ 762.238226][T24189] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 762.332911][ T12] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 8 [ 762.342878][ T12] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 762.354127][ T12] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 762.367276][ T12] usb 6-1: New USB device found, idVendor=041e, idProduct=4017, bcdDevice=2e.61 [ 762.372289][T11866] usb 4-1: Using ep0 maxpacket: 8 [ 762.376569][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.417506][ T12] usb 6-1: config 0 descriptor?? [ 762.432649][T11896] usb 5-1: USB disconnect, device number 35 [ 762.478773][ T12] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4017 [ 762.542410][T24189] usb 2-1: Using ep0 maxpacket: 16 [ 762.572427][T11866] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 762.580536][T11866] usb 4-1: can't read configurations, error -22 [ 762.589171][T11866] usb usb4-port1: attempt power cycle [ 762.682396][ T12] gspca_zc3xx: reg_w_i err -71 [ 762.762490][T24189] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 762.852724][T24189] usb 2-1: string descriptor 0 read error: -22 [ 762.859362][T24189] usb 2-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.40 [ 762.868702][T24189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:11:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 762.917498][T24189] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 762.952370][T22093] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 763.116945][T24190] usb 2-1: USB disconnect, device number 54 [ 763.192462][T22093] usb 1-1: Using ep0 maxpacket: 8 10:11:34 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/282], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x22, 0xf, {0xf, 0x29, 0x83, 0x0, 0x0, 0x0, "00000080", "17200d74"}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x0, 0x81, {0x81, 0x0, "b24aa67be06392dec5ec2f69d14c0a0dc2760482eef164105b1bf2b7c520b255b46b463f23edcaea567e9a16183e7094d5ef0a11614603f866fea4c5b27c20d604248b2e7af1bcc34c6ad8aa3681ae7e1108283b1db6b33555b8334846248ea81b7da87e439d6de347f215b0c99fd9756e4c0de3270d5ecd9d94ad5c785dc0"}}, 0x0}, 0x0) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) mmap(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x0, 0x4cedc9a90655f176, r1, 0x0) [ 763.304052][ T12] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 763.310611][ T12] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 763.312381][T24189] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 763.320210][T22093] usb 1-1: config 252 has an invalid interface number: 98 but max is 0 [ 763.334552][T22093] usb 1-1: config 252 has no interface number 0 [ 763.340931][T22093] usb 1-1: config 252 interface 98 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 763.351250][T22093] usb 1-1: New USB device found, idVendor=0557, idProduct=7820, bcdDevice=9e.4e [ 763.360482][T22093] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.373973][ T12] usb 6-1: USB disconnect, device number 46 [ 763.425895][T22093] mos7840 1-1:252.98: required endpoints missing [ 763.582192][T24189] usb 5-1: Using ep0 maxpacket: 8 [ 763.629996][T22093] usb 1-1: USB disconnect, device number 47 [ 763.732298][ T12] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 763.732370][T24189] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 763.732444][T24189] usb 5-1: config 0 has no interface number 0 [ 763.754637][T24189] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 763.764525][T24189] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 10:11:34 executing program 2: [ 763.775596][T24189] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 763.788892][T11866] usb 4-1: new high-speed USB device number 38 using dummy_hcd 10:11:34 executing program 2: 10:11:35 executing program 2: [ 763.933153][T24189] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 763.942632][T24189] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 763.950829][T24189] usb 5-1: Product: syz [ 763.956630][T24190] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 763.967174][T24189] usb 5-1: config 0 descriptor?? [ 763.974301][ T12] usb 6-1: Using ep0 maxpacket: 16 10:11:35 executing program 2: [ 764.092682][ T12] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 8 [ 764.095428][T11866] usb 4-1: Using ep0 maxpacket: 16 [ 764.103045][ T12] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 764.119229][ T12] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 764.132377][ T12] usb 6-1: New USB device found, idVendor=041e, idProduct=4017, bcdDevice=2e.61 10:11:35 executing program 2: [ 764.141601][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.180971][ T12] usb 6-1: config 0 descriptor?? 10:11:35 executing program 0: [ 764.225286][T11896] usb 5-1: USB disconnect, device number 36 [ 764.241751][ T12] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4017 [ 764.252898][T11866] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 764.261774][T11866] usb 4-1: config 0 has no interface number 0 [ 764.268160][T11866] usb 4-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 764.277599][T11866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:11:35 executing program 1: [ 764.380573][T11866] usb 4-1: config 0 descriptor?? [ 764.442340][ T12] gspca_zc3xx: reg_w_i err -71 10:11:35 executing program 2: 10:11:35 executing program 5: 10:11:35 executing program 0: [ 764.663141][T24190] usb 2-1: device not accepting address 55, error -71 10:11:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 765.062398][T11866] gtco 4-1:0.219: Collection level already at zero [ 765.062557][ T12] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 765.070518][T11866] input: GTCO_CalComp as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.219/input/input31 [ 765.075630][ T12] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 765.117694][ T12] usb 6-1: USB disconnect, device number 47 [ 765.126021][T11896] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 765.298230][T22093] usb 4-1: USB disconnect, device number 38 [ 765.345184][T22093] gtco 4-1:0.219: gtco driver disconnected [ 765.372292][T11896] usb 5-1: Using ep0 maxpacket: 8 [ 765.492396][T11896] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 765.500537][T11896] usb 5-1: config 0 has no interface number 0 [ 765.506967][T11896] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 765.516803][T11896] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 765.528011][T11896] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 765.615956][T11896] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 765.625416][T11896] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 765.633767][T11896] usb 5-1: Product: syz [ 765.639235][T11896] usb 5-1: config 0 descriptor?? [ 766.024734][T22093] usb 5-1: USB disconnect, device number 37 [ 766.072385][T11896] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 766.312178][T11896] usb 4-1: Using ep0 maxpacket: 16 [ 766.432471][T11896] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 766.440871][T11896] usb 4-1: config 0 has no interface number 0 [ 766.447210][T11896] usb 4-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 766.456471][T11896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.466221][T11896] usb 4-1: config 0 descriptor?? 10:11:37 executing program 3: 10:11:37 executing program 1: 10:11:37 executing program 2: 10:11:37 executing program 5: 10:11:37 executing program 0: 10:11:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 766.782488][T11896] gtco 4-1:0.219: Failed to get HID Report Descriptor of size: 129 [ 766.790822][T11896] gtco: probe of 4-1:0.219 failed with error -5 [ 766.833285][T11896] usb 4-1: USB disconnect, device number 39 10:11:37 executing program 0: 10:11:37 executing program 2: 10:11:38 executing program 5: 10:11:38 executing program 1: 10:11:38 executing program 3: 10:11:38 executing program 1: [ 767.094052][T24190] usb 5-1: new high-speed USB device number 38 using dummy_hcd 10:11:38 executing program 5: 10:11:38 executing program 2: 10:11:38 executing program 0: 10:11:38 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0xc0984124, 0x100000000000000) open_by_handle_at(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="ad000000a2d1275c785ab92d07051affa5c91f7eec7481f2dc30f491a460a9c6ab66df1893ba59f013b0e92e4546c89d08f7995584005979fe9eb94947d2fe9dca76c7dcea501c81094e56bb77959a8d450518347970ea1395966e180f23c4a85de82c50bc1a4d2a9ac296fa831e6a8b60fe458a0c8e6767ef45f5238ce6439282c55ff52f3043a9ffcc4c92c6e6b0e1ca4535538628a00bb7cac34def"], 0x200000) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x11) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r4, 0xeb, '\x00r%', "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"}}, 0x110) ioctl$UI_DEV_DESTROY(r0, 0x5502) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f00000003c0)='./file0\x00'}, 0x10) writev(r5, &(0x7f00000009c0)=[{&(0x7f0000000580)="99f1ce2733e2577f0cf943952a00c63b39cfa1251f0034907331f41c5e4dd78dfd610499d485d009cdf7e965e4b762c2bda3afb3d48a351bf854a985b29b6bd68d74edb2ca941dc82c73ec6c1d49162dfd94ffa3967b78e3836072e43e5f81", 0x5f}, {&(0x7f0000000600)="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", 0xfe}, {&(0x7f0000000700)="a85a95e538704ca95da1d8311d785aa4c946a97877dd3f2ca0cd5b847015b573bebb45cac93fd4aab1", 0x29}, {&(0x7f0000000740)="206d7c0be67c559485245e45bfe68a83a0e8d75d795af1bbce128399a68b17aab3c2f238ca021b5c90c8d3286b7332004ed315f748b9fa7988b18b8f09f88c6060123a30e9c010d46b807c138b2fd0d0c4e036679fe5716b0171597c1e6e907659a9294d6f3116017ab7785cb438223d76569d66ef426ba9ece406b0283ab27cad64e59de8a1639786f1b1", 0x8b}, {&(0x7f0000000800)="1c83043a3c96e93652ae0d20567c5161afa31bbd290775b5630809eec100d997928cecd164df18a0c331efd42f8e9fd0a9f360dfe313fd057e2b50c7354dbcfead2c3fd9f65b85a8ba8dea85308f132db7be0b8551e249a88f25586a646907ab78652e7e7df3784e16b2466fc7a410582f1e4114c4694848f060c21ee85a5d4c9a9818945b2fd67a9a1dc0f910ca6309fcb88134e87af4f5d2d43f2f8467d8060dce25b287c791f675b613895a8770f0daa3a269871f012a37ebd0b7a4be04b73626e315804124143b5ab30dd86c318f70203e7ce6d453f13c8812b49e5026eff4b11f2bd1277b1e6a8d95e6dded2834202e9cbbe32579", 0xdd}, {&(0x7f0000000900)="6672659d1f137085f5f8e3b6744bc63764a5ae81f2293bc641faeb1c40edfe147c615ddd6d1c42057c3d9d59c7e9c7d3f0c1cae97abc5101fde065afee1613789357fe585706f8fc26481aacabef9851deddc834f0c01173e606ec76fb0b151d3776e2a949c4b9e94d359e75b758babf0cf41b69a2bb9cd188eca97daa95e070be0312e554ff58d3c949a53f4ba1c9c57ee7bcd5302af383c0", 0x99}], 0x49) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)=0x7fff) recvmsg(r3, &(0x7f00000020c0)={&(0x7f0000000a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000ac0)=""/193, 0xc1}, {&(0x7f0000000bc0)=""/82, 0x52}, {&(0x7f0000000c40)=""/187, 0xbb}, {&(0x7f0000000d00)=""/8, 0x8}, {&(0x7f0000000d40)=""/95, 0x5f}, {&(0x7f0000000dc0)=""/173, 0xad}, {&(0x7f0000000e80)=""/150, 0x96}, {&(0x7f0000000f40)=""/219, 0xdb}], 0x8, &(0x7f00000010c0)=""/4096, 0x1000}, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='uid_map\x00') sendfile(r7, r8, 0x0, 0x9) socketpair(0x1, 0x1, 0x2e, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f0000000480)={0x1, 0x70, 0x8, 0x8, 0x1f, 0x20, 0x0, 0xfffffffffffffffb, 0x8, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9b, 0xe43824fd64140362, @perf_bp={&(0x7f0000000440), 0x1}, 0x20, 0x100000001, 0x132, 0x5, 0xe728, 0xffffa03e, 0x400}, r2, 0x6, r9, 0x8) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000540)='trusted.ove\t\x00\x00\x00\x86\xf7\xdf\xf3gin\x00', 0xffffffffffffff72) setsockopt$inet6_mtu(r9, 0x29, 0x17, &(0x7f0000000400)=0x2, 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) [ 767.355422][T24190] usb 5-1: Using ep0 maxpacket: 8 10:11:38 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000800010063627100180403000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004502000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000829e28a02e0fc3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050000000000000000000000000000000000001970deeeb3afa2211cc80ff7061122dacef4e789eb54c0e5f7fd4e7d9f39a7ee36d55cd038229e905542fe047309e0e441457779d398cbde7148456d7fe34bba5997df3892f6d116f1fd8c28efda0063fa5c6432fbb6169448146fa6547d7a5c11fba94f977444503bdcfd"], 0x444}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r5, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) accept4$tipc(r5, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x80000) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 767.472647][T24190] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 767.480856][T24190] usb 5-1: config 0 has no interface number 0 [ 767.487251][T24190] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 767.497098][T24190] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 767.508212][T24190] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 767.583640][T24573] IPVS: ftp: loaded support on port[0] = 21 [ 767.710535][T24190] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 767.719830][T24190] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 767.728173][T24190] usb 5-1: Product: syz [ 767.767775][T24190] usb 5-1: config 0 descriptor?? [ 768.174926][T11896] usb 5-1: USB disconnect, device number 38 10:11:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x0, 0xfffd}, 0x8) 10:11:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) 10:11:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r5}], 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x406, r1) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000000240)=""/249) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r8 = dup3(r4, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x801}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_NF_CALL_IP6TABLES={0x8}]}}}]}, 0x3c}}, 0x0) 10:11:39 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="7f4ccf6f000000095e04a1a5b3a8b0b42710bb76634f1423da0700000000000109022400010000000009040001000000f1befd820903"], 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@main=@item_012={0x2, 0x0, 0x0, "69f5"}, @local=@item_4={0x3, 0x2, 0x0, "c4eb48fd"}, @global=@item_4={0x3, 0x1, 0x0, "6b22c2c8"}, @global=@item_4={0x3, 0x1, 0x0, "d955359e"}, @local, @global=@item_4={0x3, 0x1, 0x0, "594fb034"}, @local=@item_4={0x3, 0x2, 0x0, "18c1217b"}, @main=@item_4={0x3, 0x0, 0x8, "b65f3566"}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$netlink(r3, &(0x7f0000000080), &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) flock(r4, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$HIDIOCAPPLICATION(r6, 0x4802, 0x1) 10:11:39 executing program 1: unshare(0x18010000) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x60000008, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4002c0, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@loopback, @multicast1}, &(0x7f00000000c0)=0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xc3\t\xbb\x0f\xac\x03,') getdents64(r1, &(0x7f0000000df0)=""/528, 0xfe06) r2 = gettid() tkill(r2, 0x2e) [ 768.768576][T24601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 768.847733][T24601] netlink: 'syz-executor.2': attribute type 37 has an invalid length. [ 768.883487][T24601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:11:40 executing program 0: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r1) getgroups(0x4, &(0x7f0000000140)=[0x0, r0, r1, 0x0]) getgid() r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$nbd(0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) setgroups(0x31dbe445, &(0x7f00000002c0)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x642, 0x0) ioctl$TIOCSIG(r4, 0x40045436, 0x25) r5 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x1c48963f684a34b5) unshare(0x60020000) [ 768.926396][T24645] netlink: 'syz-executor.2': attribute type 37 has an invalid length. 10:11:40 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5) getpeername(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000440)=0x80) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={0x0, 0xff}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000640)={r2, 0x800, 0xb3c4, 0x3, 0x80000001, 0x80000001}, &(0x7f0000000680)=0x14) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x5, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x3c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0xff}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000002c0)={r4, 0x52, "369833ea67aa487905be807a1e684f36695c51cefa4a906b16b90695f461f8f7ea06299e7b47f5b37a32bb188d4152b5fc2600e90678e3c9dab14a854ea884e7c267c7504a5217343cf719630e6b9d0ae0b9"}, &(0x7f0000000180)=0x5a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x5499b529d1d3c7d4, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r6 = msgget(0x0, 0x3) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000340)=""/95) write$binfmt_elf64(r5, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) [ 769.022503][T24190] usb 6-1: new high-speed USB device number 48 using dummy_hcd 10:11:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getuid() ioprio_get$uid(0x3, r3) write$P9_RSTATu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="670000007d020000005000040001800000080100000005000000000000000000200004000000810000000000006f6e00050073656c662e09002f6465762f696f6e0006002f776c616e3002005e2100"/91, @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0xee00], 0x67) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r6}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={r6, 0x7ff, 0x9, [0x3, 0x5, 0x80, 0x7, 0x7fe, 0x401, 0x4, 0x3f, 0x27]}, 0xff11) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7, 0x26, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000000c0)=0x1) dup2(r0, r7) [ 769.115822][T22093] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 769.167876][T24714] ion_buffer_destroy: buffer still mapped in the kernel 10:11:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', @ifru_data=&(0x7f00000004c0)="85828efe55ebed48d53e39fc0eae88d3ec3ae5ee04b7b769e056b120956a21f3"}) [ 769.224702][T24716] IPVS: ftp: loaded support on port[0] = 21 [ 769.322286][T24190] usb 6-1: device descriptor read/64, error 18 [ 769.363044][T22093] usb 5-1: Using ep0 maxpacket: 8 [ 769.483425][T22093] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 769.491623][T22093] usb 5-1: config 0 has no interface number 0 [ 769.498080][T22093] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 769.508578][T22093] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 769.519640][T22093] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 10:11:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000240)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/22, 0x16}) r1 = getuid() ioprio_get$uid(0x3, r1) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, {0xffffffffffffffff}}}, 0xb8}}, 0x0) r2 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e24, @empty}, {0x2, 0x4e22, @local}, 0x200, 0x0, 0x0, 0x0, 0x50b5, &(0x7f0000000000)='tunl0\x00', 0x2, 0x0, 0x9}) [ 769.661036][T24726] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 10:11:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r4}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r4, 0x3ff}, &(0x7f0000000200)=0xc) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r8, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) write$evdev(r8, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) r9 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000005ffffa6fffff7", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000e00000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000800000d00d337d05000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040000000600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009230000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b3000000060000004b0d00000500000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a00000020000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f0000000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff04000800000004040600d90b0000ff00000005000000040000001ba2cc3b00000080010000003f000000ff0f0000bd52c97303000000be060000fffffffffffeffff7f000000ff0000008100000000db040009000000070000000300000000000000060000008f5e0000010000000002000006000000010100000200000007000000000000e03189000001040000000800000600000004000000080000000400000002000000c00000000800000008000000f7ffffff05000000810000004d00000001000080eb0700001f000000090000000800000001000000000000000000000002000000ffff00000100000002000000000000e0a000000040000000ff000000f7ffffff0500000009000000070000000600000028080000030000000600000004000000be00000003000000070000000500000038080000faffffffffffffff47b5554d001000008100000007000000ffffffff040000000100000002000000566b00002000000004000000020000008b01000001000000ffff000004000000ff0f0000050000002000000003000000e40d000007000000f8ffffff200000003f000000387f00000700000007000000c10a000009000000040000000400000000000000008000000100008009000000370b000000000080ff07000006000000bb7900000400000002000000ffffff7f0300000000000000090000000700000005000000000000807f0000000900000008000000fad4ffffff01000001010000010000003f0000000400000020f2ffff01000100ffff0000010000000200000008000000fbfffffff9ffffff040000004d000000060000000200000002000000070000004e0d0000000200000800000035000000300e00000700000000040000020000000180000020000000f2ffffff070000000500000000010000fffffeff0900000000080000070000000800000009000000ff7f00000900000004000000040000000000000006000000050000000100000009000000080000007e0700000300000000800000bf16000002000000d9c3ffffee0000000100000000000000001000006305000000000000000000007f00000010080000000000000100008002000000080000000101000003000000ffffff7ffffffffff7ffffff0600000003000000a6060000ff0300000700000001800000090000000200000000000000040000000080ffff00020000070000000500000001000100000000800000af06060000002b0a000005000000010000000500000009000000040000000500000002000000ffffff7ff30000000800000002000000ffff0000ff070000810000004000000075fc000009000000fbffffff0500000000000000810000000100000080000000d05e0000020000001f00000000000000ff010000451e00002d00000000000000ff0000001000030008001000ff070000010000001800010039031c020101000001000000000000060500000010000200e002807104000000ff03000018000100080d1e02800000000700000024709a02ff7f0000100005001f02df00e5b9fb0007000000100003001f00030007000000010100001800010005010400090000000400000001040000000000000152d50f6365daeb9c99d09b44785c38ea0d1bcf51e44751de5a729eb37c5c10ce8b3da395baebea9fcdcba6a096515f9de8bb86fa5639e5abc7e282c2d89d6f019fe17ba6806fce8d21e78e20320e2bda8991ecfd0f06dbabd031b574b18d39c91514e2a8e10c11c133f37f713cc7ba213f0b431efd846bf8c97994e0809e66d6856cd0ffa6b821fae98fcc8c0f5f829312d5f6053f844fac4070e23dbc54361d6e1c3fca4dff868987651fe102a3079500129cf4f33b5f993e235d198f7a08967342bbd69384f9a0de7dac23efc25f4276516e09ab16ec84f1f2"], 0x8d0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$cgroup_ro(r12, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) write$P9_RREADDIR(r13, &(0x7f0000000180)={0x27c, 0x29, 0x2, {0x24f236cd, [{{0x0, 0x2, 0xb}, 0x4, 0x1f, 0xffffffffffffffdd, './file0'}]}}, 0x2a) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r12, 0xc1105517, &(0x7f00000004c0)={{0xa, 0x0, 0x0, 0xfffff001, 'syz0\x00', 0x1}, 0x6, 0x3, 0x10000, r14, 0x2, 0x5, 'syz0\x00', &(0x7f0000000440)=['wlan0^selfposix_acl_accessselinux+\\.em0-mime_type\x00', '/dev/input/event#\x00'], 0x44, [], [0xce, 0x1, 0x5, 0x9]}) [ 769.720546][T24760] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 769.782944][T22093] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 769.792467][T22093] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 769.800839][T22093] usb 5-1: Product: syz [ 769.809355][T22093] usb 5-1: config 0 descriptor?? [ 769.914015][T24190] usb 6-1: device descriptor read/64, error 18 [ 770.182253][T24190] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 770.196754][T11866] usb 5-1: USB disconnect, device number 39 [ 770.474384][T24190] usb 6-1: device descriptor read/64, error 18 10:11:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000017000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfde4) r4 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r4}], 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000040)={0x7ff, 0x4, 0x71, 0x1, 0x2f, 0x4d4}) 10:11:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r2) capget(&(0x7f0000000040)={0x19980330, r2}, &(0x7f0000000100)={0x8000, 0x11, 0x8, 0x7, 0x9, 0x3}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607", 0x44}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@ipv6_newroute={0xffffffffffffff6b, 0x18, 0x20, 0x70bd2a, 0x25dfdbff, {0xa, 0x80, 0x80, 0x2, 0x0, 0x2, 0x35, 0x3, 0x400}, [@RTA_UID={0x0, 0x19, 0xffffffffffffffff}, @RTA_MARK={0x0, 0x10, 0x7}, @RTA_PREF={0x0, 0x14, 0x28}]}, 0xfffffffffffffe92}, 0x1, 0x0, 0x0, 0x40}, 0x20) 10:11:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="3b5be66d6d261d057bf070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000280)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c004100626f6a64000000001400020008000b00", @ANYRES32=r7, @ANYBLOB="0800010006000000"], 0x44}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r9) r10 = syz_open_procfs(r9, &(0x7f0000000000)='net/snmp\x00') ioctl$TIOCSTI(r10, 0x5412, 0xa59) [ 770.894304][T24190] usb 6-1: device descriptor read/64, error 18 [ 771.024752][T24190] usb usb6-port1: attempt power cycle [ 771.102662][T22093] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 771.342382][T22093] usb 5-1: Using ep0 maxpacket: 8 [ 771.474939][T22093] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 771.483248][T22093] usb 5-1: config 0 has no interface number 0 [ 771.489532][T22093] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 771.499575][T22093] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 771.511106][T22093] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 771.612875][T22093] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 771.623370][T22093] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 771.631760][T22093] usb 5-1: Product: syz [ 771.641680][T22093] usb 5-1: config 0 descriptor?? [ 771.742611][T24190] usb 6-1: new high-speed USB device number 50 using dummy_hcd 10:11:42 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_disconnect(r2) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) 10:11:42 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8a, 0xa4, 0x57, 0x20, 0xc72, 0x13, 0x69f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x0, 0x77, 0x82, 0xcb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0xac, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) msgget$private(0x0, 0x100) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) 10:11:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="44040000240007e744f521617e65489db7c17fc01e69dfc9a80000000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', r6}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', r7}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x48e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_RUN(r10, 0xae80, 0x0) 10:11:42 executing program 1: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000680000000000069078000000000000000000004e20", @ANYRES32=0x42424242, @ANYRES32=0x41424344, @ANYBLOB="e0d0000090780000000f39f3d20d20327caa89ad07f6a603030013e900000000000000000000000000000000fe07f989b7f2e21312f544acbd455e75e5f36811236b26ac420d0777"], 0x0) [ 772.026884][ T12] usb 5-1: USB disconnect, device number 40 10:11:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8001, 0x2000) r3 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r3}], 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000010c0)='/proc&em1\x00', 0x0, r3) syz_emit_ethernet(0x1011, &(0x7f0000000080)={@local, @remote, [], {@x25={0x805, {0x2, 0x1f, 0x0, "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"}}}}, 0x0) [ 772.095312][T24873] kvm: emulating exchange as write [ 772.222314][T22093] usb 4-1: new high-speed USB device number 40 using dummy_hcd 10:11:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0xc8001) syncfs(r3) r4 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r4}], 0x1, 0x0) r5 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r5}], 0x1, 0x0) r6 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r6}], 0x1, 0x0) r7 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r7}], 0x1, 0x0) r8 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r8}], 0x1, 0x0) r9 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r9}], 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRES64=r8, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYRES64, @ANYRES16=r0, @ANYRESHEX=r2], @ANYBLOB="4598519bc6c756e5f61e226cf0a49274ee1dbb857646847c2d1f91a063d0dbf985c078c37dd4d0645c0b10d62eb44cf2186c65b7a534a6fb087126945758d065b8f64a236609fdab601c358c83aaa07b739b09fe2847a77b158665b18ddb42eae647826ca17ec06ea5eb04d645e94759a7f8ae5eb450a9b5b12cb6c2f0d1dbd9160a03e56fb0a1dae691ffab5c4625bec4df05c06beb8cc90ea2302ea167cdcc8a9bfa12bdd9a0baa1ae8f"], 0x6}}, 0x40000) [ 772.332420][T24190] usb 6-1: device descriptor read/64, error -71 10:11:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="24000000210007041dfffd946f610500020000001f00000000000800050018000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xffe5d701931df8f7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)={0x10000000}) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x20000003) [ 772.474895][T22093] usb 4-1: Using ep0 maxpacket: 32 10:11:43 executing program 1: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0xfffffffffffffdee) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x74, 0x1a, 0xde, 0x0, 0x586, 0x341f, 0xe797, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r4}, &(0x7f00000000c0)=0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_S_REGISTER(r7, 0x4038564f, &(0x7f0000000180)={{0x0, @name="52d316823267ed103413a5b836fe853f7e4fa713a642d92ba18f30786732c878"}, 0x8, 0x6, 0x10000}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r4, 0xf714, 0x81, 0x7, 0xffff, 0x5}, &(0x7f0000000100)=0x14) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0x20010134}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2) [ 772.594291][T22093] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 772.602806][T22093] usb 4-1: config 0 has no interface number 0 [ 772.609031][T22093] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=69.f7 [ 772.618817][T22093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:11:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 772.640980][T24886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 772.680779][T22093] usb 4-1: config 0 descriptor?? [ 772.752751][T24190] usb 6-1: Using ep0 maxpacket: 8 [ 772.875686][T24190] usb 6-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 772.889145][T24190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 772.896008][T24190] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 772.905976][T24190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.925416][T24888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 772.935699][T22093] peak_usb 4-1:0.237: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 772.982164][T11866] usb 2-1: new high-speed USB device number 57 using dummy_hcd 10:11:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="0030d7"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xea, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x204080) ioctl$EVIOCSKEYCODE_V2(r1, 0x80284504, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, "fd3092cfa6ec31675171da9cb78d3e18b5ae8b5ad5cdeda062206da6c0c826ff"}) [ 773.019391][T24190] usb 6-1: config 0 descriptor?? 10:11:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000000)={0x3, 0x81, 0x3, 0x1, 0x17, 0x7f, 0x40, 0x5, 0x0, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x40}}, 0x0) [ 773.163157][T22093] peak_usb 4-1:0.237 can0: sending command failure: -22 [ 773.170638][T22093] peak_usb 4-1:0.237 can0: sending command failure: -22 [ 773.172451][ T3705] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 773.177836][T22093] peak_usb 4-1:0.237 can0: sending command failure: -22 [ 773.272698][T11866] usb 2-1: device descriptor read/64, error 18 [ 773.282962][T22093] peak_usb: probe of 4-1:0.237 failed with error -22 10:11:44 executing program 0: syz_usb_connect(0x0, 0x17e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d883f008c0090002a5540000000109021b0001000000000904fb0001d93dd2000705811000001b0000"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x70, 0x3, 0x47, 0xf1, 0x1, 0x0, 0x1000, 0x10804, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10000, 0xac36a075c242b34a, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0xffffffffffffff80, 0x9, 0x2, 0x1, 0x7, 0x3ff}, r2, 0xd, 0xffffffffffffffff, 0x4) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x20110, r3, 0x0) [ 773.388874][T20720] usb 4-1: USB disconnect, device number 40 [ 773.402428][T24189] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 773.433065][ T3705] usb 5-1: Using ep0 maxpacket: 8 [ 773.509988][T24190] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.000E/input/input33 [ 773.562821][ T3705] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 773.572489][ T3705] usb 5-1: config 0 has no interface number 0 [ 773.578791][ T3705] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 773.588924][ T3705] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 773.603115][ T3705] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 773.638010][T24190] sony 0003:054C:03D5.000E: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0 [ 773.662939][T24189] usb 3-1: Using ep0 maxpacket: 8 [ 773.706729][T11866] usb 2-1: device descriptor read/64, error 18 [ 773.772630][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 773.779026][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 773.779484][ T3705] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 773.785938][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 773.796490][ T3705] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 773.803313][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 773.811434][ T3705] usb 5-1: Product: syz [ 773.824250][T24189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.835780][T24189] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 773.848997][T24189] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 773.858424][T24189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.870675][ T3705] usb 5-1: config 0 descriptor?? [ 773.877856][T24189] usb 3-1: config 0 descriptor?? [ 773.942216][T11863] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 773.966343][T22093] usb 6-1: USB disconnect, device number 50 [ 774.022178][T11866] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 774.192557][T11863] usb 1-1: Using ep0 maxpacket: 8 [ 774.202961][T24190] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 774.289033][ T3705] usb 5-1: USB disconnect, device number 41 [ 774.313972][T11863] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 774.322604][T11863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.332928][T11863] usb 1-1: config 0 has no interface number 0 [ 774.339299][T11863] usb 1-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=54.a5 [ 774.348637][T11863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.359155][T11866] usb 2-1: device descriptor read/64, error 18 [ 774.370937][T11863] usb 1-1: config 0 descriptor?? [ 774.392487][T24189] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 774.448102][T11863] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in cold state, will try to load a firmware [ 774.460667][T11863] usb 1-1: Direct firmware load for dvb-usb-gp8psk-01.fw failed with error -2 [ 774.470644][T11863] dvb-usb: did not find the firmware file 'dvb-usb-gp8psk-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 774.486339][T11863] dvb_usb_gp8psk: probe of 1-1:0.251 failed with error -2 [ 774.527521][T24189] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000F/input/input34 [ 774.540608][T24190] usb 4-1: Using ep0 maxpacket: 32 [ 774.660400][T24189] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 774.676806][T24190] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 774.685852][T24190] usb 4-1: config 0 has no interface number 0 [ 774.692361][T24190] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=69.f7 [ 774.704110][T24190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.740398][T11863] usb 1-1: USB disconnect, device number 48 [ 774.754834][T24190] usb 4-1: config 0 descriptor?? [ 774.782929][T11866] usb 2-1: device descriptor read/64, error 18 [ 774.792242][T22093] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 774.845511][ T12] usb 3-1: USB disconnect, device number 43 [ 774.914836][T11866] usb usb2-port1: attempt power cycle [ 775.062825][T24190] peak_usb 4-1:0.237 can0: unable to request usb[type=0 value=1] err=-71 [ 775.071487][T24190] peak_usb 4-1:0.237: unable to read PCAN-Chip USB firmware info (err -71) [ 775.072439][T22093] usb 6-1: Using ep0 maxpacket: 8 [ 775.205834][T24190] peak_usb: probe of 4-1:0.237 failed with error -71 [ 775.224741][T22093] usb 6-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 775.238258][T22093] usb 6-1: config 0 interface 0 has no altsetting 0 [ 775.240397][T24190] usb 4-1: USB disconnect, device number 41 [ 775.245324][T22093] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 775.245403][T22093] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.276190][T22093] usb 6-1: config 0 descriptor?? [ 775.403831][T11863] usb 1-1: new high-speed USB device number 49 using dummy_hcd 10:11:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a91fe8f532368812b0f383b5d2c33f1ad6bfe32db5301f593d265c68faf66cbd5d7022b6fd411c9700c4ae172e57ac6d94e2949067fff31318f11203b89c09ecbdd"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:11:46 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140]}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x7000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 775.642278][T11866] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 775.652877][T22093] usbhid 6-1:0.0: can't add hid device: -71 [ 775.659793][T22093] usbhid: probe of 6-1:0.0 failed with error -71 [ 775.669954][ T12] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 775.672419][T11863] usb 1-1: Using ep0 maxpacket: 8 [ 775.699979][T22093] usb 6-1: USB disconnect, device number 51 10:11:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r1 = socket(0x10, 0x5, 0xa0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x0, 0x2, 0x401, 0xf3, 0x12, 0xff8c}, 0x1c) sendto$inet(r0, 0x0, 0x3f7, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000040)=0x7fff) socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100ffffffff0800000000000000", 0x24) socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @broadcast}, &(0x7f0000000080)=0xc) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000000)={'#! ', './file0'}, 0xb) prctl$PR_SET_PTRACER(0x59616d61, r4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getpid() syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000200)=@sha1={0x1, "882cddc8a9d72379c0e776e706bfa534d3f46d0f"}, 0x15, 0x1) r6 = open(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0) fcntl$setlease(r6, 0x400, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) [ 775.813186][T11863] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 775.821784][T11863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.832506][T11863] usb 1-1: config 0 has no interface number 0 [ 775.838718][T11863] usb 1-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=54.a5 [ 775.847908][T11863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.914232][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 775.923531][T11896] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 775.932520][T11866] usb 2-1: device descriptor read/64, error 18 [ 775.982771][T11863] usb 1-1: config 0 descriptor?? [ 776.038338][T11863] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in cold state, will try to load a firmware [ 776.042562][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.050617][T11863] usb 1-1: Direct firmware load for dvb-usb-gp8psk-01.fw failed with error -2 [ 776.060752][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 10:11:47 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x30, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @exp_fastopen={0xfe, 0x5, 0xf989, "da"}, @md5sig={0x13, 0x12, "e19bdea16a577d8887b71f37fddbbb61"}]}}}}}}}}, 0x0) r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0xfff7, 0x3, 0x2, 0x1, 0x3, 0x3, 0x6}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat(r4, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r6, &(0x7f0000005400)=[{{&(0x7f00000002c0)=@nfc, 0x80, &(0x7f0000001980)=[{&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000006c80)=""/4099, 0x1000}, {&(0x7f0000001600)=""/246, 0xf6}, {&(0x7f0000001540)=""/120, 0x78}, {&(0x7f0000001700)=""/70, 0x46}, {&(0x7f0000001780)=""/172, 0xac}, {&(0x7f0000000180)=""/44, 0x2c}, {&(0x7f0000001840)=""/155, 0x9b}, {&(0x7f0000001900)=""/94, 0x5e}, {&(0x7f0000000340)=""/30, 0x1e}], 0xa, &(0x7f0000001a40)=""/205, 0xcd}, 0x5}, {{&(0x7f0000001b40)=@can, 0x80, &(0x7f0000002000)=[{&(0x7f0000005680)=""/28, 0x16}, {&(0x7f0000001c00)=""/187, 0xbb}, {&(0x7f0000001cc0)=""/141, 0x8d}, {&(0x7f0000001d80)=""/116, 0x74}, {&(0x7f0000001e00)=""/149, 0x95}, {&(0x7f0000001ec0)=""/30, 0x1e}, {&(0x7f0000001f00)=""/254, 0xfe}], 0x7, &(0x7f0000002080)=""/61, 0x3d}, 0x6}, {{&(0x7f0000005600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002140)=""/65, 0x41}, {&(0x7f00000021c0)=""/202, 0xca}], 0x2, &(0x7f0000002300)=""/170, 0xaa}, 0x6}, {{&(0x7f00000023c0)=@nfc_llcp, 0x80, &(0x7f00000046c0)=[{&(0x7f0000002440)=""/25, 0x19}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/14, 0xe}, {&(0x7f00000034c0)=""/147, 0x93}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/22, 0x16}, {&(0x7f00000045c0)=""/86, 0x56}, {&(0x7f0000004640)=""/103, 0x67}], 0x8, &(0x7f0000004740)=""/217, 0xd9}, 0x9}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004840)=""/80, 0x50}, {&(0x7f00000048c0)=""/11, 0xb}], 0x2, &(0x7f0000004940)=""/50, 0x32}, 0x6}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000004980)=""/138, 0x8a}, {&(0x7f0000004a40)=""/192, 0xc0}], 0x2}, 0x3}, {{&(0x7f0000004b40)=@l2, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004bc0)=""/208, 0xd0}, {&(0x7f0000004cc0)=""/228, 0xe4}, {&(0x7f0000004dc0)=""/225, 0xe1}, {&(0x7f0000005c80)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/179, 0xb3}, {&(0x7f0000004f80)=""/198, 0xc6}, {&(0x7f0000005080)=""/153, 0x99}, {&(0x7f0000005140)=""/126, 0x7e}], 0x8, &(0x7f0000005240)=""/94, 0x5e}, 0x62c}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f00000052c0)=""/141, 0x8d}], 0x0, &(0x7f00000053c0)=""/53, 0x35}, 0xfffffffe}], 0x8, 0x0, 0x0) write$binfmt_elf32(r6, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x75, "2ce9fe1a76e683242941a019f5b917a13219ceab3b054ddddede45e2b3149bc8e5af4f7fba510c65a55e6f54eb01eb72437cb9e83a68bb2f6e5836622083fed990fcd515b773f67dd94b7ef43b92e7a55f133935063306ef3ce0b8efd42874a9ce482ad66e3ca28853b5366115bfc92ab1f655b7ed"}, &(0x7f0000000100)=0x7d) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x9c39e8af50f23ef7, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) getresuid(&(0x7f0000000400), &(0x7f0000000540)=0x0, &(0x7f0000000580)) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@local, @in=@multicast1, 0x4e22, 0x3, 0x4e22, 0x0, 0xa, 0x20, 0x80, 0x4, r10, r11}, {0x8c, 0x4, 0x7, 0x140000000000000, 0x906, 0x0, 0x8, 0x7fffffff}, {0x8, 0xc25, 0x8, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x4d3, 0x19}, 0xa, @in=@remote, 0x34ff, 0x4, 0x0, 0x80, 0x2, 0xffffb534, 0x7fffffff}}, 0xe8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000140)={r7, 0x9}, 0x8) [ 776.069790][T11863] dvb-usb: did not find the firmware file 'dvb-usb-gp8psk-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 776.082702][ T12] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 776.099899][T11863] dvb_usb_gp8psk: probe of 1-1:0.251 failed with error -2 [ 776.108653][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:11:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a91fe8f532368812b0f383b5d2c33f1ad6bfe32db5301f593d265c68faf66cbd5d7022b6fd411c9700c4ae172e57ac6d94e2949067fff31318f11203b89c09ecbdd"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 776.242468][T11896] usb 5-1: Using ep0 maxpacket: 8 [ 776.363644][T11896] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 776.372183][T11896] usb 5-1: config 0 has no interface number 0 [ 776.378415][T11896] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 776.388736][T11896] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 776.412182][T11896] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 776.448818][T11863] usb 1-1: USB disconnect, device number 49 [ 776.497821][ T12] usb 3-1: config 0 descriptor?? [ 776.551194][ T12] usb 3-1: can't set config #0, error -71 [ 776.582706][T22093] usb 4-1: new high-speed USB device number 42 using dummy_hcd 10:11:47 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbf, 0x82, 0xd4, 0x10, 0x46d, 0x89d, 0xb8b4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xca, 0x9d, 0x4b, 0x0, [], [{{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003880)={0xac, &(0x7f0000003600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) setsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f00000000c0)="b4a8059c72b6b85b304d61b87d2c9dfc780382b23083de3045e178ced8", 0x1d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000000)={{0x15, 0x46}, 0x1, 0xffffffff, 0x2, {0x4, 0x1f}, 0xbf, 0x4}) syz_usb_control_io(r0, 0x0, 0x0) [ 776.609306][ T12] usb 3-1: USB disconnect, device number 44 10:11:47 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xb8, @mcast1}, 0xc) listen(r0, 0xffeffffefffffffb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa192bce5e2dfb86dd60d8652b0566ca883ef562001c0600fe8000000000000000000d000028e294238000002200000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002abc5009a40903345f989b9dd94"], 0x0) 10:11:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r2 = gettid() r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/22) write$binfmt_elf32(r3, &(0x7f00000015c0)=ANY=[@ANYRES64], 0xfffffefb) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000040)="e76fc9db1db5141f1e408a10f5cbba0febc6014897") fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x2, r2}) fcntl$setlease(r1, 0x400, 0x1) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000002c0)={r6, @loopback, @loopback}, 0xc) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) close(r1) 10:11:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca50d5e0bcfe47bc0047111f1cabe62df7edffd3a022a4e82d405d21b05976bcda8d43e4cb9baaf675eb804b76f60c41bfd6cda88a2e75cc7fcd2b84c4c8bd65b9e0b3e36e7eb433c5022ad4dec61e4e536d8f25cbe06000000000000008e5aadeec06937babee8b42784d4222d93eda20f1713ea30877ae69218ac94c96374e50f3001db22ecdf41055084621cb2961354038f362fd48c45cd29af6602c2554d5a3396c7ec2df590b47a7589c73ef8d6c24b78c7380aba9e033487f0e948fe4add4c334da3f0c29acbb8591a7764a96c3b5cc5f70e5b9ce4228327d38edadbd3854e90d9") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0xfe95, &(0x7f0000000140)={&(0x7f0000000380)={0x14, 0x1e, 0x301, 0x0, 0x0, {0xffffff1f}}, 0xfeae}}, 0x0) recvmmsg(r1, &(0x7f0000007d80)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) [ 776.782548][T11896] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 776.794327][T11896] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 776.803033][T11896] usb 5-1: Product: syz [ 776.832919][T22093] usb 4-1: Using ep0 maxpacket: 8 [ 776.871895][T11862] Subscription rejected, illegal request [ 776.890307][T11896] usb 5-1: config 0 descriptor?? [ 776.952452][T22093] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 776.961301][T22093] usb 4-1: config 0 has no interface number 0 [ 776.968329][T22093] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 776.978505][T22093] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 10:11:48 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat(r2, &(0x7f0000000000)='./file0\x00', 0x800000, 0x144) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000688000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x2000000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x7c774aac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 776.989713][T22093] usb 4-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 777.222536][T22093] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 777.232472][T22093] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 777.241433][T22093] usb 4-1: Product: syz [ 777.272506][ T12] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 777.286445][T11896] usb 5-1: USB disconnect, device number 42 10:11:48 executing program 0: r0 = syz_open_dev$media(&(0x7f0000002600)='\x00\x00\xff\x00\x00\x00\x00\xecy\x92\xff\x04', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) r1 = socket(0x1, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r2 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) [ 777.360784][T22093] usb 4-1: config 0 descriptor?? [ 777.512192][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 777.633134][ T12] usb 3-1: New USB device found, idVendor=046d, idProduct=089d, bcdDevice=b8.b4 [ 777.642633][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.676499][ T12] usb 3-1: config 0 descriptor?? [ 777.718083][ T12] gspca_main: gspca_zc3xx-2.14.0 probing 046d:089d 10:11:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 10:11:48 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x400000, 0x0) splice(r0, &(0x7f00000000c0), r1, &(0x7f0000000140)=0x4, 0xfd, 0xd) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000084c0574030000000000010902240001000000000904000009030000000921000000012222000905810300000000004e90dd14df01010000000000006144a59fdf0301f2ba3e14e0c408dd1f93e3dbfa31a9d5b7d6ebf5e52447387e339f32b50f3faa049db38b88e600db18582db07df45c"], 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000040)={0xe}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x20800, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x11e}}, &(0x7f0000000780)={0x6a7b2202, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000340)={r8, &(0x7f0000000280)=""/133}) 10:11:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 777.999052][T11863] usb 4-1: USB disconnect, device number 42 [ 778.202672][T11866] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 778.205094][T11896] usb 1-1: new high-speed USB device number 50 using dummy_hcd 10:11:49 executing program 5: mmap(&(0x7f00001a2000/0xa000)=nil, 0xa000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x200000002, 0x0) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x40, 0x2}, 0xa1}}, 0x18) bind$inet(r1, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) [ 778.424336][ T12] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 778.452236][T11896] usb 1-1: Using ep0 maxpacket: 8 [ 778.482606][T11866] usb 5-1: Using ep0 maxpacket: 8 [ 778.512420][T11863] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 778.582409][T11896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.594136][T11896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 778.612178][T11896] usb 1-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 778.613047][T11866] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 778.621310][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.637748][T11866] usb 5-1: config 0 has no interface number 0 [ 778.644006][T11866] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 778.644101][T11866] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 778.665049][T11866] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 10:11:49 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x20000000021) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_matches\x00') ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000080)={0x3, 0x5}) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd7}, [], "4a0777deab89bf033d8d6a87b25592955139f4c0e72f9d178f02de10e6246e93611d37ed86bc0aa2524b82588b1e7b61c65a12951a6ebfa87120200612c015d92972e481eef7ce50dc6626cdc3f2b2aae385014e1eb7ea8c603f8c6e506f93"}, 0x23) [ 778.696076][ T12] usb 3-1: USB disconnect, device number 45 [ 778.766463][T11896] usb 1-1: config 0 descriptor?? [ 778.812766][T11863] usb 4-1: Using ep0 maxpacket: 8 10:11:49 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d66d69dbdb900"/606], 0x258) [ 778.945135][T11863] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 778.953410][T11863] usb 4-1: config 0 has no interface number 0 [ 778.959752][T11863] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 778.969707][T11863] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 778.988432][T11863] usb 4-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 779.005818][T11866] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 779.015451][T11866] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 779.023776][T11866] usb 5-1: Product: syz [ 779.053145][T11866] usb 5-1: config 0 descriptor?? [ 779.195138][T11863] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 779.207920][T11863] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 779.217005][T11863] usb 4-1: Product: syz [ 779.229426][T11863] usb 4-1: config 0 descriptor?? [ 779.249195][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.256500][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x2 [ 779.263634][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.270753][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.277911][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.285168][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.292402][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.305592][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.313325][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.321550][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.328768][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.335998][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.343524][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.350517][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.357656][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.364838][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.371825][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.378978][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.386182][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.396058][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.408953][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.417563][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.429882][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.437108][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.444261][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.451506][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.458729][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.465994][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.473126][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.480129][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.487424][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.494977][T11896] sony 0003:054C:0374.0010: unknown main item tag 0x0 [ 779.512718][T11866] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 779.523679][T11896] sony 0003:054C:0374.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 054c:0374] on usb-dummy_hcd.0-1/input0 [ 779.528373][T24190] usb 5-1: USB disconnect, device number 43 [ 779.538557][T11896] sony 0003:054C:0374.0010: failed to claim input [ 779.617872][T11896] usb 1-1: USB disconnect, device number 50 [ 779.802368][T11866] usb 3-1: Using ep0 maxpacket: 16 [ 779.952382][T11866] usb 3-1: New USB device found, idVendor=046d, idProduct=089d, bcdDevice=b8.b4 [ 779.961556][T11866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.022960][T11866] usb 3-1: config 0 descriptor?? [ 780.044465][T24190] usb 4-1: USB disconnect, device number 43 [ 780.077343][T11866] gspca_main: gspca_zc3xx-2.14.0 probing 046d:089d 10:11:51 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fc767a08b11342009b3300e4000109021b0001000000000904ee00012479d100070581000000000000"], 0x0) 10:11:51 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000100)={{0x7f, 0x7}, {0x6, 0x7}, 0x80000000, 0x0, 0x7f}) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000080)={{0x21, @local, 0x4e21, 0x4, 'sed\x00', 0x9d4d65d795bb2d0e, 0xffffffff, 0x39}, {@rand_addr=0x6, 0x4e22, 0x2, 0xffffffff, 0x3ff, 0x9434}}, 0x44) [ 780.254905][T11866] gspca_zc3xx: reg_w_i err -71 [ 780.260288][T11866] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 10:11:51 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_buf(r2, 0x29, 0xf, &(0x7f00000000c0)="9c51849ee768381500903bf11e621ee7a8f8bd18a2801ef8b1d053177f46f8b8f12f33586fc77adf1d4ebdb058b03b873527589e4851d1ea9150014e00253720cba222af00512ebab44ead4d18ba6a02b5c03599893cadbd4a4462d95e7328d0fd31b577a40b70399d5d93af53ee222a2b24deb867045e7d394f6c8b805dc57a44da5d9f7bbbac79ac104c49cf1bb5d6f9a06a21ffe2ae51d148934b1219c0e89081d0f3c5f657829183f26b05a1be78c486022afb42a782f8aba3f591ce0a8e010ea3d66a346a06b8635b7c81a4a3b6a13d2dc4de7e03ff4a63f4fda8947e386e64b36d456536362a85e888c868c589724acb", 0xf3) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086d0490c0400000000001090224000100000000090400000903010000092100000001220600090581030000000200"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@local=@item_012={0xe6}, @main=@item_012={0x2, 0x0, 0x0, "dc78"}, @global=@item_012={0x1, 0x1, 0xe34a742063167889, "f1"}]}}, 0x0}, 0x0) 10:11:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a91fe8f532368812b0f383b5d2c33f1ad6bfe32db5301f593d265c68faf66cbd5d7022b6fd411c9700c4ae172e57ac6d94e2949067fff31318f11203b89c09ecbdd"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 780.348900][T11866] usb 3-1: USB disconnect, device number 46 [ 780.362263][T11896] usb 1-1: new high-speed USB device number 51 using dummy_hcd 10:11:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xe, 0x83, 0x94, 0x40, 0xcf3, 0x9375, 0x3ca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x8, 0xed, 0x0, [], [{{0x7, 0x5, 0x81}}]}}]}}]}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffffffffca258d40, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, r3, 0xdd42ddecb798d42f, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42882004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x80, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x0, 0x6, [@TIPC_NLA_NODE_UP]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_ID={0xffffffffffffffa2, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbbd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x32a9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r4 = socket$inet6(0xa, 0xa, 0x2) pwritev(r4, &(0x7f00000015c0)=[{&(0x7f0000000200)="ab2b3d8b65c01761b486da3d4ebfa0450e95450b8f6fbecaced89655108b6c32ab154e8e99a8b9b5250d11f662edb1dd177f20c3c93bc657bef5ae556381769016302c9293cf96c8f2d2c9c37a906ac7d09f6b06565b8beb8c6571df24bd17c151796f0eb43ecda9fdddc3bc40f8c301645a8e5a9b738b6fa4dac845ece9eb84e66957c6bf265f99911e934496ec8b3c3e03a912a151cf1ddddaf38d96f3", 0x9e}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="3b10cc0bdfc0ec9b7d111d7414cc865d78e9db0b14f20b31f0009e131e3bac7f9c2b80b8ec679f68ea36e771ce5eeace06cd8845f790572eb42256872ed9425d7eee8ccdd751f33469a3126dd97c1e2f75b08ff71c84971381a2b2cf0a461edbe5c15588b91bcbfb30fbc509d302d95eeb7b0031490016700901ba9a7851b5aeb3aaff055b2c1ff2b9d2695111d2da56a8680c497b5e0cf2f6c1e6a6ee5733bfa659e031c71c89e4380b6b658646500079fed703a2a66c9621889e7adc440360c3d953a1bbc0a068694a4cf29e8f0a66417d", 0xd2}, {&(0x7f0000000080)="5bfba20dbcb6602ba8460c212b3b5fcf63b0", 0x12}, {&(0x7f00000014c0)="70d42522dad66d9d96a20d9d6a17e91d786c99e091d4c8d2ae81eeac1f8ef4a48df023d1e2434b3199ab68765da992ec68ff042766782af99fff2b58919bcc62b85f0702ec18a3008e024040dae330ab2114f0986f21a846990daa91e43eda806dbbde311964dd7e14014e312e5864e4867b364f8e82fcfcae832a2296ccbd01c0ed4c0b2c5d70bae075e27cd043876b8c73e0224318057c26098e1ccef12ceea8fe73bb5c5d925f0e872201a78229c53efb06f6fc935dd90b1a6b9251ef0e8de859b1008731b52b", 0xc8}], 0x5, 0x0) [ 780.652347][ T12] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 780.682327][T22093] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 780.822242][T11866] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 780.882731][ T4122] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 780.922433][ T12] usb 5-1: Using ep0 maxpacket: 8 [ 780.942598][T22093] usb 4-1: Using ep0 maxpacket: 8 10:11:52 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18100000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="5808000014aa50b2"], &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\xeb\xff\xff(1\x18\xc7\xc1\xde\xdc(,J\\\xc4hM=\xf4\x04\xd0\xe9\'rT\x8dm\x1a?\x1a\b\x93\x82\xbf\xfe\x83\xcb4tX{$\x9f\xbfHY\x1e;\xd0\xcf\xdb&\x12G\xfd\xd7\xe71\xd8K\x9b\xc9\x04C\xf5$\xd0\x93k\x12u\x9eMM\x03\x00\x00\x00\xc8\x83\x16\x9c2)\xaa\x9fh\xa4\xd2\x0f\x98.\x06t^\xc0\xcd\x95\x81*\xece1\x9e*3\xfa\xb5=\xd2\x1e-\xd3]}\xa7\xbfDZn\xd4\x82\x19\xfb\x1bjE\xc3D\xd8\xd56G\xd9\xc3\x90\xf5\xb9\xdc\x98\xb8\x8f=\xdf\xf0,e\x1dl\xe0\xc5\x80\a\xb1\xad\xbf\xc5\x88!j\xce\x00\x00\x00\x00\x00\x00', 0x2, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x4000, 0x0) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000001c0)) openat$cgroup_ro(r3, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000040)={0x1f, 0x1f, 0x1}) [ 781.045415][ T12] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 781.053771][ T12] usb 5-1: config 0 has no interface number 0 [ 781.060156][ T12] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 781.062209][T11866] usb 3-1: Using ep0 maxpacket: 8 [ 781.070431][ T12] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 781.086436][ T12] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 781.100407][T22093] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.111849][T22093] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 781.124921][T22093] usb 4-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.40 [ 781.134149][T22093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.193479][T22093] usb 4-1: config 0 descriptor?? [ 781.213410][T11866] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 781.221918][T11866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.232510][T11866] usb 3-1: config 0 has no interface number 0 [ 781.262746][ T12] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 781.271927][ T12] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 781.280575][ T12] usb 5-1: Product: syz [ 781.322530][ T4122] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.329696][T11866] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=33.9b [ 781.332932][ T4122] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 3.ca [ 781.332997][ T4122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.334591][ T12] usb 5-1: config 0 descriptor?? [ 781.342266][T11866] usb 3-1: New USB device strings: Mfr=0, Product=228, SerialNumber=0 [ 781.342341][T11866] usb 3-1: Product: syz [ 781.378402][ T4122] usb 6-1: config 0 descriptor?? [ 781.461762][T11866] usb 3-1: config 0 descriptor?? [ 781.553282][T11866] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 781.679325][T22093] logitech-hidpp-device 0003:046D:C090.0011: hidraw0: USB HID v0.00 Device [HID 046d:c090] on usb-dummy_hcd.3-1/input0 [ 781.706886][T11866] usb 3-1: USB disconnect, device number 47 [ 781.722591][T11940] usb 3-1: Failed to submit usb control message: -71 [ 781.729802][T11940] usb 3-1: unable to send the bmi data to the device: -71 [ 781.737671][T11940] usb 3-1: unable to get target info from device [ 781.744236][T11940] usb 3-1: could not get target info (-71) [ 781.750274][T11940] usb 3-1: could not probe fw (-71) [ 781.758067][ T12] usb 5-1: USB disconnect, device number 44 10:11:52 executing program 5: prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x3, 0x3a}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}]}}}]}, 0x4c}}, 0x0) [ 781.786014][ T4122] ath6kl: Failed to submit usb control message: -71 [ 781.793003][ T4122] ath6kl: unable to send the bmi data to the device: -71 [ 781.800090][ T4122] ath6kl: Unable to send get target info: -71 [ 781.870584][ T4122] ath6kl: Failed to init ath6kl core: -71 [ 781.885633][T22093] usb 4-1: USB disconnect, device number 44 [ 781.922856][ T4122] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 781.995252][ T4122] usb 6-1: USB disconnect, device number 52 [ 782.015101][T25384] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 10:11:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000080)=0x71240) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = msgget$private(0x0, 0x0) msgsnd(r6, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000ac0)=ANY=[]], 0x1, 0x0) msgsnd(r6, &(0x7f0000000a80)=ANY=[@ANYBLOB="030000000000000005bac549d56282781255e31850eddc1650e6cdbdc6d4ca871677243f52acf43be1bad6e12d2192213cc1fbd23efa4e2e16314b48556cd586"], 0x1, 0x800) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') msgrcv(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f0be0a3cdd9e5dfadf4"], 0x79, 0x3, 0x1000) msgrcv(r6, &(0x7f00000005c0)={0x0, ""/149}, 0x9d, 0x0, 0x0) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000180)=""/25) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000140)={0x1, 0x0, {0x9, 0x3f, 0x1, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r10, 0x40bc5311, &(0x7f0000000440)={0x3, 0x1, 'client0\x00', 0xffffffff80000000, "0916c8cb0c8a973d", "7485b72ff58e6ddac38d1ab75bb7f2f79df716d1aa00f3aa3d26e08dd037bf69", 0x100, 0xa149}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 782.077356][T25385] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 10:11:53 executing program 5: stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000600)) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540), 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r1) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd", 0x2d, r2) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600), 0x0, r2) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r3) r4 = socket$inet6(0xa, 0x8000008000080001, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000780)) r5 = syz_open_dev$dspn(0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e22, 0x9, @loopback, 0x5}}, [0x3ff, 0x1000, 0x4, 0x0, 0x7, 0x8, 0x3ff, 0x0, 0xffff, 0x6, 0x1, 0x764d, 0x1, 0x4]}, &(0x7f0000000900)=0x100) r6 = add_key(&(0x7f00000006c0)='ceph\x00', &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740), 0x0, r3) keyctl$chown(0x4, r6, r0, 0x0) getgroups(0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x48000, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000000440)={'icmp\x00'}, &(0x7f0000000480)=0x1e) getgid() r8 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r8, 0xc0305602, &(0x7f0000000100)={0x0, 0x556, 0x3013}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) r10 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r9, 0x49b, r10) unshare(0x60020000) [ 782.483535][T25390] IPVS: ftp: loaded support on port[0] = 21 [ 782.526505][T11866] usb 3-1: new high-speed USB device number 48 using dummy_hcd 10:11:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a91fe8f532368812b0f383b5d2c33f1ad6bfe32db5301f593d265c68faf66cbd5d7022b6fd411c9700c4ae172e57ac6d94e2949067fff31318f11203b89c09ecbdd"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 10:11:53 executing program 0: r0 = socket(0x24, 0x5, 0x0) sendto$unix(r0, &(0x7f0000001480)="ccc261ef9ab5227b1f02394ba45c99a898c22feaa098a6189f70c7f1e242c645", 0x20, 0x80, &(0x7f00000014c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40000, 0x0) poll(&(0x7f00000002c0)=[{}], 0x1, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001380)={{{@in6, @in6}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) fsync(0xffffffffffffffff) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001540)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000001580)) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000380)=""/4096) r4 = socket(0x1e, 0x1, 0x0) sendmsg(r4, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r5, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000001600)=0x80, 0x4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r9, 0x4004556d, 0xf) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10241002}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x32dcb9893c8abbe6, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0xffffffffffffffae}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x1}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000300)={0x94, 0x80, 0x2}) 10:11:53 executing program 3: getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'br\x01\x00te\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) recvfrom(r0, &(0x7f0000000040)=""/175, 0xaf, 0x1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 0x3, 0x3}}, 0x80) [ 782.892212][ T4122] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 783.006981][T11866] usb 3-1: Using ep0 maxpacket: 8 [ 783.101552][T25557] IPVS: ftp: loaded support on port[0] = 21 [ 783.132829][T11866] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 783.141247][T11866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.151699][T11866] usb 3-1: config 0 has no interface number 0 [ 783.212250][ T4122] usb 5-1: Using ep0 maxpacket: 8 [ 783.287907][T11866] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=33.9b [ 783.297631][T11866] usb 3-1: New USB device strings: Mfr=0, Product=228, SerialNumber=0 [ 783.306070][T11866] usb 3-1: Product: syz [ 783.355337][ T4122] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 783.355878][T11866] usb 3-1: config 0 descriptor?? [ 783.363765][ T4122] usb 5-1: config 0 has no interface number 0 [ 783.375302][ T4122] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 783.385178][ T4122] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 783.396253][ T4122] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 783.494814][ T4122] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 783.504583][ T4122] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 783.512878][ T4122] usb 5-1: Product: syz 10:11:54 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fchmod(r1, 0x42) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000080)="0f38016f010f2204c4e118544e00640fc7af0600000064dab4e0090000000f01f066b86e008ed0c4c18816fd0f01c4e810000000"}], 0x351, 0x68, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x7, 0x488022) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={r6, 0x7ff, 0x30, 0x5, 0x4}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000240)={r7, 0x3}, &(0x7f0000000280)=0x8) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/42, 0x2a) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fdb000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) geteuid() fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)='@\'\x00', 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) personality(0x410000e) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3, 0xc0000080]}) clone(0x40000000, 0x0, 0x0, 0x0, 0x0) 10:11:54 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eb0400180016000f000586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000000)) 10:11:54 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x115}, {0x80, 0x2}, {0xfffb, 0x8}, {0x80, 0x1000}, {0x2, 0x5}, {0x2, 0x6}, {0xa27, 0x8}, {0x1, 0x7}]}) r3 = socket$kcm(0x2b, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) [ 783.542897][T11866] usb 3-1: can't set config #0, error -71 [ 783.560074][T11866] usb 3-1: USB disconnect, device number 48 [ 783.582915][ T12] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 783.639747][ T4122] usb 5-1: config 0 descriptor?? 10:11:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086d0490c0400000000001090224000100000000090400000903010000f32006000005810300000002000000000000999fef3ec97eacf3cbf92d4344c92d7e7591bd3027579bd84f7eec51f5b81c3e524e5fa8b45a127640975dcf918b81925a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@local, @main=@item_012={0x2, 0x0, 0x0, "dc79"}, @local=@item_012={0x1, 0x2, 0x0, '\x00'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 783.834552][ T12] usb 1-1: Using ep0 maxpacket: 8 10:11:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x4, &(0x7f0000000040)={0x1, 0x10000}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000200)={@dev}, 0x2c6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030004080000000008005b000000000059fc403ac756f39c1600"/41], 0x3}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10) [ 784.014624][ T12] usb 1-1: unable to get BOS descriptor or descriptor too short [ 784.026807][T24190] usb 5-1: USB disconnect, device number 45 [ 784.104446][ T12] usb 1-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 784.114999][ T12] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 784.124435][ T12] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 784.142242][T11866] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 784.232548][T25728] IPVS: ftp: loaded support on port[0] = 21 [ 784.365966][ T12] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 784.375289][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.383629][ T12] usb 1-1: Product: syz [ 784.387875][ T12] usb 1-1: Manufacturer: syz [ 784.392226][T11866] usb 6-1: Using ep0 maxpacket: 8 [ 784.392627][ T12] usb 1-1: SerialNumber: syz 10:11:55 executing program 3: move_pages(0x0, 0x20000047, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x7f) mmap(&(0x7f00004d8000/0x3000)=nil, 0x3000, 0x0, 0x1d1032, 0xffffffffffffffff, 0x0) [ 784.453590][ T12] cdc_ncm 1-1:1.0: bind() failure [ 784.512520][T11866] usb 6-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 784.523208][T11866] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 784.536701][T11866] usb 6-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.40 [ 784.546030][T11866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:11:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 784.673645][T11866] usb 6-1: config 0 descriptor?? [ 784.700248][ T12] usb 1-1: USB disconnect, device number 52 [ 784.717425][T11866] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 784.942718][T25728] IPVS: ftp: loaded support on port[0] = 21 [ 785.295638][ T12] usb 5-1: new high-speed USB device number 46 using dummy_hcd 10:11:56 executing program 2: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x3, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x0, 0x20}) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) write(r1, &(0x7f0000000080)="f5b148774f2e98ff4bd56193c6cbf69f67bbdb3ad245eb78e24ef0d755dacb", 0x1f) r2 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) ioctl$FS_IOC_GETFSMAP(r0, 0xc020662a, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000017f4bf10e7304ee8f"]) [ 785.581510][ T12] usb 5-1: Using ep0 maxpacket: 8 [ 785.705109][ T12] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 785.713422][ T12] usb 5-1: config 0 has no interface number 0 [ 785.720138][ T12] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 785.730133][ T12] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 785.741595][ T12] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 785.755624][T22093] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 785.965209][ T12] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 785.974686][ T12] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 785.983204][ T12] usb 5-1: Product: syz [ 786.013629][T22093] usb 1-1: Using ep0 maxpacket: 8 [ 786.053188][ T12] usb 5-1: config 0 descriptor?? [ 786.195821][T22093] usb 1-1: unable to get BOS descriptor or descriptor too short [ 786.481052][ T12] usb 5-1: USB disconnect, device number 46 [ 786.563774][T22093] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 786.571461][T22093] usb 1-1: can't read configurations, error -71 [ 787.077829][ T12] usb 6-1: USB disconnect, device number 53 [ 787.268175][T25853] IPVS: ftp: loaded support on port[0] = 21 [ 787.615586][ T4122] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 787.702429][ T12] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 787.820827][T25852] IPVS: ftp: loaded support on port[0] = 21 [ 787.902427][ T4122] usb 5-1: Using ep0 maxpacket: 8 10:11:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x6c060000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) shutdown(r2, 0x1) 10:11:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 10:11:58 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000082609333340000000000109022d0001000000000904000009030101001344ed09210000000122060009058103000200000109050203e303000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDSKBLED(r3, 0x4b65, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6}, 0x0}, 0x0) 10:11:58 executing program 2: syz_usb_connect(0x0, 0xffffffffffffffb6, &(0x7f0000000000)=ANY=[@ANYBLOB="120100acab6a4e00478c3520e803000000c59bb0d50800000000000004cd99376dabba5500"/49], 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) ioctl$int_out(r1, 0x5460, &(0x7f0000000140)) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000100)={0x100000001, 0x7f}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r10}], 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000001c0)='#@\x00', 0x0, r10) r11 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = fcntl$dupfd(r16, 0x0, r15) r18 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x10000, 0x121800) read$alg(r18, &(0x7f00000002c0)=""/228, 0xe4) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x824) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000080)) [ 787.998872][ T12] usb 6-1: Using ep0 maxpacket: 8 10:11:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 788.053339][ T4122] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 788.061475][ T4122] usb 5-1: config 0 has no interface number 0 [ 788.067849][ T4122] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 788.077710][ T4122] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 788.088764][ T4122] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 788.195356][ T12] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.205765][ T12] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 788.219121][ T12] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 788.228350][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:11:59 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) socket$rxrpc(0x21, 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000080)="8634431d713ccefc0c8ffcd1508a9f66b853f98761e81cbaf887b0ddf6768abefad779264deb81c2ab2794e24813ccd73cb8f3e28e52a4fd3576a785176bc81e8196f571ed8e7e4cd4e928bc596f8e97af122b5c9fc6f3dadbd2ef5961b7e6dd5112823cb455d5d775d2356f3a1dc8425e6b158c1418e642dabd91e375c1cd666eda5d5d907c27ea736bfbb6a76054f8052c8b3b26031959b78012") bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x58000000}, @random="235c7e39c5e4", [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @local, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @multicast2}}}}}}}}, 0x0) [ 788.304712][ T4122] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 788.314215][ T4122] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 788.322686][ T4122] usb 5-1: Product: syz [ 788.328505][T22093] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 788.344955][ T12] usb 6-1: config 0 descriptor?? 10:11:59 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @dev, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast, {[@noop, @timestamp={0x44, 0xc, 0x9, 0x1, 0x0, [{[@loopback]}]}]}}, @icmp=@timestamp}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x4, 0x8) syz_emit_ethernet(0x111, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa2b86dd61f0a48d00db1d8000000000000000000000ffffffffffffff010000000000000000000000000001021004080e0000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000170000000000000000000000000000000100000000000000000000000000000001ff02000000000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000bb4e204e24", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYBLOB="b0101fef205e7a212b0ccede7020000390780002050600000006020409001e0c8408000000000000010000008aba48fc5be71c1f12178f11d0aeed73e2104be1cbbc4129279825"], &(0x7f0000000200)={0x1, 0x3, [0x71, 0x57d, 0x6c5, 0xcbc]}) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000240)=0x4b, 0x2) [ 788.365022][ T4122] usb 5-1: config 0 descriptor?? [ 788.402813][ T12] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 10:11:59 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) set_mempolicy(0x4003, &(0x7f0000000080)=0x100, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x292142) prctl$PR_SVE_GET_VL(0x33, 0xe359) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0x4) ioctl$int_in(r1, 0x800060c0045005, &(0x7f0000000000)=0x40000) read$hiddev(r1, &(0x7f0000000240)=""/74, 0x27e) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) clone(0x42108000, 0x0, 0x0, 0x0, 0x0) [ 788.486064][T11898] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 788.612332][T22093] usb 3-1: device descriptor read/64, error 18 [ 788.752420][T11898] usb 4-1: Using ep0 maxpacket: 8 10:11:59 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x40000080806, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x33, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)={0x9, 0x80, 0x7, 0x3f, 0x6, [{0x0, 0x80000001, 0x8, 0x0, 0x0, 0x2000}, {0xc9, 0x8000, 0x503, 0x0, 0x0, 0x5000}, {0xb1, 0x40e, 0x3, 0x0, 0x0, 0x8}, {0x3, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x401}, {0x93, 0xb2b, 0xbe8, 0x0, 0x0, 0x405}, {0x80000001, 0x9, 0x10000, 0x0, 0x0, 0x900}]}) [ 788.779273][ T4122] usb 5-1: USB disconnect, device number 47 [ 788.872614][T11898] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 788.880982][T11898] usb 4-1: config 0 has no interface number 0 [ 788.887557][T11898] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 788.897710][T11898] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 788.908814][T11898] usb 4-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 788.983003][T25879] IPVS: ftp: loaded support on port[0] = 21 [ 789.025063][T22093] usb 3-1: device descriptor read/64, error 18 [ 789.174600][T11898] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 789.183983][T11898] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 789.192340][T11898] usb 4-1: Product: syz [ 789.242586][T11898] usb 4-1: config 0 descriptor?? [ 789.324242][T22093] usb 3-1: new high-speed USB device number 50 using dummy_hcd 10:12:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 10:12:00 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) sendfile(r1, r0, 0x0, 0x1f7) [ 789.476487][T25888] IPVS: ftp: loaded support on port[0] = 21 10:12:00 executing program 1: socketpair$unix(0x1, 0x2000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x2000089a2, &(0x7f0000000000)={'bridge0\x00\x00\f4\xbd\x19\n\x00', @ifru_addrs=@nl=@proc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090069000007a2e407edab0080581000000046058107a277001419000a0010000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) [ 789.644505][T22093] usb 3-1: device descriptor read/64, error 18 [ 789.666344][T25901] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 10:12:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xb9, 0x54, 0xc9, 0x10, 0x10c4, 0x807a, 0xb30, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x0, 0x5a, 0x80, 0xf1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001600)={0x44, &(0x7f0000001380)={0x60, 0xf, 0x2, 'vO'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 789.819549][T11898] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 790.010243][T11863] usb 4-1: USB disconnect, device number 45 10:12:01 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x5, {{0xa, 0x4e24, 0x6, @ipv4={[], [], @multicast1}, 0xffff}}}, 0x88) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=@newlink={0x88, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x50, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3}, @IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x801a}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x790}, @IFLA_GRE_TTL={0x8, 0x8, 0xfff}]]}}}, @IFLA_MTU={0xffffffffffffffee, 0xe, 0x8001}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004}, 0x0) [ 790.072384][T22093] usb 3-1: device descriptor read/64, error 18 [ 790.084128][T11898] usb 5-1: Using ep0 maxpacket: 8 [ 790.192674][T22093] usb usb3-port1: attempt power cycle [ 790.224833][T11898] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 790.232631][T11866] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 790.234042][T11898] usb 5-1: config 0 has no interface number 0 [ 790.247887][T11898] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 790.259758][T11898] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 790.270963][T11898] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 10:12:01 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x221400) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0xfff, 0x4) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r2 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000100)=@generic={0x3, 0x1, 0x40008e7c}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x8040, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0xc, 0x13, @l2={'ib', 0x3a, 'hsr0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x2800003e, 0x0, 0xf}) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 10:12:01 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$apparmor_current(r4, &(0x7f00000000c0)=@hat={'permhat ', 0x3, 0x5e, ['\x00', '[cpuset,#{\x00', 'selfselinux\xa5md5sum\\}wlan1,/\x00', '[%\x00', '\x00', '\x00']}, 0x48) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a00000000000000000000000800040000000000", 0x24) [ 790.447506][T11863] usb 6-1: USB disconnect, device number 54 [ 790.469819][T11898] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 790.472257][T11866] usb 2-1: Using ep0 maxpacket: 16 [ 790.479683][T11898] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 790.493285][T11898] usb 5-1: Product: syz [ 790.548625][T11898] usb 5-1: config 0 descriptor?? 10:12:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x100, 0x0) r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000180)=0x78) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x80000000, 0x6, 0x0, 0x40]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$KVM_NMI(r11, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 790.602392][T11866] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 790.610864][T11866] usb 2-1: config 0 has no interface number 0 [ 790.617528][T11866] usb 2-1: New USB device found, idVendor=10c4, idProduct=807a, bcdDevice= b.30 [ 790.627696][T11866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.738742][T11866] usb 2-1: config 0 descriptor?? 10:12:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000600"/12], 0x30}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0xffffffff00000000, 0x0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x4000, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x23) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0xa, 0x5, 0x1000, 0x1000, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x6, 0x0, 0x2, 0x0, r2}) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) [ 790.785917][T11866] cp210x 2-1:0.111: cp210x converter detected [ 790.964645][T11898] usb 5-1: USB disconnect, device number 48 [ 790.992878][T11866] cp210x 2-1:0.111: failed to get vendor val 0x370b size 1: 0 [ 791.000466][T11866] cp210x 2-1:0.111: querying part number failed [ 791.055555][T26181] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 10:12:02 executing program 5: [ 791.333658][T26181] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 791.442606][T11866] cp210x ttyUSB0: failed set request 0x3 status: -71 [ 791.449762][T11866] cp210x: probe of ttyUSB0 failed with error -71 [ 791.506350][T11866] usb 2-1: USB disconnect, device number 60 [ 791.514126][T11866] cp210x 2-1:0.111: device disconnected 10:12:02 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) set_mempolicy(0x4003, &(0x7f0000000080)=0x100, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x292142) prctl$PR_SVE_GET_VL(0x33, 0xe359) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0x4) ioctl$int_in(r1, 0x800060c0045005, &(0x7f0000000000)=0x40000) read$hiddev(r1, &(0x7f0000000240)=""/74, 0x27e) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) clone(0x42108000, 0x0, 0x0, 0x0, 0x0) 10:12:02 executing program 5: ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000080)={0x9, 0xa95a, 0x7, 0x5, 0x3, 0x6}) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000040)=[{&(0x7f0000000140)="d800000018008109e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000500b800069903000000050015800200812fa80005000f0063e3fb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025cc3d39e4b51e2752b4285eb3fc50ca9e33f4d6ce722f1266bbb8061400360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93450000", 0xd8}], 0x1}, 0x0) 10:12:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[], 0x0) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r2 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r2}], 0x1, 0x0) r3 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r3}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000010000107000000000000000000200000887650ecc7071d4f40809b1e89bec63b3a1f3c2eafdea47209730826cd1b0eeb93db6e23ed993e964f872a31b371ed47146729548588faaee688398c09756f544b9d52bf3b1614cfa20d09f4a208085f59353a6fa37b2f91c693e4dbe766f865695bdc44b9b9bfff295dc968c02e01800000000000000101a8091e0f64e8b9c025398d2d465b3586636c189367d5d877bc315ed11f6f7f95caab556a5762081a2f45c88f47dce75c", @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYPTR64=&(0x7f00000026c0)=ANY=[@ANYBLOB="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"/4161, @ANYRESHEX, @ANYRES64=0x0, @ANYRES32=r1, @ANYRES64, @ANYBLOB="2bc75131e0a0f8cc7078903ddabefd39b6331456afbc81334b6900c0cba24c02678f95c936e6f8e4d7adced9181bd46003ccb7423c775b6a8524af83899a01c1b33f00d942f5f3b96c0ccc", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESDEC], @ANYRES64, @ANYBLOB="0adb9622f5b6e3c9e2b5c3b199fcbc1b6db01650093da61532d9b7cfbef070b6c9764a", @ANYRES16=r3], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = accept$alg(r6, 0x0, 0x0) connect(r7, &(0x7f0000000300)=@rc={0x1f, {0x9, 0x9, 0xf9, 0x3, 0x0, 0x1}, 0x9}, 0x80) 10:12:02 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r4, 0xa}, 0xc) r5 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x6e, 0xfffffffffffffffc, r5}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) r7 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) shmat(r7, &(0x7f0000fff000/0x1000)=nil, 0x5000) fcntl$getownex(r6, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r8) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0xd9, 0x81, 0x20, 0x1, 0x0, 0x4, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6, @perf_config_ext={0x1, 0x7}, 0x2000, 0x7fff, 0x3, 0x6, 0x2, 0x3, 0x40}, r8, 0x6, 0xffffffffffffffff, 0x11) 10:12:02 executing program 4 (fault-call:3 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 791.761809][T26244] IPv6: NLM_F_CREATE should be specified when creating new route [ 792.003475][T26334] IPVS: ftp: loaded support on port[0] = 21 [ 792.114847][T22093] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 792.192600][T11866] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 792.382262][T22093] usb 5-1: Using ep0 maxpacket: 8 [ 792.442254][T11866] usb 2-1: Using ep0 maxpacket: 16 [ 792.502396][T22093] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 792.510600][T22093] usb 5-1: config 0 has no interface number 0 [ 792.517005][T22093] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 792.526798][T22093] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 792.537899][T22093] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 792.572461][T11866] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 792.580781][T11866] usb 2-1: config 0 has no interface number 0 [ 792.587154][T11866] usb 2-1: New USB device found, idVendor=10c4, idProduct=807a, bcdDevice= b.30 [ 792.596491][T11866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.606682][T11866] usb 2-1: config 0 descriptor?? [ 792.622559][T22093] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 792.631949][T22093] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 792.640396][T22093] usb 5-1: Product: syz [ 792.646572][T22093] usb 5-1: config 0 descriptor?? [ 792.655743][T11866] cp210x 2-1:0.111: cp210x converter detected [ 792.862488][T11866] cp210x 2-1:0.111: failed to get vendor val 0x370b size 1: 0 [ 792.870140][T11866] cp210x 2-1:0.111: querying part number failed [ 792.885966][T26252] FAULT_INJECTION: forcing a failure. [ 792.885966][T26252] name failslab, interval 1, probability 0, space 0, times 0 [ 792.899621][T26252] CPU: 0 PID: 26252 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 792.907577][T26252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 792.909754][T26252] Call Trace: [ 792.909754][T26252] dump_stack+0x191/0x1f0 [ 792.909754][T26252] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 792.931588][T26252] should_fail+0xa3f/0xa50 [ 792.931588][T26252] __should_failslab+0x264/0x280 [ 792.931588][T26252] should_failslab+0x29/0x70 [ 792.931588][T26252] kmem_cache_alloc_trace+0xf7/0xd20 [ 792.931588][T26252] ? snd_seq_port_connect+0x105/0x810 [ 792.931588][T26252] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 792.931588][T26252] snd_seq_port_connect+0x105/0x810 [ 792.931588][T26252] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 792.931588][T26252] snd_seq_ioctl_subscribe_port+0x774/0xb60 [ 792.931588][T26252] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 792.931588][T26252] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 792.931588][T26252] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 792.931588][T26252] snd_seq_kernel_client_ctl+0x562/0x5e0 [ 792.931588][T26252] snd_seq_oss_midi_open+0xa61/0xe80 [ 792.931588][T26252] snd_seq_oss_synth_reset+0x6fb/0xd70 [ 792.931588][T26252] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 792.931588][T26252] snd_seq_oss_reset+0xac/0x380 [ 792.931588][T26252] snd_seq_oss_release+0xd3/0x410 [ 792.931588][T26252] ? kmsan_internal_set_origin+0x6a/0xb0 [ 792.931588][T26252] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 792.931588][T26252] odev_release+0x85/0xe0 [ 792.931588][T26252] ? odev_open+0x130/0x130 [ 792.931588][T26252] __fput+0x4c9/0xba0 [ 792.931588][T26252] ____fput+0x37/0x40 [ 792.931588][T26252] ? fput_many+0x2a0/0x2a0 [ 792.931588][T26252] task_work_run+0x22e/0x2a0 [ 792.931588][T26252] prepare_exit_to_usermode+0x39d/0x4d0 [ 792.931588][T26252] syscall_return_slowpath+0x90/0x610 [ 792.931588][T26252] do_syscall_64+0xdc/0x160 [ 792.931588][T26252] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 792.931588][T26252] RIP: 0033:0x459ef9 [ 792.931588][T26252] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 792.931588][T26252] RSP: 002b:00007f314064cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 792.931588][T26252] RAX: 0000000000000000 RBX: 00007f314064cc90 RCX: 0000000000459ef9 [ 792.931588][T26252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 792.931588][T26252] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 792.931588][T26252] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314064d6d4 [ 792.931588][T26252] R13: 00000000004fa312 R14: 00000000004d29a0 R15: 0000000000000006 10:12:04 executing program 2: syz_usb_connect$hid(0x0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008ac0530020000000000010902040001000000004904000000030b0200092100000001220000090581030000000000d0475ed6139c9095d5a21c1a6e974f3bf87a0ca2ee0e2e35747f8a409115ca07e89e5314306dd42bc5358d8e19114f596aaefcd92ef4b3ac9a9d093a0600475a8df8d28d95d6cc5074f5553101040000bef71cc4cfa5533798dead61e6320bd03276dcb0bc977fcbd9"], 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getcwd(&(0x7f0000001200)=""/58, 0x3a) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000001c0)='ppp0%)%@trusted\x9c\\$\\-\'\x00', &(0x7f0000000200)="5abe25cc75648065b3059fea6eacfdc97f59f494dcba4ac3a8039c4f07d3205db621755a5627931f6b066bff6110c8e965410e491d4f1bbefbb4e4a43458c12c07d8b3244c835ceb25e62e6c79bece6374a36c16464f920d4ac1fc8149615d562ef5913e2563b2532a8e3942283254f92a0a9be1044ebda1bad64b73240317ee0585f93dc649736b8a186d8b3f12ec6bd00b365ca36d2f9fa1f51cc63eba963d99f1152206d7fab70cb3f1626738156cb6f807bd5464213fe3d83fb19478fbfff73e515ef6295e18d731a26c4fd5a608022eb0f4c40d3a676332f32b6e218758db56ea89db3147562e2f1e9a1ce4a79c66c2517d760305e002afed305ea7a0e1b0e1410c59b8e42b7b2686c6a67e6406156d9816641b47c6c4ce76006ec0803f6a518d295671fa55868b5b220bbd9e80635cca77fa3a6a09d576598d36db1dd14a97e9662b810993b4c22c1ee3c5aa428721703407a59fc5ab835ad5d4b2abbcf62a0b7c84580e9d9d3e527ede7b376f49f3d18bebecadfbdc01266899805564d28766767493314642a68ca038e8db87de1b8728c94a33b0abc1e8e2599d77d2caaeecaef629ac12e390d55a628d13a6a6b1588bad941a0699c3965eebf981235ece57863fe3678b45e494e65cd438fe428a8f5e33c974ccc80eda87bce53288426557b71085068251d5c5ef00890f954ed879e62227c06866833737fc413df2913688247410ae5dae66f6d9d505e8ae9234aae08e3ac88f85469ecd0b7bebcfb5c8e6a4e54ab78583686929c658e24116518c7825506ee09f46e998ed9ab0311ad3fe856097e387dc227c18f9fc2c857a7cebfebf367cfa869e0186f477060401acede598880a52ca4b6dc882d27c2b15eabfe736cf1cb6a1398e5952ffd9ed91be4d27b37f0b190147018879626abba5e0d184c58f522dfb274ac0f9f915e35f913fd3ab25355897d92e61a02801eb7636c532fe8936f7d3df121ebcc0e4419c37f07dee5fe84594d306be9040f3ab2ef9af5bd5fc8422629057b8ea74c23d843cc756a7a634fee5369a1999a951039478c1fa253f25a8786d9b03aa96c6a88663fb80bd1ddecc1c57e69e7012adf3ea99f4dc8996509136ed188b52d005dfece393a109ec53a0c028b2eea2b284eefe65bdabb11fb21bb87693d74b4db1be9800da67aa6da69c10bde0057c943717f36c5174886578e536c953dbbf9adedc67bb8844b6a361f7210c65a805597d1c7299c35201e04fcf20404bdc880211e67ca31415593124a242fd5c9a17f0803c495b3548621d89e18f5bd537639634b5538f46fc06cf2206ef27452e86a33c9c05cfc647784bebe1dbf1af02144be5f71681b3498b0c26d435265df19af32f2e346dc3db6a9c5bc546bb3ca03fe6a4c533947023ef0643c7c9ee3190a1c5fca0580b6591a1db57dfc0cd18f3b6117b1cb28027b823d25108384ec7fe91be3d6c5adfeea815d8237890b2b5d298f2360cc2411f33c0f0229576cbd375608acf47697c41c66a7eb91cae9baf6ed3d53bc653551dcd30b8a203f07d6693615be3ff9711e6fd8f6ad50c2047f5dd46b986c84e7b90c58536c3264c2da328e1a7487011129c177f7f33e73dbfda7024f02833e5593ea99db966d2378a6a11346b442738091c3965c712c4e92c954934c8219a1047e096e046a565040c73ce34901cae313f8d053282caa9a5f1ae3aa68ca83d49f3b55ecf839db62c49ba32d59176fae2d569ea18a8c3c80ec47faff173e0c0ec8295775a75b65c0d4843b502aaa24aa5041836b341333eee14ae2a89b6a95b3298df11b7d733eeb9ee2fb91cb7fdf25277b325415ac925e84b6d83be76ffd9a44b5ddd07fd1db84b967146138b9e6406719df43044138425cd83bee922c8538431d3e96d9f7d9e5249b4491725d9cf3e144f420d55601b708c80102a280469629292a41b6e37f16406e666eff4ad716242581a5cd5c8f91464b9f5f9e6873554a5b4a504d320f40fefad7d23a8de2698a204efc84fd41e48ca62b55fe52adc281371c6a70c642382c93111dd6bdf150761bc69fc582cdb2f57e83368126c846aba8443a99479ebb60a99b39323a81ad70c45b73f1f52bef778254234e678f39ef6ebc21b3d4a05c56a5e97a071b02a1c22cbf895e45646b8e280a64b375ff5d9ec011e05d6482365344234cec652ae2bf8df575ca2b80fe069f1430401af137306c13e32682eff4b453d0777eda434476826c77a62c264738736b02cb850d2f976958dfb730cdc73575e2584e5c3205feac375c4c57e3d6c6b3d6b5b93418b4f66cd73145f5e9969388a12cf67955e49513aa77d3ee6c7a41ad97f5926016fb38176180a7e6a3ec4e7d91980c92ef1b2966c1e24bdefcf8fbf5d81535f6e317bb57034a76b52c59caf5ec31142e4c1ee0e1000307c19846b77a678cb64342e909727419fbf7e7809d280c9dbb1837e9606d103c3dc7bb6aa917bbda3bc578e7316b6e270a5f18a4861895aae790eb0fcbb30518a2e0134315ab3935fc20cc172fcb8ab3e3a495a532bb1b43667e6903466f234a0cf7fed14146fe8c176049ba1e157afdbfa58e5599a9bc6d57bfc91e9ddf0d9e7f5303dc3cbf52e7a57ae90b7dcdf813d30bfd0acb63c395ace02f6d712ac48cf2eb1faf02181e8db2d41f5b93efb7a4cf8b4382b9b25592358859403028b0fcede8546e4d6bc4888ce413aaaa62f42a59af7315e1560ec0af78b07e15176a75d1d03900b48a6c33c481cb223857fdabda15c4218430975a72c2ead46cbf87e8a0786c3511dc088eb15ac475480b32b6e686e7d8b51de966d79d69671e9b2831768b992dcc3c87ab063e6d7234aacd5d7e3d08ba5580e9e6682e2ef3078057f3145c43a55aa17e940d85536c36d81d75dee5183fd636c91fe3fd713222e66b4036a1679b23b5f1ac7a3eb504ab8aa9bc91aba36f8aec7020c6a91dca8e79897ce2eb9505d7fdcd0ad4d6f9b88d4a00c1732fbf5a72162969f2b82cab282d47465937678b22c5d8870bac4dce2d831b11e1851172f32564fae2ddc6dee9896571c040794a11cdf2a5bd26cf99ac441be77fcddd08c22dd33362c0388a2d16ea9a568fe6ab994c68da45bc9847d76df721a69fa76e76a6d2aa9ff697c9ce6fa449f3cdec8ae55ae6408e8b87e13133f0ddde9a1effbdb2f8fef8174f5998f28306a552f139864d137bd6ee88a18e801bc0282a67e7ab6dd4943de54986d9069d093c7b35f4a03d962fed4b35ea5a0acadea830a60e9b36e282c259a4445d46eb2547772bcfba4dc37f6336e68ab4a70067482e21f4b32053acb4a2282571cbc6e7844d065c7736c6bbf63f805f25ec9093cbfb801b1e7d98b49bbfd6b56b8252a3a18662c505bb4c258acecf4c66b2e12aeafeec9a363e094ef564af843d50dd2809e06662b9e1a17c6b2c97e4f4647725175e9612e3de3b4a5576455d78b9e28b3a739a09c8250588be4bdba648252abda6538aa21f6ce215ba751a0972abeaea0cc64ea9869524958ebf522bb9760473d53750a63d3afd2bc8e7dbb819f220deb623086c6b823b85e31bb1e9cc8d2cdcb62878d28f850db2f4876c9dc8f8f5fda0512b1c6207919925f91771eed6a2772ef09cba35478808e2c82fa299e1e37b570475b7da93b5a3ed96ceec4f900dd1ac3f5fd0eda3b4ab0cdcadf515dcd876e2d15bfe314acb59db22246cd03f2935248d076bdd612d2eda153287df7ddfb4e01fa0dacc9d019639ff2c1d9d79083198b9c6390bcedb30130bf0f232d20327cc528a105037da838dba795b1ee70d6ec3bd4fe14f3a12681588f7165e8dd16a00ac546e00b0d910215f3ec2a7797b55aae9de1c2ff18f0830dae703d39f7b83f51ddebd77f7e3fdb20843479c8dbddc7f2e4941cefb900763458e3bb51ef7d4b45e7162743fe0aa42888187fc25d9a09c833bca8a4eb59e461b95def0a727736cacd4022ee85f537f8cdf340bb01aac9d47cfa1c344b2218fbdc2e5e1932096451b7b82052b8816947ab960e68acfc2056604237ad392bdbb2cf067ded2a6b324ad68d61df11f8b89957e3c7531acf0914ac9075c05eef94f24b90d637d4855a05a81a79973810a7a000f9c92aa5c87f5961e3c11bf2fd3efde33795478ae4fa8b4898076df4e3e76f986b59933394b55fe574d30b3d49f35a5dfeb16e5ce81abca09b72805e60897a5d81d02ff119d5580c772eb996564cff8049a44fa2d1cec0dbee3c76c1719d700175db6b4ba6682e1b814fb8136e962519c709869a5c7bcd590f3237067fb340b3a72903c440f335a616540af8a462087d5fa31deb11424369cf3ff9fc763da21c1ee042b64cdc6e74ee36f00fe19d8899641dff6aa2762dbe15646e7da30d0d1e97c6bf61705dd95b1b8ccf247410e6022c363075975f50dc27fa5a65975c97d06bcf4fbaf5cdb9d8fe85b2bb41412e63337257b2f4d51cc672b1efd9f04f256a697e405e477464d04c6ff217c63d299a2997e8615a39c6b5df8dfc7530d6abeca7319524a5a7ef89567242b7a5b1b14fe9c8261ba1c2ca1ec88980c1dbfb15a02b02a302af31eb325d7184524b02dda2db79ad2a401acf66b941fed3faf63fc05a2134d3bb5d6b246baa2a2ac2a15c7f24a2fc9ec86b91cf2184cd604b493dbbcab6795c86974fcc6d03d45d88d743b118900619644bb97c8722619cfab955f5a7d63ad346bfe0242bce58e98083ec125a57d7fbf69eba594c6eb530ea0121bd132df9dc31955ac2db041d6ff4d866f1dae9b53cacb544f0825e8adac99d98ff82ef93cb7f60930d84cbe6b44af915f5c07641c7f1bf9afafbed0ba8f23a0e22a3ee74017bc95217e2a7fc11f2ec2b54c883b04ac3982c1df19e2774810de8bfa99243e582b09909ec8cc62851e3a6b16a955b0057ef7d7ceb36843b6f3e0894173de2f625b56e5b9388e77055cd46a67662d7295cb4d906acf4a994f9ec02d66c051e75aa9a7cb327d433fc12f8d97756a2ab19cd46a6032cd99f0d113239c7d8b8d59153275005a32cc21653a6a73c6c391362774338eb3eee6134e70235c481488120efbd5731aa40b9b8e8fa399e99f7780ca1079ace61a290c986f08561eec6a27d6324b93ba9048223c6101be9c699c75557feee6af4130a9c23348b0e1bddadf630e25c5b448d572e3cd21af7a2a0dba50dc3ca624d7ec75df2ec1534d5022d8ea45f348931ecfded467bd37340a2591678a988677b5024a01f000ac31a87e421a79df348a9c1c39b84681014f5da08db44d38dc10447f25e84e8b31181b94f51ce10c87c029ef1c57c9ea13c076eefd7cc417be10c8262d7bf7b38b024b7c11e9ec18526759e0c70d123872c6e546778af704f5c41244a64d3bde481a8ebc751c0bdd0fc766f9044bec3812390ffd376541e45188f23ee9e116946d23f103bc2936276955dc240ac36c4a5103d2f73c23bbf231072a914b3ae28bb94c0ceca33690d2b06798bcc526be36faa03eb646be9f5f3dac07664ce6c03cbe6a040f64eeda7cb5c6dc870937466e6a49e22f61141e95fe37da62951e792c7c2cedd732164ede8f531a56748e0deff6f8bacfd232c5eb980f7e61ce7ee6838e6a0397e8aabd36b646b98c0187886f2e4accfc491d6ec8d76a7349b8c381d67920489a5883cd7e0118ceafb3c579add7388c2814110680ac3690e46e4ff8bc1442a7b706ba01e585d88099455c3ebcf0033d50284b6cade77c49c128d7ebae330bfb139ea2848793be9084c9c47796f4f1604ec1e413e3abb33faaa0082c7579960", 0x1000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x5, 0x4, 0xffffff57, 0xfff, 0x13, 0x3, 0x0, 0x3f, 0xd2, 0x200, 0x2, 0x140000}) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000180)=0xc) 10:12:04 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000400)=@in={0x2, 0x4e21, @local}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[{0x18, 0x0, 0x7, "9408"}], 0x18}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r2) r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/udp\x00') ioctl$RTC_PIE_OFF(r3, 0x7006) 10:12:04 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4840, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r5, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000100)={0xa, 0x402, 0xffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffd}, 0x1c) splice(r0, 0x0, r0, 0x0, 0x1000000000000003, 0x5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) fstat(r7, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000000c0)) fchown(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTATu(r6, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) r8 = socket$inet(0x10, 0x2, 0x0) sendmsg(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c00020000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) connect$inet6(r9, 0x0, 0x0) 10:12:04 executing program 0: r0 = syz_usb_connect(0x0, 0x299, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xca, 0x4c, 0xe5, 0x20, 0x46d, 0xa0e, 0xbae, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x44, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) r2 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r2}], 0x1, 0x0) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 793.222403][T11866] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 793.229968][T11866] cp210x: probe of ttyUSB0 failed with error -71 10:12:04 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000240)='K', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) r2 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r2}], 0x1, 0x0) r3 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r3}], 0x1, 0x0) poll(&(0x7f0000000000)=[{r1, 0x21}, {r2, 0x9518}, {r3, 0xa001}, {r0, 0x2}], 0x4, 0xfff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r5) getpgrp(r5) [ 793.296747][T11866] usb 2-1: USB disconnect, device number 61 [ 793.304324][T11866] cp210x 2-1:0.111: device disconnected [ 793.322532][T22093] usb 5-1: USB disconnect, device number 49 10:12:04 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x7d, 0xc9, 0xd, 0x10, 0x6a5, 0xd001, 0xdc42, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1d, 0x15, 0x16}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="00539b00e1d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 793.462754][T26378] sctp: [Deprecated]: syz-executor.1 (pid 26378) Use of int in maxseg socket option. [ 793.462754][T26378] Use struct sctp_assoc_value instead [ 793.562620][T11863] usb 1-1: new high-speed USB device number 55 using dummy_hcd 10:12:04 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="50c7656290cf3edb0000025e15a2f42df6e5f53baed065e8c50e02599a34dcc598a6ba004ca708c07a602521607c093888293a7b7dee5f7513d74d38b3524142f120bf1886c425ce4a21dad6bc7b5d45a79c3292e902f02c81b02fb07e6a417d65ceec0bbfedc7a534d9e0f3e8a962741e123e7ad71a0f60ae07", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r3}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @empty}}, [0x20, 0x7fffffff, 0x1, 0x77, 0xfffffffffffffbff, 0x4, 0x3, 0x7fffffff80000, 0xffffffffffffff41, 0x10001, 0x200, 0x1000, 0x5, 0x4, 0x5]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0xba, 0x821b, 0xffffffe1, 0xa3e6b3f, r4}, &(0x7f0000000080)=0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x2, 0x4, 0x6) getsockopt$inet_buf(r5, 0x0, 0x2b, &(0x7f0000000240)=""/234, &(0x7f00000000c0)=0xea) syz_open_dev$radio(0x0, 0x3, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x401}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x5, 0x0, 0x100007ff}}, 0xe8) connect$inet6(r8, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r8, &(0x7f0000000240), 0x5c3, 0x0) [ 793.742708][T24190] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 793.802312][T11863] usb 1-1: Using ep0 maxpacket: 32 10:12:05 executing program 2: unshare(0x40400) r0 = socket$unix(0x1, 0x2, 0x0) syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r3 = dup2(r2, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000440)={0x3, 0x0, 0x0, 'queue0\x00'}) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = socket$unix(0x1, 0x3, 0x0) connect(r5, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000140)={0x5, 0x2af3b97d, 0x6, 0x0, 0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) ioctl$TUNSETOWNER(r8, 0x400454cc, r9) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)=')d\x98\xe7\x90g\x92\x00W\x96\xaf\xe18O\a\x00', 0x100000, 0x0) accept$packet(r10, &(0x7f00000000c0), &(0x7f0000000100)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r11 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x2, 0x0) r12 = fcntl$dupfd(r10, 0x80c, r11) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r13) accept$unix(r14, &(0x7f00000002c0)=@abs, &(0x7f0000000240)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = syz_open_pts(r15, 0x408880) ioctl$TIOCGPGRP(r16, 0x540f, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r12, 0x40405514, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x21f, '\x00', 0x8000}) [ 793.922536][T11863] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 793.932379][T11863] usb 1-1: config 0 has no interface number 0 [ 793.938881][T11863] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= b.ae [ 793.948499][T11863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:12:05 executing program 4 (fault-call:3 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 794.002781][T11863] usb 1-1: config 0 descriptor?? [ 794.021096][T24190] usb 6-1: Using ep0 maxpacket: 16 10:12:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x142) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f0000000080)={0x91f4de799324261f, @bt={0x5320, 0x1f, 0x0, 0x2, 0xffffffffffffffff, 0x8000, 0x0, 0x8000, 0x9, 0x5, 0x38b, 0x9, 0xac24, 0x2, 0xa}}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) [ 794.144564][T24190] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=dc.42 [ 794.154198][T24190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.165469][T24190] usb 6-1: config 0 descriptor?? 10:12:05 executing program 2: socket$alg(0x26, 0x5, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x101) syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x15}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 794.207301][T24190] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 794.216774][T26396] sctp: [Deprecated]: syz-executor.1 (pid 26396) Use of int in maxseg socket option. [ 794.216774][T26396] Use struct sctp_assoc_value instead [ 794.256981][T26598] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 794.382191][T11866] usb 5-1: new high-speed USB device number 50 using dummy_hcd 10:12:05 executing program 1: r0 = socket(0x11, 0x80a, 0x0) r1 = dup(r0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/37, 0x25) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0x4e, 0x6c, 0x8, 0x14f7, 0x500, 0xacd6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x36, 0x20, 0x8a}}]}}]}}, 0x0) 10:12:05 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xd7, 0xd5, 0x96, 0x8, 0x4fc, 0x504a, 0xe204, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x93, 0x0, 0x0, 0xe1, 0x3e, 0x76}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x93a, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x0, "040eccf7"}, @main=@item_012={0x2, 0x0, 0x0, "7c04"}, @global=@item_4={0x3, 0x1, 0x0, "20001700"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x0, "d777ed4b"}, @local=@item_4={0x3, 0x2, 0x0, "8794f101"}, @global=@item_4={0x3, 0x1, 0x0, "7cbd3993"}, @main=@item_4={0x3, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:12:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) clock_nanosleep(0x5, 0x0, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000c0329786af1bc3273d50aaabb94894b2de15ed7d6f2497717f231c2271e023af3fe8e89e7225703ff466e821f8cc03f734cd5f92c9e87e1616f4caac26712598ad07928664e0e3781ab01ddaa596409772986d4d8ffeab4048ee8e", @ANYRES16=r3, @ANYBLOB="3f02000000000000000001000000000000000b0000000003001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x204, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x80000001, 0x7, 0x1, 0x7}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r4 = socket(0x1e, 0x1, 0x0) sendmsg(r4, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc40020}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) listen(r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0xfffffffffffffda1, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880)={0xa, 0x0, 0x0, @rand_addr="0000000000000000000000f0ff7f00"}, 0x17c) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r8, 0x80045500, &(0x7f0000000580)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) socket$packet(0x11, 0x0, 0x300) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r9 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) r10 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) shutdown(r10, 0x0) r11 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r11, &(0x7f00000000c0), 0xfffffffffffffebb, 0x0, 0x0, 0x0) [ 794.622369][T11866] usb 5-1: Using ep0 maxpacket: 8 [ 794.742236][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 794.743404][T11866] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 794.755112][ T12] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 794.761903][T11866] usb 5-1: config 0 has no interface number 0 [ 794.775904][T11866] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 794.785882][T11866] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 794.797036][T11866] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 794.810522][T24189] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 794.883135][T11866] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 794.892555][T11866] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 794.900817][T11866] usb 5-1: Product: syz [ 794.907181][T11866] usb 5-1: config 0 descriptor?? [ 795.012185][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 795.052580][T24189] usb 2-1: Using ep0 maxpacket: 8 [ 795.097172][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 795.135572][T11863] radio-keene 1-1:0.68: V4L2 device registered as radio32 [ 795.142880][ T12] usb 4-1: config 0 has an invalid interface number: 147 but max is 0 [ 795.142956][ T12] usb 4-1: config 0 has no interface number 0 [ 795.143074][ T12] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=e2.04 [ 795.143152][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.144956][ T12] usb 4-1: config 0 descriptor?? [ 795.166644][T26593] FAULT_INJECTION: forcing a failure. [ 795.166644][T26593] name failslab, interval 1, probability 0, space 0, times 0 [ 795.193705][T26593] CPU: 1 PID: 26593 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 795.201671][T26593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.203120][T26593] Call Trace: [ 795.203120][T26593] dump_stack+0x191/0x1f0 [ 795.203120][T26593] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 795.203120][T26593] should_fail+0xa3f/0xa50 [ 795.203120][T26593] __should_failslab+0x264/0x280 [ 795.203120][T26593] should_failslab+0x29/0x70 [ 795.203120][T26593] kmem_cache_alloc_trace+0xf7/0xd20 [ 795.203120][T26593] ? snd_seq_port_connect+0x105/0x810 [ 795.203120][T26593] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 795.203120][T26593] snd_seq_port_connect+0x105/0x810 [ 795.203120][T26593] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 795.203120][T26593] snd_seq_ioctl_subscribe_port+0x774/0xb60 [ 795.203120][T26593] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 795.203120][T26593] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 795.203120][T26593] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 795.203120][T26593] snd_seq_kernel_client_ctl+0x562/0x5e0 [ 795.203120][T26593] snd_seq_oss_midi_open+0xa61/0xe80 [ 795.203120][T26593] snd_seq_oss_synth_reset+0x6fb/0xd70 [ 795.203120][T26593] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 795.203120][T26593] snd_seq_oss_reset+0xac/0x380 [ 795.203120][T26593] snd_seq_oss_release+0xd3/0x410 [ 795.203120][T26593] ? kmsan_internal_set_origin+0x6a/0xb0 [ 795.203120][T26593] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 795.203120][T26593] odev_release+0x85/0xe0 [ 795.203120][T26593] ? odev_open+0x130/0x130 [ 795.203120][T26593] __fput+0x4c9/0xba0 [ 795.203120][T26593] ____fput+0x37/0x40 [ 795.203120][T26593] ? fput_many+0x2a0/0x2a0 [ 795.203120][T26593] task_work_run+0x22e/0x2a0 [ 795.203120][T26593] prepare_exit_to_usermode+0x39d/0x4d0 [ 795.203120][T26593] syscall_return_slowpath+0x90/0x610 [ 795.203120][T26593] do_syscall_64+0xdc/0x160 [ 795.203120][T26593] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 795.203120][T26593] RIP: 0033:0x459ef9 [ 795.203120][T26593] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 795.203120][T26593] RSP: 002b:00007f314064cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 795.203120][T26593] RAX: 0000000000000000 RBX: 00007f314064cc90 RCX: 0000000000459ef9 [ 795.203120][T26593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 795.203120][T26593] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 795.203120][T26593] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314064d6d4 [ 795.203120][T26593] R13: 00000000004fa312 R14: 00000000004d29a0 R15: 0000000000000006 [ 795.483347][T24189] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=ac.d6 [ 795.492631][T24189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.497554][ T12] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 795.516972][T24189] usb 2-1: config 0 descriptor?? [ 795.529624][T11863] usb 1-1: USB disconnect, device number 55 [ 795.568937][T24189] usb 2-1: selecting invalid altsetting 1 [ 795.574859][T24189] technisat-usb2: could not set alternate setting to 0 [ 795.682334][ T12] gspca_sunplus: reg_r err -71 [ 795.694061][ T12] usb 4-1: USB disconnect, device number 46 [ 795.708322][T22093] usb 5-1: USB disconnect, device number 50 [ 795.842851][T24189] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 795.855068][T24189] usb 2-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 795.867498][T24189] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 795.893573][T24189] usb 2-1: USB disconnect, device number 62 [ 796.122651][T24190] gspca_nw80x: reg_w err -71 [ 796.127754][T24190] nw80x: probe of 6-1:0.0 failed with error -71 [ 796.140489][T24190] usb 6-1: USB disconnect, device number 55 [ 796.254676][T11863] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 796.432253][T24189] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 796.512170][T11863] usb 1-1: Using ep0 maxpacket: 32 [ 796.612409][T11866] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 796.632490][T11863] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 796.640983][T11863] usb 1-1: config 0 has no interface number 0 [ 796.647787][T11863] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= b.ae [ 796.658127][T11863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.668814][T11863] usb 1-1: config 0 descriptor?? [ 796.712513][T24189] usb 4-1: Using ep0 maxpacket: 8 [ 796.832437][T24189] usb 4-1: config 0 has an invalid interface number: 147 but max is 0 [ 796.840965][T24189] usb 4-1: config 0 has no interface number 0 [ 796.847595][T24189] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=e2.04 [ 796.857839][T24189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.868005][T24189] usb 4-1: config 0 descriptor?? [ 796.882543][T22093] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 796.892277][T11866] usb 2-1: Using ep0 maxpacket: 8 [ 796.918290][T24189] gspca_main: sunplus-2.14.0 probing 04fc:504a 10:12:08 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0xa02, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000105042, 0x0) setxattr$security_smack_entry(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64EXEC\x00', &(0x7f0000000140)='\x8btrusted!\x00', 0xa, 0x3) write(r1, &(0x7f0000000200)="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", 0x1ffe00) 10:12:08 executing program 4 (fault-call:3 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:12:08 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='vcan0\x00') [ 797.002987][T11863] video4linux radio32: keene_cmd_set failed (-71) [ 797.009972][T11863] radio-keene 1-1:0.68: V4L2 device registered as radio32 [ 797.023510][T11866] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=ac.d6 [ 797.032786][T11866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.070145][T11863] usb 1-1: USB disconnect, device number 56 [ 797.090751][T11866] usb 2-1: config 0 descriptor?? [ 797.136828][T11866] usb 2-1: selecting invalid altsetting 1 [ 797.142875][T11866] technisat-usb2: could not set alternate setting to 0 [ 797.182665][T22093] usb 6-1: Using ep0 maxpacket: 16 [ 797.322596][ T12] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 797.331255][T22093] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=dc.42 [ 797.340689][T22093] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.382590][T24189] gspca_sunplus: reg_r err -71 [ 797.392280][T11866] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 797.402608][T22093] usb 6-1: config 0 descriptor?? [ 797.403923][T11866] usb 2-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 797.418975][T11866] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 797.445821][T24189] usb 4-1: USB disconnect, device number 47 [ 797.461154][T11866] usb 2-1: USB disconnect, device number 63 [ 797.476563][T22093] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 797.572455][ T12] usb 5-1: Using ep0 maxpacket: 8 10:12:08 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0x9, @raw_data="1fcb46d02ab6c63c524131327b3a75537c49b43893fc974900400000463f0437f7ffd8500d384ced6347be0711b5c9cc1bf51d241901c2c02cf411338e817d388054685cbb344a3e0244c4ef0915c7c51d07d272610817ba58559342ce7918de9a85638015aef9a5e3cd6a7c9367289b69f9d462ebe0785411a26cfb487d7bc2a5456cb92cfdad5d3c088a2861de26cdb810b47f7095d5b1a0cf189b5b2fc861f8104c4c07882c2e8345bea52167e2d4f9e707d8df10dfbc8b3f2de6d19f8cec666e98588ed484ee"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x10, @pix={0x6, 0x8, 0x41564e57, 0x9, 0x7ff, 0x75b, 0xc, 0xd, 0x1, 0x6, 0x0, 0x6}}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RRENAME(r3, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) 10:12:08 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_usb_connect(0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000)="86b966caf9c2e29342cc36dde2da504e9cf59f1fa9805dafd6aa6a5f8cac065007ab0b88eb3ac5405105414dd0f7e4d902998450714f66bdf3ecb272e07fb6ba4e818f59eda1e6162baa7ff87902a3c31757bd5042f86acaf687f62cd3b8d002aef779c59c9b04c4b6053fc0ef2fcd01223344d6aba51582532cb377d2542e684d25492b0f3c239c0cc1092aa54a1b5ff1b3fa0aaafc12a494ba38ec45956d124c5f6c0d504d1a768d53652c951816972829dd79adb0", 0xb6, r2}, 0x68) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_usb_connect(0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_disconnect(r5) 10:12:08 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xd7, 0xd5, 0x96, 0x8, 0x4fc, 0x504a, 0xe204, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x93, 0x0, 0x0, 0xe1, 0x3e, 0x76}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x93a, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x0, "040eccf7"}, @main=@item_012={0x2, 0x0, 0x0, "7c04"}, @global=@item_4={0x3, 0x1, 0x0, "20001700"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x0, "d777ed4b"}, @local=@item_4={0x3, 0x2, 0x0, "8794f101"}, @global=@item_4={0x3, 0x1, 0x0, "7cbd3993"}, @main=@item_4={0x3, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:12:08 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_create(0x2, 0x0, &(0x7f0000000540)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400201) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) [ 797.633227][T22093] gspca_nw80x: reg_w err -71 [ 797.638062][T22093] nw80x: probe of 6-1:0.0 failed with error -71 [ 797.687412][T22093] usb 6-1: USB disconnect, device number 56 [ 797.715094][ T12] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 797.723517][ T12] usb 5-1: config 0 has no interface number 0 10:12:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000040)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r7}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x6, 0x2, 0x0, 0xfffffffa, 0x9, 0x1, 0x2, 0x0, r7}, &(0x7f0000000040)=0x20) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000002400070500"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000a000100636f64656c0000004c00020008000500000000000800020000000000080001"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r10, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r10, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r11) ptrace$getregs(0xc, r11, 0x9114, &(0x7f0000000100)=""/62) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r14, 0xc0184900, &(0x7f00000001c0)={0x4, 0x9}) [ 797.729727][ T12] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 797.739766][ T12] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 797.750859][ T12] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 10:12:08 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200080, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000380)=""/102) syz_usb_connect(0x0, 0x31, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c19ea70811010061feb100000001e8021f00010000000009040000010103d80009050103000000000002529ebdb200027fe9405c0160306a6857035730a3c800"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0xc0080, 0x0) setsockopt$inet_opts(r1, 0x0, 0xf5a757d43d8b9d77, &(0x7f0000000040)="a843c9b95e9a069f55d7002a64c6f897ea5bfb2823e2d4baf108bf7b7c549569e9a7fdb778ec70d9c68dd252dba0b94185779b293b5f182bbc21fe7ac418c21eabac19c9b9dba096fca8ca4fc1554ca539795edd06b6f547e82eb50260f1940472fd0408930acbb7cdd968ab4177d3cfcb5942fa0eccc46d", 0x78) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) [ 797.862745][ T12] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 797.872337][ T12] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 797.880606][ T12] usb 5-1: Product: syz [ 797.888802][T26759] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:08 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009eb939086d049708e6a3120001000000000904750000cc51ae00d6ecdb8ed8e6f16b739313f209380535865bfbba4a738a2525eda932fe7e1a2e67bc8aff464defe7658ef4e133000000000000"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x3, 0xff, 0x1}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_IRQP_READ(r6, 0x8008700b, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x7, 0x7f, 0x3, 0x5}}) [ 797.908857][ T12] usb 5-1: config 0 descriptor?? [ 797.982870][T11866] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 797.997280][T11896] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 798.157439][T26630] FAULT_INJECTION: forcing a failure. [ 798.157439][T26630] name failslab, interval 1, probability 0, space 0, times 0 [ 798.170866][T26630] CPU: 0 PID: 26630 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 798.179094][T26630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.180689][T26630] Call Trace: [ 798.180689][T26630] dump_stack+0x191/0x1f0 [ 798.180689][T26630] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 798.180689][T26630] should_fail+0xa3f/0xa50 [ 798.180689][T26630] __should_failslab+0x264/0x280 [ 798.180689][T26630] should_failslab+0x29/0x70 [ 798.180689][T26630] kmem_cache_alloc_trace+0xf7/0xd20 [ 798.180689][T26630] ? snd_seq_port_connect+0x105/0x810 [ 798.180689][T26630] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 798.180689][T26630] snd_seq_port_connect+0x105/0x810 [ 798.180689][T26630] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 798.180689][T26630] snd_seq_ioctl_subscribe_port+0x774/0xb60 [ 798.180689][T26630] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 798.180689][T26630] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 798.180689][T26630] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 798.180689][T26630] snd_seq_kernel_client_ctl+0x562/0x5e0 [ 798.180689][T26630] snd_seq_oss_midi_open+0xa61/0xe80 [ 798.180689][T26630] snd_seq_oss_synth_reset+0x6fb/0xd70 [ 798.180689][T26630] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 798.180689][T26630] snd_seq_oss_reset+0xac/0x380 [ 798.180689][T26630] snd_seq_oss_release+0xd3/0x410 [ 798.180689][T26630] ? kmsan_internal_set_origin+0x6a/0xb0 [ 798.180689][T26630] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 798.180689][T26630] odev_release+0x85/0xe0 [ 798.180689][T26630] ? odev_open+0x130/0x130 [ 798.180689][T26630] __fput+0x4c9/0xba0 [ 798.180689][T26630] ____fput+0x37/0x40 [ 798.180689][T26630] ? fput_many+0x2a0/0x2a0 [ 798.180689][T26630] task_work_run+0x22e/0x2a0 [ 798.180689][T26630] prepare_exit_to_usermode+0x39d/0x4d0 [ 798.180689][T26630] syscall_return_slowpath+0x90/0x610 [ 798.180689][T26630] do_syscall_64+0xdc/0x160 [ 798.180689][T26630] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 798.180689][T26630] RIP: 0033:0x459ef9 [ 798.180689][T26630] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 798.180689][T26630] RSP: 002b:00007f314064cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 798.180689][T26630] RAX: 0000000000000000 RBX: 00007f314064cc90 RCX: 0000000000459ef9 [ 798.180689][T26630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 798.180689][T26630] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 798.180689][T26630] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314064d6d4 [ 798.180689][T26630] R13: 00000000004fa312 R14: 00000000004d29a0 R15: 0000000000000006 [ 798.461353][T24189] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 798.502286][T11896] usb 1-1: Using ep0 maxpacket: 8 [ 798.504678][T11866] usb 4-1: Using ep0 maxpacket: 8 [ 798.532481][T11863] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 798.621023][ T12] usb 5-1: USB disconnect, device number 51 [ 798.629157][T11896] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 798.634484][T11866] usb 4-1: config 0 has an invalid interface number: 147 but max is 0 [ 798.637535][T11896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.645726][T11866] usb 4-1: config 0 has no interface number 0 [ 798.645849][T11866] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=e2.04 [ 798.656952][T11896] usb 1-1: config 0 has no interface number 0 [ 798.657043][T11896] usb 1-1: too many endpoints for config 0 interface 98 altsetting 1: 128, using maximum allowed: 30 [ 798.657140][T11896] usb 1-1: config 0 interface 98 altsetting 1 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 798.663338][T11866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.673936][T11896] usb 1-1: config 0 interface 98 altsetting 1 endpoint 0x85 has invalid maxpacket 1792, setting to 1024 [ 798.690949][T11896] usb 1-1: config 0 interface 98 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 798.726651][T11866] usb 4-1: config 0 descriptor?? [ 798.735854][T11896] usb 1-1: config 0 interface 98 has no altsetting 0 [ 798.735946][T11896] usb 1-1: New USB device found, idVendor=0f11, idProduct=1010, bcdDevice=3f.73 [ 798.756398][T24189] usb 2-1: Using ep0 maxpacket: 8 10:12:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_AD_USER_PORT_KEY={0x8, 0x19, 0x6}, @IFLA_BOND_MODE={0x8, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000200)=0x54) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000280)=0x10) [ 798.761441][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.814972][T11866] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 798.820505][T26770] netlink: 'syz-executor.5': attribute type 25 has an invalid length. [ 798.830122][T26770] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 798.856976][T11863] usb 3-1: Using ep0 maxpacket: 8 [ 798.859989][T11896] usb 1-1: config 0 descriptor?? [ 798.905053][T11863] usb 3-1: no configurations [ 798.910055][T11863] usb 3-1: can't read configurations, error -22 [ 798.915906][T11896] ldusb 1-1:0.98: Interrupt out endpoint not found (using control endpoint instead) [ 798.916784][T24189] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 232 [ 798.935601][T24189] usb 2-1: can't read configurations, error -22 10:12:10 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe00b1a83c0800240042ef420000000109021b00017600000009040000010209bd00070581000000000000bf52cf6794a9d3"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_DIRENT(r2, &(0x7f0000000000)={0x78, 0x0, 0x1, [{0x6, 0x1000, 0x7, 0x80000004, 'userem1'}, {0x6, 0x2042, 0x0, 0x9}, {0x4, 0xa0f, 0x11, 0x1ff, 'posix_acl_access]'}]}, 0xfffffffffffffeb4) [ 798.961226][T11896] ldusb 1-1:0.98: LD USB Device #0 now attached to major 180 minor 0 [ 798.984700][T11866] gspca_sunplus: reg_r err -71 [ 798.995725][T11866] usb 4-1: USB disconnect, device number 48 [ 799.092691][T11863] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 799.152380][T24189] usb 2-1: new high-speed USB device number 65 using dummy_hcd 10:12:10 executing program 4 (fault-call:3 fault-nth:3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 799.350450][T11866] usb 1-1: USB disconnect, device number 57 [ 799.357871][T11863] usb 3-1: Using ep0 maxpacket: 8 [ 799.363989][T24190] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 799.374149][T11866] ldusb 1-1:0.98: LD USB Device #0 now disconnected [ 799.402860][T11863] usb 3-1: no configurations [ 799.407553][T11863] usb 3-1: can't read configurations, error -22 [ 799.415419][T11863] usb usb3-port1: attempt power cycle [ 799.432614][T24189] usb 2-1: Using ep0 maxpacket: 8 10:12:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$tipc(r3, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x1, 0x1}}, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0x6c5ecad2816a78bc) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000200)='$\x00', 0x2) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000240)=@raw=[@map={0x18, 0x3, 0x1, 0x0, r8}, @alu={0x4, 0x1, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}, @exit, @exit], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffc, 0x0, 0x56ae}, 0x10}, 0x70) acct(&(0x7f0000000040)='./file0\x00') [ 799.552389][T24189] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 232 [ 799.561297][T24189] usb 2-1: can't read configurations, error -22 [ 799.571005][T24189] usb usb2-port1: attempt power cycle [ 799.592468][ T12] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 799.612966][T24190] usb 6-1: Using ep0 maxpacket: 8 10:12:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x40}, {0x80000006, 0x0, 0x0, 0xffffffff}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x3c6, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000040)) [ 799.732935][T24190] usb 6-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 799.744234][T24190] usb 6-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 799.753664][T24190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.804343][T24190] cdc_wdm: probe of 6-1:118.0 failed with error -22 [ 799.813799][T24190] usbvision_probe: Hauppauge WinTv-USB found [ 799.822378][T24190] usbvision 6-1:118.0: interface 0 has 1 endpoints, but must have minimum 2 [ 799.842215][ T12] usb 5-1: Using ep0 maxpacket: 8 [ 799.962609][ T12] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 799.970897][ T12] usb 5-1: config 0 has no interface number 0 [ 799.977516][ T12] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 799.987365][ T12] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 800.010918][ T12] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 800.036192][T11896] usb 6-1: USB disconnect, device number 57 [ 800.103137][ T12] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 800.112408][ T12] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 800.120690][ T12] usb 5-1: Product: syz [ 800.128712][ T12] usb 5-1: config 0 descriptor?? [ 800.134864][T11863] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 800.312746][T24189] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 800.382702][T11863] usb 3-1: Using ep0 maxpacket: 8 [ 800.395753][T26782] FAULT_INJECTION: forcing a failure. [ 800.395753][T26782] name failslab, interval 1, probability 0, space 0, times 0 [ 800.410633][T26782] CPU: 0 PID: 26782 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 800.419486][T26782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.422431][T11863] usb 3-1: no configurations [ 800.419901][T26782] Call Trace: [ 800.419901][T26782] dump_stack+0x191/0x1f0 [ 800.419901][T26782] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 800.419901][T26782] should_fail+0xa3f/0xa50 [ 800.419901][T26782] __should_failslab+0x264/0x280 [ 800.436136][T11863] usb 3-1: can't read configurations, error -22 [ 800.419901][T26782] should_failslab+0x29/0x70 [ 800.419901][T26782] kmem_cache_alloc_trace+0xf7/0xd20 [ 800.443701][T26782] ? snd_seq_port_connect+0x105/0x810 [ 800.443701][T26782] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 800.443701][T26782] snd_seq_port_connect+0x105/0x810 [ 800.443701][T26782] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 800.443701][T26782] snd_seq_ioctl_subscribe_port+0x774/0xb60 [ 800.443701][T26782] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 800.443701][T26782] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 800.443701][T26782] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 800.443701][T26782] snd_seq_kernel_client_ctl+0x562/0x5e0 [ 800.443701][T26782] snd_seq_oss_midi_open+0xa61/0xe80 [ 800.443701][T26782] snd_seq_oss_synth_reset+0x6fb/0xd70 [ 800.443701][T26782] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 800.443701][T26782] snd_seq_oss_reset+0xac/0x380 [ 800.443701][T26782] snd_seq_oss_release+0xd3/0x410 [ 800.443701][T26782] ? kmsan_internal_set_origin+0x6a/0xb0 [ 800.443701][T26782] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 800.443701][T26782] odev_release+0x85/0xe0 [ 800.443701][T26782] ? odev_open+0x130/0x130 [ 800.443701][T26782] __fput+0x4c9/0xba0 [ 800.443701][T26782] ____fput+0x37/0x40 [ 800.443701][T26782] ? fput_many+0x2a0/0x2a0 [ 800.443701][T26782] task_work_run+0x22e/0x2a0 [ 800.443701][T26782] prepare_exit_to_usermode+0x39d/0x4d0 [ 800.443701][T26782] syscall_return_slowpath+0x90/0x610 [ 800.443701][T26782] do_syscall_64+0xdc/0x160 [ 800.443701][T26782] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 800.443701][T26782] RIP: 0033:0x459ef9 [ 800.443701][T26782] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 800.443701][T26782] RSP: 002b:00007f314064cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 800.443701][T26782] RAX: 0000000000000000 RBX: 00007f314064cc90 RCX: 0000000000459ef9 [ 800.443701][T26782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 800.443701][T26782] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 800.443701][T26782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314064d6d4 [ 800.443701][T26782] R13: 00000000004fa312 R14: 00000000004d29a0 R15: 0000000000000006 [ 800.691213][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 800.697526][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 800.703847][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 800.709984][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 800.716373][ C1] protocol 88fb is buggy, dev hsr_slave_0 10:12:11 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0x7ff, 0x2636, 0x200, 0x4, 0x4, 0x0, 0x7, 0x10}, 0x20) clone(0x40000000, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d0400b4f4d4f600000300000022") r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$PPPIOCSDEBUG(r5, 0x40047440, 0xfffffffffffffffe) ioctl$PPPIOCDISCONN(r5, 0x7439) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x402000, 0x0) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) read$rfkill(r6, &(0x7f0000000000), 0x3) ioctl$int_in(r6, 0x800000c0045009, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000240)=ANY=[], &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000280)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r10 = socket(0xa, 0x80005, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000000)={r12}, 0x8) [ 800.827720][T26996] IPVS: ftp: loaded support on port[0] = 21 [ 800.842333][T24189] usb 2-1: Using ep0 maxpacket: 8 [ 800.850291][T22093] usb 5-1: USB disconnect, device number 52 10:12:11 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd0, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0xfffffffffffffde2, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d"], 0x0}, 0x0) r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x57, "9f4c8db758c16cb15c1835a67d795260f8dd6f5dc48583cddaa63fd6aec511bdcc3cf2fe8637ae46138882d5664b622f4b157ba708b5663ce9a2fc8bb5e3999f33ad0081644fdbdaf231a076d95320320064682a8c8713"}, &(0x7f0000000000)=0x5f) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={r2, 0xf0, "f719f38e05c56c566b48dc17c61c6226ff442db009b010b3d64e4191ba6b2a3387b1c12f9f0bead09bb756bddaf1dd4ab72b02effb235f8cd61ecc8e4f7c07c9643e5d2666543ac199004fbed55466f3f4e28b77ae8bd953b5e3b32f2fccb98569d407951ee69a17dce2fb9a206f313539a5b5dc6ee5c8e3f29410f19a33751d6a28fde2110000e9e1292f5c56cd5fcd2ad65e8f8d63f13f86ab410dfde0a3cd43dc9e4991ec7d4a70028232b1af35f5eb6ca1d370484732904be97871649308556f470048a5a6d18b2a1e26f190df0fe764dd2f27d89c43570e5a8c454cbe4c5e6e080e612d820f2aebc1109805d81c"}, &(0x7f0000000080)=0xf8) [ 800.872444][ T12] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 800.872571][T11863] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 800.962848][T24189] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 232 [ 800.971570][T24189] usb 2-1: can't read configurations, error -22 [ 801.002830][T11896] usb 6-1: new high-speed USB device number 58 using dummy_hcd 10:12:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x200100) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca33, 0xffffffffffffffff, 0x0) 10:12:12 executing program 2: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000002440)="bd2da453f568ada14adacb60ec721e0a9e7cc39eb1705c169cade5940a1a0dd0520eb190340fb75774cd31479cb5747b80681d0811ae946d8183d05eb24436a886e3eeb46833f96ca9292f3ce3c3c2de375bcf606f780516c43dab12ae305922846fba6addcfb294d1bdf5f4491c8a853638b83bd2e62b63bd9005771ad8c6011c6ccc7538104e9590748603954ee414f8ac6486534bd776eb2883f49bc13a84e2d2e0d7787cab3092f657daf3a7df7680b28ff01f836549d461ff5a0e6db308", 0xc0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0)="2b42c26b02c91dad369ca32eae9e", 0xe, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0xfff, &(0x7f0000000300)=""/113, &(0x7f0000000000)=0x5c) [ 801.142474][T11863] usb 3-1: Using ep0 maxpacket: 8 [ 801.202684][T11863] usb 3-1: device descriptor read/all, error -71 [ 801.211045][T11863] usb usb3-port1: unable to enumerate USB device 10:12:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, [0x3]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$sndseq(r4, &(0x7f0000000080)=[{0x2, 0x80, 0x9, 0xff, @time, {0x4, 0xff}, {0xb4, 0x1}, @note={0x4, 0x58, 0xff, 0x8, 0xffffff23}}, {0x3f, 0x0, 0x11, 0x2, @tick, {0x80, 0x5f}, {0x2, 0x51}, @raw8={"7f515663d7bf42115cf3cea0"}}, {0x8, 0x2, 0x90, 0x8, @tick=0x2, {0x1f, 0x3f}, {0x2, 0x8}, @result={0x0, 0x1}}, {0xff, 0x4, 0x9e, 0x2, @time={r5, r6+30000000}, {0xc5, 0x81}, {0x1, 0x4}, @note={0x3, 0x4, 0x8, 0xfa, 0xf9}}, {0x2, 0x8, 0x7f, 0xfc, @time={0x0, 0x1c9c380}, {0x2}, {0x38}, @queue={0x80, {0x7fff, 0x6}}}, {0xd7, 0x36, 0x40, 0x98, @tick=0x7, {0xff, 0x40}, {0x7, 0x59}, @connect={{0x7, 0x7}, {0x2a, 0x1}}}, {0x4, 0xff, 0x8, 0x4, @time, {0x81, 0x81}, {0x1, 0x1}, @queue={0x8, {0xd91}}}], 0x150) [ 801.252505][T11896] usb 6-1: Using ep0 maxpacket: 8 [ 801.322678][ T12] usb 1-1: device descriptor read/64, error -71 10:12:12 executing program 2: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x6, 0x4, 0xfffffffe, 0x401, 0x2, 0x1, 0x7, 0x1, 0xffff, 0x10001, 0x4f55, 0x7fff, 0x1, 0x0, 0x38d2f793, 0x401, 0x3ff, 0x1000, 0x5, 0x80, 0x4, 0x800, 0xfffffff8, 0x6, 0x8, 0x0, 0x8, 0x1, 0x2, 0x0, 0x8, 0x8]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3010d}}, 0x20}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') [ 801.382879][T11896] usb 6-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 801.393380][T11896] usb 6-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 801.402801][T11896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:12:12 executing program 4 (fault-call:3 fault-nth:4): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:12:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r3}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={r3, 0xea, "6f47eb4480e336a2da0e3d5aef08f4c40c239407d4c7aa95fb846458da71c2f928421d23790d2732a55f545462e07352f74b421d50b177e32987d049ae3403fe7375cd8f309e20d040cee80a8f4762ce08b838a19c9369d67b0f458888bf2b815fefbef7b8f9b6f77f0f659fdcf6e63879258e59ff23843d598c7f1e3e403e1b7222c2c2e2be3df608434801c6b0c2f3f1b015ffb5f0d5e7e22182c97cb1dfc2f3f468df8bb0ba93b4eccf7435c3680e14b07027b6b4f1dcda767c37944111476eeeb2d205c949f868ab3f193d719d50003032439b71b0a4064b61c10327e7b31f266a818342acb56f64"}, &(0x7f0000000040)=0xf2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x9}, 0x8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2800]}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}}, 0x0) [ 801.559925][T11896] cdc_wdm: probe of 6-1:118.0 failed with error -22 [ 801.570034][T11896] usbvision_probe: Hauppauge WinTv-USB found [ 801.576483][T11896] usbvision 6-1:118.0: interface 0 has 1 endpoints, but must have minimum 2 [ 801.742134][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 801.762325][T22093] usb 6-1: USB disconnect, device number 58 [ 801.882627][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.894476][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 801.902411][T24190] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 801.908594][ T12] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.40 [ 801.925593][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.940902][ T12] usb 1-1: config 0 descriptor?? 10:12:13 executing program 3: r0 = socket$inet6(0xa, 0x10000000003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@empty, @in=@loopback, 0x0, 0x1000, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1ff}, {0x0, 0x40000000000}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x3f}}, 0xe8) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYRES32=0x41424344, @ANYBLOB="7000000090780000fe06e2d4c3d90000"], 0x0) 10:12:13 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) truncate(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000080)={{0x87, 0xac}, {0xe5, 0x9}, 0x10001, 0x1, 0x2}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0xffffffffffffff1a, &(0x7f0000000100)=[{&(0x7f0000001240)="2e00000010008103e45ae087185082cfc969b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 10:12:13 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000300)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r3 = getpid() perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, r3, 0x0, 0xffffffffffffffff, 0x0) getpgid(r3) clone3(&(0x7f0000000240)={0x40004000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0x7, 0x0, &(0x7f0000000100)=""/182, 0xb6, &(0x7f00000001c0)=""/126}, 0x40) getpid() r4 = getpid() perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, r4, 0x1, 0xffffffffffffffff, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) 10:12:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xfffffffffffffd80, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001f80)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0100000000000000280012000c0001007665746800000000ececfac5e025573fb5926c7ae92af81800020814a79f7488f611d01cb85041b7f809000000004600006df0840107d3c3bc1747ef4939dd822dafd6037136a70f304dbcdee66ed673df5c98c00033e06a14e3b513ef72364106b249dd59b35aafee80aa0a9b2e3bbfb4941d2ed7d7fc3c3dae0a3a354339e3572311b364ba77c4e343d199812b3862a78324fd19d159913729e3afec87ff2f99746c2aed6d90fff50cc840f622b17a4a827b1a75", @ANYRES32=0x0, @ANYBLOB="9ff3ddfcc6b343577f40cae6bddf718f32c8278850f5525c12eb4f253239df62149ef5d6e112116117e3f7a2be1c7ac3efbb7d599c23aa8e3b7b070a7a00f57e74a5c18bd7f750cf8c8d806288d9c14bc0faa8b281450afb5c797ce8338c5e3c98720195"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @rand_addr="b8594fb7a2c0a5845a4833d9d3289ec6", @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @dev, @rand_addr="fc5400000000000092c2fe4cbc2929db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, r7}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x80, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r9, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001a40)={r10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001a00)='\x00', 0xffffffffffffffff}, 0x30) r12 = getuid() r13 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r13}], 0x1, 0x0) fstat(r13, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r15}], 0x1, 0x0) r16 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r16}], 0x1, 0x0) r17 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r17}], 0x1, 0x0) r18 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r18}], 0x1, 0x0) pipe2$9p(&(0x7f0000001b00)={0xffffffffffffffff}, 0x800) poll(&(0x7f00000002c0)=[{}], 0x1, 0x0) r20 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r20}], 0x1, 0x0) r21 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r21}], 0x1, 0x0) r22 = socket$inet6_sctp(0xa, 0x1, 0x84) r23 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r23}], 0x1, 0x0) r24 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r24}], 0x1, 0x0) r25 = open(&(0x7f0000001b40)='./file0\x00', 0x40a00, 0x2) r26 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001b80)='/proc/self\x00', 0x80, 0x0) r27 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer\x00', 0x402141, 0x0) r28 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r28}], 0x1, 0x0) r29 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r29}], 0x1, 0x0) r30 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r30}], 0x1, 0x0) r31 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r31, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r31, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r32) r33 = getpgid(r32) r34 = getuid() ioprio_get$uid(0x3, r34) lstat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r36 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r36, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r36, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r37) stat(&(0x7f0000001cc0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000140)=[0x0, r39, 0x0, 0x0]) r40 = syz_open_dev$sndseq(&(0x7f0000001d80)='/dev/snd/seq\x00', 0x0, 0x600) r41 = open$dir(&(0x7f0000001dc0)='./file0\x00', 0x4040, 0x8) sendmsg$unix(r8, &(0x7f0000001f40)={&(0x7f0000000280)=@file={0xf4e9e2baaec5c665, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000300)="bd2e0f74fd703b05a87926fd1b31aca91947928d59155d5b410e97ac3b3c535448f36a7e599994f2b81596b5d66d3d045fa232cd6fa830317ed4a2713dbcf71ff33ec3a8be73336496471237aafa58998c865508073583f22ac71fd85ff61c502e1d73b1a031b4b25c545996871888314cdc4e53c714883300682b4be38bdcc18fc650fb45096ea0690cff5b70d61589e2cbbc3b48fcda4dd21ca37cb66937e24b1a028b25dc440fc36722993a365b556e7077d0f87a1fb938a3ce5ba416", 0xbe}, {&(0x7f00000003c0)="1b711504b826f209f2c4c6284cc87673a4eba8c079cee21bba7d9e504a9ecfb1deafa2c488fc86b0023c785f6b7b4ead3875eab291252b4810114d2ebc28ece789d2751b886a69e4d9b71a8c2bc5155f28403d47f279b1406d2e27aadf0a855ffddf94e9586ba721af5177add6d3aa88113b4131287b983d9a5440fde1000c68f9d9fb1c3ef224c764be11b9290077032ae19db6fccd236d8b0c1f5a3f012c60371b518d6c8e5e64edc0471a7c19955e554f1911f4861693d0a751e2c936d8e3c4bf77db975d376703679ec0b01b0d5faf9691c92d14fde8ccdb0813a978b21d4ba1384a8e84620cfd9e026b", 0xec}, {&(0x7f00000004c0)="db0211829b8a7b2106aa9f9cbec88f5b78f3add15c77985df976be407e66d94628291279594db9eda3cce6b5763e4c7d66488bcdca43424b93fa7d7193b92a297f6b71648f93fc314a18115128d09232029e1550602ec8ba6d5a57803ce18e2db531823a215ba1a8da812ab84abe6e60860fcd4688a9b47dd827214e4e15608ec70cb24ef865084cc7b4c7883c0b8e98813ac1e8da5b0c51727f5644cdc52015b0c8014dfbdff965722f83aa9648e7bea6139fde0ef101759c9389275106e81b73f3c57567ebc7d06cfb99fc836ed06288c8d4a9b2a5e73f2b29857dbf1fcd957a15912e200cc8dc0b0975a55ab8d0", 0xef}, {&(0x7f00000005c0)="575504fd92aa45fb0385026c4204387354a96ece80ae2a2bd5fdf888c58f0c4eb4b2", 0x22}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="d61b6350b10e07f72e9d178df2a28c0f378ab21765229ca7201f30a22a66aa4d50959801f23ddecae5df32ebaf487be98f66034de0171e43debfd6c8c1b5a9b235fbb15fc6c83472c4d387cda30e9caf491d2fdc88ca3ba02e7240742876b054adc3a4d2b559dda5ef1707ecbba45a9628d98e2d935adbd232e1ad", 0x7b}, {&(0x7f0000001780)="be07041dbef5648dd4b28787467448d1a97e816867b7936283e68820fc", 0x1d}, {&(0x7f00000017c0)="d1fc471c2a28ac75e38fc55156261696400b16b48d133364a93b87800d37a0ff4fd4a8854dccb115d76f8c6bb9b0539357659ef19b1d39fb80189d516b18ecdda52177658976fd2fc0c2d7a29b2ae92c6a96807781813869cce3a0fd1aa4767a8372ba314e76ba247e40b25717800d850fb74e653bed7acf28b61d85e8f1219c44ef467672022d1cf4d171c91dca3a2166cfea0be0b60f0e77b9e6bcb55fb20f3c2deafb46c395d20f7fad67864b60ade3e1d4ca70817308fd934c29f8eac9282224", 0xc2}, {&(0x7f00000018c0)="2e660c855d67021b54cb9f32bb84f81542351ee58a031a436ecb7188e6f9d8ec3e956dc234fe80446ff0f8ab500c2e16450721303164507d4b55f0b7e3602e75905ba8d6a63b", 0x46}], 0x9, &(0x7f0000001e00)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r14}}}, @rights={{0x14, 0x1, 0x1, [r15]}}, @rights={{0x20, 0x1, 0x1, [r2, r16, r17, r18]}}, @rights={{0x28, 0x1, 0x1, [r19, 0xffffffffffffffff, r20, r6, r21, r22]}}, @rights={{0x38, 0x1, 0x1, [r5, r23, r24, r25, 0xffffffffffffffff, r26, r27, r28, r29, r30]}}, @cred={{0x1c, 0x1, 0x2, {r33, r34, r35}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r37, r38, r39}}}, @rights={{0x18, 0x1, 0x1, [r40, r41]}}], 0x128, 0x84}, 0x8000) [ 802.172472][T24190] usb 5-1: Using ep0 maxpacket: 8 [ 802.196937][T27239] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 802.292596][T24190] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 802.301379][T24190] usb 5-1: config 0 has no interface number 0 [ 802.307077][T27233] IPVS: ftp: loaded support on port[0] = 21 [ 802.307789][T24190] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 802.324220][T24190] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 10:12:13 executing program 5: unshare(0x400) socketpair(0x0, 0x80000, 0x20, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x3477, 0x200, 0x3, 0x2, 0x8, 0x0, 0x6, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r3, 0xb1, 0x8, [0x3f, 0x3, 0x56b, 0x6ecb, 0x1f, 0x5, 0x94b, 0x0]}, &(0x7f0000000240)=0x18) timer_create(0x6, &(0x7f0000000480)={0x0, 0x5, 0x1, @thr={&(0x7f0000000280)="40ac730376a784ee39aa87d674e093097ce86370095cd7cb7f72813326c179f7e5a51a4fa951c5997b8b00c1427338bcd24611e7856e56f14e099ecbb677ab3a1a93074251671d81f716dbfe1b548c5f20c44f3564781871e19e996c34b51f5066d45da77f672ec591c6b4100bc09af5b7d6d4a1d237643a28b33e3c4aca6feb41a4843cb1de95a1e93bcbc1a28bfc676613fb7ed71d16c6853f1e2b0f814b7d1b452f71a271d342c8c778137d77f3dad2166e4748fb312db4e0984bd002d9bf64450dca79857ce6eaf2cf", &(0x7f0000000380)="787b2838f6fed207235cb233b7a33d3a7b6605c1d88fe9dc4736c464be753c7d89868d6b8b5278a3f42958ea7546cceafb815fdc5f6857ae7b3bc21cc2f7037607e106053138d53087ea99891cf51e771b38ad97d8ad55db87b7ec182e5521722d5e888b5b62dc427c03b18917dfdb11272ad50a1fcee06c227060e08d1023a95c5414555f5ded74eb00db245a4834b23fbe3cb4e2f64f256421f06c415c8b6dc90e6634357cf4b7b4f13fe35c7b0eb894bb792276a53d8634d845f2f15d39323fee4eb126fb076f2ff41d79c257da74c4d4"}}, &(0x7f00000004c0)) r4 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x3d30, 0x4000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000680)={{{@in=@empty, @in=@rand_addr=0x5, 0x4e24, 0x800, 0xff, 0x0, 0xa, 0x0, 0x80, 0x0, r5, r6}, {0x8a45, 0xfff, 0x101, 0x100000001, 0x1e57936b, 0x5, 0x2, 0x818}, {0x200, 0x1, 0x400}, 0x3, 0x6e6bc0, 0x0, 0x0, 0x7, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d4, 0x32}, 0xa, @in=@rand_addr=0x80, 0x0, 0x2, 0x2, 0x58, 0x22495066, 0x8000, 0x77a3648d}}, 0xe8) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000780), &(0x7f00000007c0)=0x4) socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000800)=0xa2) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000840)='trusted.overlay.opaque\x00', &(0x7f0000000880)='y\x00', 0x2, 0x1) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/video35\x00', 0x2, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = syz_open_dev$amidi(&(0x7f00000009c0)='/dev/amidi#\x00', 0x8, 0x408040) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000a00)={0x3f, 0x5, 0x3, 0x0, 0x0, [{r4, 0x0, 0x9}, {r8, 0x0, 0x3}, {r9, 0x0, 0x6}]}) ioctl$KVM_GET_IRQCHIP(r9, 0xc208ae62, &(0x7f0000000a80)) r10 = syz_open_dev$dri(&(0x7f0000000b80)='/dev/dri/card#\x00', 0x5, 0x4000) fsync(r10) socketpair(0x4, 0x6, 0x7f, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r11, 0x10f, 0x84, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000c80)={0x0, @in6={{0xa, 0x4e22, 0x1919, @empty, 0x1ff}}, [0x9, 0x101, 0x5, 0x6, 0x8, 0x80000000, 0x2, 0x4, 0x0, 0x7, 0x114e, 0x0, 0x8, 0x4b0a, 0x4]}, &(0x7f0000000d80)=0x100) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000000dc0)={r13, 0x9, 0xccd}, 0x8) r14 = syz_open_dev$mice(&(0x7f0000000e00)='/dev/input/mice\x00', 0x0, 0xf3a38b7cf25b0255) ioctl$TIOCNXCL(r14, 0x540d) r15 = add_key(&(0x7f0000000e40)='keyring\x00', &(0x7f0000000e80)={'syz', 0x2}, &(0x7f0000000ec0)="28649dfe65e454f67823dcb5067ba69f22a65af441bdf0bbc006201b17dc9725d17d10ab1295808694b0ab5b8b559e751344bb017f5f6a551768d58ffb21e978bfae15e28db07b666d3e7e9b82c6eabae543bf64c86d7c8c945000a9bd7c", 0x5e, 0xffffffffffffffff) keyctl$setperm(0x5, r15, 0x4) [ 802.335446][T24190] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 802.467429][ T12] wacom 0003:056A:00D0.0012: unknown main item tag 0x0 [ 802.474796][ T12] wacom 0003:056A:00D0.0012: unknown main item tag 0x0 [ 802.482731][ T12] wacom 0003:056A:00D0.0012: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 802.494037][ T12] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D0.0012/input/input36 [ 802.648166][ T12] wacom 0003:056A:00D0.0012: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.0-1/input0 [ 802.722801][T24190] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 802.734065][T24190] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 802.742714][T24190] usb 5-1: Product: syz [ 802.806624][T24190] usb 5-1: config 0 descriptor?? [ 802.838292][ T12] usb 1-1: USB disconnect, device number 58 [ 803.057676][T27203] FAULT_INJECTION: forcing a failure. [ 803.057676][T27203] name failslab, interval 1, probability 0, space 0, times 0 [ 803.070809][T27203] CPU: 1 PID: 27203 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 803.079019][T27203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.080626][T27203] Call Trace: [ 803.090312][T27203] dump_stack+0x191/0x1f0 [ 803.090312][T27203] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 803.098760][T27203] should_fail+0xa3f/0xa50 [ 803.098760][T27203] __should_failslab+0x264/0x280 [ 803.098760][T27203] should_failslab+0x29/0x70 [ 803.098760][T27203] kmem_cache_alloc_trace+0xf7/0xd20 [ 803.098760][T27203] ? snd_seq_port_connect+0x105/0x810 [ 803.098760][T27203] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 803.139688][T27203] snd_seq_port_connect+0x105/0x810 [ 803.142137][T27203] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 803.142137][T27203] snd_seq_ioctl_subscribe_port+0x774/0xb60 [ 803.142137][T27203] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 803.142137][T27203] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 803.142137][T27203] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 803.142137][T27203] snd_seq_kernel_client_ctl+0x562/0x5e0 [ 803.142137][T27203] snd_seq_oss_midi_open+0xa61/0xe80 [ 803.142137][T27203] snd_seq_oss_synth_reset+0x6fb/0xd70 [ 803.183530][T27203] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 803.183530][T27203] snd_seq_oss_reset+0xac/0x380 [ 803.208255][T27203] snd_seq_oss_release+0xd3/0x410 [ 803.208255][T27203] ? kmsan_internal_set_origin+0x6a/0xb0 [ 803.208255][T27203] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 803.208255][T27203] odev_release+0x85/0xe0 [ 803.208255][T27203] ? odev_open+0x130/0x130 [ 803.208255][T27203] __fput+0x4c9/0xba0 [ 803.208255][T27203] ____fput+0x37/0x40 [ 803.208255][T27203] ? fput_many+0x2a0/0x2a0 [ 803.208255][T27203] task_work_run+0x22e/0x2a0 [ 803.249164][T27203] prepare_exit_to_usermode+0x39d/0x4d0 [ 803.249164][T27203] syscall_return_slowpath+0x90/0x610 [ 803.249164][T27203] do_syscall_64+0xdc/0x160 [ 803.249164][T27203] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 803.249164][T27203] RIP: 0033:0x459ef9 [ 803.249164][T27203] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 803.249164][T27203] RSP: 002b:00007f314064cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 803.249164][T27203] RAX: 0000000000000000 RBX: 00007f314064cc90 RCX: 0000000000459ef9 [ 803.249164][T27203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 803.249164][T27203] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 803.249164][T27203] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314064d6d4 [ 803.249164][T27203] R13: 00000000004fa312 R14: 00000000004d29a0 R15: 0000000000000006 [ 803.496594][T22093] usb 5-1: USB disconnect, device number 53 [ 803.742957][ T12] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 803.982434][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 804.102435][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.114057][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 804.127194][ T12] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.40 [ 804.137060][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.146932][ T12] usb 1-1: config 0 descriptor?? 10:12:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff58, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}}}}]}, 0x48}}, 0x0) 10:12:15 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7c, 0xe3, 0xad, 0x20, 0x2001, 0x3309, 0x8a5e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xc, 0xc1, 0x47, 0x0, [], [{{0x9, 0x5, 0x8d}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)={0x0, 0x0, 0x3, "7f81b9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xd719d258690e1239) shmdt(r1) 10:12:15 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000880)=ANY=[@ANYBLOB="12010002dc785508e3eb0003e838000000dab4821b00010000000009892cabc7ead2ba04ed000100cb26000705"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r1) r2 = syz_open_procfs(r1, &(0x7f0000000000)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:12:15 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003e40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0xb17881, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000340)={0x1, 0x1, @start={0xad, 0x1}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)=ANY=[@ANYBLOB="12010000000000083a090180001000000001090224000100000000090400000903000000092100000001222200090581030000000000"], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf8, 0xa0, 0x1, [{{0x9, 0x4, 0x0, 0x3f, 0x1, 0x7, 0x1, 0x1, 0xfe, "", {{{0x9, 0x5, 0x1, 0x2, 0x5d, 0x9, 0x3f}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x2, 0x6, 0x57, 0x40, 0x6}, 0x39, &(0x7f0000000180)={0x5, 0xf, 0x39, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x0, 0x9a, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0x20, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "34d4c374a288f1dfa98aa2ff480026f7"}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x5, 0xf}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x340a}}, {0x14, &(0x7f0000000240)=@string={0x14, 0x3, "6196ea4a3baa7ad99c819c25b4d96551f6df"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc50ecd8e6d39b27f}}]}) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000003c0)=0x1, 0x4) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x0, "040eccf7"}, @main=@item_012={0x2, 0x0, 0x0, "7c04"}, @global=@item_4={0x3, 0x1, 0x0, "20001700"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x0, "d777ed4b"}, @local=@item_4={0x3, 0x2, 0x0, "8794f101"}, @global=@item_4={0x3, 0x1, 0x0, "7cbd3993"}, @main=@item_4={0x3, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000000200010bc4eb48fd1e6406d9e68a500b18c1"], 0x0}, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x22042, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000080)={0xa9a5, {0x1000, 0x1000, 0x80000000, 0x5, 0x7fffffff, 0xef}}) 10:12:15 executing program 2: syz_usb_connect$uac1(0x0, 0x99, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902870003010000000904000000010100000a240100000002010209040100000102000009040101010102000007240100000000092402020000000000ab240201000200005c0501090000000000072501000000000904020000010200000904020101010200000724010000000009240202060000000009058209860300000007250100000000"], 0x0) ioperm(0xfffffffffffffff8, 0x2, 0x401) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="800000070000000020000000460b0000f7220000"]) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000000c0)=0x1) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'rose0\x00', 0x8}) 10:12:15 executing program 4 (fault-call:3 fault-nth:5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 804.327125][ T12] usbhid 1-1:0.0: can't add hid device: -71 [ 804.333567][ T12] usbhid: probe of 1-1:0.0 failed with error -71 [ 804.346549][ T12] usb 1-1: USB disconnect, device number 59 10:12:15 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x2000, 0x0, 0x2, 0xffffffff}, &(0x7f0000000140)=0x14) [ 804.552195][T24189] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 804.560538][T24190] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 804.568915][T11863] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 804.582372][T11866] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 804.582659][T22093] usb 3-1: new high-speed USB device number 56 using dummy_hcd 10:12:15 executing program 0: socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0x6, &(0x7f0000000100)=0xfffffffb, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x1, 0x41, 0x53, 0x6, 0x6, 0x9, 0x7f, 0xb1, 0x38, 0x38, 0x4}, 0xb) 10:12:15 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x300, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x93a, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x0, "040eccf7"}, @main=@item_012={0x2, 0x0, 0x0, "7c04"}, @global=@item_4={0x3, 0x1, 0x0, "20001700"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x0, "d777ed4b"}, @local=@item_4={0x3, 0x2, 0x0, "8794f101"}, @global=@item_4={0x3, 0x1, 0x0, "7cbd3993"}, @main=@item_4={0x3, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d"], 0x0}, 0x0) [ 804.823980][T24190] usb 2-1: Using ep0 maxpacket: 16 [ 804.829637][T24189] usb 5-1: Using ep0 maxpacket: 8 [ 804.834347][T22093] usb 3-1: Using ep0 maxpacket: 32 [ 804.835916][T11866] usb 6-1: Using ep0 maxpacket: 8 [ 804.845727][T11863] usb 4-1: Using ep0 maxpacket: 32 [ 804.894100][T11866] usb 6-1: too many configurations: 218, using maximum allowed: 8 [ 804.952590][T22093] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 804.961724][T22093] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 804.973585][T22093] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 804.982923][T24189] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 804.991021][T24189] usb 5-1: config 0 has no interface number 0 [ 804.997641][T24189] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 805.008028][T24189] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 805.019623][T24189] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 805.033176][T24190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.044813][T24190] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 805.058174][T24190] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 805.067418][T24190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.072210][ T12] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 805.077132][T11863] usb 4-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 805.092510][T11863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.103130][T11863] usb 4-1: config 0 descriptor?? [ 805.115227][T24190] usb 2-1: config 0 descriptor?? [ 805.143122][T11866] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 805.150824][T11866] usb 6-1: can't read configurations, error -61 [ 805.167682][T24189] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 805.177077][T24189] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 805.185490][T24189] usb 5-1: Product: syz [ 805.199431][T24189] usb 5-1: config 0 descriptor?? [ 805.223390][T22093] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 805.232948][T22093] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.241219][T22093] usb 3-1: Product: syz [ 805.245674][T22093] usb 3-1: Manufacturer: syz [ 805.250471][T22093] usb 3-1: SerialNumber: syz [ 805.322301][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 805.342535][T11866] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 805.372294][T11863] rtl8192cu: Chip version 0x0 [ 805.442613][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.455102][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 805.468817][ T12] usb 1-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.40 [ 805.478149][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.495070][T27371] FAULT_INJECTION: forcing a failure. [ 805.495070][T27371] name failslab, interval 1, probability 0, space 0, times 0 [ 805.495623][ T12] usb 1-1: config 0 descriptor?? [ 805.508101][T27371] CPU: 1 PID: 27371 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 805.517936][T27371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.528537][T27371] Call Trace: [ 805.533065][T27371] dump_stack+0x191/0x1f0 [ 805.536095][T27371] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 805.536095][T27371] should_fail+0xa3f/0xa50 [ 805.536095][T27371] __should_failslab+0x264/0x280 [ 805.536095][T27371] should_failslab+0x29/0x70 [ 805.536095][T27371] kmem_cache_alloc_trace+0xf7/0xd20 [ 805.564599][T27371] ? snd_seq_port_connect+0x105/0x810 [ 805.568893][T27371] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 805.568893][T27371] snd_seq_port_connect+0x105/0x810 [ 805.568893][T27371] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 805.568893][T27371] snd_seq_ioctl_subscribe_port+0x774/0xb60 [ 805.568893][T27371] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 805.568893][T27371] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 805.602225][T27371] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 805.613288][T27371] snd_seq_kernel_client_ctl+0x562/0x5e0 [ 805.613288][T27371] snd_seq_oss_midi_open+0xa61/0xe80 [ 805.622227][T27371] snd_seq_oss_synth_reset+0x6fb/0xd70 [ 805.622227][T27371] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 805.622227][T27371] snd_seq_oss_reset+0xac/0x380 [ 805.622227][T27371] snd_seq_oss_release+0xd3/0x410 [ 805.622227][T27371] ? kmsan_internal_set_origin+0x6a/0xb0 [ 805.622227][T27371] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 805.622227][T27371] odev_release+0x85/0xe0 [ 805.622227][T27371] ? odev_open+0x130/0x130 [ 805.622227][T27371] __fput+0x4c9/0xba0 [ 805.622227][T27371] ____fput+0x37/0x40 [ 805.622227][T27371] ? fput_many+0x2a0/0x2a0 [ 805.622227][T27371] task_work_run+0x22e/0x2a0 [ 805.622227][T27371] prepare_exit_to_usermode+0x39d/0x4d0 [ 805.622227][T27371] syscall_return_slowpath+0x90/0x610 [ 805.622227][T27371] do_syscall_64+0xdc/0x160 [ 805.622227][T27371] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 805.622227][T27371] RIP: 0033:0x459ef9 [ 805.622227][T27371] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 805.622227][T27371] RSP: 002b:00007f314064cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 805.622227][T27371] RAX: 0000000000000000 RBX: 00007f314064cc90 RCX: 0000000000459ef9 [ 805.622227][T27371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 805.702247][T27371] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 805.742212][T27371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314064d6d4 [ 805.770523][T22093] usb 3-1: 0:2 : does not exist [ 805.742212][T27371] R13: 00000000004fa312 R14: 00000000004d29a0 R15: 0000000000000006 [ 805.821210][T22093] usb 3-1: USB disconnect, device number 56 [ 805.833011][T11866] usb 6-1: Using ep0 maxpacket: 8 [ 805.861586][T27372] Unknown ioctl 1075598596 [ 805.877103][T11866] usb 6-1: too many configurations: 218, using maximum allowed: 8 [ 805.917508][T11896] usb 5-1: USB disconnect, device number 54 [ 805.952827][T24190] usbhid 2-1:0.0: can't add hid device: -71 [ 805.959347][T24190] usbhid: probe of 2-1:0.0 failed with error -71 [ 805.975184][T24190] usb 2-1: USB disconnect, device number 68 [ 806.012862][T11866] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 806.020568][T11866] usb 6-1: can't read configurations, error -61 [ 806.028416][T11866] usb usb6-port1: attempt power cycle [ 806.073161][ T12] usbhid 1-1:0.0: can't add hid device: -71 [ 806.079432][ T12] usbhid: probe of 1-1:0.0 failed with error -71 [ 806.095099][ T12] usb 1-1: USB disconnect, device number 60 [ 806.304655][T11863] rtl_usb: reg 0xfe48, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 806.314217][T11863] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 806.322361][T11863] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 806.362289][T24190] usb 4-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 806.372803][T24190] usb 4-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 806.382287][T24190] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 806.390033][T24190] rtlwifi: Selected firmware is not available [ 806.407721][T11863] usb 4-1: USB disconnect, device number 49 10:12:17 executing program 4 (fault-call:3 fault-nth:6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 806.492919][T11896] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 806.682412][T24190] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 806.734331][T11896] usb 3-1: Using ep0 maxpacket: 32 [ 806.772369][T20720] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 806.780504][T11866] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 806.854702][T11896] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 806.863721][T11896] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 806.874245][T11896] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.883584][ T12] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 806.952756][T24190] usb 2-1: Using ep0 maxpacket: 16 [ 807.043005][T11896] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.043049][T11866] usb 6-1: Using ep0 maxpacket: 8 [ 807.043260][T20720] usb 1-1: Using ep0 maxpacket: 32 [ 807.055186][T11896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.055254][T11896] usb 3-1: Product: syz [ 807.055334][T11896] usb 3-1: Manufacturer: syz [ 807.082740][T11896] usb 3-1: SerialNumber: syz [ 807.092901][T11866] usb 6-1: too many configurations: 218, using maximum allowed: 8 [ 807.104002][T24190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.115410][T24190] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 807.128942][T24190] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 807.138160][T24190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.144321][ T12] usb 5-1: Using ep0 maxpacket: 8 [ 807.236905][T24190] usb 2-1: config 0 descriptor?? [ 807.243752][T20720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.255140][T20720] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 807.268744][T20720] usb 1-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.40 [ 807.272486][ T12] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 807.277952][T20720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.279130][T11866] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 807.286240][ T12] usb 5-1: config 0 has no interface number 0 [ 807.294545][T11866] usb 6-1: can't read configurations, error -61 [ 807.303998][ T12] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 807.327047][ T12] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 807.338618][ T12] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 807.429686][T20720] usb 1-1: config 0 descriptor?? 10:12:18 executing program 2: syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000089b94f10d2190214a3ea0000000109021200e3000000000904480000ffffff00e6c9f1e35f4d27de01aee76c99ad8b6b20d44953d52323a43a8d1ce705148c50d972037f76f177b113d47e8e44a57922817790163b43c9b1d8b328b6a516a3514693730ef0e12049990a93eef66083e24a683d44f14e7467ce1c726079cf2df211674681c9bd59ea7f34a2797198a916ba0dab62d13b0c4edbe2779fbba3236b13a9540bd0f1376f3942f0f430f1bf9c999386981fa25de2c1b756dfd89ad70b95200f9a95b2b4660781f5ef8397e24a68b9e08162a2091fd7279cf1ee0c"], 0x0) [ 807.482669][T11866] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 807.574745][T11896] usb 3-1: 0:2 : does not exist 10:12:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$dri(0x0, 0x0, 0x26be32b85a0b8a59) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 10:12:18 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000210007041dfffd946f610500020000e8fe02", 0x16}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x1}, 0xfffffffffffffff6) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa192bce5e2dfb86dd60e4d9e60e2c45692a000000aaff800000000000000000152eb65c634aab47bc490000000000000000000000f22e11d241ee2689ce9c72dc10249f1405574dcc096c6d10736476782771aa69d4cbbf4991e66576181cb5d264d99a53dea4e90ea38d7aaf83cd5a0c950f0acce3e8e40027f94058027717c2753d9860f67a61c4dce2296d74185cd0e273572da633219ab273c43dfbbbfe5f43b2414a733393bbe8f0c0c2d58d75d43efa04ae65", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000080a00"/20], 0x0) keyctl$revoke(0x3, 0x0) [ 807.662936][T24190] usbhid 2-1:0.0: can't add hid device: -71 [ 807.669363][T24190] usbhid: probe of 2-1:0.0 failed with error -71 [ 807.710308][T11896] usb 3-1: USB disconnect, device number 57 [ 807.762729][T20720] usbhid 1-1:0.0: can't add hid device: -71 [ 807.769038][T20720] usbhid: probe of 1-1:0.0 failed with error -71 [ 807.800031][T24190] usb 2-1: USB disconnect, device number 69 [ 807.847015][T20720] usb 1-1: USB disconnect, device number 61 [ 807.944797][ T12] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 807.954435][ T12] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 807.962853][ T12] usb 5-1: Product: syz 10:12:19 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/282], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') [ 808.066791][ T12] usb 5-1: config 0 descriptor?? [ 808.317881][T27512] FAULT_INJECTION: forcing a failure. [ 808.317881][T27512] name failslab, interval 1, probability 0, space 0, times 0 [ 808.331513][T27512] CPU: 0 PID: 27512 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 808.339477][T27512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.340848][T27512] Call Trace: [ 808.340848][T27512] dump_stack+0x191/0x1f0 [ 808.340848][T27512] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 808.340848][T27512] should_fail+0xa3f/0xa50 [ 808.340848][T27512] __should_failslab+0x264/0x280 [ 808.340848][T27512] should_failslab+0x29/0x70 [ 808.377492][T27512] kmem_cache_alloc_trace+0xf7/0xd20 [ 808.382665][T27512] ? open_substream+0x137/0xa90 [ 808.384948][T27512] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 808.384948][T27512] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 808.384948][T27512] open_substream+0x137/0xa90 [ 808.384948][T27512] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 808.384948][T27512] rawmidi_open_priv+0x183/0xfc0 [ 808.384948][T27512] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 808.384948][T27512] snd_rawmidi_kernel_open+0x34b/0x4e0 [ 808.384948][T27512] midisynth_subscribe+0x135/0x4b0 [ 808.384948][T27512] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 808.384948][T27512] ? snd_seq_midisynth_remove+0x640/0x640 [ 808.384948][T27512] check_and_subscribe_port+0x9bb/0x13c0 [ 808.384948][T27512] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 808.384948][T27512] snd_seq_port_connect+0x3c0/0x810 [ 808.384948][T27512] snd_seq_ioctl_subscribe_port+0x774/0xb60 [ 808.384948][T27512] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 808.384948][T27512] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 808.384948][T27512] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 808.384948][T27512] snd_seq_kernel_client_ctl+0x562/0x5e0 [ 808.384948][T27512] snd_seq_oss_midi_open+0xa61/0xe80 [ 808.503645][T27512] snd_seq_oss_synth_reset+0x6fb/0xd70 [ 808.503645][T27512] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 808.503645][T27512] snd_seq_oss_reset+0xac/0x380 [ 808.503645][T27512] snd_seq_oss_release+0xd3/0x410 [ 808.503645][T27512] ? kmsan_internal_set_origin+0x6a/0xb0 [ 808.530234][T27512] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 808.530234][T27512] odev_release+0x85/0xe0 [ 808.530234][T27512] ? odev_open+0x130/0x130 [ 808.530234][T27512] __fput+0x4c9/0xba0 [ 808.530234][T27512] ____fput+0x37/0x40 [ 808.530234][T27512] ? fput_many+0x2a0/0x2a0 [ 808.530234][T27512] task_work_run+0x22e/0x2a0 [ 808.530234][T27512] prepare_exit_to_usermode+0x39d/0x4d0 [ 808.570076][T27512] syscall_return_slowpath+0x90/0x610 [ 808.570076][T27512] do_syscall_64+0xdc/0x160 [ 808.570076][T27512] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 808.570076][T27512] RIP: 0033:0x459ef9 [ 808.570076][T27512] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:12:19 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r3 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000280)={r3}) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x7, 0x4d, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x1f, 0x181040) getpeername$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x1d2) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') ioctl$UI_DEV_DESTROY(r5, 0x5502) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x2de, 0x0, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000200)={0x0, 0x9, 0x1ff, &(0x7f00000001c0)=0x1}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0xc4b, 0x0, 0x800, 0x0, 0x0, 0x9, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10:12:19 executing program 5: r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f0000000140)={{0x77359400}, {r4, r5+30000000}}, &(0x7f0000000180)) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x77, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BLKROGET(r8, 0x125e, &(0x7f0000000080)) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000200)={{0x0, 0xdd, 0x0, 0xd, 0x8, 0x7f}, 0x0, 0xc8, 0x4}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) [ 808.570076][T27512] RSP: 002b:00007f314064cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 808.570076][T27512] RAX: 0000000000000000 RBX: 00007f314064cc90 RCX: 0000000000459ef9 [ 808.570076][T27512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 808.570076][T27512] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 808.570076][T27512] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314064d6d4 [ 808.570076][T27512] R13: 00000000004fa312 R14: 00000000004d29a0 R15: 0000000000000006 [ 808.807590][T24190] usb 5-1: USB disconnect, device number 55 [ 808.822808][T20720] usb 1-1: new high-speed USB device number 62 using dummy_hcd 10:12:20 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0xffff}, 0x10) write(r0, &(0x7f0000000140)="2000000012005f0214f9f40706c400000086fc87c83923200000000000000000", 0x20) [ 809.072256][T20720] usb 1-1: Using ep0 maxpacket: 16 [ 809.092681][T11866] usb 6-1: new high-speed USB device number 63 using dummy_hcd 10:12:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @remote, 0x40000000}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000300)=""/228, 0xffffffffffffff4f, 0x0, 0x0, 0x0) close(r0) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x9) ptrace$setregs(0xd, 0xffffffffffffffff, 0x7, &(0x7f0000000000)="21422659f24fbdc122b7ce0ba992539584ab28d674c2ab545170da610358588dfb2a56a257edf55aef715a5ae7ec06c3928ab1eca48bb867e680b7e2a2d024e1fe3287515f889d514b1ef348858328147cac99d8cd7b1bcba57160f6b6b3e5e68304e991b5e8454dc5600a7713566d448c160bcfe205402c2a273a0edbf5d1c44ecae2a0c5447ad089f1302e25f9585eab05c185be5f6fa83ebdb653376722e62bbb29c1d928021f6795775a1ccd1230a9c5c9abc95bafe220cc15b60210fb85abdfaef394bae9844810d2bdee7e5f3cd98eee550a2f07aac94dbeab") [ 809.206882][T20720] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 809.216150][T20720] usb 1-1: config 0 has no interface number 0 [ 809.222839][T20720] usb 1-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 809.232125][T20720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.330641][T20720] usb 1-1: config 0 descriptor?? [ 809.362775][T11866] usb 6-1: Using ep0 maxpacket: 16 10:12:20 executing program 4 (fault-call:3 fault-nth:7): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:12:20 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1000, 0x4101) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@main=@item_012={0x2, 0x0, 0x0, "69f5"}, @global=@item_4={0x3, 0x1, 0x0, "94627e32"}, @global=@item_4={0x3, 0x1, 0x0, 'k\"Q2'}, @global=@item_4={0x3, 0x1, 0x0, "d955359e"}, @local, @main=@item_4={0x3, 0x0, 0x9, "dc9b3b2c"}, @local=@item_4={0x3, 0x2, 0x0, "18c1187b"}, @main=@item_4={0x3, 0x0, 0x9, "11600388"}]}}, 0x0}, 0x0) [ 809.502501][T11866] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 809.511371][T11866] usb 6-1: config 0 has no interface number 0 [ 809.517957][T11866] usb 6-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 809.527207][T11866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:12:20 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000236000/0x2000)=nil, &(0x7f0000817000/0x4000)=nil, 0x2000, 0x0, 0x6}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) write(r1, &(0x7f0000000140)="9790c380be11b4a3ed0e0e39ea52139be5daf40f4c1d4d72a4056391d5d38b21ca440e7c01732ef1ec16088615e2d1996306e334abddf63e0d13802e60c1082413152d031b1435bde17cc6a081cf7a266a0146f3562a2fc25aa59ba7f2793313155dfc4f12fce04933037e199e15207b19dd82a2e952a782a1cc2f3f2f7aa1f85f87562e4ef3c802743ce059b0", 0x8d) [ 809.633255][T11866] usb 6-1: config 0 descriptor?? [ 809.642718][T20720] gtco 1-1:0.219: Failed to get HID Report Descriptor of size: 129 [ 809.651801][T20720] gtco: probe of 1-1:0.219 failed with error -5 [ 809.688766][T20720] usb 1-1: USB disconnect, device number 62 [ 809.812632][ T12] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 809.872192][T24190] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 810.072183][ T12] usb 5-1: Using ep0 maxpacket: 8 [ 810.112777][T24190] usb 2-1: Using ep0 maxpacket: 16 [ 810.222310][ T12] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 810.230668][ T12] usb 5-1: config 0 has no interface number 0 [ 810.232573][T24190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.237272][ T12] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 810.248493][T24190] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 810.258918][ T12] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 810.271943][T24190] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 810.282928][ T12] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 810.291956][T24190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.325334][T24190] usb 2-1: config 0 descriptor?? [ 810.382401][T20720] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 810.462540][ T12] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 810.471696][ T12] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 810.480115][ T12] usb 5-1: Product: syz [ 810.523134][ T12] usb 5-1: config 0 descriptor?? 10:12:21 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440), &(0x7f0000000480)=0x4) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x23b, 0x0, 0x0, 0x9000004}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x4000c0, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x5, 0x5}, 0x90) personality(0x6000003) [ 810.767115][T27567] FAULT_INJECTION: forcing a failure. [ 810.767115][T27567] name failslab, interval 1, probability 0, space 0, times 0 [ 810.780294][T27567] CPU: 1 PID: 27567 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 810.788325][T27567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.789905][T27567] Call Trace: [ 810.789905][T27567] dump_stack+0x191/0x1f0 [ 810.789905][T27567] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 810.789905][T27567] should_fail+0xa3f/0xa50 [ 810.789905][T27567] __should_failslab+0x264/0x280 [ 810.789905][T27567] should_failslab+0x29/0x70 [ 810.789905][T27567] __kmalloc_node+0x1b0/0x1380 [ 810.789905][T27567] ? kvmalloc_node+0x19f/0x3d0 [ 810.789905][T27567] kvmalloc_node+0x19f/0x3d0 [ 810.789905][T27567] open_substream+0x3ee/0xa90 [ 810.789905][T27567] ? kmsan_report+0x1d0/0x220 [ 810.789905][T27567] rawmidi_open_priv+0x183/0xfc0 [ 810.857994][T27567] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 810.857994][T27567] snd_rawmidi_kernel_open+0x34b/0x4e0 [ 810.857994][T27567] midisynth_subscribe+0x135/0x4b0 [ 810.857994][T27567] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 810.857994][T27567] ? snd_seq_midisynth_remove+0x640/0x640 [ 810.857994][T27567] check_and_subscribe_port+0x9bb/0x13c0 [ 810.857994][T27567] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 810.857994][T27567] snd_seq_port_connect+0x3c0/0x810 [ 810.857994][T27567] snd_seq_ioctl_subscribe_port+0x774/0xb60 [ 810.857994][T27567] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 810.857994][T27567] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 810.857994][T27567] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 810.857994][T27567] snd_seq_kernel_client_ctl+0x562/0x5e0 [ 810.857994][T27567] snd_seq_oss_midi_open+0xa61/0xe80 [ 810.857994][T27567] snd_seq_oss_synth_reset+0x6fb/0xd70 [ 810.857994][T27567] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 810.857994][T27567] snd_seq_oss_reset+0xac/0x380 [ 810.857994][T27567] snd_seq_oss_release+0xd3/0x410 [ 810.857994][T27567] ? kmsan_internal_set_origin+0x6a/0xb0 [ 810.857994][T27567] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 810.857994][T27567] odev_release+0x85/0xe0 [ 810.857994][T27567] ? odev_open+0x130/0x130 [ 810.857994][T27567] __fput+0x4c9/0xba0 [ 810.857994][T27567] ____fput+0x37/0x40 [ 810.857994][T27567] ? fput_many+0x2a0/0x2a0 [ 810.857994][T27567] task_work_run+0x22e/0x2a0 [ 810.857994][T27567] prepare_exit_to_usermode+0x39d/0x4d0 [ 810.857994][T27567] syscall_return_slowpath+0x90/0x610 [ 810.857994][T27567] do_syscall_64+0xdc/0x160 [ 810.857994][T27567] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 810.857994][T27567] RIP: 0033:0x459ef9 [ 810.857994][T27567] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 810.857994][T27567] RSP: 002b:00007f314064cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 810.857994][T27567] RAX: 0000000000000000 RBX: 00007f314064cc90 RCX: 0000000000459ef9 [ 810.857994][T27567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 810.857994][T27567] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 810.857994][T27567] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314064d6d4 [ 810.857994][T27567] R13: 00000000004fa312 R14: 00000000004d29a0 R15: 0000000000000006 [ 811.125432][T24190] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 811.134628][T24190] microsoft 0003:045E:07DA.0013: No inputs registered, leaving [ 811.210670][T24190] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 811.359778][T24190] usb 2-1: USB disconnect, device number 70 [ 811.547868][ T12] usb 5-1: USB disconnect, device number 56 10:12:23 executing program 4 (fault-call:3 fault-nth:8): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 812.145375][T20720] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 812.222822][T11866] smscufx: Failed to write register index 0x0000700c with value 0x454cf060 [ 812.231605][T11866] smscufx: ufx_reg_clear_and_set_bits error writing 0x700c [ 812.231619][T11866] smscufx: error clearing output gate in 0x700C [ 812.239248][T11866] smscufx: error -71 configuring system clock [ 812.246558][T11866] smscufx: probe of 6-1:0.122 failed with error -71 [ 812.347081][T11866] usb 6-1: USB disconnect, device number 63 [ 812.412183][T20720] usb 2-1: Using ep0 maxpacket: 16 [ 812.502677][T24190] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 812.542914][T20720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.554371][T20720] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 812.567623][T20720] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 812.577107][T20720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.629438][T20720] usb 2-1: config 0 descriptor?? [ 812.792330][T24190] usb 5-1: Using ep0 maxpacket: 8 [ 812.912415][T24190] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 812.920861][T24190] usb 5-1: config 0 has no interface number 0 [ 812.927210][T24190] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 812.937120][T24190] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 812.952497][T24190] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 812.992700][ T12] usb 6-1: new high-speed USB device number 64 using dummy_hcd 10:12:24 executing program 1: r0 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000080)) syz_usb_connect$uac1(0x5, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) r4 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x20000004e21, @local}, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f00000002c0)=@ethtool_eeprom={0x43, 0xdc75, 0x7, 0x1000, "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"}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000040)={0x8e04, 0x1f, 0x7, 0x5}, 0x8) [ 813.072504][T20720] usbhid 2-1:0.0: can't add hid device: -71 [ 813.078811][T20720] usbhid: probe of 2-1:0.0 failed with error -71 [ 813.087649][T24190] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 813.096930][T24190] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 813.105526][T24190] usb 5-1: Product: syz [ 813.111891][T20720] usb 2-1: USB disconnect, device number 71 [ 813.136674][T24190] usb 5-1: config 0 descriptor?? [ 813.234443][ T12] usb 6-1: Using ep0 maxpacket: 16 [ 813.352545][ T12] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 813.360930][ T12] usb 6-1: config 0 has no interface number 0 [ 813.367732][ T12] usb 6-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 813.377038][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.397738][T27594] FAULT_INJECTION: forcing a failure. [ 813.397738][T27594] name failslab, interval 1, probability 0, space 0, times 0 [ 813.410724][T27594] CPU: 1 PID: 27594 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 813.411474][ T12] usb 6-1: config 0 descriptor?? [ 813.418758][T27594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.418778][T27594] Call Trace: [ 813.418840][T27594] dump_stack+0x191/0x1f0 [ 813.418894][T27594] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 813.418964][T27594] should_fail+0xa3f/0xa50 [ 813.442402][T27594] __should_failslab+0x264/0x280 [ 813.442402][T27594] should_failslab+0x29/0x70 [ 813.442402][T27594] kmem_cache_alloc_trace+0xf7/0xd20 [ 813.442402][T27594] ? snd_seq_port_connect+0x105/0x810 [ 813.442402][T27594] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 813.442402][T27594] snd_seq_port_connect+0x105/0x810 [ 813.442402][T27594] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 813.442402][T27594] snd_seq_ioctl_subscribe_port+0x774/0xb60 [ 813.442402][T27594] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 813.442402][T27594] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 813.512170][T27594] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 813.514528][T27594] snd_seq_kernel_client_ctl+0x562/0x5e0 [ 813.514528][T27594] snd_seq_oss_midi_open+0xa61/0xe80 [ 813.514528][T27594] snd_seq_oss_synth_reset+0x6fb/0xd70 [ 813.514528][T27594] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 813.514528][T27594] snd_seq_oss_reset+0xac/0x380 [ 813.514528][T27594] snd_seq_oss_release+0xd3/0x410 [ 813.514528][T27594] ? kmsan_internal_set_origin+0x6a/0xb0 [ 813.514528][T27594] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 813.560899][T27594] odev_release+0x85/0xe0 [ 813.560899][T27594] ? odev_open+0x130/0x130 [ 813.570357][T27594] __fput+0x4c9/0xba0 [ 813.570357][T27594] ____fput+0x37/0x40 [ 813.582233][T27594] ? fput_many+0x2a0/0x2a0 [ 813.582233][T27594] task_work_run+0x22e/0x2a0 [ 813.582233][T27594] prepare_exit_to_usermode+0x39d/0x4d0 [ 813.582233][T27594] syscall_return_slowpath+0x90/0x610 [ 813.582233][T27594] do_syscall_64+0xdc/0x160 [ 813.582233][T27594] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 813.610049][T27594] RIP: 0033:0x459ef9 [ 813.610049][T27594] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 813.610049][T27594] RSP: 002b:00007f314064cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 813.638579][T27594] RAX: 0000000000000000 RBX: 00007f314064cc90 RCX: 0000000000459ef9 [ 813.652162][T27594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 813.652162][T27594] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 813.652162][T27594] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314064d6d4 [ 813.652162][T27594] R13: 00000000004fa312 R14: 00000000004d29a0 R15: 0000000000000006 [ 813.762799][ T12] smscufx: Failed to read register index 0x00003000 [ 813.769583][ T12] smscufx: error -71 reading 0x3000 register from device [ 813.770478][ T12] smscufx: probe of 6-1:0.122 failed with error -71 10:12:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00[9\xa4@\xe4c\xe0\xfe\xc3D\xb7\xacu\xc8h\bL\xf80K\xd3\xf4z\x1a\x03\t\xef\x1cy\xc7\xae\xeaT/5\xf6\xfb\xe7 \xa3g\xde\xf2\x18\x05G\x98\x80\xf5\xaf\x92\xb1|\xbc\x7f\xb2n\x8c\x11\x96]\xb9x-\xa0\x82\aY.\x9d?\xf7\xdec\xe1U;\r\xf6eR\xf9\x89\xf8*\xd7\x11\xaa@') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) read$eventfd(r0, &(0x7f0000000080), 0xb86a09c9) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='sysv\x00', 0x900002, &(0x7f0000000100)) [ 813.844123][ T12] usb 6-1: USB disconnect, device number 64 [ 813.879018][T20720] usb 5-1: USB disconnect, device number 57 10:12:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x3cd) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x880, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000008000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6000000"], 0x78) 10:12:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'ip6_vti0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'team_slave_0\x00'}, 0x18) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) [ 814.173844][T27614] IPVS: stopping master sync thread 27615 ... [ 814.187116][T27617] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 0, id = 0 10:12:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0xd0b83ed4b0aa8341, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:12:25 executing program 1: lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000000)=@known='user./yz\xff', &(0x7f0000fc0000)='//selinux\x00\x00\x01\x01', 0xd, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200001, 0x0) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r5, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x200}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={r6, 0x4, 0xe3c, 0x9}, 0x10) read$eventfd(r1, &(0x7f0000000080), 0x8) setxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='security.evm\x00', &(0x7f0000000340)=@ng={0x4, 0x14, "aa"}, 0x3, 0x6) ioctl$TCSBRKP(r0, 0x5425, 0x9) [ 814.379915][T27622] kvm [27621]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000006 [ 814.404424][T27622] kvm [27621]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000008 [ 814.446741][T27622] kvm [27621]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000000a [ 814.458722][T27622] kvm [27621]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000000c 10:12:25 executing program 4 (fault-call:3 fault-nth:9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 814.488072][T27622] kvm [27621]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000000e [ 814.535343][T27622] kvm [27621]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000012 [ 814.546949][T27622] kvm [27621]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000014 [ 814.569793][T27622] kvm [27621]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000016 [ 814.585301][T27622] kvm [27621]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000018 [ 814.595504][T27622] kvm [27621]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000001a 10:12:25 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xb9, 0x1, 0x72e5, 0x5]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x5, 0x8]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x540}, 0x1) r4 = syz_usb_connect$hid(0x0, 0x402, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x56a, 0xcc, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220000010000000000793171000000000000000000"], 0x0}, 0x0) [ 814.884390][T20720] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 815.152180][T20720] usb 5-1: Using ep0 maxpacket: 8 [ 815.202363][ T12] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 815.273134][T20720] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 815.281391][T20720] usb 5-1: config 0 has no interface number 0 [ 815.287770][T20720] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 815.299354][T20720] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 10:12:26 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000600), 0x12) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0)=0x6, 0x4) [ 815.310625][T20720] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 815.492512][T20720] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 815.501777][T20720] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 815.510401][T20720] usb 5-1: Product: syz [ 815.551762][T20720] usb 5-1: config 0 descriptor?? [ 815.562517][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.574060][ T12] usb 6-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.40 [ 815.583354][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.620445][ T12] usb 6-1: config 0 descriptor?? [ 815.798649][T27627] FAULT_INJECTION: forcing a failure. [ 815.798649][T27627] name failslab, interval 1, probability 0, space 0, times 0 [ 815.811648][T27627] CPU: 1 PID: 27627 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 815.819651][T27627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.832099][T27627] Call Trace: [ 815.832099][T27627] dump_stack+0x191/0x1f0 [ 815.832099][T27627] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 10:12:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00', 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000200)={'eql\x00`\x00\xa9[,H^\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) r3 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/183) [ 815.832099][T27627] should_fail+0xa3f/0xa50 [ 815.832099][T27627] __should_failslab+0x264/0x280 [ 815.851680][T27627] should_failslab+0x29/0x70 [ 815.851680][T27627] kmem_cache_alloc_trace+0xf7/0xd20 [ 815.862748][T27627] ? open_substream+0x137/0xa90 [ 815.862748][T27627] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 815.862748][T27627] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 815.862748][T27627] open_substream+0x137/0xa90 [ 815.862748][T27627] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 815.862748][T27627] rawmidi_open_priv+0x183/0xfc0 [ 815.862748][T27627] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 815.902178][T27627] snd_rawmidi_kernel_open+0x34b/0x4e0 [ 815.902178][T27627] midisynth_subscribe+0x135/0x4b0 [ 815.915569][T27627] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 815.915569][T27627] ? snd_seq_midisynth_remove+0x640/0x640 [ 815.915569][T27627] check_and_subscribe_port+0x9bb/0x13c0 [ 815.915569][T27627] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 815.915569][T27627] snd_seq_port_connect+0x3c0/0x810 [ 815.915569][T27627] snd_seq_ioctl_subscribe_port+0x774/0xb60 [ 815.915569][T27627] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 815.915569][T27627] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 815.915569][T27627] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 815.972179][T27627] snd_seq_kernel_client_ctl+0x562/0x5e0 [ 815.972179][T27627] snd_seq_oss_midi_open+0xa61/0xe80 [ 815.972179][T27627] snd_seq_oss_synth_reset+0x6fb/0xd70 [ 815.972179][T27627] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 815.972179][T27627] snd_seq_oss_reset+0xac/0x380 [ 815.972179][T27627] snd_seq_oss_release+0xd3/0x410 [ 815.972179][T27627] ? kmsan_internal_set_origin+0x6a/0xb0 [ 815.972179][T27627] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 816.016079][T27627] odev_release+0x85/0xe0 [ 816.016079][T27627] ? odev_open+0x130/0x130 [ 816.016079][T27627] __fput+0x4c9/0xba0 [ 816.016079][T27627] ____fput+0x37/0x40 [ 816.016079][T27627] ? fput_many+0x2a0/0x2a0 [ 816.042147][T27627] task_work_run+0x22e/0x2a0 [ 816.042147][T27627] prepare_exit_to_usermode+0x39d/0x4d0 [ 816.042147][T27627] syscall_return_slowpath+0x90/0x610 [ 816.057359][T27627] do_syscall_64+0xdc/0x160 [ 816.057359][T27627] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 816.057359][T27627] RIP: 0033:0x459ef9 [ 816.057359][T27627] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 816.057359][T27627] RSP: 002b:00007f314064cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 816.057359][T27627] RAX: 0000000000000000 RBX: 00007f314064cc90 RCX: 0000000000459ef9 [ 816.112246][T27627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 816.112246][T27627] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 816.112246][T27627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314064d6d4 [ 816.112246][T27627] R13: 00000000004fa312 R14: 00000000004d29a0 R15: 0000000000000006 [ 816.182905][T27642] : renamed from eql 10:12:27 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x200000000000007) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00a\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xb779ef21efb66f11}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_nanosleep(0x6, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f00000000c0)) r2 = socket$inet(0x2, 0x2, 0x0) r3 = dup2(r1, r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f00000002c0)={r7, 0x80000, r3}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="200025bd7000080000000e000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) [ 816.313376][T11896] usb 5-1: USB disconnect, device number 58 [ 816.354589][T27647] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.362656][T27647] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.403806][ T12] usbhid 6-1:0.0: can't add hid device: -71 [ 816.410150][ T12] usbhid: probe of 6-1:0.0 failed with error -71 10:12:27 executing program 1: r0 = syz_usb_connect(0x0, 0x181, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x97, 0x34, 0x13, 0x8, 0xc72, 0xd, 0xdad3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf1, 0x0, 0x0, 0xa, 0x72, 0x24}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002b80)={0xac, &(0x7f0000000580)=ANY=[@ANYBLOB="0000705d9c886d39e51ef79aec4e693dbcbe998792e5d26904d75d582d0eb0a3cfb4303dfb010100001e11ac5e17905bcb9bafa232119ead1ffc1b185f986cbb7cbd8f2ac75d27bf21af2b3505e7c6e801f9e5d101190d46c890882d648327ad414572bf3659bfb163fd441a2e839d164131f81f809d6ef8611b83f4470300000028fe50d070b725340123f3fed999b6a55569c7471c802757e04d58633857a5fdcbdd33354d62ce5e0000b68e409aed08cde11c9a01e02155cb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001780)={0xac, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x81800) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000300)={{0x6, 0x6, 0x6, 0x8, '\x00', 0xc5b5}, 0x1, 0x2, 0x803, r4, 0x3, 0x0, 'syz1\x00', &(0x7f00000002c0)=['/dev/dsp\x00', 'net/udp6\x00', '/dev/vcsa#\x00'], 0x1d, [], [0x4, 0x3, 0x2, 0xa61a]}) r5 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast2, @in=@remote}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000540)=0xe8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000100)=0xff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/udp6\x00') ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0)={r5, r9}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0xa801, 0x0) ioctl$SG_EMULATED_HOST(r10, 0x2203, &(0x7f0000000240)) [ 816.451290][ T12] usb 6-1: USB disconnect, device number 65 10:12:27 executing program 4 (fault-call:3 fault-nth:10): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a91fe8f532368812b0f383b5d2c33f1ad6bfe32db5301f593d265c68faf66cbd5d7022b6fd411c9700c4ae172e57ac6d94e2949067fff31318f11203b89c09ecbdd"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:12:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)=""/55) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000780)=0x2, 0x4) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="44040000247604ed74f3d0522cc8a80000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffff1c00000000080001006362710000040406000300000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008356f4520000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed48000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009031000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000639300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf81a40dd4e498a8036a19fc066757cde0d96c1f7ba42404efe8c083b97f02079617de428f1406d4f41db217fbbe3a31feeb92b97bf000ea02b8b3509526d4380f3dff27b070d7a3ae28c1bef0355ddc3e85d8e9e21423f48bb488633bf6e6f7eb52abca40f239b7b447923ac3831f85e698f058276be6e88a5504882a21600d3da36cf51ded01de63f9471598b4cc6458ce4d178e3ac2567ab6d0555811ba379b9f0a3b87eefb39ae8d9640ec203e5bf81f407c1717b909762d9727ce2466343db443c01156acbac3f7d2abf17e90d79b9f782700bb4412910b158dc82d9326d581b43c054dd94f91ec584784522b7c004a39066d5200d5536de43d30010f784ead7a5ca53cff349eb6ece8efcc74018ebb18509e93e90feed5e3a9f639fcb1dafd6c3d425d4618c51cff423e7e4f0ff63fc33c3516ea74b97cd830d7c"], 0x444}}, 0x0) getpeername$tipc(r3, &(0x7f00000005c0), &(0x7f0000000600)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$RTC_RD_TIME(r14, 0x80247009, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) fgetxattr(r3, &(0x7f0000000640)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000680)=""/66, 0x42) r15 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x11c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_XDP={0xfc, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0xd, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x70}, @initr0={0x18, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x2}, @exit, @map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x6}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x300000}, @ldst={0x3, 0x0, 0x3, 0x1, 0x4, 0x48, 0x4}, @ldst={0x2, 0x0, 0xf58ab23123302bf4, 0x4, 0x7, 0xffffffffffffffc0}]}, &(0x7f0000000080)='syzkaller\x00', 0x8000, 0xb8, &(0x7f00000001c0)=""/184, 0x41000, 0x1, [], r5, 0xa, r8, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x8, 0x1, 0x566a}, 0x10}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x74, 0x1, {0x33, 0x7, &(0x7f0000000340)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3f}, @alu={0xc7ec2ccaae30eb59, 0x1, 0x0, 0x80394d89afe34782, 0xb246492205d44963, 0xfffffffffffffff8, 0xffffffffffffffff}, @map={0x18, 0x5, 0x1, 0x0, r11}, @call={0x85, 0x0, 0x0, 0x53}, @generic={0x9, 0x9, 0x5, 0xfff, 0x1}], &(0x7f0000000380)='syzkaller\x00', 0x101, 0x0, 0x0, 0x41000, 0x3, [], 0x0, 0x13, r15, 0x8, &(0x7f0000000400)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x0, 0x330, 0x7fffffff}, 0x10}}]}]}, 0x11c}}, 0x0) [ 816.962247][T11866] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 817.125342][ T12] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 817.222329][T24190] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 817.230286][T11866] usb 2-1: Using ep0 maxpacket: 8 10:12:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40000000000000061113400000000009500000000000000bc591ea8f8189a9c67fe31a48f421af7745ad7de6c493423c3f5a8c1e3593ea515b02544dc8cd6434bef05df86f470673c34e114c5be083ffd0569ab25ead264c05d65360ad02ff3f4c4fd71a83a89f8dbc87d36dd837ac4de76b4f7ecc5fbbefa64245b4ca870fc737cbd"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x5e) r0 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r0, 0x49b, r1) keyctl$read(0xb, r0, &(0x7f0000000000)=""/112, 0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) set_tid_address(&(0x7f0000000200)) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000400)={'bpq0\x00', &(0x7f0000000240)=@ethtool_pauseparam={0x13, 0x2, 0x1, 0x20}}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f00000001c0)={0x5, 0x0, 0xfffff800, 0x3ff}) r7 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) recvfrom$inet(r7, &(0x7f00000004c0)=""/126, 0x7e, 0x20020, &(0x7f0000000540)={0x2, 0x4e23, @remote}, 0x10) r8 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) shutdown(r8, 0x1) [ 817.372734][T11866] usb 2-1: config 0 has an invalid interface number: 241 but max is 0 [ 817.381066][T11866] usb 2-1: config 0 has no interface number 0 [ 817.387443][T11866] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=da.d3 [ 817.397101][T11866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.469743][T11866] usb 2-1: config 0 descriptor?? [ 817.492360][T24190] usb 5-1: Using ep0 maxpacket: 8 [ 817.622453][T24190] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 817.630833][T24190] usb 5-1: config 0 has no interface number 0 [ 817.637413][T24190] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 817.647326][T24190] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 817.658622][T24190] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 10:12:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x58, 0x0}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000280)=""/99, 0x63}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x2c}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x1c4}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0x91}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000780)=""/207) [ 817.754834][ T12] usb 6-1: device descriptor read/all, error -71 [ 817.763956][T24190] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 817.773440][T24190] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 817.781749][T24190] usb 5-1: Product: syz 10:12:28 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x3d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f00000001c0)=""/170, 0xaa}], 0x10000000000001d7) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000080)={0x58c, 0xc0000}) [ 817.884410][T24190] usb 5-1: config 0 descriptor?? 10:12:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000140)={'hsr0\x00', @ifru_addrs=@can={0x1d, 0x0}}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6g\x1b*+\xeep\x00'}, {0x4}}}, @IFLA_ADDRESS={0xc, 0x1, @empty=[0x3]}]}, 0x44}}, 0x0) [ 818.132463][T27755] FAULT_INJECTION: forcing a failure. [ 818.132463][T27755] name failslab, interval 1, probability 0, space 0, times 0 [ 818.145764][T27755] CPU: 1 PID: 27755 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 818.155127][T27755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.155651][T27755] Call Trace: [ 818.155651][T27755] dump_stack+0x191/0x1f0 [ 818.171978][T27755] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 818.171978][T27755] should_fail+0xa3f/0xa50 [ 818.182079][T27755] __should_failslab+0x264/0x280 [ 818.182079][T27755] should_failslab+0x29/0x70 [ 818.192162][T27755] __kmalloc_node+0x1b0/0x1380 [ 818.198377][T27755] ? kvmalloc_node+0x19f/0x3d0 [ 818.198377][T27755] kvmalloc_node+0x19f/0x3d0 [ 818.198377][T27755] open_substream+0x3ee/0xa90 [ 818.198377][T27755] ? kmsan_report+0x1d0/0x220 [ 818.218111][T27755] rawmidi_open_priv+0x183/0xfc0 [ 818.218111][T27755] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 818.218111][T27755] snd_rawmidi_kernel_open+0x34b/0x4e0 [ 818.236703][T27755] midisynth_subscribe+0x135/0x4b0 [ 818.236703][T27755] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 818.236703][T27755] ? snd_seq_midisynth_remove+0x640/0x640 [ 818.236703][T27755] check_and_subscribe_port+0x9bb/0x13c0 [ 818.236703][T27755] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 818.262290][T27755] snd_seq_port_connect+0x3c0/0x810 [ 818.262290][T27755] snd_seq_ioctl_subscribe_port+0x774/0xb60 [ 818.262290][T27755] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 818.262290][T27755] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 818.262290][T27755] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 818.262290][T27755] snd_seq_kernel_client_ctl+0x562/0x5e0 [ 818.262290][T27755] snd_seq_oss_midi_open+0xa61/0xe80 [ 818.262290][T27755] snd_seq_oss_synth_reset+0x6fb/0xd70 [ 818.262290][T27755] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 818.262290][T27755] snd_seq_oss_reset+0xac/0x380 [ 818.262290][T27755] snd_seq_oss_release+0xd3/0x410 [ 818.262290][T27755] ? kmsan_internal_set_origin+0x6a/0xb0 [ 818.262290][T27755] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 818.262290][T27755] odev_release+0x85/0xe0 [ 818.262290][T27755] ? odev_open+0x130/0x130 [ 818.262290][T27755] __fput+0x4c9/0xba0 [ 818.262290][T27755] ____fput+0x37/0x40 [ 818.262290][T27755] ? fput_many+0x2a0/0x2a0 [ 818.262290][T27755] task_work_run+0x22e/0x2a0 [ 818.262290][T27755] prepare_exit_to_usermode+0x39d/0x4d0 [ 818.262290][T27755] syscall_return_slowpath+0x90/0x610 [ 818.262290][T27755] do_syscall_64+0xdc/0x160 [ 818.262290][T27755] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 818.262290][T27755] RIP: 0033:0x459ef9 [ 818.262290][T27755] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 818.262290][T27755] RSP: 002b:00007f314064cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 818.262290][T27755] RAX: 0000000000000000 RBX: 00007f314064cc90 RCX: 0000000000459ef9 [ 818.262290][T27755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 818.262290][T27755] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 818.262290][T27755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314064d6d4 [ 818.262290][T27755] R13: 00000000004fa312 R14: 00000000004d29a0 R15: 0000000000000006 10:12:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000100)=0x40) r2 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$unix(r5, &(0x7f0000000200)="0c448bc22743b45a550b838af8292dd3cc3ec89de53406651eb496dbdf01c0fe886cc97d8107c4fe3e4d194fb777c8fef39cb4f0a978308d61d75f09c1c551e13279f13eaae9b501fefc9c26c0a181312826b3e815f3550eae3c73af8fd4236ee1ec8a4c7b1eb65726bdf77b0d836b224ceaaf3c80d75a2b3f4f61ac8ccf4d80955ff7d473de12e8e293a8adfb9f08ffb449e831086d3428bd896a8426202aa3b1ee200187fe13ba4056c83e39bbc2cbeaff4d5690b0fb30aff070fc78a60929cf39ef", 0xc3, 0x28004054, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201368b020000082505a1a440000102030109023b0001010000a29a040000000206000005240600000524008ecfa12743cc8cb37263aa508500000d240f010000000000000000000905820200"], &(0x7f0000002640)=ANY=[@ANYBLOB="00000000000000000000000005000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="050f050009"]]) [ 818.584283][T11866] peak_usb 2-1:0.241 can0: unable to request usb[type=2 value=5] err=-71 10:12:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x53, 0x0, 0xbb, 0x8, 0x6f8, 0x3003, 0x256f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0xe, 0x9a, 0x39}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x3e, &(0x7f0000000240)={0x0, 0x0, 0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 818.673965][T11866] peak_usb: probe of 2-1:0.241 failed with error -71 [ 818.717898][T11866] usb 2-1: USB disconnect, device number 72 10:12:29 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfffffffffffeffff}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) r1 = dup2(r0, r0) sendmsg$tipc(r1, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000000)={0x100, 0x1274, 0x1, 0xa67, 0x0, 0x51, 0x2, 0x40, 0xfffffff9, 0x8, 0x7, 0x100}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) clone3(0x0, 0x0) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) [ 819.152548][T11866] usb 2-1: new high-speed USB device number 73 using dummy_hcd 10:12:30 executing program 5: r0 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x03\x00\x00\x00\xf7\x00', @local}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x420000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 10:12:30 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSBRK(r2, 0x5409, 0x3) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r5}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x7fff}, &(0x7f0000000040)=0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000001c80)={{0x12, 0x1, 0x0, 0xda, 0xd4, 0xea, 0x20, 0xccd, 0x10ae, 0x2715, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0x4c, 0x90, 0xa5}}]}}]}}, 0x0) [ 819.305819][ T12] usb 5-1: USB disconnect, device number 59 [ 819.402297][T11866] usb 2-1: Using ep0 maxpacket: 8 [ 819.432914][T28204] device team0 entered promiscuous mode [ 819.439011][T28204] device team_slave_0 entered promiscuous mode [ 819.446175][T28204] device team_slave_1 entered promiscuous mode [ 819.542781][T11866] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 819.551243][T11866] usb 2-1: config 0 has no interface number 0 [ 819.557789][T11866] usb 2-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f [ 819.567115][T11866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.663950][T11866] usb 2-1: config 0 descriptor?? [ 819.719812][T11866] gspca_main: ov534_9-2.14.0 probing 06f8:3003 [ 819.762694][T11896] usb 4-1: new high-speed USB device number 50 using dummy_hcd 10:12:30 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) r2 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r2}], 0x1, 0x0) r3 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r3}], 0x1, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x62dc3b21dc808e73, 0x0) sendfile(r2, r3, &(0x7f0000000000), 0x3f) 10:12:30 executing program 4 (fault-call:3 fault-nth:11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 820.002181][T11896] usb 4-1: Using ep0 maxpacket: 32 10:12:31 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'erspan0\x00', 0x4}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = semget(0x3, 0x0, 0x8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000380)={0x86, 0x3}, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0xe4, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xcc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0xffffff4c, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_NET={0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000008}, 0x808) semctl$GETZCNT(r3, 0x0, 0xf, &(0x7f0000000040)=""/253) ioctl(r0, 0x80000000008936, &(0x7f0000000000)) [ 820.122425][T11896] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 820.130913][T11896] usb 4-1: config 0 has no interface number 0 [ 820.137732][T11896] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=27.15 [ 820.147001][T11896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.227539][T11896] usb 4-1: config 0 descriptor?? [ 820.235835][ T12] usb 5-1: new high-speed USB device number 60 using dummy_hcd 10:12:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @remote}, &(0x7f00000000c0)=0xc) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) signalfd4(r0, &(0x7f0000000040)={0xd555}, 0x8, 0x180800) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000022e32036a506b725c86ebbe32008ca0710a3ebcd000000010902120001000c0000090401010047c6ed00dc418ed16d696339fc39b60e5b6475ef55c2fb5b2a9b8c4bcf142567c84cd24abc32b3648618fc5750eafdf2c8ad4ce8ff3810f41e4069b22790ee8b979bc6d1be14c6040e786210053f27fb4b83e699"], 0x0) socket$tipc(0x1e, 0x2, 0x0) [ 820.476989][T11896] usb 4-1: USB disconnect, device number 50 [ 820.485477][ T12] usb 5-1: Using ep0 maxpacket: 8 [ 820.602663][ T12] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 820.611159][ T12] usb 5-1: config 0 has no interface number 0 [ 820.617536][ T12] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 820.627421][ T12] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 820.639591][ T12] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 820.754226][T24190] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 820.762456][ T12] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 820.772753][ T12] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 820.780938][ T12] usb 5-1: Product: syz [ 820.809278][ T12] usb 5-1: config 0 descriptor?? [ 821.057750][T28218] FAULT_INJECTION: forcing a failure. [ 821.057750][T28218] name failslab, interval 1, probability 0, space 0, times 0 [ 821.070804][T28218] CPU: 0 PID: 28218 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 821.072343][T24190] usb 6-1: device descriptor read/64, error 18 [ 821.079103][T28218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.079123][T28218] Call Trace: [ 821.079178][T28218] dump_stack+0x191/0x1f0 [ 821.079250][T28218] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 821.091956][T28218] should_fail+0xa3f/0xa50 [ 821.091956][T28218] __should_failslab+0x264/0x280 [ 821.091956][T28218] should_failslab+0x29/0x70 [ 821.091956][T28218] kmem_cache_alloc_trace+0xf7/0xd20 [ 821.091956][T28218] ? snd_seq_port_connect+0x105/0x810 [ 821.091956][T28218] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 821.091956][T28218] snd_seq_port_connect+0x105/0x810 [ 821.091956][T28218] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 821.091956][T28218] snd_seq_ioctl_subscribe_port+0x774/0xb60 [ 821.091956][T28218] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 821.091956][T28218] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 821.091956][T28218] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 821.091956][T28218] snd_seq_kernel_client_ctl+0x562/0x5e0 [ 821.091956][T28218] snd_seq_oss_midi_open+0xa61/0xe80 [ 821.091956][T28218] snd_seq_oss_synth_reset+0x6fb/0xd70 [ 821.091956][T28218] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 821.091956][T28218] snd_seq_oss_reset+0xac/0x380 [ 821.091956][T28218] snd_seq_oss_release+0xd3/0x410 [ 821.091956][T28218] ? kmsan_internal_set_origin+0x6a/0xb0 [ 821.091956][T28218] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 821.091956][T28218] odev_release+0x85/0xe0 [ 821.091956][T28218] ? odev_open+0x130/0x130 [ 821.091956][T28218] __fput+0x4c9/0xba0 [ 821.091956][T28218] ____fput+0x37/0x40 [ 821.091956][T28218] ? fput_many+0x2a0/0x2a0 [ 821.091956][T28218] task_work_run+0x22e/0x2a0 [ 821.091956][T28218] prepare_exit_to_usermode+0x39d/0x4d0 [ 821.091956][T28218] syscall_return_slowpath+0x90/0x610 [ 821.091956][T28218] do_syscall_64+0xdc/0x160 [ 821.091956][T28218] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 821.091956][T28218] RIP: 0033:0x459ef9 [ 821.091956][T28218] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 821.091956][T28218] RSP: 002b:00007f314064cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 821.091956][T28218] RAX: 0000000000000000 RBX: 00007f314064cc90 RCX: 0000000000459ef9 [ 821.091956][T28218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 821.091956][T28218] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 821.091956][T28218] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314064d6d4 [ 821.091956][T28218] R13: 00000000004fa312 R14: 00000000004d29a0 R15: 0000000000000006 10:12:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/88) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8018}, 0x4000000) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x19492b8e64f55851, 0x8, {0x200}}, 0x18) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x82003, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000300)={0x8, 0xa03d, 0x7, @empty, 'teql0\x00'}) r5 = accept4$alg(r4, 0x0, 0x0, 0x80800) accept4(r5, &(0x7f0000000340)=@ethernet={0x0, @dev}, &(0x7f00000003c0)=0x80, 0x80000) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000400)={0xfff, 0x0, 0x81, 0x3f, 0x0}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000480)={r7, 0x9}, &(0x7f00000004c0)=0x8) r9 = syz_open_dev$cec(&(0x7f0000000500)='/dev/cec#\x00', 0x1, 0x2) r10 = socket$rds(0x15, 0x5, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x2, 0x200000) ppoll(&(0x7f0000000640)=[{r3, 0x8}, {r9, 0xb8}, {r4, 0x8000}, {r10, 0x200}, {r11, 0x5000}, {0xffffffffffffffff, 0x140}], 0x6, &(0x7f0000000680)={0x77359400}, &(0x7f00000006c0)={0xfffffffffffffffb}, 0x8) r12 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r12, 0x891c, &(0x7f0000000700)={'ifb0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000740)={r8, @in={{0x2, 0x4e22, @remote}}, 0x3, 0x6, 0x8, 0x401}, &(0x7f0000000800)=0x98) r13 = syz_open_dev$sndpcmc(&(0x7f0000000840)='/dev/snd/pcmC#D#c\x00', 0xff, 0x189440) ioctl$CAPI_GET_SERIAL(r13, 0xc0044308, &(0x7f0000000880)=0x8) openat$audio(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/audio\x00', 0x100000, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000900)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000980)='/dev/zero\x00', 0x0, 0x0) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r14, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r15, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000030) ioctl$DRM_IOCTL_CONTROL(r14, 0x40086414, &(0x7f0000000b40)={0x1}) r16 = syz_open_dev$dmmidi(&(0x7f0000000b80)='/dev/dmmidi#\x00', 0x1, 0x92000) r17 = getpgid(0x0) getgroups(0x2, &(0x7f0000001000)=[0xee00, 0xffffffffffffffff]) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001040)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000001140)=0xe8) r20 = signalfd4(0xffffffffffffffff, &(0x7f0000001180)={0x1}, 0x8, 0x80000) r21 = socket$inet6_dccp(0xa, 0x6, 0x0) r22 = syz_open_dev$dspn(&(0x7f00000011c0)='/dev/dsp#\x00', 0x5, 0xa2002) r23 = mq_open(&(0x7f0000001200)='ifb0\x00', 0xddf715ac478d2062, 0x80, &(0x7f0000001240)={0x3, 0x6, 0x1, 0x8, 0x7ff, 0x5, 0x5, 0x8}) sendmsg$unix(r16, &(0x7f0000001300)={&(0x7f0000000bc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000c40)="42fe6209fcf05781d5e2fb9e220de363d81ab5ef2d46ecaeee37aa10d849e9a33a3c25bdd02c1868ac37f884a0992759b53a79a2f4cb3c559e652aaf5e206715bd1cd7358711bfca84e554f7139b0593b1ed2063c359fcaab0b2ed9e216cf6bb8f0f98939d70150997dee3edfc21285427d7b5e697a09b6522c1575ca23d1c0dbdf9aec389cb9cc3b503f84ecd9865e256c1810e46f0f036657c814efe154ea93d464bc38d5a3b5c25c0d31eb51d5140ccba9f5b9c6a", 0xb6}, {&(0x7f0000000d00)="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", 0xfd}, {&(0x7f0000000e00)="d6e6b7f2fb2f887a73dbcbd6eb8bba75fa08dc7a329a2514b295bff004fc9d643491", 0x22}, {&(0x7f0000000e40)="4172fd3664a9aa817f6a47936b0ec42cf44ceb5864fe52443cce4a39f7b002cdd1055a219ab1762ab31e3f2820b00863bc5428a3df67b20b90cd599b2db466293604302716ab8360a1cc8990b59fdc53c82b90602df9aa3b958c664199235f8503a6a83e9887affd62a1477ff91eee302f25fb29976990e5ee52f6e05b1d06ff0169fe13891d71b1e10eafac94ab97ed9a57fe53bbbcef66c62afd6edc832c2d7fa2b499385d565d5606682547e390335cb50645aa4c38f5bb52893496e6afc6e64f5492394e84c7293792449a98e92b9f57ba8117acd6cb4039", 0xda}, {&(0x7f0000000f40)="2141ac665b", 0x5}], 0x5, &(0x7f0000001280)=[@cred={{0x1c, 0x1, 0x2, {r17, 0x0, r18}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r19, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r20, r21, r14, 0xffffffffffffffff, r22]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r23]}}], 0x80, 0x4}, 0x8) [ 821.566705][T20720] usb 5-1: USB disconnect, device number 60 [ 821.662543][T24190] usb 6-1: device descriptor read/64, error 18 10:12:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r3}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c0010090c18a0010003b0e0000000000a858f29691298b", @ANYRES32=0x0, @ANYBLOB="00000000009bc56f9000f9ca3eaf5727340a00", @ANYRES32=0x6, @ANYBLOB="980112000c000100697036746e6c000088010200080009002900000014000200ff02000000000000000000000000000108000800000000000800080000000000140003000000000000000000000000000000000114000200ff010000000000000000000000000001080006000000000014000300ff010000000000000000000000000001b5fd0200", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="2ad73fa3bc5728a1c7f8a016e3a2d649d0eb6cd9d80661aec9d09584a37ffcf8f30a52c7d9b537a403afb786d8306a80dcc85f55c9e8c7222a39499009535db23c00bb958d931aa3910ebd998988423a2e3032bffb998c7296668bb93fa29db59b06043b350e44de621fe9b77daaeda4225739372144919cbc481d2b71827b61469d", @ANYBLOB="080014000000000008001200000000000800040000000000080014000000000008000f000000000008001200000000000800120000000000080014000000000008001100000000000800040000000000080004000000000046fd0f000000000008001400000000000800090029000000"], 0x9}}, 0x284c1) [ 821.942179][T24190] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 821.972414][T11866] gspca_ov534_9: sccb_read failed 1 10:12:33 executing program 4 (fault-call:3 fault-nth:12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 822.223001][T24190] usb 6-1: device descriptor read/64, error 18 10:12:33 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500001c000000000073907800000000e0000001000090780000000095210673ab27c7f37f8302d1edb3305bb8b6536c3b1ac15bea1d0ad50739263ba631ab7a908f79fc2e379ed97ac310f075880d0c9c0ca4ef3aedcb035f8a5e988884802266391ed5aa81ac0ed4def4d7579ad7e6ca4626cb42ac9d0e1a10beb5feea0aacd0da36bc698cd936d8102f2ca16e99cf3e7276c377d33906860548551372a11e5b3988eaa6c68dda2e3b5c8f49b14bbe08948ced2370de8511"], 0x0) [ 822.492183][ T12] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 822.622715][T24190] usb 6-1: device descriptor read/64, error 18 [ 822.634583][T11866] gspca_ov534_9: reg_r err -71 [ 822.732355][ T12] usb 5-1: Using ep0 maxpacket: 8 [ 822.743326][T24190] usb usb6-port1: attempt power cycle [ 822.854461][ T12] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 822.862885][ T12] usb 5-1: config 0 has no interface number 0 [ 822.870168][ T12] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 822.880321][ T12] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 822.882036][T11866] gspca_ov534_9: Unknown sensor 0000 [ 822.882281][T11866] ov534_9: probe of 2-1:0.212 failed with error -22 [ 822.891452][ T12] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 822.925956][T11866] usb 2-1: USB disconnect, device number 73 [ 823.042493][ T12] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 823.052235][ T12] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 823.060644][ T12] usb 5-1: Product: syz [ 823.094311][ T12] usb 5-1: config 0 descriptor?? [ 823.337512][T28541] FAULT_INJECTION: forcing a failure. [ 823.337512][T28541] name failslab, interval 1, probability 0, space 0, times 0 [ 823.351511][T28541] CPU: 0 PID: 28541 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 823.360628][T28541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.361027][T28541] Call Trace: [ 823.361027][T28541] dump_stack+0x191/0x1f0 [ 823.361027][T28541] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 823.361027][T28541] should_fail+0xa3f/0xa50 [ 823.361027][T28541] __should_failslab+0x264/0x280 [ 823.361027][T28541] should_failslab+0x29/0x70 [ 823.361027][T28541] kmem_cache_alloc_trace+0xf7/0xd20 [ 823.361027][T28541] ? open_substream+0x137/0xa90 [ 823.361027][T28541] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 823.361027][T28541] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 823.361027][T28541] open_substream+0x137/0xa90 [ 823.361027][T28541] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 823.361027][T28541] rawmidi_open_priv+0x183/0xfc0 [ 823.361027][T28541] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 823.361027][T28541] snd_rawmidi_kernel_open+0x34b/0x4e0 [ 823.361027][T28541] midisynth_subscribe+0x135/0x4b0 [ 823.361027][T28541] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 823.361027][T28541] ? snd_seq_midisynth_remove+0x640/0x640 [ 823.361027][T28541] check_and_subscribe_port+0x9bb/0x13c0 [ 823.361027][T28541] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 823.361027][T28541] snd_seq_port_connect+0x3c0/0x810 [ 823.361027][T28541] snd_seq_ioctl_subscribe_port+0x774/0xb60 [ 823.361027][T28541] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 823.361027][T28541] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 823.361027][T28541] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 823.361027][T28541] snd_seq_kernel_client_ctl+0x562/0x5e0 [ 823.361027][T28541] snd_seq_oss_midi_open+0xa61/0xe80 [ 823.361027][T28541] snd_seq_oss_synth_reset+0x6fb/0xd70 [ 823.361027][T28541] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 823.361027][T28541] snd_seq_oss_reset+0xac/0x380 [ 823.361027][T28541] snd_seq_oss_release+0xd3/0x410 [ 823.361027][T28541] ? kmsan_internal_set_origin+0x6a/0xb0 [ 823.361027][T28541] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 823.361027][T28541] odev_release+0x85/0xe0 [ 823.361027][T28541] ? odev_open+0x130/0x130 [ 823.361027][T28541] __fput+0x4c9/0xba0 [ 823.361027][T28541] ____fput+0x37/0x40 [ 823.361027][T28541] ? fput_many+0x2a0/0x2a0 [ 823.361027][T28541] task_work_run+0x22e/0x2a0 [ 823.361027][T28541] prepare_exit_to_usermode+0x39d/0x4d0 [ 823.361027][T28541] syscall_return_slowpath+0x90/0x610 [ 823.361027][T28541] do_syscall_64+0xdc/0x160 [ 823.361027][T28541] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 823.361027][T28541] RIP: 0033:0x459ef9 [ 823.361027][T28541] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 823.361027][T28541] RSP: 002b:00007f314064cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 823.361027][T28541] RAX: 0000000000000000 RBX: 00007f314064cc90 RCX: 0000000000459ef9 [ 823.361027][T28541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 823.361027][T28541] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 823.361027][T28541] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314064d6d4 [ 823.361027][T28541] R13: 00000000004fa312 R14: 00000000004d29a0 R15: 0000000000000006 [ 823.782724][T24190] usb 6-1: new high-speed USB device number 70 using dummy_hcd 10:12:34 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x53, 0x0, 0xbb, 0x8, 0x6f8, 0x3003, 0x256f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0xe, 0x9a, 0x39}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x3e, &(0x7f0000000240)={0x0, 0x0, 0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:12:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) rt_sigaction(0x0, &(0x7f0000000180)={0x0, {}, 0x88000000, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x181903, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stack\x00') ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000100)) semget$private(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000004c0)={0x0, 0x7f, 0x0, 0x0, 0x6, 0xffff, 0x6}, 0x20) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10000, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000200)=0x43b6) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) unshare(0x40000000) [ 823.862725][T11866] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 823.900685][T20720] usb 5-1: USB disconnect, device number 61 [ 824.016081][T28553] IPVS: ftp: loaded support on port[0] = 21 [ 824.342903][T11866] usb 2-1: device descriptor read/64, error -71 10:12:35 executing program 4 (fault-call:3 fault-nth:13): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:12:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents(r0, &(0x7f0000000000)=""/47, 0x2f) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents(r0, &(0x7f0000000200)=""/46, 0x2e) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x810d80, 0x0) r2 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffcf2, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f00000003c0)={"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"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r7, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0xaa0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x5, 0x2}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x10, 0xa92, 0x9}, &(0x7f0000000100)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x8}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r11}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r6, 0x0, 0x22, &(0x7f0000000300)='ppp0{)wlan1-proccpusetlomd5sumGPL\x00', r11}, 0x30) recvfrom$unix(r4, &(0x7f00000007c0)=""/116, 0x74, 0x40, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r5, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00', r11}, 0x30) setpgid(r2, r12) 10:12:35 executing program 5: r0 = dup(0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1d16664d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='\x00\x00\x00\x00\x01\x00\x00\x00lf/net/pfk\xe5y\x00', 0x189200, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x7a, 0x0, 0x0, 0x0, 0x6]}, 0x7000000}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x0, 0x8031, r0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000002840)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000002880)={r3, 0x3}) recvfrom$unix(0xffffffffffffffff, &(0x7f00000001c0)=""/132, 0x84, 0x141, 0x0, 0x33a) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$int_out(r5, 0xa000002272, &(0x7f0000fd3ffc)) dup(0xffffffffffffffff) write$evdev(0xffffffffffffffff, &(0x7f0000000240), 0x0) r6 = msgget$private(0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) r10 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x400, 0x400000) ioctl$PPPIOCGL2TPSTATS(r10, 0x80487436, &(0x7f0000000340)="20c022c440ea1375302582d68351e4084f705046e1c18ce404e2a89601d2d803e9bd18d75eb1a31790480e620736a0510d308e705af7fba42b73431dc375b6a76e8bd9416261a7f270420b71cb65b2fe558efa6f354bd2f9648231878be1b39da0726d48e97bb66077027baf8980a58b90cff97890e3be90f03adb5ad1d98e6a03648260ca66dadcb8ddafa2d266ab20dc6cd852c5aa82bae7f6607634018b97a80f905010ef3c7998540aeaeb181273fdc005154bf200ee6b7df8323812e19c4f9f9b5fe0053ee96ce91fd6115ad20ae7b088d0d5c614361a9a98c4737c64635e8523c423f317789756831523761662c82374a9cdf74cda47") ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_LOG_STATUS(r9, 0x5646, 0x0) msgget(0x3, 0xec1e81062a86ce47) r11 = msgget$private(0x0, 0x0) msgsnd(r11, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000ac0)=ANY=[]], 0x1, 0x0) msgsnd(r11, &(0x7f0000000a80)=ANY=[@ANYBLOB="030000000000000005bac549d56282781255e31850eddc1650e6cdbdc6d4ca871677243f52acf43be1bad6e12d2192213cc1fbd23efa4e2e16314b48556cd586"], 0x1, 0x800) msgrcv(r11, &(0x7f0000000680)={0x0, ""/113}, 0x79, 0x3, 0x1000) msgrcv(r11, &(0x7f00000005c0)={0x0, ""/149}, 0x9d, 0x0, 0x0) msgget$private(0x0, 0xd) r12 = msgget$private(0x0, 0x0) msgsnd(r12, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000ac0)=ANY=[]], 0x1, 0x0) msgsnd(r12, &(0x7f0000000a80)=ANY=[@ANYBLOB="030000000000000005bac549d56282781255e31850eddc1650e6cdbdc6d4ca871677243f52acf43be1bad6e12d2192213cc1fbd23efa4e2e16314b48556cd586"], 0x1, 0x800) msgrcv(r12, &(0x7f0000000680)={0x0, ""/113}, 0x79, 0x3, 0x1000) msgrcv(r12, &(0x7f00000005c0)={0x0, ""/149}, 0x9d, 0x0, 0x0) msgctl$IPC_SET(r6, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03004c58f7441641"], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 824.722196][T11866] usb 2-1: Using ep0 maxpacket: 8 10:12:35 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x8d, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000004c0)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @local}, 0x100, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)='veth0_to_bond\x00', 0x10000, 0x6, 0x4}) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) r3 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, 0x0, 0x95, &(0x7f00000001c0)={&(0x7f0000000100)={'xcbc(anubis-generic)\x00'}, 0x0, 0x70}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r6) r7 = getpgrp(r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffcf2, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = dup(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r12, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0xaa0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x5, 0x2}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x10, 0xa92, 0x9}, &(0x7f0000000100)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x8}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r13}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r11, 0x0, 0x22, &(0x7f0000000300)='ppp0{)wlan1-proccpusetlomd5sumGPL\x00', r13}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r7, r10, 0x0, 0x10, &(0x7f0000000540)='cgroupprocwlan1\x00', r13}, 0x30) keyctl$setperm(0x5, r3, 0x20004200) r14 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r16 = syz_open_procfs(0x0, 0x0) mkdirat$cgroup(r16, &(0x7f0000000040)='0-\x00', 0x1ff) sendto$inet(r1, &(0x7f0000000380)="b4bbf8acf9b11c70140a6c2e98fa2dfdf476c40ed6ad4f9112cca9e080915a6c509656a1dfe57face2e8836d5a23cb5c358e18e28fdb4a60fc31cb3653f463d614d69d7834f2df9c4452cb8f7ea5032952b1c72a096594762966b9058f8aac88bae722f324db9c62e428b74ca1dd4ccc1980cee3fccc0ba1d51ce8625455a1a90683832bf1369ba22f71e116297176bd9fee56bd98fdc82edb42672a286ccd9ceb2c1d1c14ef1553b0f34cb965c501e9f87680c1e99db7d4d350aa86", 0xbc, 0x40000, &(0x7f0000000440)={0x2, 0x4e20, @broadcast}, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x6, 0xfb, 0x20, 0xe, 0x0, 0x0, 0x2000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x6}, 0x100, 0x1, 0x3, 0x9, 0xfffffffffffffe00, 0xfffff001, 0x7}, r15, 0x9, r16, 0x0) mkdirat$cgroup(r14, &(0x7f0000000040)='0-\x00', 0x1ff) r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/prev\x00') write$RDMA_USER_CM_CMD_DESTROY_ID(r17, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) ioctl$PIO_CMAP(r14, 0x4b71, &(0x7f0000000000)={0x8, 0x10000, 0x1, 0x885, 0xfdc, 0x3f}) [ 824.851367][T20720] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 824.859494][T11866] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 824.868775][T11866] usb 2-1: config 0 has no interface number 0 [ 824.875404][T11866] usb 2-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f [ 824.885024][T11866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.929370][T28668] IPVS: ftp: loaded support on port[0] = 21 [ 824.953334][T11866] usb 2-1: config 0 descriptor?? [ 825.006104][T11866] gspca_main: ov534_9-2.14.0 probing 06f8:3003 10:12:36 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9) syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) listen(r2, 0x200000000002) pipe(&(0x7f0000000440)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000003c0)={[{0x5, 0x6, 0x1f, 0x9, 0x1f, 0x7f, 0x7f, 0x81, 0x8, 0x4, 0x6, 0x0, 0x5}, {0x9, 0x2, 0x5, 0x8, 0x62, 0xb, 0x2, 0x1, 0x41, 0x6, 0x40, 0x20, 0x10000}, {0x992, 0x7, 0xf8, 0x5, 0x1, 0x1, 0x7c, 0x4, 0x1, 0x13, 0xff, 0x0, 0x8000000000000}], 0x1}) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$vhci(r7, &(0x7f0000000580)=@HCI_EVENT_PKT={0x4, "2c0390292543eb3d9187246befc26f094e52b8a311064b458f317bdc309fd3c3603c61ca413b5d6da8745f481bb70556b64511fdb81e394a6279a85c58e08e3151269ca135393cfb24d23a04ae41566af450fe47cbc04da15992f1b83f9f829993a42e809a553864b55d0b5270800ee0ca90d2271170f0afa5b3f5a9dc7035fc137895fbc17ca3bd109bac975f427c04f1b23e7d9d5fb47d2da7c7476919ed22c63caf971d01245e2576b1dbb1d5a4d6074242d6df36415bc42207fd585943bd5db8a62c93d82581ece61123d0acbee3b62fbaa2bb83518a98207e8192e721094f7672fa0820e0"}, 0xe8) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000040)=[{&(0x7f0000000500), 0x4000}], 0x3ab, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e24, @multicast1}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:12:36 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001380)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYPTR=&(0x7f0000001400)=ANY=[]]) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x0, 0x8f, {0x8f, 0x8, "2fbd5d8a13fa88d02c8332eb4999a2188520ddbd1d08ef09a9eecad6f7776590b462905c1696d4937aaf3095aad5c5eca7095726eeb5ce5a44e7416948e35e7da2bbfcee630a1e99e5ffcd5ce5592915543109da38c5ab38479c282e20baa1703447da354b8c6ba289dda750fc5a27a07f27f2e259b52c7fcc12a6d292aae3e66c31896d310446c5c9cb262c1e"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x4, 0xb7, "ac67b391ee2e2506d4549ca5cfea5f1a866ddcbe63fc979d993f2f42838dcc09e6281bcc1d2040e69c9287c092736763b9b5b44315ac52d2248e5c546f094211e0a6514f8460b6167592a8f613939db1922948dd49ef112009d1918d007287cfed347b9d1b362103ef0b5528349a3ed448e81e6cfa7828a17cf4e54a08b367653e9cef485bc3ff2f737b25a7b4c192c8fbc3b7efb86ea1ce8cef7e562ea4682335cba29070beb26ed3e7151cf0ae381373bff69213fd1d"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x200, 0x3, 0x0, 0x8, 0x5, 0x9, 0x9, 0x1, 0xb095, 0x0, 0x2}}, &(0x7f0000000340)={0x20, 0x85, 0x4}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x100}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) 10:12:36 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x9, @remote, 0x7fffffff}, {0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast2}, 0xfffffffc}, 0x7f, [0x5, 0x8, 0x0, 0xfffffff9, 0x3000000, 0x3a90, 0xb2da, 0x100]}, 0x5c) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) r6 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, r9, 0xdd42ddecb798d42f, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x5c, r9, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc84}]}, @TIPC_NLA_BEARER={0x2c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'teql0\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6004040}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r12, 0x10e, 0x8, &(0x7f00000003c0)=0x6, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$TCGETS2(r6, 0x802c542a, &(0x7f0000000200)) [ 825.192275][T20720] usb 5-1: Using ep0 maxpacket: 8 [ 825.312670][T20720] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 825.321152][T20720] usb 5-1: config 0 has no interface number 0 [ 825.327802][T20720] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 825.337681][T20720] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 825.349529][T20720] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 825.448315][T28669] IPVS: ftp: loaded support on port[0] = 21 [ 825.465557][T20720] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 825.473254][ T12] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 825.475283][T20720] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 825.490710][T20720] usb 5-1: Product: syz [ 825.505220][T20720] usb 5-1: config 0 descriptor?? 10:12:36 executing program 2: r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) sendto(r0, &(0x7f0000000000)="7f65b5dcbfb041dfed4b130ea577dc3cc815eb49321cf8aee603886c5f8744a7cc1a8879177e20cfdda3640600fd1a766d01abcce6366598c23220239611f8cd89280477ed41615d9ac39977de7a725e12a880c8d7c310e89da78780a1f8a571dedeb21c6b5d4aa75c971b4cd82f51eb2e57856ddd0916b8751bd71ec6c41de48682168d13692d", 0x87, 0x20048080, &(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10489500}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000840)=""/4096) 10:12:36 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10100) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000300)) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000180)={0x100, 0x6, 0x3, 0x29, 0x0, "86d2cd7b01cf94b915315a9003f9318bff3be5", 0xd33dbec, 0x20}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f00000000c0)="1c00000016009b8a14e5f407000904240a000003ff00000000000000", 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="9db73125b9d9eef94f10adbc237613c9bdc6e58833e949f6b5f3e8fb89c13eae1a97ad2d48bbbcb27a527237c76df3a096e8781ce928c6f5ff35ac26e42c2699c9369b91520a34c27f42ed4666951832d1e55b5449cfde42130e052bc061e1dc647f7328f3d4334b22855254bd6be160b8382edd19bff504094a07d9c378bcfdd256c9eb9b27cd6a94c9148a7a6acb91f8ca516d6b593ba9c708b1d1424f2e77a8496e1133d7bdb7958eb5169c5f2333c6b7519aa80e3777cdd3af071b1e894c9816d9414998989b3682ccdd1e977e7f0791202145d36754fdb8f5030413bfe5cc76df2c3e1c4ed9f6dc25f4c78642b580"], 0x48}}, 0x0) read(r1, &(0x7f0000000100)=""/107, 0x6b) 10:12:36 executing program 0: r0 = syz_usb_connect(0x0, 0x26c, &(0x7f0000001c00)={{0x12, 0x1, 0x0, 0xb9, 0x80, 0x46, 0x8, 0x18b4, 0x1689, 0x242, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xd8, 0x3a, 0x80}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0xac, &(0x7f0000000400)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80002, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="8b15ea0100000b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 825.763102][T28789] device veth2 entered promiscuous mode [ 825.778549][T28658] FAULT_INJECTION: forcing a failure. [ 825.778549][T28658] name failslab, interval 1, probability 0, space 0, times 0 [ 825.791901][T28658] CPU: 1 PID: 28658 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 825.801232][T28658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 825.801232][T28658] Call Trace: [ 825.801232][T28658] dump_stack+0x191/0x1f0 [ 825.801232][T28658] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 825.801232][T28658] should_fail+0xa3f/0xa50 [ 825.801232][T28658] __should_failslab+0x264/0x280 [ 825.801232][T28658] should_failslab+0x29/0x70 [ 825.801232][T28658] __kmalloc_node+0x1b0/0x1380 [ 825.801232][T28658] ? kvmalloc_node+0x19f/0x3d0 [ 825.801232][T28658] kvmalloc_node+0x19f/0x3d0 [ 825.801232][T28658] open_substream+0x3ee/0xa90 [ 825.801232][T28658] ? kmsan_report+0x1d0/0x220 [ 825.801232][T28658] rawmidi_open_priv+0x183/0xfc0 [ 825.801232][T28658] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 825.801232][T28658] snd_rawmidi_kernel_open+0x34b/0x4e0 [ 825.801232][T28658] midisynth_subscribe+0x135/0x4b0 [ 825.801232][T28658] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 825.801232][T28658] ? snd_seq_midisynth_remove+0x640/0x640 [ 825.801232][T28658] check_and_subscribe_port+0x9bb/0x13c0 [ 825.801232][T28658] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 825.801232][T28658] snd_seq_port_connect+0x3c0/0x810 [ 825.801232][T28658] snd_seq_ioctl_subscribe_port+0x774/0xb60 [ 825.801232][T28658] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 825.801232][T28658] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 825.801232][T28658] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 825.801232][T28658] snd_seq_kernel_client_ctl+0x562/0x5e0 [ 825.801232][T28658] snd_seq_oss_midi_open+0xa61/0xe80 [ 825.801232][T28658] snd_seq_oss_synth_reset+0x6fb/0xd70 [ 825.801232][T28658] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 825.801232][T28658] snd_seq_oss_reset+0xac/0x380 [ 825.801232][T28658] snd_seq_oss_release+0xd3/0x410 [ 825.801232][T28658] ? kmsan_internal_set_origin+0x6a/0xb0 [ 825.801232][T28658] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 825.801232][T28658] odev_release+0x85/0xe0 [ 825.801232][T28658] ? odev_open+0x130/0x130 [ 825.801232][T28658] __fput+0x4c9/0xba0 [ 825.801232][T28658] ____fput+0x37/0x40 [ 825.801232][T28658] ? fput_many+0x2a0/0x2a0 [ 825.801232][T28658] task_work_run+0x22e/0x2a0 [ 825.801232][T28658] prepare_exit_to_usermode+0x39d/0x4d0 [ 825.801232][T28658] syscall_return_slowpath+0x90/0x610 [ 825.801232][T28658] do_syscall_64+0xdc/0x160 [ 825.801232][T28658] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 825.801232][T28658] RIP: 0033:0x459ef9 [ 825.801232][T28658] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 825.801232][T28658] RSP: 002b:00007f314064cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 825.801232][T28658] RAX: 0000000000000000 RBX: 00007f314064cc90 RCX: 0000000000459ef9 [ 825.801232][T28658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 825.801232][T28658] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 825.801232][T28658] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314064d6d4 [ 825.801232][T28658] R13: 00000000004fa312 R14: 00000000004d29a0 R15: 0000000000000006 [ 826.162369][ T12] usb 6-1: unable to get BOS descriptor or descriptor too short [ 826.362415][ T12] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 826.450701][T20720] usb 5-1: USB disconnect, device number 62 [ 826.522580][T11896] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 826.533394][ T12] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 826.543029][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.551195][ T12] usb 6-1: Product: syz [ 826.555838][ T12] usb 6-1: Manufacturer: syz [ 826.560559][ T12] usb 6-1: SerialNumber: syz [ 826.772168][T11896] usb 1-1: Using ep0 maxpacket: 8 [ 826.892602][T11896] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 826.903150][T11896] usb 1-1: config 0 has no interface number 0 [ 826.910008][T11896] usb 1-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 2.42 [ 826.919740][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.930740][T11896] usb 1-1: config 0 descriptor?? [ 827.063020][ T12] cdc_ncm 6-1:1.0: bind() failure [ 827.092627][ T12] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 827.122742][ T12] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 827.142608][ T12] usbtest: probe of 6-1:1.1 failed with error -71 [ 827.156260][ T12] usb 6-1: USB disconnect, device number 71 [ 827.186398][T11896] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 827.213374][T11896] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 827.224438][T11896] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 827.232946][T11896] usb 1-1: media controller created [ 827.266854][T11896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 827.402668][T11896] usb 1-1: DVB: registering adapter 0 frontend 0 (E3C EC100 DVB-T)... [ 827.411223][T11896] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 827.422947][T11896] MXL5005S: Attached at address 0xc6 [ 827.438363][T11896] usb 1-1: dvb_usb_v2: 'E3C EC168 reference design' successfully initialized and connected [ 827.453691][T11866] gspca_ov534_9: sccb_read failed 1 [ 827.611766][T24190] usb 1-1: USB disconnect, device number 64 [ 827.690906][T24190] dvb_usb_v2: 'E3C EC168 reference design:1-1' successfully deinitialized and disconnected [ 827.802281][T20720] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 828.082474][T11866] gspca_ov534_9: reg_r err -71 [ 828.202428][T20720] usb 6-1: unable to get BOS descriptor or descriptor too short [ 828.342383][T11866] gspca_ov534_9: Unknown sensor 0000 [ 828.342603][T11866] ov534_9: probe of 2-1:0.212 failed with error -22 [ 828.367989][T11866] usb 2-1: USB disconnect, device number 74 [ 828.432440][T20720] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 828.452520][T24190] usb 1-1: new high-speed USB device number 65 using dummy_hcd 10:12:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b4", 0xfffffe46, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/240, 0xf0}, {&(0x7f0000000180)=""/35, 0x23}], 0x2, &(0x7f0000000200)=""/114, 0x72}, 0xfffffffe}, {{&(0x7f0000000280)=@ipx, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)=""/63, 0x3f}, {&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/14, 0xe}], 0x3, &(0x7f00000004c0)=""/127, 0x7f}, 0x6}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/170, 0xaa}], 0x1, &(0x7f00000006c0)=""/227, 0xe3}, 0x3f}, {{&(0x7f00000007c0)=@l2, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/151, 0x97}, {&(0x7f0000000900)=""/151, 0x97}, {&(0x7f00000009c0)=""/83, 0x53}, {&(0x7f0000000a40)=""/14, 0xe}], 0x4, &(0x7f0000000ac0)=""/55, 0x37}, 0x7}], 0x4, 0x200, &(0x7f0000000c00)={0x0, 0x989680}) 10:12:39 executing program 2: r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/392], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000300)={0x1fa, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x3c2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001d80)={0x14, 0x0, &(0x7f0000001cc0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="208301000000a6"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x82, 0x1, "87"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x1ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x84, 0x363, "02"}, 0x0}) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x34, 0x28c2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f00000003c0)='lazytime\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000140)={0x3, {0x0, 0x1c9c380}, 0x400, 0x4}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xffffffff, 0x7, 0x51fc2e497eca9da3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000200)=0x1100158, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$VT_OPENQRY(r8, 0x5600, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getpgrp(0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r12, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r12, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r13) r14 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r14}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x0, 0x0, 0x0, "70d96369ca9fc1676a001cb763e05239041f7f1c9fbd4f60c85e47944010a02b815be52817b79d062690352377b831dc038d6e4ce83b96f28e0e4054c47bdcf469e0a350c8471ef6b9573e26e02dd7c9"}, 0xd8) 10:12:39 executing program 4 (fault-call:3 fault-nth:14): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:12:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xfffffe14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a80000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74dbf8"], 0x444}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@loopback, @loopback}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@setlink={0x5c, 0x13, 0x1, 0x703d27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x28010, 0x400a0}, [@IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_IF_NETNSID={0x8, 0x2e, 0x3}, @IFLA_LINK={0x8, 0x5, 0x9}, @IFLA_EVENT={0x8, 0x2c, 0x200}, @IFLA_PHYS_SWITCH_ID={0x14, 0x24, "de99fc3d6711214b4fd7bec466"}, @IFLA_MTU={0x8, 0xe, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0xbeae2deafa4f0a99}, 0x8004) 10:12:39 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3e7c2068}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 828.653706][T20720] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.662998][T20720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.679792][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 828.709075][T24190] usb 1-1: Using ep0 maxpacket: 8 [ 828.717409][T20720] usb 6-1: can't set config #1, error -71 [ 828.748554][T20720] usb 6-1: USB disconnect, device number 72 10:12:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000680)='/dev/snd/timer\x00', 0x0, 0x0) unshare(0x8000400) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0145401, 0x0) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-', 0x100}, 0x28, 0x3) [ 828.862659][T24190] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 828.870957][T24190] usb 1-1: config 0 has no interface number 0 [ 828.877339][T24190] usb 1-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 2.42 [ 828.886582][T24190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:12:40 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="859500000000000000003800000000800000000000000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42, 0xff5fff5f, 0x48, 0x48], 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 828.942619][T22521] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 828.952912][T24190] usb 1-1: config 0 descriptor?? [ 828.972602][T11866] usb 3-1: new high-speed USB device number 58 using dummy_hcd 10:12:40 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="859500000000000000003800000000800000000000000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42, 0xff5fff5f, 0x48, 0x48], 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 829.182327][T22521] usb 5-1: Using ep0 maxpacket: 8 [ 829.213358][T24190] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 829.246011][T24190] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer 10:12:40 executing program 5: syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x100000400000003a) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r6}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000002c0)={r6, @in6={{0xa, 0x4e21, 0xd31, @rand_addr="8c9fd6d7e2ff210a691b89844010bde1"}}, [0x80000001, 0x7fff, 0x6bf, 0x0, 0x23c, 0x2, 0x81, 0x4, 0x40, 0x3906219e, 0x7ff, 0x100000001, 0x3, 0x200, 0x3]}, &(0x7f0000000040)=0x100) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r7, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x10028, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @rand_addr=0x6}}, 0x5) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000280)=ANY=[@ANYBLOB="010000800000000080"]) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b) ftruncate(r8, 0x80003) sendfile(r7, r8, &(0x7f00000000c0), 0x8000fffffffe) [ 829.258387][T24190] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 829.267249][T24190] usb 1-1: media controller created 10:12:40 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="859500000000000000003800000000800000000000000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42, 0xff5fff5f, 0x48, 0x48], 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 829.305013][T22521] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 829.313513][T22521] usb 5-1: config 0 has no interface number 0 [ 829.319730][T22521] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 829.330916][T22521] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 829.342346][T22521] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 10:12:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) poll(&(0x7f0000000240)=[{r1}], 0x1, 0xfff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r7) r8 = getuid() ioprio_get$uid(0x3, r8) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000000)={0xf33c, 0x5, r7, 0x0, r8, 0x0, 0xff, 0x5}) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) [ 829.362795][T11866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.374903][T11866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 10:12:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x19e1359ad392616, 0x0) [ 829.483298][T24190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 829.532912][T22521] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 829.542664][T22521] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 829.550894][T22521] usb 5-1: Product: syz 10:12:40 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="859500000000000000003800000000800000000000000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42, 0xff5fff5f, 0x48, 0x48], 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 829.582592][T11866] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 829.591760][T11866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.601947][T11866] usb 3-1: Product: syz [ 829.606564][T11866] usb 3-1: Manufacturer: syz [ 829.611356][T11866] usb 3-1: SerialNumber: syz [ 829.632317][T22521] usb 5-1: config 0 descriptor?? [ 829.722896][T24190] i2c i2c-0: ec100: i2c rd failed=-71 reg=33 [ 829.880971][T28911] FAULT_INJECTION: forcing a failure. [ 829.880971][T28911] name failslab, interval 1, probability 0, space 0, times 0 [ 829.894114][T28911] CPU: 0 PID: 28911 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 829.903771][T28911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.903771][T28911] Call Trace: [ 829.903771][T28911] dump_stack+0x191/0x1f0 [ 829.903771][T28911] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 829.903771][T28911] should_fail+0xa3f/0xa50 [ 829.903771][T28911] __should_failslab+0x264/0x280 [ 829.903771][T28911] should_failslab+0x29/0x70 [ 829.903771][T28911] kmem_cache_alloc_trace+0xf7/0xd20 [ 829.903771][T28911] ? snd_seq_port_connect+0x105/0x810 [ 829.903771][T28911] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 829.903771][T28911] snd_seq_port_connect+0x105/0x810 [ 829.903771][T28911] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 829.903771][T28911] snd_seq_ioctl_subscribe_port+0x774/0xb60 [ 829.903771][T28911] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 829.903771][T28911] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 829.903771][T28911] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 829.903771][T28911] snd_seq_kernel_client_ctl+0x562/0x5e0 [ 829.903771][T28911] snd_seq_oss_midi_open+0xa61/0xe80 [ 829.903771][T28911] snd_seq_oss_synth_reset+0x6fb/0xd70 [ 829.903771][T28911] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 829.903771][T28911] snd_seq_oss_reset+0xac/0x380 [ 829.903771][T28911] snd_seq_oss_release+0xd3/0x410 [ 829.903771][T28911] ? kmsan_internal_set_origin+0x6a/0xb0 [ 829.903771][T28911] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 829.903771][T28911] odev_release+0x85/0xe0 [ 829.903771][T28911] ? odev_open+0x130/0x130 [ 829.903771][T28911] __fput+0x4c9/0xba0 [ 829.903771][T28911] ____fput+0x37/0x40 [ 829.903771][T28911] ? fput_many+0x2a0/0x2a0 [ 829.903771][T28911] task_work_run+0x22e/0x2a0 [ 829.903771][T28911] prepare_exit_to_usermode+0x39d/0x4d0 [ 829.903771][T28911] syscall_return_slowpath+0x90/0x610 [ 829.903771][T28911] do_syscall_64+0xdc/0x160 [ 829.903771][T28911] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 829.903771][T28911] RIP: 0033:0x459ef9 [ 829.903771][T28911] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 829.903771][T28911] RSP: 002b:00007f314064cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 829.903771][T28911] RAX: 0000000000000000 RBX: 00007f314064cc90 RCX: 0000000000459ef9 [ 829.903771][T28911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 829.903771][T28911] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 829.903771][T28911] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f314064d6d4 [ 829.903771][T28911] R13: 00000000004fa312 R14: 00000000004d29a0 R15: 0000000000000006 [ 830.204613][T24190] usb 1-1: USB disconnect, device number 65 [ 830.399235][T11866] usb 3-1: 0:2 : does not exist [ 830.548167][T24190] usb 5-1: USB disconnect, device number 63 [ 832.302463][T11866] ===================================================== [ 832.309445][T11866] BUG: KMSAN: uninit-value in get_min_max_with_quirks+0xd6f/0x2ea0 [ 832.312017][T11866] CPU: 1 PID: 11866 Comm: kworker/1:5 Not tainted 5.4.0-rc3+ #0 [ 832.312017][T11866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.312017][T11866] Workqueue: usb_hub_wq hub_event [ 832.312017][T11866] Call Trace: [ 832.312017][T11866] dump_stack+0x191/0x1f0 [ 832.312017][T11866] kmsan_report+0x128/0x220 [ 832.312017][T11866] __msan_warning+0x73/0xe0 [ 832.312017][T11866] get_min_max_with_quirks+0xd6f/0x2ea0 [ 832.312017][T11866] ? kmsan_memcpy_memmove_metadata+0x109/0x2e0 [ 832.312017][T11866] __build_feature_ctl+0x12b9/0x29e0 [ 832.312017][T11866] ? parse_term_proc_unit+0x6ea/0x7e0 [ 832.312017][T11866] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 832.312017][T11866] parse_audio_unit+0x2308/0x7490 [ 832.312017][T11866] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 832.312017][T11866] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 832.312017][T11866] snd_usb_create_mixer+0x1d7c/0x4070 [ 832.312017][T11866] usb_audio_probe+0x286b/0x3eb0 [ 832.312017][T11866] ? snd_usb_autosuspend+0x110/0x110 [ 832.312017][T11866] usb_probe_interface+0xd19/0x1310 [ 832.312017][T11866] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 832.312017][T11866] ? usb_register_driver+0x860/0x860 [ 832.312017][T11866] really_probe+0xd91/0x1f90 [ 832.312017][T11866] driver_probe_device+0x1ba/0x510 [ 832.312017][T11866] __device_attach_driver+0x5b8/0x790 [ 832.312017][T11866] bus_for_each_drv+0x28e/0x3b0 [ 832.312017][T11866] ? deferred_probe_work_func+0x400/0x400 [ 832.312017][T11866] __device_attach+0x489/0x750 [ 832.312017][T11866] device_initial_probe+0x4a/0x60 [ 832.312017][T11866] bus_probe_device+0x131/0x390 [ 832.312017][T11866] device_add+0x25b5/0x2df0 [ 832.312017][T11866] usb_set_configuration+0x309f/0x3710 [ 832.312017][T11866] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 832.312017][T11866] generic_probe+0xe7/0x280 [ 832.312017][T11866] ? usb_choose_configuration+0xae0/0xae0 [ 832.312017][T11866] usb_probe_device+0x146/0x200 [ 832.312017][T11866] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 832.312017][T11866] ? usb_register_device_driver+0x500/0x500 [ 832.312017][T11866] really_probe+0xd91/0x1f90 [ 832.312017][T11866] driver_probe_device+0x1ba/0x510 [ 832.312017][T11866] __device_attach_driver+0x5b8/0x790 [ 832.312017][T11866] bus_for_each_drv+0x28e/0x3b0 [ 832.312017][T11866] ? deferred_probe_work_func+0x400/0x400 [ 832.542001][T11866] __device_attach+0x489/0x750 [ 832.542001][T11866] device_initial_probe+0x4a/0x60 [ 832.554614][T11866] bus_probe_device+0x131/0x390 [ 832.554614][T11866] device_add+0x25b5/0x2df0 [ 832.554614][T11866] usb_new_device+0x23e5/0x2fb0 [ 832.554614][T11866] hub_event+0x581d/0x72f0 [ 832.554614][T11866] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 832.554614][T11866] ? led_work+0x720/0x720 [ 832.554614][T11866] ? led_work+0x720/0x720 [ 832.554614][T11866] process_one_work+0x1572/0x1ef0 [ 832.554614][T11866] worker_thread+0x111b/0x2460 [ 832.554614][T11866] kthread+0x4b5/0x4f0 [ 832.554614][T11866] ? process_one_work+0x1ef0/0x1ef0 [ 832.554614][T11866] ? kthread_blkcg+0xf0/0xf0 [ 832.554614][T11866] ret_from_fork+0x35/0x40 [ 832.554614][T11866] [ 832.554614][T11866] Local variable description: ----saved@get_min_max_with_quirks [ 832.554614][T11866] Variable was created at: [ 832.554614][T11866] get_min_max_with_quirks+0xa8b/0x2ea0 [ 832.554614][T11866] get_min_max_with_quirks+0xa8b/0x2ea0 [ 832.554614][T11866] ===================================================== [ 832.554614][T11866] Disabling lock debugging due to kernel taint [ 832.554614][T11866] Kernel panic - not syncing: panic_on_warn set ... [ 832.554614][T11866] CPU: 1 PID: 11866 Comm: kworker/1:5 Tainted: G B 5.4.0-rc3+ #0 [ 832.554614][T11866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.554614][T11866] Workqueue: usb_hub_wq hub_event [ 832.554614][T11866] Call Trace: [ 832.554614][T11866] dump_stack+0x191/0x1f0 [ 832.554614][T11866] panic+0x3c9/0xc1e [ 832.554614][T11866] kmsan_report+0x215/0x220 [ 832.554614][T11866] __msan_warning+0x73/0xe0 [ 832.554614][T11866] get_min_max_with_quirks+0xd6f/0x2ea0 [ 832.554614][T11866] ? kmsan_memcpy_memmove_metadata+0x109/0x2e0 [ 832.554614][T11866] __build_feature_ctl+0x12b9/0x29e0 [ 832.554614][T11866] ? parse_term_proc_unit+0x6ea/0x7e0 [ 832.554614][T11866] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 832.554614][T11866] parse_audio_unit+0x2308/0x7490 [ 832.554614][T11866] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 832.554614][T11866] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 832.554614][T11866] snd_usb_create_mixer+0x1d7c/0x4070 [ 832.554614][T11866] usb_audio_probe+0x286b/0x3eb0 [ 832.554614][T11866] ? snd_usb_autosuspend+0x110/0x110 [ 832.554614][T11866] usb_probe_interface+0xd19/0x1310 [ 832.554614][T11866] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 832.554614][T11866] ? usb_register_driver+0x860/0x860 [ 832.554614][T11866] really_probe+0xd91/0x1f90 [ 832.554614][T11866] driver_probe_device+0x1ba/0x510 [ 832.554614][T11866] __device_attach_driver+0x5b8/0x790 [ 832.554614][T11866] bus_for_each_drv+0x28e/0x3b0 [ 832.554614][T11866] ? deferred_probe_work_func+0x400/0x400 [ 832.554614][T11866] __device_attach+0x489/0x750 [ 832.554614][T11866] device_initial_probe+0x4a/0x60 [ 832.554614][T11866] bus_probe_device+0x131/0x390 [ 832.554614][T11866] device_add+0x25b5/0x2df0 [ 832.554614][T11866] usb_set_configuration+0x309f/0x3710 [ 832.554614][T11866] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 832.554614][T11866] generic_probe+0xe7/0x280 [ 832.554614][T11866] ? usb_choose_configuration+0xae0/0xae0 [ 832.554614][T11866] usb_probe_device+0x146/0x200 [ 832.554614][T11866] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 832.554614][T11866] ? usb_register_device_driver+0x500/0x500 [ 832.554614][T11866] really_probe+0xd91/0x1f90 [ 832.554614][T11866] driver_probe_device+0x1ba/0x510 [ 832.554614][T11866] __device_attach_driver+0x5b8/0x790 [ 832.554614][T11866] bus_for_each_drv+0x28e/0x3b0 10:12:43 executing program 2: 10:12:43 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r1 = eventfd2(0x0, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="859500000000000000003800000000800000000000000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42, 0xff5fff5f, 0x48, 0x48], 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 10:12:43 executing program 3: pipe2$9p(&(0x7f0000000240), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="150000e683ed9af5eaeb8707b513de52619315ebd7000600000100160000003957323030302e4c9500000000000008344b38cd0f5524f4c7a5125a380acf262261d13d5a346e0840c3c5ee520964f82ee6251afb42bce0dbfa4d728d7e42f91b2e20fe797b65c43a6c08d5a750aeda0f8e2837b6f73a36b81ba54596ac572fec54dfa483fc1151c0f9c9e4a4123116150b789e5fee210eb862ef746dcbc1c82d125635f7e533f5828e7b77ca450986189b928b1498094bc3e4c16ab7b7d1bbaaee758653e2b979ead525f62a1a1fc8dea648d3e938aa3b000000"], 0xd4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x1}}, 0x30) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) writev(0xffffffffffffffff, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) fdatasync(r0) r2 = socket(0x2, 0x1, 0x9) r3 = dup3(r1, r2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) fdatasync(r0) flistxattr(0xffffffffffffffff, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x100, 0x0) ioctl$BLKROSET(r4, 0x800c0910, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000ac0)={r0, 0x0, &(0x7f0000000a40)=""/80}, 0x18) ptrace$peekuser(0x3, 0x0, 0x80000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x28460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r5, r6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10, 0x80000) connect$inet(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) 10:12:43 executing program 0: 10:12:43 executing program 5: 10:12:43 executing program 4 (fault-call:3 fault-nth:15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 832.554614][T11866] ? deferred_probe_work_func+0x400/0x400 [ 832.554614][T11866] __device_attach+0x489/0x750 [ 832.554614][T11866] device_initial_probe+0x4a/0x60 [ 832.554614][T11866] bus_probe_device+0x131/0x390 [ 832.554614][T11866] device_add+0x25b5/0x2df0 [ 832.554614][T11866] usb_new_device+0x23e5/0x2fb0 [ 832.931005][T11866] hub_event+0x581d/0x72f0 [ 832.931926][T11866] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 832.931926][T11866] ? led_work+0x720/0x720 [ 832.931926][T11866] ? led_work+0x720/0x720 [ 832.950082][T11866] process_one_work+0x1572/0x1ef0 [ 832.950082][T11866] worker_thread+0x111b/0x2460 [ 832.958707][T11866] kthread+0x4b5/0x4f0 [ 832.958707][T11866] ? process_one_work+0x1ef0/0x1ef0 [ 832.958707][T11866] ? kthread_blkcg+0xf0/0xf0 [ 832.958707][T11866] ret_from_fork+0x35/0x40 [ 832.958707][T11866] Kernel Offset: disabled [ 832.958707][T11866] Rebooting in 86400 seconds..