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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file0\x00', 0x0, 0x0) symlink(&(0x7f0000002000)='./file0/file0/file0\x00', 0x0) 20:23:05 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004280)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000004340)='/dev/ppp\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file0\x00', 0x0, 0x0) symlink(&(0x7f0000002000)='./file0/file0/file0\x00', &(0x7f0000002080)='./file0/file0\x00') dup2(0xffffffffffffffff, r0) 20:23:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x8, 0x0, &(0x7f0000001680)=[@acquire], 0x0, 0x0, 0x0}) 20:23:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) [ 695.185283][T16437] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:05 executing program 2: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x8, 0x0, &(0x7f0000001680)=[@acquire], 0x0, 0x0, 0x0}) 20:23:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) 20:23:05 executing program 5: r0 = socket(0x15, 0x5, 0x0) recvmsg$can_raw(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40) [ 695.849525][T16453] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x8188aea6, &(0x7f0000000040)) 20:23:06 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000200)=@rc={0x1f, @none, 0x1}, 0x80, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x9000004}, 0x0) 20:23:06 executing program 1: syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) gettid() 20:23:06 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004280)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000004340)='/dev/ppp\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file0\x00', 0x0, 0x0) symlink(&(0x7f0000002000)='./file0/file0/file0\x00', &(0x7f0000002080)='./file0/file0\x00') dup2(r2, 0xffffffffffffffff) 20:23:06 executing program 2: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x8, 0x0, &(0x7f0000001680)=[@acquire], 0x0, 0x0, 0x0}) 20:23:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) 20:23:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000000000)={'ipvlan1\x00', @ifru_mtu}) [ 696.547003][T16484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:07 executing program 2: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x8, 0x0, &(0x7f0000001680)=[@acquire], 0x0, 0x0, 0x0}) 20:23:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) 20:23:07 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x2c}}, 0x0) 20:23:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 697.161893][T16497] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:07 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x400000) listen(r0, 0x1ff) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x9000004}, 0x0) [ 697.308966][T16506] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 20:23:07 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004280)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000004340)='/dev/ppp\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file0\x00', 0x0, 0x0) symlink(&(0x7f0000002000)='./file0/file0/file0\x00', &(0x7f0000002080)='./file0/file0\x00') dup2(r2, 0xffffffffffffffff) [ 697.386891][T16507] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 697.513252][T16510] binder: 16509:16510 ioctl c0306201 0 returned -14 20:23:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) 20:23:07 executing program 1: syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) gettid() 20:23:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0xdd, 0x4, 0x6, 0x10, r0}, 0x40) 20:23:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 697.930074][T16525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:08 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)="c511388051386d813b", 0x0}, 0x20) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a1, &(0x7f0000000000)={'syztnl0\x00', 0x0}) [ 698.024712][T16526] binder: 16524:16526 ioctl c0306201 0 returned -14 20:23:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 20:23:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) 20:23:08 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 698.549297][T16542] binder: 16539:16542 ioctl c0306201 0 returned -14 [ 698.584342][T16541] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:09 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'macvlan1\x00'}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 20:23:09 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004280)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000004340)='/dev/ppp\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file0\x00', 0x0, 0x0) symlink(&(0x7f0000002000)='./file0/file0/file0\x00', &(0x7f0000002080)='./file0/file0\x00') dup2(r2, 0xffffffffffffffff) 20:23:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:23:09 executing program 1: syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) gettid() 20:23:09 executing program 5: bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 20:23:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) [ 699.340124][T16566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:23:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(r0, 0x406, r0) 20:23:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) [ 699.870160][T16579] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:23:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 20:23:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$cgroup_freezer_state(r1, &(0x7f0000000000)='FREEZING\x00', 0x9) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r2, 0x1ff) recvmmsg(r2, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 20:23:10 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000280)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000240)) 20:23:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) 20:23:10 executing program 1: syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) process_vm_readv(0x0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0}) 20:23:10 executing program 5: bpf$PROG_LOAD(0x14, 0x0, 0x0) [ 700.700051][T16606] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:11 executing program 3: r0 = socket(0x22, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x4000011) 20:23:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) 20:23:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 20:23:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0}) 20:23:11 executing program 1: syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) process_vm_readv(0x0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:11 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r4}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x309000, 0x0) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000180)=""/16) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) fgetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.origin\x00', &(0x7f00000000c0)=""/16, 0x10) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 20:23:11 executing program 3: r0 = socket(0x2, 0xa, 0x0) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 701.447899][T16628] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 701.765919][T16643] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 20:23:12 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x66, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0xe7ff}}) 20:23:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0}) 20:23:12 executing program 3: r0 = socket$key(0x2, 0xa, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891c, &(0x7f0000000040)={'batadv_slave_1\x00'}) 20:23:12 executing program 1: syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) process_vm_readv(0x0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() [ 702.106844][T16651] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 20:23:12 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) listen(r0, 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, @rc={0x1f, @any, 0x4}, @generic={0x2f, "0f56e958a466e7602c0f7dbed318"}, 0x8, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='hsr0\x00', 0x3, 0xffffffffffffffc0, 0x7}) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 20:23:12 executing program 2: io_setup(0x20, &(0x7f0000000000)) io_setup(0x2, &(0x7f0000000180)) 20:23:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x9000aea4, &(0x7f0000000040)) 20:23:12 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) [ 702.641131][T16669] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:13 executing program 1: syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:13 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000007e40)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) 20:23:13 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000000), &(0x7f00000000c0)=0x4) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc) listen(r0, 0x1ff) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 20:23:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 20:23:13 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 20:23:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="0210090820"], 0x100}}, 0x0) [ 703.329994][T16701] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @local}, 0x1b, 0x0, 0x0, &(0x7f0000000600)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x0) 20:23:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)) 20:23:14 executing program 3: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/121) 20:23:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 20:23:14 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0xf8, 0x0, 0x238, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"35ff"}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@private2={0xfc, 0x2, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xff000000, 0xff, 0xffffff00], 'veth0_macvtap\x00', 'netdevsim0\x00', {}, {}, 0x0, 0xc0, 0x3, 0x20}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}, {0x0, 0x5}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'syz_tun\x00', {0x4}}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x36}, @private1={0xfc, 0x1, [], 0x1}, [0x0, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0x1ff000001, 0xffffff00], 'nr0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x73, 0xff, 0x2, 0x40}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x2, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz1\x00', {0x5}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r5}) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) sendto$inet6(r2, &(0x7f0000000740)="4b1cda68f7164060c7fa0626aee9cf5e31c7198a1a4f30c7d1ac5172532c22d088f96dbfc0928563cfc3a688a6b9979d3d9bcdc0ce7fd5850cf23ea420da121db00ea7a60f256dde0a448a83eb2f4bdc1e11298bc0ca35c0f7cafa6d73d35215a0fdce60e45ad4aa8bf1b55c69107729e381275c5663834d01f09e28946d9e6d90e589db42d35eb4ee85ef6bbe7ca5390b8f5c0a53c69b4c4b73f3b4bf3996d9439c7982b1758601ce170bf2694edbcbf99969ac71f94c7b84f1a34795f1dd", 0xbf, 0x24042084, 0x0, 0x0) r6 = dup(r1) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f00000000c0)=0xffffff87) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="01", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 20:23:14 executing program 2: getresuid(&(0x7f0000000100), 0x0, 0x0) r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 704.127565][T16722] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 704.152086][T16723] x_tables: duplicate underflow at hook 2 [ 704.440692][T16723] x_tables: duplicate underflow at hook 2 20:23:15 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x1}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x22, &(0x7f0000000000)=[@in={0x2, 0x0, @private}], 0x10) 20:23:15 executing program 3: prctl$PR_MCE_KILL(0x24, 0x0, 0x0) 20:23:15 executing program 2: setreuid(0xee01, 0x0) r0 = getuid() setreuid(0xee01, r0) socket$vsock_stream(0x28, 0x1, 0x0) 20:23:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 20:23:15 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) [ 704.986912][T16741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:15 executing program 0: keyctl$get_persistent(0x4, 0xee01, 0xfffffffffffffffb) 20:23:15 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dsp1\x00', 0x8403, 0x0) 20:23:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') read$rfkill(r0, 0x0, 0x0) 20:23:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 20:23:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x20000000000077, 0x60801) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8010550e, &(0x7f0000000080)) [ 705.580139][T16764] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:15 executing program 0: r0 = socket(0x15, 0x5, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40032073) 20:23:16 executing program 1: gettid() process_vm_readv(0x0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000040)) 20:23:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000000)={'ipvlan1\x00', @ifru_mtu}) 20:23:16 executing program 2: prctl$PR_SET_SECCOMP(0x26, 0x0, 0x0) 20:23:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x440}, 0x40) 20:23:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) [ 706.489815][T16789] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:16 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 20:23:17 executing program 2: setreuid(0x0, 0xee01) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 20:23:17 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000180)=0xfff) 20:23:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x17, 0x0, 0x0) 20:23:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) 20:23:17 executing program 1: gettid() process_vm_readv(0x0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:17 executing program 0: syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x8, 0x8ca82) 20:23:17 executing program 5: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffc, &(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)='\x00') 20:23:17 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000005380)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="04", 0x1}], 0x1}}, {{&(0x7f0000000580)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000001900)=[{0x0}, {&(0x7f0000000640)='\t', 0x1}], 0x2}}], 0x2, 0x0) 20:23:17 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) [ 707.268450][T16811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:17 executing program 1: gettid() process_vm_readv(0x0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) 20:23:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0505611, 0x0) 20:23:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x13, &(0x7f0000000500)={{0x0, @empty, 0x0, 0x0, 'rr\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) 20:23:18 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x894a, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 20:23:18 executing program 3: keyctl$get_persistent(0x3, 0xee01, 0xfffffffffffffffb) [ 707.868098][T16833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:18 executing program 1: r0 = gettid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x43}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:18 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f0000002440)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2}}, 0x10, 0x0}, 0x0) 20:23:18 executing program 0: r0 = socket$inet6(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, &(0x7f0000000000)={'batadv_slave_0\x00'}) 20:23:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) 20:23:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585605, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x22, &(0x7f0000000000)=[@in={0x2, 0x0, @private}], 0x10) 20:23:18 executing program 5: r0 = socket(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) [ 708.684032][T16869] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89b0, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 20:23:19 executing program 2: r0 = socket(0xa, 0x2, 0x0) bind$l2tp(r0, 0x0, 0x0) 20:23:19 executing program 1: r0 = gettid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x43}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:19 executing program 3: socketpair(0x9, 0x0, 0x0, &(0x7f0000000280)) 20:23:19 executing program 5: perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x33a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}], 0x20, 0x6c}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) gettid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac1414330200000162079f4b4d2f87e5feca6aab840413f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x9, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) 20:23:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) 20:23:19 executing program 0: socket$kcm(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000d00)={0x0, 0x300, &(0x7f0000000bc0)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/4096, 0x1000}], 0x2}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mkdir(0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180), 0x10) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="fa0c000026008152915a655267d7d137ab2ff96e27bf28b285fe3903a44a6017edcaa3a2b4dade3baee72569b51366463fedf5e787c05b0cb5927a3a7edfb4d078e9ae1504d489e058be9fafaa633705b6d4bf1301f2cd9ebf19254a1b0b9760612582bccd3983ce4474844c065e914dab8bbd52a45f431678bfe28633bf7c8dc83df809238ed87f1e393883ef750ce79c6f84e5e5de176e2f26024e4e3a3d8fbdaf3254022f265d8ccc5fd7205d9d9c2c4076c58162523082d81a39c43f782332ba8e82b4107a049cb82bba8b5edd80473844291437b8d22edca68047582e6be601e9df5e60a32c7cd202c5a30b8b606e43362739551cbb013b65e238f41cc00d7900140cf06b7bc9030f2563bcf9d4f4b7f48c79ec1a323d06276a0a3f8846b7c62b66f9709cabcaad234c53f3bc9b11165a6321f1db1057f076cfaebf8fbfa033fdc1dc2c3e314b36b3b3dd50425447da8bc5938ff7a17361100ab0b1ffeab7ac487411824224781eb9cdd4edef57ae91cd61f56a56c0599cfc3a491447207610f242da6cd6b030ae5f35e3181c44ae68665a023759b9ef4358db46107edc49194aed72b62600ec0ae4fc9065be059fc010cd6e6c9ea77c666b5e25693fbcf595e3e57113ff3a0e0c63d0604a16ea5adb8b7b54d47d4d8804612fde571863064528a49bf684d8a880a11afd819f186c177c49cac3ba1e9d1aa7ad0ff36b9e36d73c05b8abcaf96df0aacd2c9653f30ec29e1284af8749a9b2803c2727e992a6e65df192e1875c3e6d3553ffb7cb34ffee8f8ac0123c390454b42a0316952cbc9949376d9320ec207f77c2d5eb9e86d720cf8e9008a9a51932b45cd4cab21414c92d1c20f9e15e3fc16c7ce181e9ab19b01b70343934c823b1215e173405dd225233823cd4a604a77f06b14eb05b860e6cf8790335788c43abe9de1598e9952e5c7e6b2f8b17b1788ff3033e7d1635b008834bdf4054e6195e55000827c6202b227dde06f23ae21c00b371bdb6b7ea47b2e78844b52a77f9f0929790dcd7df2752e4af092d539c87c18751a5eb3eb4d38a2a0e070064b4ffaacff0543b115cc89f6c7e78f12147ebfcf1c80bac8f98deb59cbe670adb4cd1882a7e0ca4ba85ae9d445223ffb32301d46c0c9b05a830cbea0f72294ab3b539e4ed7cac2e22b235e8ceedeb643fb90b061a58368e76036ff3c1828d8a4e21288662afb6f2acab00d734db7ffc8373a928571819ce9ea6cb0956a6093b2b1f65662b76bc6ac8a19008cf08a6342d64674271451714e1d0e4ff7647fe7551d3cf16f37cb5547317e4fef51e4fb471de6ffbb90c2dd4a64266c4c2f75fc62e58ec306fb92212fb262d8b138899a3b53e67cde2f97d94cd2265cc04d32b29edf77e75b1f88372495cb2937f183bfc8604d72efb3af5c1f41b665b25592676b0ad2185478eade7e663e743e0e09cce6224c787ce1d789dc4a9b350bfe3a75f551341b11dd96cdaea17989dad565b16324a69842dc29a0ed16744ea5935598ac8238e146139189927a14d3b2863044b63b468ae75f48fab68ad235c36daffebfe4b468fc9b13198b1a683dcd3b3b4294ba22caddbacf8792d5783bc12e2538e4609e6bb6e9eeab98a06452c252a657f400260458c29fae8879097698c9aba2b2d889fc78f00d0d8271e09e8542b71018be6ff8cb03cb423e79303047d6ce124a00f64461b899bbddc4fe87ff677533391e16c01fa9cd6420bdc856c4c7f057b249ee9817efd6ab2cd02eb887d2631435ef2d5a1c7e57ac046ef615a1285ca89ade18ae69af3b3f8f76ca8aa060e373c0f99424fe1c5fadc72fe145fd2d4e4da4b78597890516857de188fcdaf15e3b0871b346cd39ab772cc25fab49e60c818cde934b137144adfc4fbde3ddbeccce9679f02b66746e822c67b3ed5fdafb4a936a2683b39a002115ecd62220605ca542610a80f2e3530aa89d3ed6ed9c57bbfd5db3a0b62786a608309a355443c616032008f9458b2f10db93e29470192370084e9322c309c9b23333b46d04e79176659503ad4b05deebb3c67d715ee6e84a89002ea6f7f71bf41ad36b42c8ae01c97174dbb641e50641aba60c291a84e906c013087370a5043e07d36fcead378f6c1e6ed3f5ac695124b82b20261cf7c9b82172e09c81d7d39eed72aee5678613a3c671ddd44f2c7c75a3b5d316aa165d56594fccab20903d7f503a08928e76c779918b2463b720ee6367a43e494a1db3ed1a80690e665570c01ce7eb979cdd95d4e1ca51730eb2cd63ffb2a56049601627c9788254945142dce85adbe1eb5997d16cdfe2a3758b13dc6bb121e2206ae64206868c1c5e89a101bc121719ac435dcad093f5f67cefd863cc7c8f3fc8a9dc62a83c115f1ce714b18af067951aa06dd9bb4ed98a820bf4704d156977caa4e6415b2a0df0386e2f6a061bf44abc8a397cf4abdafc51b78ebec9831f3c60fde6e62a1fd082903080aef20ff8de8bc0dced06f627514600539ca7114a088848da4244a85b4cf5b976d3a698c9a568d417e276917baba05d1a02181db2e6cc35986da4ccc63f8cd8e85a4a923dd27e2f499664601fdc44fdf46e2d2880cd5a7ece89c370234c438dcc0b43865cc62bad21e9dc37da758cbe01752f02fd9cbfe98630a30a78bb1239e25cdaba3d45d13cd3e7216d9d8070f3ff1a0cd9a0c91f29974c98f2677ba88c1091bde4be0cd37ea5eeb3b9cbb0360a00ddd40bbd60ffb8d4daa973ef0977c18dd4b38a605cee957872dca85787c37b6931293eddb77015faf143d1d28d24822d1a5d134799e8175a38b255aaf0e39b68c7f734e2e1e7044626daa84c9113e86d86ef63c863703703ea163319261dcf516c32d49478f7af30d52baa18ea6b0fc286c06b7e4ee019bf3fe74845a652d4a52aaa241a189c411e90e2953863a2bc4124e573607b94cdff19e280731824931a83f056cb5857672619b97ce38081592c0c319ce72e04e9eadce89775cfb5a4b2842663bc79bde565435cbcd46c4d505ceef7dde86512d39d4cb270deb7e79ebf8602bdc0d76c3e833d36ee08be10be634f44056c2f3fd6a328c7cd562e9c96ff7845fc3df81a876bb07f1cc833bed6ca1dc5cf935a4e959db6a4fae6edbc45357d8758faa9cd04cd41eb6efcfbd91658519bf520b90107f767d126854818485e98cb7ef56804de6950bf4e72098a949d14ea0e4e9f2534cf16cac0aeb970fc5c39f37e93910d5c99ac163792260d2280ec5c9a79bf295588ec23f524aae65f800f9c39e338f3d66b1a69e5488e04823eab36ae6ec6a2c5ce133ccd819a2b217b1ab7f4afd1697bb42929b3131358b5421c83f925571934442d0fd0ce3990d4e5d31d8b956f76df3c2f8533e46b892c88692ce009155dd5c7dbe4c86874b95762650f63e4b4aabb41320978b05b80cfe8fa2830904ef6b5c4f7ad46ca5dac151c9077c4d2c6adfe5066a8eb09a9bc6892330ea2b259a53c7137f8498254e1b04bf920c35c5333c4d640b11da60917ae921037b4aedbd6a0fbeeaf88ef6defc830552b4cbe3fe2a844806a48923dd428ea1c8d797bd8e6aabd1d1a8c97c8038b627120a77f4e47fa1f788aa9da268b0ec10fc453cb722685df76547dbf55a16663aa2b2a51e9c52456cccdf682592d1369dd12e3d3cb504e0f2d7004e60c297d5a25d0298045dae8fca8cb795ea57288b85a7e705820087d55ca6c42e920e2aa1174e128622cf64a197fd728cb2949536ba63e8bda8589261f1377caea37302e47228d3708a5666c66ba711d3c0b310a8c47e86d26597299d523c28c90e4feab43e950f398f7b61ccf7e6490d75ba6d8214e2d5ef2d7a088db490e1ebacf4e6eecc896cb1c704f0a8fcdf4ccb5dfa53eaf43d709287f36c10188c19fd59da7d73494de089c1b0a69ee22dcb847001c5317846a876bee1685d11c4db0673ec4c3a12008bb719650525b3c39e2b0469edda93830b3f1bde3e5b0b4637197866bb08c5858cf0d9876e3c7cad54169887bf9c80f9f4be362e1bc8c27f3434e9a918bac355c184bd899b9aebe6be20e70c0c69234342eb8b57aa9ffb7797a32df91cec2bbc90201658ca227abf1fe68e65363867e1f6ad79b827f363d64fbd3b188d95307d011c4ce5bf4407908c058eeb97ec98dd0ebfdab6b348fa387f2a7573cac25344c983e8fd526c30ee6d59fe99a30c7d7e2864aa22bfa49df5f32da68309cab3ed9c2ce69b6ecb8508ce28a43ebd6c809b8afd07a4606e664965d316f3707a3abee9bcdc32a78031b0171fb565d90c16cd56e5792c0cf618b799715f32538e38f493d4e19ec76fc8a07576a13975706bfc2bb1516c2d18a4385cc37a206eac6c9fb8d073572ba2671d2198abf24fdd0c40d079ae44962c26743b4bf5950ac5ee34c5d7bd60b364ce670958112c37b9829bed7e1327356d6b94af3ba020c2337b2dba37d00af8a128a614390cdde62ce871f948427fb5c187df9a1540a5cc71da1a86144acbfd94bf433f744f0c4f2a675eba3ed251c5b11b08dfefc726c0394a9b75121d88467ed4b2cd69819dfe50693a4a4c8370d3af12f41c0067283bbb5a90044a340fc357a11081a6c13bb9c32d9caa448479fd5f0302b6729ca7233094540b14546d6bcc15771c2686279b34f9c0914f5306d0fabd5979266ea01a17a22507e560dbf904dd62c40e2bcc", 0xcfa}], 0x1}, 0x0) 20:23:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 20:23:19 executing program 3: perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}], 0x20, 0x6c}, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac1414330200000162079f4b4d2f87e5feca6aab840413f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x9, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) [ 709.684577][T16901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:20 executing program 1: r0 = gettid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x43}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:20 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x89d, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x401, 0x1}, &(0x7f0000000580)=0x18, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/206) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) close(0xffffffffffffffff) close(r0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1707) [ 709.913672][T16914] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.0'. [ 709.998183][T16911] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.0'. 20:23:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) 20:23:20 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x4000a0, 0x18, 0x5ac484bb51fa106a, &(0x7f0000000040)="4d50b441e692763513ef874565020007000112bbf3159fd0880f892fd398e4020a00001375bc847d142d1523389037a1d4f5631813cf7037fd584b4af7507a849ce80deea1a57733a5e3730fbef42ab9bedd390775bf809fbcf2a71f32d41a1f7ff3b5483107766a8bd0033d44e6ef7b526c8c67aa9847e283c6cdccbd627ad1094342b1840b506814cb319132533f6d740d9643d0c6dc8481d0c9643dd3e0aa6e1be581aca3ea9377136ce8dd480207fba7af225672c63802beb9647a5fbe90781e147e92eae8d9d79d0d", 0x0, 0x23, 0x0, 0x22d, 0x1000000}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000a00), 0x4) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000480)=""/166) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6609, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x15}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000d7278e44461cb9481fa09f72000000"], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) 20:23:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}]}, 0x20}}, 0x0) 20:23:20 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x15e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x7, 0x3a, 0x0, @local={0xfe, 0x80, [0x2, 0x10, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe000000b400000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, "ffffffffa005000000000000"}, {0x0, 0x16, "e9a009af127d0c017bd47ac42365bc93ea3715c53394f54195c93201700274ef6f29fa7ab404984494c6c233491b8cd5eccf9b4c65be7579f8669d1e3cec8eb965e5fcba7517cba7f8eb809c12076052034b7511b0dc2fe66927115ec35db14477ed2c8f7f8f5e1d9f6a1612c5f631670292a7b62c5527d821de692100e2de728b18e092d05d56e1c2948d64e382d4bbeda4a0081af345061ee295bc62e5f42fdd64d9af6df83cc0edb259204aa0"}]}}}}}}, 0x0) 20:23:20 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440), 0x0, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x43}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() [ 710.474529][T16929] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f00000011c0)='/dev/media#\x00', 0x0, 0x0) 20:23:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 20:23:21 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 20:23:21 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8}]}}]}, 0x3c}}, 0x0) 20:23:21 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440), 0x0, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x43}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:21 executing program 3: syz_emit_ethernet(0xae, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x78, 0x3a, 0xff, @local={0xfe, 0x80, [0x2, 0x10, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, "ffffffffa005000000000000"}]}}}}}}, 0x0) 20:23:21 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1_to_batadv\x00'}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x4, [@private, @remote]}]}}}], 0x20}}], 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x4, @remote, 0x5d9}, 0x1c) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x7, 0x0, 0x76, 0xfc9, 0xffffffffffffff14, 0x9, 0x0, 0x0, 0x2, 0xb, 0x0, 0x1], 0x3000, 0x40140}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000440)=""/104) [ 711.359954][T16956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r3) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0xc01, 0x3, 0x200, 0xd0, 0x5002004a, 0x0, 0x168, 0x0, 0x168, 0x3c8, 0x3c8, 0x168, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x12) wait4(0x0, 0x0, 0x0, 0x0) 20:23:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 20:23:22 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:22 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440), 0x0, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x43}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:22 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) dup3(r1, r0, 0x0) [ 711.952167][T16980] ipt_CLUSTERIP: Please specify destination IP [ 711.975781][T16982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 712.149866][T16997] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 0 20:23:22 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{0x0}], 0x1, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x43}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 20:23:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'virt_wifi0\x00'}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:23:22 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) [ 712.578206][T17006] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 712.643759][T17013] IPVS: Error connecting to the multicast addr [ 712.700711][T17018] IPVS: Error connecting to the multicast addr 20:23:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2}}}, 0x24}}, 0x0) 20:23:23 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) [ 713.070141][T17023] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:23 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0xe, 0xf0, &(0x7f0000000040)="b9b8036000000601001fffffe100", 0x0, 0x2, 0x6000000000000000, 0x0, 0x1, 0x0, &(0x7f0000000100)="ac"}, 0x3b) 20:23:25 executing program 2: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x2, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r3+10000000}, 0x0) 20:23:25 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{0x0}], 0x1, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x43}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:25 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2}}}, 0x24}}, 0x0) 20:23:25 executing program 3: 20:23:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1000000}], 0x92, 0x0) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x1, 0x0, 0x0) [ 715.068204][T17057] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:25 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:25 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x8851) gettid() r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000000)={0x2, 'veth0_to_team\x00', {}, 0xf}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x7}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x8001}]}}}]}, 0x50}}, 0x0) 20:23:25 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{0x0}], 0x1, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x43}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2}}}, 0x24}}, 0x0) 20:23:25 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01000000000000000000062433fa5f66090581034000000000090401"], 0x0) 20:23:26 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) [ 716.003345][T17087] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 716.254910][T11597] usb 6-1: new high-speed USB device number 2 using dummy_hcd 20:23:26 executing program 2: 20:23:26 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:26 executing program 4: 20:23:26 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) 20:23:26 executing program 3: [ 716.511796][T11597] usb 6-1: Using ep0 maxpacket: 8 [ 716.656563][T11597] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.666955][T11597] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 20:23:27 executing program 4: 20:23:27 executing program 2: 20:23:27 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) [ 716.933929][T11597] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 716.944248][T11597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.952544][T11597] usb 6-1: Product: syz [ 716.956848][T11597] usb 6-1: Manufacturer: syz [ 716.961714][T11597] usb 6-1: SerialNumber: syz 20:23:27 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:27 executing program 3: [ 717.124693][T11597] cdc_ncm 6-1:1.0: bind() failure [ 717.327628][T11597] usb 6-1: USB disconnect, device number 2 [ 718.111615][T11597] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 718.371606][T11597] usb 6-1: Using ep0 maxpacket: 8 [ 718.506324][T11597] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 718.516791][T11597] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.702398][T11597] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 718.711734][T11597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.719953][T11597] usb 6-1: Product: syz [ 718.724479][T11597] usb 6-1: Manufacturer: syz [ 718.729236][T11597] usb 6-1: SerialNumber: syz [ 718.814612][T11597] cdc_ncm 6-1:1.0: bind() failure 20:23:29 executing program 5: 20:23:29 executing program 4: 20:23:29 executing program 3: 20:23:29 executing program 2: 20:23:29 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:29 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() [ 719.010863][T11597] usb 6-1: USB disconnect, device number 3 20:23:29 executing program 4: 20:23:29 executing program 3: 20:23:29 executing program 2: 20:23:29 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:29 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0x1, &(0x7f0000001500), 0x0, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:30 executing program 5: 20:23:30 executing program 4: 20:23:30 executing program 2: 20:23:30 executing program 3: 20:23:30 executing program 5: 20:23:30 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:30 executing program 4: 20:23:30 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0x1, &(0x7f0000001500), 0x0, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:30 executing program 2: 20:23:30 executing program 5: 20:23:30 executing program 3: 20:23:31 executing program 4: 20:23:31 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:31 executing program 2: 20:23:31 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0x1, &(0x7f0000001500), 0x0, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:31 executing program 3: 20:23:31 executing program 5: 20:23:31 executing program 4: 20:23:31 executing program 2: 20:23:31 executing program 3: 20:23:31 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0x1, &(0x7f0000001500)=[{0x0}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:31 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:31 executing program 5: 20:23:32 executing program 4: 20:23:32 executing program 2: 20:23:32 executing program 3: 20:23:32 executing program 4: 20:23:32 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0x1, &(0x7f0000001500)=[{0x0}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:32 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:32 executing program 5: 20:23:32 executing program 2: 20:23:33 executing program 4: 20:23:33 executing program 3: 20:23:33 executing program 5: 20:23:33 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0x1, &(0x7f0000001500)=[{0x0}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:23:33 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:33 executing program 2: 20:23:33 executing program 4: 20:23:33 executing program 3: 20:23:33 executing program 5: 20:23:34 executing program 2: 20:23:34 executing program 4: 20:23:34 executing program 3: 20:23:34 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) clone3(0x0, 0x0) gettid() 20:23:34 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:34 executing program 5: 20:23:34 executing program 2: 20:23:34 executing program 4: 20:23:34 executing program 5: 20:23:34 executing program 3: 20:23:34 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:34 executing program 2: 20:23:35 executing program 4: 20:23:35 executing program 5: 20:23:35 executing program 3: 20:23:35 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) clone3(0x0, 0x0) gettid() 20:23:35 executing program 2: 20:23:35 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff42) close(0xffffffffffffffff) 20:23:35 executing program 4: 20:23:35 executing program 5: 20:23:35 executing program 3: 20:23:36 executing program 4: 20:23:36 executing program 2: 20:23:36 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff42) close(0xffffffffffffffff) 20:23:36 executing program 5: 20:23:36 executing program 3: 20:23:36 executing program 4: 20:23:36 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) clone3(0x0, 0x0) gettid() 20:23:36 executing program 2: 20:23:36 executing program 5: 20:23:36 executing program 3: 20:23:36 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff42) close(0xffffffffffffffff) 20:23:36 executing program 4: 20:23:37 executing program 3: 20:23:37 executing program 2: 20:23:37 executing program 5: 20:23:37 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:37 executing program 4: 20:23:37 executing program 2: 20:23:38 executing program 3: 20:23:38 executing program 4: 20:23:38 executing program 5: 20:23:38 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:38 executing program 2: 20:23:38 executing program 1: 20:23:38 executing program 2: 20:23:38 executing program 5: 20:23:38 executing program 3: 20:23:38 executing program 4: 20:23:38 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:38 executing program 1: 20:23:38 executing program 2: 20:23:38 executing program 3: 20:23:39 executing program 5: 20:23:39 executing program 4: 20:23:39 executing program 3: 20:23:39 executing program 1: 20:23:39 executing program 2: 20:23:39 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:39 executing program 5: 20:23:39 executing program 3: 20:23:39 executing program 2: 20:23:39 executing program 4: 20:23:39 executing program 1: 20:23:39 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:40 executing program 3: 20:23:40 executing program 5: 20:23:40 executing program 2: 20:23:40 executing program 4: 20:23:40 executing program 1: 20:23:40 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:40 executing program 5: 20:23:40 executing program 3: 20:23:40 executing program 2: 20:23:40 executing program 1: 20:23:40 executing program 4: 20:23:40 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:40 executing program 5: 20:23:41 executing program 3: 20:23:41 executing program 1: 20:23:41 executing program 2: 20:23:41 executing program 4: 20:23:41 executing program 5: 20:23:41 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:41 executing program 3: 20:23:41 executing program 2: 20:23:41 executing program 1: 20:23:41 executing program 5: 20:23:41 executing program 4: 20:23:41 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:42 executing program 2: 20:23:42 executing program 3: 20:23:42 executing program 5: 20:23:42 executing program 1: 20:23:42 executing program 0: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0xfffffffffffffffe) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[], 0xff42) close(r0) 20:23:42 executing program 4: 20:23:42 executing program 2: 20:23:42 executing program 3: 20:23:42 executing program 5: 20:23:42 executing program 1: 20:23:42 executing program 0: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0xfffffffffffffffe) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[], 0xff42) close(r0) 20:23:42 executing program 4: 20:23:42 executing program 2: 20:23:43 executing program 3: 20:23:43 executing program 5: 20:23:43 executing program 1: 20:23:43 executing program 0: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0xfffffffffffffffe) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[], 0xff42) close(r0) 20:23:43 executing program 2: 20:23:43 executing program 4: 20:23:43 executing program 5: 20:23:43 executing program 3: 20:23:43 executing program 2: 20:23:43 executing program 1: 20:23:43 executing program 4: 20:23:43 executing program 5: 20:23:43 executing program 0: r0 = socket$inet(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:43 executing program 3: 20:23:44 executing program 2: 20:23:44 executing program 4: 20:23:44 executing program 1: 20:23:44 executing program 5: 20:23:44 executing program 3: 20:23:44 executing program 2: 20:23:44 executing program 4: 20:23:44 executing program 1: 20:23:44 executing program 0: r0 = socket$inet(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:44 executing program 5: 20:23:44 executing program 3: 20:23:44 executing program 4: 20:23:44 executing program 2: 20:23:45 executing program 1: 20:23:45 executing program 5: 20:23:45 executing program 3: 20:23:45 executing program 0: r0 = socket$inet(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:45 executing program 2: 20:23:45 executing program 4: 20:23:45 executing program 5: 20:23:45 executing program 1: 20:23:45 executing program 3: 20:23:45 executing program 2: 20:23:45 executing program 4: 20:23:45 executing program 0: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:46 executing program 5: 20:23:46 executing program 1: 20:23:46 executing program 3: 20:23:46 executing program 4: 20:23:46 executing program 2: 20:23:46 executing program 0: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:46 executing program 5: 20:23:46 executing program 1: 20:23:46 executing program 4: 20:23:46 executing program 2: 20:23:46 executing program 3: 20:23:47 executing program 5: 20:23:47 executing program 0: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:47 executing program 1: 20:23:47 executing program 3: 20:23:47 executing program 4: 20:23:47 executing program 2: 20:23:47 executing program 5: 20:23:47 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:47 executing program 1: 20:23:47 executing program 3: 20:23:47 executing program 2: 20:23:47 executing program 4: 20:23:48 executing program 5: 20:23:48 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:48 executing program 1: 20:23:48 executing program 2: 20:23:48 executing program 3: 20:23:48 executing program 4: 20:23:48 executing program 5: 20:23:48 executing program 1: 20:23:48 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:48 executing program 4: 20:23:48 executing program 2: 20:23:48 executing program 3: 20:23:48 executing program 5: 20:23:49 executing program 1: 20:23:49 executing program 4: 20:23:49 executing program 2: 20:23:49 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:49 executing program 3: 20:23:49 executing program 5: 20:23:49 executing program 1: 20:23:49 executing program 2: 20:23:49 executing program 4: 20:23:49 executing program 5: 20:23:49 executing program 3: 20:23:49 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:49 executing program 1: 20:23:50 executing program 2: 20:23:50 executing program 4: 20:23:50 executing program 3: 20:23:50 executing program 5: 20:23:50 executing program 1: 20:23:50 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:50 executing program 3: 20:23:50 executing program 5: 20:23:50 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x28c80, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xa0, 0x0, 0xfffffffe, 0x4, 0x0, {}, {}, {}, {}, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x74}, "faeb1e7eaa32124d901fe3acd5fdf2b55601d2d7eec64f7620c150c95c28b93a56b330660465ae2a0eda554a84cd02856b5a241c267ccce59d522a239fbd698424a171d0f898aa27e29ae2585dede938d17da15391c30b84d781e6bcce8e7f57c41d8e18879de677e65a2360dcccdee9c7184054"}, 0x78) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) 20:23:50 executing program 4: 20:23:50 executing program 3: 20:23:51 executing program 1: 20:23:51 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:51 executing program 5: 20:23:51 executing program 4: 20:23:51 executing program 3: 20:23:51 executing program 1: 20:23:51 executing program 5: 20:23:51 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:51 executing program 2: 20:23:51 executing program 3: 20:23:51 executing program 4: 20:23:51 executing program 1: 20:23:52 executing program 5: 20:23:52 executing program 2: 20:23:52 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:52 executing program 3: 20:23:52 executing program 4: 20:23:52 executing program 1: 20:23:52 executing program 5: 20:23:52 executing program 2: 20:23:52 executing program 3: 20:23:52 executing program 4: 20:23:52 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:52 executing program 1: 20:23:52 executing program 5: 20:23:53 executing program 2: 20:23:53 executing program 3: 20:23:53 executing program 4: 20:23:53 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:53 executing program 1: 20:23:53 executing program 2: 20:23:53 executing program 5: 20:23:53 executing program 3: 20:23:53 executing program 4: 20:23:53 executing program 1: 20:23:53 executing program 2: 20:23:53 executing program 3: 20:23:53 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:54 executing program 5: 20:23:54 executing program 4: 20:23:54 executing program 1: 20:23:54 executing program 2: 20:23:54 executing program 3: 20:23:54 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:54 executing program 5: 20:23:54 executing program 4: 20:23:54 executing program 1: 20:23:54 executing program 2: 20:23:54 executing program 3: 20:23:54 executing program 5: 20:23:54 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:55 executing program 4: 20:23:55 executing program 1: 20:23:55 executing program 2: 20:23:55 executing program 3: 20:23:55 executing program 5: 20:23:55 executing program 4: 20:23:55 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:55 executing program 2: 20:23:55 executing program 1: 20:23:55 executing program 3: 20:23:55 executing program 5: 20:23:56 executing program 4: 20:23:56 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, 0x0, 0x0) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:56 executing program 2: 20:23:56 executing program 1: 20:23:56 executing program 3: 20:23:56 executing program 5: 20:23:56 executing program 4: 20:23:56 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, 0x0, 0x0) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:56 executing program 2: 20:23:56 executing program 1: 20:23:56 executing program 3: 20:23:56 executing program 5: 20:23:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000fe1600008c820004000900"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) getrandom(&(0x7f0000001ac0)=""/4096, 0x1000, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) 20:23:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) getrandom(&(0x7f0000000240)=""/4096, 0x1000, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, 0x0) 20:23:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000001600008c8200"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) getrandom(&(0x7f0000001ac0)=""/4096, 0x1000, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 20:23:57 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, 0x0, 0x0) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:57 executing program 3: 20:23:57 executing program 5: 20:23:57 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:57 executing program 4: 20:23:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000001600008c8200"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) getrandom(&(0x7f0000001ac0)=""/4096, 0x1000, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 20:23:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x70bd2c, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 20:23:57 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, 0xffffffffffffffff, 0x3ff000) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000100)='\xbb\x02\xb1\x91^\x00\x00\x01\x00\x00\x00\x00\x00\x00\xfa\xe3\xa0\xd42\x90YJ\x89]\xad\x01\xc3\\:;\x99\xbck\xf9=\xfa\xe8HB\xf7\x92\x16\xbc\x11\xc4\xff\xa1\xea\xf9l', 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000100)='\xbb\x02\xb1\x91^\x00\x00\x01\x00\x00\x00\x00\x00\x00\xfa\xe3\xa0\xd42\x90YJ\x89]\xad\x01\xc3\\:;\x99\xbck\xf9=\xfa\xe8HB\xf7\x92\x16\xbc\x11\xc4\xff\xa1\xea\xf9l', 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x840ee6, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x840ee6, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write(r0, 0x0, 0x0) 20:23:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000100)='\xbb\x02\xb1\x91^\x00\x00\x01\x00\x00\x00\x00\x00\x00\xfa\xe3\xa0\xd42\x90YJ\x89]\xad\x01\xc3\\:;\x99\xbck\xf9=\xfa\xe8HB\xf7\x92\x16\xbc\x11\xc4\xff\xa1\xea\xf9l', 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x840ee6, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x840ee6, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) write(r0, &(0x7f0000000000), 0x52698b21) 20:23:57 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x7f, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002608100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0xe8, 0x0, 0x148, 0xe8, 0x148, 0x1b8, 0x240, 0x240, 0x1b8, 0x240, 0x3, 0x0, {[{{@ip={@private, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00'}, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) tkill(r0, 0xb) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 747.566227][T17642] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.573642][T17642] bridge0: port 1(bridge_slave_0) entered forwarding state 20:23:58 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) [ 747.952934][T17653] Cannot find add_set index 0 as target [ 747.996549][T17653] Cannot find add_set index 0 as target 20:23:58 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5409, 0x0) 20:23:58 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) 20:23:58 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5409, 0x0) 20:23:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x34) 20:23:58 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:23:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x34) ptrace$cont(0x1f, r2, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) 20:23:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000480)='\xb9\xecm1\xc1\xf8\xa6\x8d\xc1\xe2zMN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="2c000000030000000000000081"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 748.809532][ T3225] usb 3-1: new high-speed USB device number 45 using dummy_hcd 20:23:59 executing program 4: syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x82, 0x2}]}}}}}}, 0x0) 20:23:59 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) [ 749.069866][ T3225] usb 3-1: Using ep0 maxpacket: 16 [ 749.203404][ T3225] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 749.216467][ T3225] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 749.440383][ T3225] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 749.449700][ T3225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.457929][ T3225] usb 3-1: Product: syz [ 749.462461][ T3225] usb 3-1: Manufacturer: syz [ 749.467199][ T3225] usb 3-1: SerialNumber: syz [ 749.512445][ T3225] usb 3-1: config 0 descriptor?? 20:23:59 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000100)='\xbb\x02\xb1\x91^\x00\x00\x01\x00\x00\x00\x00\x00\x00\xfa\xe3\xa0\xd42\x90YJ\x89]\xad\x01\xc3\\:;\x99\xbck\xf9=\xfa\xe8HB\xf7\x92\x16\xbc\x11\xc4\xff\xa1\xea\xf9l', 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x840ee6, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x840ee6, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) write(r0, &(0x7f0000000000), 0x52698b21) 20:23:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 20:23:59 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x7f, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0xd500, 0x0) 20:23:59 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) [ 749.563437][ T3225] usb-storage 3-1:0.0: USB Mass Storage device detected [ 749.637235][ T3225] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 749.794172][T10420] usb 3-1: USB disconnect, device number 45 [ 750.569943][T11287] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 750.809637][T11287] usb 3-1: Using ep0 maxpacket: 16 [ 750.930303][T11287] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 750.943438][T11287] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 751.138430][T11287] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 751.147850][T11287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.156223][T11287] usb 3-1: Product: syz [ 751.160680][T11287] usb 3-1: Manufacturer: syz [ 751.165553][T11287] usb 3-1: SerialNumber: syz [ 751.191729][T11287] usb 3-1: config 0 descriptor?? [ 751.236095][T11287] usb-storage 3-1:0.0: USB Mass Storage device detected [ 751.249763][T11287] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 20:24:01 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) 20:24:01 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000091005d7d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0) 20:24:01 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:24:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x3, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@remote={0xac, 0x2}, @local}, 0xc) 20:24:01 executing program 4: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xb500}], 0x1, 0x0) ioctl$TCSETS(r1, 0x5402, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 20:24:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 751.485730][T11287] usb 3-1: USB disconnect, device number 46 20:24:02 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:24:02 executing program 4: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x7f, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 20:24:02 executing program 1: open(&(0x7f0000000180)='./bus\x00', 0x141962, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000001380)=ANY=[], 0xfd14) mmap(&(0x7f0000072000/0x4000)=nil, 0x4000, 0x800002, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 752.130238][T11287] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 752.372244][T11287] usb 3-1: Using ep0 maxpacket: 16 20:24:02 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:24:02 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, 0xffffffffffffffff, 0x3ff000) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000100)='\xbb\x02\xb1\x91^\x00\x00\x01\x00\x00\x00\x00\x00\x00\xfa\xe3\xa0\xd42\x90YJ\x89]\xad\x01\xc3\\:;\x99\xbck\xf9=\xfa\xe8HB\xf7\x92\x16\xbc\x11\xc4\xff\xa1\xea\xf9l', 0x0) r2 = syz_open_dev$loop(0x0, 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000100)='\xbb\x02\xb1\x91^\x00\x00\x01\x00\x00\x00\x00\x00\x00\xfa\xe3\xa0\xd42\x90YJ\x89]\xad\x01\xc3\\:;\x99\xbck\xf9=\xfa\xe8HB\xf7\x92\x16\xbc\x11\xc4\xff\xa1\xea\xf9l', 0x0) pwritev(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)}], 0x1, 0x840ee6, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x840ee6, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/22) write(r0, &(0x7f0000000000), 0x52698b21) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 752.490664][T11287] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 752.503392][T11287] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 752.760279][T11287] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 752.769818][T11287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.777966][T11287] usb 3-1: Product: syz [ 752.784511][T11287] usb 3-1: Manufacturer: syz [ 752.789372][T11287] usb 3-1: SerialNumber: syz 20:24:03 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000072000/0x4000)=nil, 0x4000, 0x800002, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 753.188776][T11287] usb 3-1: config 0 descriptor?? [ 753.288345][T11287] usb-storage 3-1:0.0: USB Mass Storage device detected [ 753.397156][T11287] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 753.510273][T11287] usb 3-1: USB disconnect, device number 47 20:24:04 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) 20:24:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0x4}) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000280)) 20:24:04 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:24:04 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, 0xffffffffffffffff, 0x3ff000) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000100)='\xbb\x02\xb1\x91^\x00\x00\x01\x00\x00\x00\x00\x00\x00\xfa\xe3\xa0\xd42\x90YJ\x89]\xad\x01\xc3\\:;\x99\xbck\xf9=\xfa\xe8HB\xf7\x92\x16\xbc\x11\xc4\xff\xa1\xea\xf9l', 0x0) r2 = syz_open_dev$loop(0x0, 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000100)='\xbb\x02\xb1\x91^\x00\x00\x01\x00\x00\x00\x00\x00\x00\xfa\xe3\xa0\xd42\x90YJ\x89]\xad\x01\xc3\\:;\x99\xbck\xf9=\xfa\xe8HB\xf7\x92\x16\xbc\x11\xc4\xff\xa1\xea\xf9l', 0x0) pwritev(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)}], 0x1, 0x840ee6, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x840ee6, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/22) write(r0, &(0x7f0000000000), 0x52698b21) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 20:24:04 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:24:05 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) msgctl$MSG_STAT(r0, 0xb, 0x0) [ 754.889715][ T3225] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 755.135776][ T3225] usb 3-1: Using ep0 maxpacket: 16 [ 755.269893][ T3225] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 755.282646][ T3225] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 755.479387][ T3225] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 755.489160][ T3225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.497324][ T3225] usb 3-1: Product: syz [ 755.501943][ T3225] usb 3-1: Manufacturer: syz [ 755.507036][ T3225] usb 3-1: SerialNumber: syz [ 755.643311][ T3225] usb 3-1: config 0 descriptor?? 20:24:05 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) [ 755.712446][ T3225] usb-storage 3-1:0.0: USB Mass Storage device detected 20:24:06 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) [ 755.783973][ T3225] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 755.915083][ T3225] usb 3-1: USB disconnect, device number 48 20:24:06 executing program 1: 20:24:06 executing program 4: 20:24:06 executing program 5: 20:24:07 executing program 3: 20:24:07 executing program 1: 20:24:07 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:24:07 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) 20:24:07 executing program 4: 20:24:07 executing program 5: 20:24:07 executing program 1: 20:24:07 executing program 5: 20:24:07 executing program 4: [ 757.603533][ T3225] usb 3-1: new high-speed USB device number 49 using dummy_hcd 20:24:08 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:24:08 executing program 3: [ 757.889495][ T3225] usb 3-1: Using ep0 maxpacket: 16 20:24:08 executing program 1: [ 758.012057][ T3225] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 758.024802][ T3225] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 20:24:08 executing program 5: 20:24:08 executing program 4: [ 758.309910][ T3225] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 758.319362][ T3225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.327500][ T3225] usb 3-1: Product: syz [ 758.332052][ T3225] usb 3-1: Manufacturer: syz [ 758.336798][ T3225] usb 3-1: SerialNumber: syz 20:24:08 executing program 3: [ 758.535255][ T3225] usb 3-1: config 0 descriptor?? [ 758.599441][ T3225] usb-storage 3-1:0.0: USB Mass Storage device detected [ 758.686196][ T3225] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 758.817378][ T3225] usb 3-1: USB disconnect, device number 49 20:24:09 executing program 2: 20:24:09 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:24:09 executing program 1: 20:24:09 executing program 5: 20:24:09 executing program 4: 20:24:09 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @local}}, 0x1c) shmctl$SHM_STAT(0x0, 0xd, 0x0) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0xa201000000000bb8) 20:24:10 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="4227f9955517c96052ec15a97523ec34e5dd16c9b2174b10b49d7c14b2c4b158e19b980ae371e6d43692a1", 0x2b}, {&(0x7f00000018c0)}, {&(0x7f0000000280)="d1934470453243241a2b008a14806fe3c1836f78b2d70120582e73f0553b7d1eb3481a7589e33e52c0d8fb0be9690e0c2d87eb690e859215d6954c8f3865bfb591bd427e0a", 0x45}, {&(0x7f0000000100)="4a0ae97bad82eb6921c52a1cb009d2d16c7e5faa691d124b7a3e932d498ce5816699a0de449e24911700f87894f78fa741309a63b6276095a6c7c71f5535bfc71fc50683be4abd", 0x47}, {0x0}, {0x0}], 0x6, 0x81805, 0x0) msgget(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="27150b0000000000f8d402008c000000"], &(0x7f0000000300)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x8, [], 0x0, 0x7, r3, 0x8, &(0x7f0000000340)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x8, 0x2, 0xfffff001}, 0x10, 0x0, r2}, 0x78) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000440)=0x636) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) sendfile(r0, r0, 0x0, 0x24002d00) 20:24:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x20}, 0x20}}, 0x0) 20:24:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x4}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x3c}}, 0x0) 20:24:10 executing program 2: 20:24:10 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) [ 760.025287][T17891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 760.207596][T17898] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 20:24:11 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x171, 0x171, 0x3, [@ptr, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @var]}, {0x0, [0x0]}}, 0x0, 0x18f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:24:11 executing program 2: 20:24:11 executing program 5: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000019400)={0x28, 0x0, 0x2710, @local}, 0x10) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f000001a440)=ANY=[], 0x0, 0x1ae}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000019440)="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", 0x1000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x40, 0x200000) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000193c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x804, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x48080) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:24:11 executing program 3: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) syz_open_dev$vcsn(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x0, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) 20:24:11 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) [ 760.949725][T17908] ptrace attach of "/root/syz-executor.4"[17907] was attempted by "/root/syz-executor.4"[17908] 20:24:11 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000840)={'filter\x00', 0x1002, 0x4, 0x3d0, 0x5202, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, {@empty=[0x0, 0x2, 0x0, 0x0, 0xa]}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @local, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) [ 761.025033][T17914] ptrace attach of "/root/syz-executor.5"[17911] was attempted by "/root/syz-executor.5"[17914] 20:24:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0xffffffd8) 20:24:11 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:11 executing program 2: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 20:24:11 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'vlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1398010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="08000a00ac"], 0x44}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 761.319481][T17923] cannot load conntrack support for proto=3 20:24:11 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:24:12 executing program 5: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000066c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x110) [ 761.957184][T17917] not chained 20000 origins [ 761.961735][T17917] CPU: 0 PID: 17917 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 761.970404][T17917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.980465][T17917] Call Trace: [ 761.983776][T17917] dump_stack+0x21c/0x280 [ 761.988122][T17917] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 761.994209][T17917] kmsan_internal_chain_origin+0x6f/0x130 [ 761.999951][T17917] ? kmsan_get_metadata+0x116/0x180 [ 762.005165][T17917] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 762.011071][T17917] ? kmsan_internal_set_origin+0x75/0xb0 [ 762.016727][T17917] ? kmsan_get_metadata+0x116/0x180 [ 762.021942][T17917] ? kmsan_get_metadata+0x116/0x180 [ 762.027162][T17917] ? kmsan_set_origin_checked+0x95/0xf0 [ 762.032725][T17917] ? kmsan_get_metadata+0x116/0x180 [ 762.037941][T17917] ? kmsan_get_metadata+0x116/0x180 [ 762.043164][T17917] ? kmsan_set_origin_checked+0x95/0xf0 [ 762.048727][T17917] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 762.054820][T17917] ? _copy_from_user+0x201/0x310 [ 762.059870][T17917] ? kmsan_get_metadata+0x116/0x180 [ 762.065079][T17917] __msan_chain_origin+0x50/0x90 [ 762.070036][T17917] do_recvmmsg+0x11ba/0x22c0 [ 762.074667][T17917] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 762.080490][T17917] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 762.086654][T17917] ? get_timespec64+0x2ca/0x360 [ 762.091515][T17917] __se_sys_recvmmsg+0x2d9/0x410 [ 762.096476][T17917] __x64_sys_recvmmsg+0x62/0x80 [ 762.101338][T17917] do_syscall_64+0xad/0x160 [ 762.105855][T17917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 762.111758][T17917] RIP: 0033:0x45d579 [ 762.115649][T17917] Code: Bad RIP value. [ 762.119714][T17917] RSP: 002b:00007fe3e2e86c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 762.128145][T17917] RAX: ffffffffffffffda RBX: 00000000000269c0 RCX: 000000000045d579 [ 762.136127][T17917] RDX: 0400000000000ec0 RSI: 0000000020002ec0 RDI: 0000000000000003 [ 762.144108][T17917] RBP: 000000000118cf90 R08: 00000000200001c0 R09: 0000000000000000 [ 762.152094][T17917] R10: 000000000000000a R11: 0000000000000246 R12: 000000000118cf4c [ 762.160073][T17917] R13: 000000000169fb6f R14: 00007fe3e2e879c0 R15: 000000000118cf4c [ 762.168056][T17917] Uninit was stored to memory at: [ 762.173097][T17917] kmsan_internal_chain_origin+0xad/0x130 [ 762.178936][T17917] __msan_chain_origin+0x50/0x90 [ 762.183878][T17917] do_recvmmsg+0x11ba/0x22c0 [ 762.188483][T17917] __se_sys_recvmmsg+0x2d9/0x410 [ 762.193428][T17917] __x64_sys_recvmmsg+0x62/0x80 [ 762.198291][T17917] do_syscall_64+0xad/0x160 [ 762.202798][T17917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 762.208683][T17917] [ 762.211008][T17917] Uninit was stored to memory at: [ 762.216046][T17917] kmsan_internal_chain_origin+0xad/0x130 [ 762.221774][T17917] __msan_chain_origin+0x50/0x90 [ 762.226716][T17917] do_recvmmsg+0x11ba/0x22c0 [ 762.231323][T17917] __se_sys_recvmmsg+0x2d9/0x410 [ 762.236266][T17917] __x64_sys_recvmmsg+0x62/0x80 [ 762.241131][T17917] do_syscall_64+0xad/0x160 [ 762.245644][T17917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 762.251528][T17917] [ 762.253856][T17917] Uninit was stored to memory at: [ 762.258889][T17917] kmsan_internal_chain_origin+0xad/0x130 [ 762.264614][T17917] __msan_chain_origin+0x50/0x90 [ 762.269558][T17917] do_recvmmsg+0x11ba/0x22c0 [ 762.274158][T17917] __se_sys_recvmmsg+0x2d9/0x410 [ 762.279100][T17917] __x64_sys_recvmmsg+0x62/0x80 [ 762.283960][T17917] do_syscall_64+0xad/0x160 [ 762.288469][T17917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 762.294349][T17917] [ 762.296671][T17917] Uninit was stored to memory at: [ 762.301701][T17917] kmsan_internal_chain_origin+0xad/0x130 20:24:12 executing program 2: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 762.307433][T17917] __msan_chain_origin+0x50/0x90 [ 762.312379][T17917] do_recvmmsg+0x11ba/0x22c0 [ 762.316977][T17917] __se_sys_recvmmsg+0x2d9/0x410 [ 762.321921][T17917] __x64_sys_recvmmsg+0x62/0x80 [ 762.326778][T17917] do_syscall_64+0xad/0x160 [ 762.331296][T17917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 762.337178][T17917] [ 762.339503][T17917] Uninit was stored to memory at: [ 762.344538][T17917] kmsan_internal_chain_origin+0xad/0x130 [ 762.350274][T17917] __msan_chain_origin+0x50/0x90 20:24:12 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) [ 762.355219][T17917] do_recvmmsg+0x11ba/0x22c0 [ 762.359818][T17917] __se_sys_recvmmsg+0x2d9/0x410 [ 762.364761][T17917] __x64_sys_recvmmsg+0x62/0x80 [ 762.369620][T17917] do_syscall_64+0xad/0x160 [ 762.374144][T17917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 762.380070][T17917] [ 762.382391][T17917] Uninit was stored to memory at: [ 762.387416][T17917] kmsan_internal_chain_origin+0xad/0x130 [ 762.393128][T17917] __msan_chain_origin+0x50/0x90 [ 762.398055][T17917] do_recvmmsg+0x11ba/0x22c0 [ 762.402631][T17917] __se_sys_recvmmsg+0x2d9/0x410 [ 762.407553][T17917] __x64_sys_recvmmsg+0x62/0x80 [ 762.412392][T17917] do_syscall_64+0xad/0x160 [ 762.416894][T17917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 762.422762][T17917] [ 762.425077][T17917] Uninit was stored to memory at: [ 762.430094][T17917] kmsan_internal_chain_origin+0xad/0x130 [ 762.435798][T17917] __msan_chain_origin+0x50/0x90 [ 762.440724][T17917] do_recvmmsg+0x11ba/0x22c0 [ 762.445302][T17917] __se_sys_recvmmsg+0x2d9/0x410 [ 762.450226][T17917] __x64_sys_recvmmsg+0x62/0x80 [ 762.455064][T17917] do_syscall_64+0xad/0x160 [ 762.459644][T17917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 762.465520][T17917] [ 762.467833][T17917] Local variable ----msg_sys@do_recvmmsg created at: [ 762.474494][T17917] do_recvmmsg+0xbf/0x22c0 [ 762.478897][T17917] do_recvmmsg+0xbf/0x22c0 20:24:13 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:24:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x5, 0x0) sendmmsg(r2, &(0x7f000000dc80)=[{{&(0x7f0000000040)=@tipc=@id, 0x80, 0x0}}], 0x1, 0x0) 20:24:13 executing program 2: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 20:24:14 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) 20:24:14 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) syz_genetlink_get_family_id$ipvs(0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 20:24:14 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000100000000160000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001680100001800c000900000000000000000008000a"], 0x3c}}, 0x0) 20:24:14 executing program 4: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}]}, 0x190) [ 764.193880][T17990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 20:24:14 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff42) close(r1) [ 764.359321][T17990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 20:24:14 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x0, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) 20:24:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) 20:24:15 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000840)={'filter\x00', 0x1002, 0x4, 0x3d0, 0x5202, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, {@empty=[0x0, 0x2, 0x0, 0x0, 0xa]}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @local, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) 20:24:15 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, 0x0, 0xff42) close(r1) [ 764.927860][T18007] cannot load conntrack support for proto=3 20:24:15 executing program 3: [ 765.019110][ T3390] usb 3-1: new high-speed USB device number 50 using dummy_hcd 20:24:15 executing program 4: [ 765.194072][T18010] not chained 30000 origins [ 765.198616][T18010] CPU: 0 PID: 18010 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 765.207286][T18010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.217345][T18010] Call Trace: [ 765.220654][T18010] dump_stack+0x21c/0x280 [ 765.225032][T18010] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 765.231114][T18010] kmsan_internal_chain_origin+0x6f/0x130 [ 765.236842][T18010] ? kmsan_get_metadata+0x116/0x180 [ 765.242052][T18010] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 765.247954][T18010] ? kmsan_internal_set_origin+0x75/0xb0 [ 765.253611][T18010] ? kmsan_get_metadata+0x116/0x180 [ 765.261191][T18010] ? kmsan_get_metadata+0x116/0x180 [ 765.266403][T18010] ? kmsan_set_origin_checked+0x95/0xf0 [ 765.271961][T18010] ? kmsan_get_metadata+0x116/0x180 [ 765.277175][T18010] ? kmsan_get_metadata+0x116/0x180 [ 765.282390][T18010] ? kmsan_set_origin_checked+0x95/0xf0 [ 765.287957][T18010] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 765.289019][ T3390] usb 3-1: device descriptor read/64, error 18 [ 765.294066][T18010] ? _copy_from_user+0x201/0x310 [ 765.305146][T18010] ? kmsan_get_metadata+0x116/0x180 [ 765.310355][T18010] __msan_chain_origin+0x50/0x90 [ 765.315298][T18010] do_recvmmsg+0x11ba/0x22c0 [ 765.319932][T18010] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 765.325747][T18010] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 765.331910][T18010] ? get_timespec64+0x2ca/0x360 [ 765.336776][T18010] __se_sys_recvmmsg+0x2d9/0x410 [ 765.341733][T18010] __x64_sys_recvmmsg+0x62/0x80 [ 765.346593][T18010] do_syscall_64+0xad/0x160 [ 765.351115][T18010] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 765.357008][T18010] RIP: 0033:0x45d579 [ 765.360893][T18010] Code: Bad RIP value. [ 765.364969][T18010] RSP: 002b:00007f6bfdb20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 765.373386][T18010] RAX: ffffffffffffffda RBX: 00000000000269c0 RCX: 000000000045d579 [ 765.381357][T18010] RDX: 0400000000000ec0 RSI: 0000000020002ec0 RDI: 0000000000000003 [ 765.389320][T18010] RBP: 000000000118d0d0 R08: 00000000200001c0 R09: 0000000000000000 [ 765.397286][T18010] R10: 000000000000000a R11: 0000000000000246 R12: 000000000118d08c [ 765.405257][T18010] R13: 000000000169fb6f R14: 00007f6bfdb219c0 R15: 000000000118d08c [ 765.413239][T18010] Uninit was stored to memory at: [ 765.418260][T18010] kmsan_internal_chain_origin+0xad/0x130 [ 765.423965][T18010] __msan_chain_origin+0x50/0x90 [ 765.428906][T18010] do_recvmmsg+0x11ba/0x22c0 [ 765.433493][T18010] __se_sys_recvmmsg+0x2d9/0x410 [ 765.438432][T18010] __x64_sys_recvmmsg+0x62/0x80 [ 765.443393][T18010] do_syscall_64+0xad/0x160 [ 765.447884][T18010] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 765.453754][T18010] [ 765.456078][T18010] Uninit was stored to memory at: [ 765.461265][T18010] kmsan_internal_chain_origin+0xad/0x130 [ 765.466988][T18010] __msan_chain_origin+0x50/0x90 [ 765.471933][T18010] do_recvmmsg+0x11ba/0x22c0 [ 765.476512][T18010] __se_sys_recvmmsg+0x2d9/0x410 [ 765.481435][T18010] __x64_sys_recvmmsg+0x62/0x80 [ 765.486274][T18010] do_syscall_64+0xad/0x160 [ 765.490765][T18010] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 765.496636][T18010] [ 765.499003][T18010] Uninit was stored to memory at: [ 765.504028][T18010] kmsan_internal_chain_origin+0xad/0x130 [ 765.509738][T18010] __msan_chain_origin+0x50/0x90 [ 765.514674][T18010] do_recvmmsg+0x11ba/0x22c0 [ 765.519250][T18010] __se_sys_recvmmsg+0x2d9/0x410 [ 765.524183][T18010] __x64_sys_recvmmsg+0x62/0x80 [ 765.529022][T18010] do_syscall_64+0xad/0x160 [ 765.535338][T18010] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 765.541207][T18010] [ 765.543530][T18010] Uninit was stored to memory at: [ 765.548546][T18010] kmsan_internal_chain_origin+0xad/0x130 [ 765.554255][T18010] __msan_chain_origin+0x50/0x90 [ 765.559180][T18010] do_recvmmsg+0x11ba/0x22c0 [ 765.563759][T18010] __se_sys_recvmmsg+0x2d9/0x410 [ 765.568684][T18010] __x64_sys_recvmmsg+0x62/0x80 [ 765.573523][T18010] do_syscall_64+0xad/0x160 [ 765.578012][T18010] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 765.583885][T18010] [ 765.586197][T18010] Uninit was stored to memory at: [ 765.591213][T18010] kmsan_internal_chain_origin+0xad/0x130 [ 765.596920][T18010] __msan_chain_origin+0x50/0x90 [ 765.601843][T18010] do_recvmmsg+0x11ba/0x22c0 [ 765.606430][T18010] __se_sys_recvmmsg+0x2d9/0x410 [ 765.611356][T18010] __x64_sys_recvmmsg+0x62/0x80 [ 765.616195][T18010] do_syscall_64+0xad/0x160 [ 765.620687][T18010] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 765.626561][T18010] [ 765.628870][T18010] Uninit was stored to memory at: [ 765.633886][T18010] kmsan_internal_chain_origin+0xad/0x130 [ 765.639597][T18010] __msan_chain_origin+0x50/0x90 [ 765.644522][T18010] do_recvmmsg+0x11ba/0x22c0 [ 765.649097][T18010] __se_sys_recvmmsg+0x2d9/0x410 [ 765.654030][T18010] __x64_sys_recvmmsg+0x62/0x80 [ 765.658873][T18010] do_syscall_64+0xad/0x160 [ 765.663370][T18010] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 765.669241][T18010] [ 765.671552][T18010] Uninit was stored to memory at: [ 765.676565][T18010] kmsan_internal_chain_origin+0xad/0x130 [ 765.682318][T18010] __msan_chain_origin+0x50/0x90 [ 765.687252][T18010] do_recvmmsg+0x11ba/0x22c0 20:24:16 executing program 3: [ 765.691915][T18010] __se_sys_recvmmsg+0x2d9/0x410 [ 765.696837][T18010] __x64_sys_recvmmsg+0x62/0x80 [ 765.701676][T18010] do_syscall_64+0xad/0x160 [ 765.706166][T18010] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 765.712043][T18010] [ 765.714457][T18010] Local variable ----msg_sys@do_recvmmsg created at: [ 765.721117][T18010] do_recvmmsg+0xbf/0x22c0 [ 765.725517][T18010] do_recvmmsg+0xbf/0x22c0 [ 765.998808][ T3390] usb 3-1: device descriptor read/64, error 18 20:24:16 executing program 5: 20:24:16 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:16 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, 0x0, 0xff42) close(r1) 20:24:16 executing program 3: 20:24:16 executing program 4: [ 766.268520][ T3390] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 766.558515][ T3390] usb 3-1: device descriptor read/64, error 18 [ 766.955217][ T3390] usb 3-1: device descriptor read/64, error 18 [ 767.081400][ T3390] usb usb3-port1: attempt power cycle 20:24:18 executing program 3: 20:24:18 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, 0x0, 0xff42) close(r1) 20:24:18 executing program 4: 20:24:18 executing program 5: 20:24:18 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x0, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) 20:24:18 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:18 executing program 4: 20:24:18 executing program 5: 20:24:18 executing program 3: 20:24:18 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(0xffffffffffffffff) [ 768.238381][ T3390] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 768.369136][ T3390] usb 3-1: Invalid ep0 maxpacket: 0 [ 768.401079][T18037] not chained 40000 origins [ 768.405640][T18037] CPU: 0 PID: 18037 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 768.414362][T18037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.424551][T18037] Call Trace: [ 768.428125][T18037] dump_stack+0x21c/0x280 [ 768.432472][T18037] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 768.438571][T18037] kmsan_internal_chain_origin+0x6f/0x130 [ 768.444308][T18037] ? kmsan_get_metadata+0x116/0x180 [ 768.449521][T18037] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 768.455428][T18037] ? kmsan_internal_set_origin+0x75/0xb0 [ 768.462557][T18037] ? kmsan_get_metadata+0x116/0x180 [ 768.467772][T18037] ? kmsan_get_metadata+0x116/0x180 [ 768.472982][T18037] ? kmsan_set_origin_checked+0x95/0xf0 [ 768.478537][T18037] ? kmsan_get_metadata+0x116/0x180 [ 768.483739][T18037] ? kmsan_get_metadata+0x116/0x180 [ 768.488941][T18037] ? kmsan_set_origin_checked+0x95/0xf0 [ 768.494498][T18037] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 768.500583][T18037] ? _copy_from_user+0x201/0x310 [ 768.505527][T18037] ? kmsan_get_metadata+0x116/0x180 [ 768.510730][T18037] __msan_chain_origin+0x50/0x90 [ 768.515765][T18037] do_recvmmsg+0x11ba/0x22c0 [ 768.520396][T18037] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 768.526212][T18037] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 768.529213][ T3390] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 768.532371][T18037] ? get_timespec64+0x2ca/0x360 [ 768.532397][T18037] __se_sys_recvmmsg+0x2d9/0x410 [ 768.532427][T18037] __x64_sys_recvmmsg+0x62/0x80 [ 768.532449][T18037] do_syscall_64+0xad/0x160 [ 768.532470][T18037] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 768.532485][T18037] RIP: 0033:0x45d579 [ 768.532491][T18037] Code: Bad RIP value. [ 768.532535][T18037] RSP: 002b:00007fdc5c60ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 768.581376][T18037] RAX: ffffffffffffffda RBX: 00000000000269c0 RCX: 000000000045d579 [ 768.589357][T18037] RDX: 0400000000000ec0 RSI: 0000000020002ec0 RDI: 0000000000000003 [ 768.597334][T18037] RBP: 000000000118cf90 R08: 00000000200001c0 R09: 0000000000000000 [ 768.605318][T18037] R10: 000000000000000a R11: 0000000000000246 R12: 000000000118cf4c [ 768.613293][T18037] R13: 000000000169fb6f R14: 00007fdc5c60f9c0 R15: 000000000118cf4c [ 768.621274][T18037] Uninit was stored to memory at: [ 768.626313][T18037] kmsan_internal_chain_origin+0xad/0x130 [ 768.632046][T18037] __msan_chain_origin+0x50/0x90 [ 768.636990][T18037] do_recvmmsg+0x11ba/0x22c0 [ 768.641585][T18037] __se_sys_recvmmsg+0x2d9/0x410 [ 768.647488][T18037] __x64_sys_recvmmsg+0x62/0x80 [ 768.652340][T18037] do_syscall_64+0xad/0x160 [ 768.656846][T18037] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 768.659498][ T3390] usb 3-1: Invalid ep0 maxpacket: 0 [ 768.662724][T18037] [ 768.662731][T18037] Uninit was stored to memory at: [ 768.662753][T18037] kmsan_internal_chain_origin+0xad/0x130 [ 768.662769][T18037] __msan_chain_origin+0x50/0x90 [ 768.662785][T18037] do_recvmmsg+0x11ba/0x22c0 [ 768.662801][T18037] __se_sys_recvmmsg+0x2d9/0x410 [ 768.662817][T18037] __x64_sys_recvmmsg+0x62/0x80 [ 768.662835][T18037] do_syscall_64+0xad/0x160 [ 768.662851][T18037] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 768.662856][T18037] [ 768.662861][T18037] Uninit was stored to memory at: [ 768.662877][T18037] kmsan_internal_chain_origin+0xad/0x130 [ 768.662929][T18037] __msan_chain_origin+0x50/0x90 [ 768.704599][ T3390] usb usb3-port1: unable to enumerate USB device [ 768.704978][T18037] do_recvmmsg+0x11ba/0x22c0 [ 768.739702][T18037] __se_sys_recvmmsg+0x2d9/0x410 [ 768.744655][T18037] __x64_sys_recvmmsg+0x62/0x80 [ 768.749515][T18037] do_syscall_64+0xad/0x160 [ 768.754030][T18037] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 768.759915][T18037] [ 768.762241][T18037] Uninit was stored to memory at: [ 768.767291][T18037] kmsan_internal_chain_origin+0xad/0x130 [ 768.773032][T18037] __msan_chain_origin+0x50/0x90 [ 768.777973][T18037] do_recvmmsg+0x11ba/0x22c0 [ 768.782564][T18037] __se_sys_recvmmsg+0x2d9/0x410 [ 768.787592][T18037] __x64_sys_recvmmsg+0x62/0x80 [ 768.792455][T18037] do_syscall_64+0xad/0x160 [ 768.796965][T18037] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 768.802847][T18037] [ 768.805169][T18037] Uninit was stored to memory at: [ 768.810227][T18037] kmsan_internal_chain_origin+0xad/0x130 [ 768.815952][T18037] __msan_chain_origin+0x50/0x90 [ 768.820903][T18037] do_recvmmsg+0x11ba/0x22c0 [ 768.825515][T18037] __se_sys_recvmmsg+0x2d9/0x410 [ 768.830459][T18037] __x64_sys_recvmmsg+0x62/0x80 [ 768.835317][T18037] do_syscall_64+0xad/0x160 [ 768.839827][T18037] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 768.845709][T18037] [ 768.848034][T18037] Uninit was stored to memory at: [ 768.853075][T18037] kmsan_internal_chain_origin+0xad/0x130 [ 768.858788][T18037] __msan_chain_origin+0x50/0x90 [ 768.863720][T18037] do_recvmmsg+0x11ba/0x22c0 [ 768.868317][T18037] __se_sys_recvmmsg+0x2d9/0x410 [ 768.874200][T18037] __x64_sys_recvmmsg+0x62/0x80 [ 768.879040][T18037] do_syscall_64+0xad/0x160 [ 768.883533][T18037] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 768.889404][T18037] [ 768.891717][T18037] Uninit was stored to memory at: [ 768.896739][T18037] kmsan_internal_chain_origin+0xad/0x130 20:24:19 executing program 3: [ 768.902448][T18037] __msan_chain_origin+0x50/0x90 [ 768.907386][T18037] do_recvmmsg+0x11ba/0x22c0 [ 768.911963][T18037] __se_sys_recvmmsg+0x2d9/0x410 [ 768.916886][T18037] __x64_sys_recvmmsg+0x62/0x80 [ 768.921724][T18037] do_syscall_64+0xad/0x160 [ 768.926214][T18037] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 768.932088][T18037] [ 768.934405][T18037] Local variable ----msg_sys@do_recvmmsg created at: [ 768.941068][T18037] do_recvmmsg+0xbf/0x22c0 [ 768.945471][T18037] do_recvmmsg+0xbf/0x22c0 20:24:19 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(0xffffffffffffffff) 20:24:19 executing program 5: 20:24:21 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x0, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) 20:24:21 executing program 4: 20:24:21 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0xff42) close(0xffffffffffffffff) 20:24:21 executing program 3: 20:24:21 executing program 5: 20:24:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:21 executing program 5: 20:24:21 executing program 4: 20:24:21 executing program 3: 20:24:21 executing program 0: [ 771.568343][ T3225] usb 3-1: new high-speed USB device number 54 using dummy_hcd 20:24:21 executing program 5: 20:24:22 executing program 3: [ 771.859299][ T3225] usb 3-1: device descriptor read/64, error 18 [ 772.267952][ T3225] usb 3-1: device descriptor read/64, error 18 [ 772.547944][ T3225] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 772.837813][ T3225] usb 3-1: device descriptor read/64, error 18 [ 773.258392][ T3225] usb 3-1: device descriptor read/64, error 18 [ 773.378138][ T3225] usb usb3-port1: attempt power cycle [ 774.107985][ T3225] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 774.209381][ T3225] usb 3-1: Invalid ep0 maxpacket: 0 20:24:24 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) 20:24:24 executing program 4: 20:24:24 executing program 0: 20:24:24 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32ef6a80277bec00123d000300390077a0bdad446b9bbc7a46e3988285dcdf12f213d3f868fecea4e455166883ad14955f947ee2b49e566f8afa8af92347510f0b56a20ff27f", 0x89}], 0x1}, 0x0) 20:24:24 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6c, &(0x7f0000001240)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x84) [ 774.358218][ T3225] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 774.488222][ T3225] usb 3-1: device descriptor read/8, error -71 [ 774.729022][ T3225] usb 3-1: device descriptor read/8, error -71 20:24:25 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x5a, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x12e00) [ 774.851224][ T3225] usb usb3-port1: unable to enumerate USB device 20:24:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xc3, &(0x7f00000005c0)="f7f249b9740c0764ca04f400befbf2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac0000009038396bb68e4053cd0c42727a81b1af4915e96c43607a144f6543b6faf143e648fcbde4967033f51be252a22ea40c9422247185569bdffc58cff1685babdf5c77ac6c0ceb6e4d48ec30cd70a1a381611750c555848886f1e31994b058b3289760d441a0b9777c243bccd3ff8bfc59a323235d9e3bc4442f31a171b45bcfe35bc10298e76c298ef72b6e54366e2e553731707f8cb0"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 775.238102][ T3225] usb 3-1: new high-speed USB device number 58 using dummy_hcd 20:24:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6f, &(0x7f0000001240)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x84) 20:24:25 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x450, 0x158, 0x208, 0x208, 0x2f0, 0x2f0, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@multicast1, @remote, 0x0, 0x0, 'caif0\x00', 'team_slave_0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x11}}]}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) [ 775.517666][ T3225] usb 3-1: Using ep0 maxpacket: 16 20:24:25 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_NOP={0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 775.638897][ T3225] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 775.651667][ T3225] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 20:24:26 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) [ 775.819146][T18152] ipt_rpfilter: unknown options [ 775.902174][ T3225] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 775.903746][T18160] ipt_rpfilter: unknown options [ 775.911704][ T3225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.911817][ T3225] usb 3-1: Product: syz [ 775.911927][ T3225] usb 3-1: Manufacturer: syz [ 775.912040][ T3225] usb 3-1: SerialNumber: syz [ 775.956695][ T3225] usb 3-1: config 0 descriptor?? [ 776.002917][ T3225] usb-storage 3-1:0.0: USB Mass Storage device detected [ 776.045976][ T3225] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 776.202836][T17188] usb 3-1: USB disconnect, device number 58 20:24:27 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x87, 0xc5}}]}}]}}, 0x0) 20:24:27 executing program 5: io_setup(0x6, &(0x7f00000000c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000001d40)=[&(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x4}]) 20:24:27 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:24:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x10f, &(0x7f00000005c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:24:27 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:27 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080), 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) [ 777.348333][ T9020] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 777.588976][ T9020] usb 3-1: Using ep0 maxpacket: 16 [ 777.700733][T18200] not chained 50000 origins [ 777.705288][T18200] CPU: 1 PID: 18200 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 777.714049][T18200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.724134][T18200] Call Trace: [ 777.727448][T18200] dump_stack+0x21c/0x280 [ 777.731808][T18200] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 777.737904][T18200] kmsan_internal_chain_origin+0x6f/0x130 [ 777.743655][T18200] ? kmsan_get_metadata+0x116/0x180 [ 777.748876][T18200] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 777.754790][T18200] ? kmsan_internal_set_origin+0x75/0xb0 [ 777.760449][T18200] ? kmsan_get_metadata+0x116/0x180 [ 777.765754][T18200] ? kmsan_get_metadata+0x116/0x180 [ 777.771004][T18200] ? kmsan_set_origin_checked+0x95/0xf0 [ 777.777357][T18200] ? kmsan_get_metadata+0x116/0x180 [ 777.782578][T18200] ? kmsan_get_metadata+0x116/0x180 [ 777.787882][T18200] ? kmsan_set_origin_checked+0x95/0xf0 [ 777.793635][T18200] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 777.800284][T18200] ? _copy_from_user+0x201/0x310 [ 777.805342][T18200] ? kmsan_get_metadata+0x116/0x180 [ 777.810670][T18200] __msan_chain_origin+0x50/0x90 [ 777.815636][T18200] do_recvmmsg+0x11ba/0x22c0 [ 777.820283][T18200] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 777.826211][T18200] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 777.832384][T18200] ? get_timespec64+0x2ca/0x360 [ 777.837350][T18200] __se_sys_recvmmsg+0x2d9/0x410 [ 777.842317][T18200] __x64_sys_recvmmsg+0x62/0x80 [ 777.847199][T18200] do_syscall_64+0xad/0x160 [ 777.851722][T18200] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 777.857623][T18200] RIP: 0033:0x45d579 [ 777.861517][T18200] Code: Bad RIP value. [ 777.865587][T18200] RSP: 002b:00007f6bfdb62c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 777.874008][T18200] RAX: ffffffffffffffda RBX: 00000000000269c0 RCX: 000000000045d579 [ 777.881992][T18200] RDX: 0400000000000ec0 RSI: 0000000020002ec0 RDI: 0000000000000003 [ 777.889979][T18200] RBP: 000000000118cf90 R08: 00000000200001c0 R09: 0000000000000000 [ 777.897965][T18200] R10: 000000000000000a R11: 0000000000000246 R12: 000000000118cf4c [ 777.905961][T18200] R13: 000000000169fb6f R14: 00007f6bfdb639c0 R15: 000000000118cf4c [ 777.913955][T18200] Uninit was stored to memory at: [ 777.918998][T18200] kmsan_internal_chain_origin+0xad/0x130 [ 777.924757][T18200] __msan_chain_origin+0x50/0x90 [ 777.930405][T18200] do_recvmmsg+0x11ba/0x22c0 [ 777.935016][T18200] __se_sys_recvmmsg+0x2d9/0x410 [ 777.939966][T18200] __x64_sys_recvmmsg+0x62/0x80 [ 777.944833][T18200] do_syscall_64+0xad/0x160 [ 777.949351][T18200] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 777.955237][T18200] [ 777.957611][T18200] Uninit was stored to memory at: [ 777.962663][T18200] kmsan_internal_chain_origin+0xad/0x130 [ 777.968400][T18200] __msan_chain_origin+0x50/0x90 [ 777.973353][T18200] do_recvmmsg+0x11ba/0x22c0 [ 777.977956][T18200] __se_sys_recvmmsg+0x2d9/0x410 [ 777.982907][T18200] __x64_sys_recvmmsg+0x62/0x80 [ 777.987771][T18200] do_syscall_64+0xad/0x160 [ 777.992291][T18200] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 777.998184][T18200] [ 778.000623][T18200] Uninit was stored to memory at: [ 778.005666][T18200] kmsan_internal_chain_origin+0xad/0x130 [ 778.011407][T18200] __msan_chain_origin+0x50/0x90 [ 778.016359][T18200] do_recvmmsg+0x11ba/0x22c0 [ 778.020962][T18200] __se_sys_recvmmsg+0x2d9/0x410 [ 778.025916][T18200] __x64_sys_recvmmsg+0x62/0x80 [ 778.030783][T18200] do_syscall_64+0xad/0x160 [ 778.035303][T18200] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 778.041194][T18200] [ 778.043637][T18200] Uninit was stored to memory at: [ 778.048687][T18200] kmsan_internal_chain_origin+0xad/0x130 [ 778.054421][T18200] __msan_chain_origin+0x50/0x90 [ 778.059373][T18200] do_recvmmsg+0x11ba/0x22c0 [ 778.063977][T18200] __se_sys_recvmmsg+0x2d9/0x410 [ 778.068930][T18200] __x64_sys_recvmmsg+0x62/0x80 [ 778.073812][T18200] do_syscall_64+0xad/0x160 [ 778.078365][T18200] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 778.084251][T18200] [ 778.086678][T18200] Uninit was stored to memory at: [ 778.091722][T18200] kmsan_internal_chain_origin+0xad/0x130 [ 778.097478][T18200] __msan_chain_origin+0x50/0x90 [ 778.102436][T18200] do_recvmmsg+0x11ba/0x22c0 [ 778.107043][T18200] __se_sys_recvmmsg+0x2d9/0x410 [ 778.112001][T18200] __x64_sys_recvmmsg+0x62/0x80 [ 778.116868][T18200] do_syscall_64+0xad/0x160 [ 778.121394][T18200] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 778.127456][T18200] [ 778.129785][T18200] Uninit was stored to memory at: [ 778.134835][T18200] kmsan_internal_chain_origin+0xad/0x130 [ 778.140569][T18200] __msan_chain_origin+0x50/0x90 [ 778.145553][T18200] do_recvmmsg+0x11ba/0x22c0 [ 778.150161][T18200] __se_sys_recvmmsg+0x2d9/0x410 [ 778.155126][T18200] __x64_sys_recvmmsg+0x62/0x80 [ 778.159998][T18200] do_syscall_64+0xad/0x160 [ 778.164516][T18200] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 778.170411][T18200] [ 778.172746][T18200] Uninit was stored to memory at: [ 778.177796][T18200] kmsan_internal_chain_origin+0xad/0x130 [ 778.183529][T18200] __msan_chain_origin+0x50/0x90 [ 778.188484][T18200] do_recvmmsg+0x11ba/0x22c0 [ 778.193087][T18200] __se_sys_recvmmsg+0x2d9/0x410 [ 778.198034][T18200] __x64_sys_recvmmsg+0x62/0x80 [ 778.202913][T18200] do_syscall_64+0xad/0x160 [ 778.207440][T18200] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 778.213342][T18200] [ 778.215680][T18200] Local variable ----msg_sys@do_recvmmsg created at: [ 778.222364][T18200] do_recvmmsg+0xbf/0x22c0 [ 778.226812][T18200] do_recvmmsg+0xbf/0x22c0 [ 778.438660][ T9020] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 778.448424][ T9020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.456575][ T9020] usb 3-1: Product: syz [ 778.461170][ T9020] usb 3-1: Manufacturer: syz [ 778.466018][ T9020] usb 3-1: SerialNumber: syz 20:24:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) recvmmsg(r2, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000008f80)=""/102400, 0x19000}], 0x1}}], 0x1, 0xff2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 20:24:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d02, 0x9]}) 20:24:28 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) [ 778.632668][ T9020] usb 3-1: config 0 descriptor?? [ 778.683139][ T9020] usb-storage 3-1:0.0: USB Mass Storage device detected [ 778.773822][ T9020] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 778.924732][ T9020] usb 3-1: USB disconnect, device number 59 20:24:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d02, 0x9]}) 20:24:29 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32ef6a80277bec00123d000200390077a0bdad446b9bbc7a46e3988285dcdf12f213d3f868fecea4e455166883ad14955f947ee2b49e566f8afa8af92347510f0b56a20ff27f", 0x89}], 0x1}, 0x0) 20:24:29 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x87, 0xc5}}]}}]}}, 0x0) 20:24:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d02, 0x9]}) 20:24:29 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'vlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x200) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x3f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap$fb(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000040)=r7) sendto$inet6(r0, &(0x7f0000000300)="0503d0324a0e3e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 20:24:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="b9800000c035004000000f30d07531f5f50fdb090920e03500004000c4636569b3ce4b50330026660f3881694f0f0f5c193a9af342d8860080000066b82001c4220d2d4f5d2e66420fc73366ba2000ed", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0x80}, "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", "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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:24:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:24:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d02, 0x9]}) [ 780.127484][T10420] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 780.378662][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 780.396629][T18263] x86/PAT: syz-executor.4:18263 map pfn RAM range req write-combining for [mem 0x1a0d79000-0x1a0d79fff], got write-back [ 780.669095][T10420] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 780.678501][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.686649][T10420] usb 3-1: Product: syz [ 780.691959][T10420] usb 3-1: Manufacturer: syz [ 780.696707][T10420] usb 3-1: SerialNumber: syz 20:24:31 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x500, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) 20:24:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 780.896480][T10420] usb 3-1: config 0 descriptor?? 20:24:31 executing program 3: r0 = io_uring_setup(0x69, &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) [ 780.973085][T10420] usb-storage 3-1:0.0: USB Mass Storage device detected 20:24:31 executing program 1: write(0xffffffffffffffff, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) [ 781.084598][T10420] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 20:24:31 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) syz_open_dev$vcsn(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) [ 781.209120][T10420] usb 3-1: USB disconnect, device number 60 [ 781.629103][T18298] not chained 60000 origins [ 781.633677][T18298] CPU: 0 PID: 18298 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 781.642362][T18298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 781.652407][T18298] Call Trace: [ 781.655706][T18298] dump_stack+0x21c/0x280 [ 781.660034][T18298] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 781.666097][T18298] kmsan_internal_chain_origin+0x6f/0x130 [ 781.671812][T18298] ? kmsan_get_metadata+0x116/0x180 [ 781.677012][T18298] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 781.682900][T18298] ? kmsan_internal_set_origin+0x75/0xb0 [ 781.688532][T18298] ? kmsan_get_metadata+0x116/0x180 [ 781.693726][T18298] ? kmsan_get_metadata+0x116/0x180 [ 781.698942][T18298] ? kmsan_set_origin_checked+0x95/0xf0 [ 781.704478][T18298] ? kmsan_get_metadata+0x116/0x180 [ 781.709672][T18298] ? kmsan_get_metadata+0x116/0x180 [ 781.714863][T18298] ? kmsan_set_origin_checked+0x95/0xf0 [ 781.720410][T18298] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 781.726484][T18298] ? _copy_from_user+0x201/0x310 [ 781.731439][T18298] ? kmsan_get_metadata+0x116/0x180 [ 781.736643][T18298] __msan_chain_origin+0x50/0x90 [ 781.741666][T18298] do_recvmmsg+0x11ba/0x22c0 [ 781.746286][T18298] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 781.752172][T18298] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 781.758316][T18298] ? get_timespec64+0x2ca/0x360 [ 781.763164][T18298] __se_sys_recvmmsg+0x2d9/0x410 [ 781.768110][T18298] __x64_sys_recvmmsg+0x62/0x80 [ 781.773447][T18298] do_syscall_64+0xad/0x160 [ 781.777964][T18298] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 781.783939][T18298] RIP: 0033:0x45d579 [ 781.787814][T18298] Code: Bad RIP value. [ 781.791888][T18298] RSP: 002b:00007f6bfdb62c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 781.800288][T18298] RAX: ffffffffffffffda RBX: 00000000000269c0 RCX: 000000000045d579 [ 781.808509][T18298] RDX: 0400000000000ec0 RSI: 0000000020002ec0 RDI: 0000000000000003 [ 781.816472][T18298] RBP: 000000000118cf90 R08: 00000000200001c0 R09: 0000000000000000 [ 781.824435][T18298] R10: 000000000000000a R11: 0000000000000246 R12: 000000000118cf4c [ 781.832409][T18298] R13: 000000000169fb6f R14: 00007f6bfdb639c0 R15: 000000000118cf4c [ 781.841786][T18298] Uninit was stored to memory at: [ 781.846819][T18298] kmsan_internal_chain_origin+0xad/0x130 [ 781.852533][T18298] __msan_chain_origin+0x50/0x90 [ 781.857477][T18298] do_recvmmsg+0x11ba/0x22c0 [ 781.862057][T18298] __se_sys_recvmmsg+0x2d9/0x410 [ 781.866987][T18298] __x64_sys_recvmmsg+0x62/0x80 [ 781.871931][T18298] do_syscall_64+0xad/0x160 [ 781.876423][T18298] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 781.882293][T18298] [ 781.884612][T18298] Uninit was stored to memory at: [ 781.889628][T18298] kmsan_internal_chain_origin+0xad/0x130 [ 781.895348][T18298] __msan_chain_origin+0x50/0x90 [ 781.900294][T18298] do_recvmmsg+0x11ba/0x22c0 [ 781.904873][T18298] __se_sys_recvmmsg+0x2d9/0x410 [ 781.910071][T18298] __x64_sys_recvmmsg+0x62/0x80 [ 781.914910][T18298] do_syscall_64+0xad/0x160 [ 781.919408][T18298] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 781.925279][T18298] [ 781.927594][T18298] Uninit was stored to memory at: [ 781.932613][T18298] kmsan_internal_chain_origin+0xad/0x130 [ 781.938322][T18298] __msan_chain_origin+0x50/0x90 [ 781.943423][T18298] do_recvmmsg+0x11ba/0x22c0 [ 781.948001][T18298] __se_sys_recvmmsg+0x2d9/0x410 [ 781.952981][T18298] __x64_sys_recvmmsg+0x62/0x80 [ 781.957832][T18298] do_syscall_64+0xad/0x160 [ 781.962359][T18298] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 781.968243][T18298] [ 781.970561][T18298] Uninit was stored to memory at: [ 781.975582][T18298] kmsan_internal_chain_origin+0xad/0x130 [ 781.981636][T18298] __msan_chain_origin+0x50/0x90 [ 781.986575][T18298] do_recvmmsg+0x11ba/0x22c0 [ 781.991153][T18298] __se_sys_recvmmsg+0x2d9/0x410 [ 781.996080][T18298] __x64_sys_recvmmsg+0x62/0x80 [ 782.000926][T18298] do_syscall_64+0xad/0x160 [ 782.005418][T18298] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 782.011289][T18298] [ 782.013602][T18298] Uninit was stored to memory at: [ 782.018618][T18298] kmsan_internal_chain_origin+0xad/0x130 [ 782.024346][T18298] __msan_chain_origin+0x50/0x90 [ 782.029398][T18298] do_recvmmsg+0x11ba/0x22c0 [ 782.033990][T18298] __se_sys_recvmmsg+0x2d9/0x410 [ 782.038921][T18298] __x64_sys_recvmmsg+0x62/0x80 [ 782.043952][T18298] do_syscall_64+0xad/0x160 [ 782.048472][T18298] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 782.054346][T18298] [ 782.056661][T18298] Uninit was stored to memory at: [ 782.061677][T18298] kmsan_internal_chain_origin+0xad/0x130 [ 782.067414][T18298] __msan_chain_origin+0x50/0x90 [ 782.072348][T18298] do_recvmmsg+0x11ba/0x22c0 [ 782.076930][T18298] __se_sys_recvmmsg+0x2d9/0x410 [ 782.081864][T18298] __x64_sys_recvmmsg+0x62/0x80 [ 782.086702][T18298] do_syscall_64+0xad/0x160 [ 782.091207][T18298] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 782.097091][T18298] [ 782.099407][T18298] Uninit was stored to memory at: [ 782.104422][T18298] kmsan_internal_chain_origin+0xad/0x130 [ 782.110569][T18298] __msan_chain_origin+0x50/0x90 [ 782.115505][T18298] do_recvmmsg+0x11ba/0x22c0 [ 782.120089][T18298] __se_sys_recvmmsg+0x2d9/0x410 [ 782.125022][T18298] __x64_sys_recvmmsg+0x62/0x80 [ 782.129871][T18298] do_syscall_64+0xad/0x160 [ 782.134377][T18298] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 782.140261][T18298] [ 782.142577][T18298] Local variable ----msg_sys@do_recvmmsg created at: [ 782.149253][T18298] do_recvmmsg+0xbf/0x22c0 [ 782.153654][T18298] do_recvmmsg+0xbf/0x22c0 20:24:32 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x87, 0xc5}}]}}]}}, 0x0) 20:24:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001240)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x84) 20:24:32 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:24:32 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @generic]}, 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) 20:24:32 executing program 1: write(0xffffffffffffffff, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) [ 782.438007][T18307] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:24:32 executing program 1: write(0xffffffffffffffff, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00000000c0)="95", 0x8) 20:24:33 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) semget$private(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x4800, &(0x7f0000000180)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {0xea}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x48}}, 0x0) [ 782.867397][ T9020] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 783.110925][ T9020] usb 3-1: Using ep0 maxpacket: 16 [ 783.179317][T18327] batman_adv: Cannot find parent device 20:24:33 executing program 1: r0 = socket(0x0, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) [ 783.389032][ T9020] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 783.399241][ T9020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.407593][ T9020] usb 3-1: Product: syz [ 783.411911][ T9020] usb 3-1: Manufacturer: syz [ 783.414661][T18337] batman_adv: Cannot find parent device [ 783.416639][ T9020] usb 3-1: SerialNumber: syz 20:24:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$audion(0x0, 0x0, 0x200) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x3f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap$fb(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) [ 783.569644][ T9020] usb 3-1: config 0 descriptor?? 20:24:33 executing program 5: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x1, 0x0, 0x10000ff}, 0x7f) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 783.637384][ T9020] usb-storage 3-1:0.0: USB Mass Storage device detected [ 783.729326][ T9020] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 783.812753][T17188] usb 3-1: USB disconnect, device number 61 20:24:34 executing program 1: r0 = socket(0x0, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) [ 784.041699][T18363] x86/PAT: syz-executor.4:18363 map pfn RAM range req write-combining for [mem 0x18762e000-0x18762efff], got write-back 20:24:34 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{}]}}]}}]}}, 0x0) 20:24:34 executing program 0: unshare(0x2000400) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x800005, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40046201, 0x0) 20:24:34 executing program 5: unshare(0x2000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0x2, 0x0}, 0x10) 20:24:34 executing program 3: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f0000000200)="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", 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0xffffff72, 0x9, 0x0, 0x0, 0x0, "57674de618ec266ae32758a427ff7503e16ad3"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x801) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 20:24:34 executing program 4: unshare(0x2000400) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x800005, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40046201, &(0x7f0000000680)) 20:24:34 executing program 1: r0 = socket(0x0, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:35 executing program 4: r0 = bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000140)={0x2, 0x800000000000004, 0x400000, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@tcp}, 0x20) 20:24:35 executing program 5: bpf$BPF_GET_PROG_INFO(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x14, 0x0}, 0x10) 20:24:35 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xd, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x10) 20:24:35 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0xc}) [ 784.997257][ T9020] usb 3-1: new high-speed USB device number 62 using dummy_hcd 20:24:35 executing program 1: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:35 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001980)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) [ 785.237278][ T9020] usb 3-1: Using ep0 maxpacket: 16 [ 785.357954][ T9020] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 785.537966][ T9020] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 785.547402][ T9020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.555549][ T9020] usb 3-1: Product: syz [ 785.560079][ T9020] usb 3-1: Manufacturer: syz [ 785.564827][ T9020] usb 3-1: SerialNumber: syz [ 785.655024][ T9020] usb 3-1: config 0 descriptor?? [ 785.701037][ T9020] usb-storage 3-1:0.0: USB Mass Storage device detected [ 785.748193][ T9020] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 785.901757][ T9020] usb 3-1: USB disconnect, device number 62 20:24:36 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{}]}}]}}]}}, 0x0) 20:24:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) 20:24:36 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x2000) 20:24:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 20:24:36 executing program 1: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:36 executing program 5: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) 20:24:37 executing program 1: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0x4) 20:24:37 executing program 0: unshare(0x2000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x10) 20:24:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000000), 0x20a154cc) ppoll(0x0, 0x0, 0x0, 0x0, 0xf00000000000000) [ 787.027103][ T3390] usb 3-1: new high-speed USB device number 63 using dummy_hcd 20:24:37 executing program 4: unshare(0x2000400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 787.267846][ T3390] usb 3-1: Using ep0 maxpacket: 16 20:24:37 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) [ 787.388156][ T3390] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 787.557947][ T3390] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 787.567610][ T3390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.575727][ T3390] usb 3-1: Product: syz [ 787.580205][ T3390] usb 3-1: Manufacturer: syz [ 787.584998][ T3390] usb 3-1: SerialNumber: syz [ 787.634855][ T3390] usb 3-1: config 0 descriptor?? [ 787.680654][ T3390] usb-storage 3-1:0.0: USB Mass Storage device detected [ 787.711735][ T3390] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 787.881385][ T3390] usb 3-1: USB disconnect, device number 63 20:24:38 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{}]}}]}}]}}, 0x0) 20:24:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @dev, @val={@void}, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x83, 0x2}]}}}}}}, 0x0) 20:24:38 executing program 0: 20:24:38 executing program 4: 20:24:38 executing program 5: 20:24:38 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:39 executing program 4: 20:24:39 executing program 0: 20:24:39 executing program 5: 20:24:39 executing program 3: [ 789.009925][ T3390] usb 3-1: new high-speed USB device number 64 using dummy_hcd 20:24:39 executing program 4: 20:24:39 executing program 0: [ 789.266954][ T3390] usb 3-1: Using ep0 maxpacket: 16 [ 789.388397][ T3390] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 789.578885][ T3390] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 789.588206][ T3390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.596432][ T3390] usb 3-1: Product: syz [ 789.600957][ T3390] usb 3-1: Manufacturer: syz [ 789.605739][ T3390] usb 3-1: SerialNumber: syz [ 789.658724][ T3390] usb 3-1: config 0 descriptor?? [ 789.700117][ T3390] usb-storage 3-1:0.0: USB Mass Storage device detected [ 789.756535][ T3390] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 789.906381][ T3390] usb 3-1: USB disconnect, device number 64 20:24:40 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x0, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) 20:24:40 executing program 5: 20:24:40 executing program 3: 20:24:40 executing program 4: 20:24:40 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:40 executing program 0: 20:24:41 executing program 3: 20:24:41 executing program 5: 20:24:41 executing program 0: 20:24:41 executing program 4: 20:24:41 executing program 3: 20:24:41 executing program 5: [ 791.106800][ T3390] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 791.358394][ T3390] usb 3-1: Using ep0 maxpacket: 16 [ 791.477561][ T3390] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 791.647583][ T3390] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 791.657027][ T3390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.665090][ T3390] usb 3-1: Product: syz [ 791.670476][ T3390] usb 3-1: Manufacturer: syz [ 791.675208][ T3390] usb 3-1: SerialNumber: syz [ 791.718498][ T3390] usb 3-1: config 0 descriptor?? [ 791.760750][ T3390] usb-storage 3-1:0.0: USB Mass Storage device detected [ 791.807634][ T3390] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 791.961824][ T3390] usb 3-1: USB disconnect, device number 65 20:24:42 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x0, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) 20:24:42 executing program 0: 20:24:42 executing program 4: 20:24:42 executing program 3: 20:24:42 executing program 5: 20:24:42 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:43 executing program 0: 20:24:43 executing program 3: 20:24:43 executing program 4: 20:24:43 executing program 5: [ 793.326576][ T3390] usb 3-1: new high-speed USB device number 66 using dummy_hcd 20:24:43 executing program 0: [ 793.566760][ T3390] usb 3-1: Using ep0 maxpacket: 16 20:24:43 executing program 3: [ 793.687346][ T3390] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 793.887501][ T3390] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 793.897050][ T3390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.905207][ T3390] usb 3-1: Product: syz [ 793.909716][ T3390] usb 3-1: Manufacturer: syz [ 793.914452][ T3390] usb 3-1: SerialNumber: syz [ 794.009499][ T3390] usb 3-1: config 0 descriptor?? [ 794.050287][ T3390] usb-storage 3-1:0.0: USB Mass Storage device detected [ 794.081165][ T3390] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 794.274676][T17188] usb 3-1: USB disconnect, device number 66 20:24:45 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x0, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) 20:24:45 executing program 5: 20:24:45 executing program 4: 20:24:45 executing program 0: 20:24:45 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:45 executing program 3: 20:24:45 executing program 4: 20:24:45 executing program 5: 20:24:45 executing program 3: 20:24:45 executing program 0: 20:24:45 executing program 5: 20:24:45 executing program 3: [ 795.586637][ T3225] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 795.846380][ T3225] usb 3-1: Using ep0 maxpacket: 16 [ 795.987967][ T3225] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 796.187356][ T3225] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 796.196658][ T3225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.204801][ T3225] usb 3-1: Product: syz [ 796.209439][ T3225] usb 3-1: Manufacturer: syz [ 796.214203][ T3225] usb 3-1: SerialNumber: syz [ 796.267237][ T3225] usb 3-1: config 0 descriptor?? [ 796.309793][ T3225] usb-storage 3-1:0.0: USB Mass Storage device detected [ 796.337019][ T3225] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 796.510668][ T9020] usb 3-1: USB disconnect, device number 67 20:24:47 executing program 0: 20:24:47 executing program 4: 20:24:47 executing program 2: syz_usb_connect(0x0, 0x2f, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x4}]}}]}}]}}]}}, 0x0) 20:24:47 executing program 5: 20:24:47 executing program 3: 20:24:47 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:47 executing program 0: 20:24:47 executing program 4: 20:24:47 executing program 3: 20:24:47 executing program 5: 20:24:47 executing program 0: 20:24:48 executing program 4: [ 797.729428][T17188] usb 3-1: new high-speed USB device number 68 using dummy_hcd 20:24:48 executing program 3: 20:24:48 executing program 5: [ 797.990361][T17188] usb 3-1: Using ep0 maxpacket: 16 [ 798.127213][T17188] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 798.136542][T17188] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 798.383004][T17188] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 798.392590][T17188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.401038][T17188] usb 3-1: Product: syz [ 798.405390][T17188] usb 3-1: Manufacturer: syz [ 798.410414][T17188] usb 3-1: SerialNumber: syz [ 798.426449][T17188] usb 3-1: config 0 descriptor?? [ 798.469799][T17188] usb-storage 3-1:0.0: USB Mass Storage device detected [ 798.483775][T17188] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 798.673634][T17188] usb 3-1: USB disconnect, device number 68 20:24:49 executing program 2: syz_usb_connect(0x0, 0x2f, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x4}]}}]}}]}}]}}, 0x0) 20:24:49 executing program 3: 20:24:49 executing program 4: 20:24:49 executing program 0: 20:24:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280), 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:49 executing program 5: 20:24:49 executing program 5: 20:24:49 executing program 0: 20:24:49 executing program 3: 20:24:49 executing program 4: [ 799.787184][ T9020] usb 3-1: new high-speed USB device number 69 using dummy_hcd 20:24:50 executing program 5: 20:24:50 executing program 0: [ 800.029311][ T9020] usb 3-1: Using ep0 maxpacket: 16 [ 800.150906][ T9020] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 800.163527][ T9020] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 800.346740][ T9020] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 800.356100][ T9020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.365040][ T9020] usb 3-1: Product: syz [ 800.369622][ T9020] usb 3-1: Manufacturer: syz [ 800.374411][ T9020] usb 3-1: SerialNumber: syz [ 800.418354][ T9020] usb 3-1: config 0 descriptor?? [ 800.459847][ T9020] usb-storage 3-1:0.0: USB Mass Storage device detected [ 800.488520][ T9020] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 800.661574][T11597] usb 3-1: USB disconnect, device number 69 20:24:51 executing program 2: syz_usb_connect(0x0, 0x2f, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x4}]}}]}}]}}]}}, 0x0) 20:24:51 executing program 3: 20:24:51 executing program 5: 20:24:51 executing program 4: 20:24:51 executing program 0: 20:24:51 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280), 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:51 executing program 5: 20:24:51 executing program 0: 20:24:51 executing program 3: 20:24:51 executing program 4: [ 801.739926][T11287] usb 3-1: new high-speed USB device number 70 using dummy_hcd 20:24:52 executing program 5: 20:24:52 executing program 0: [ 801.987955][T11287] usb 3-1: Using ep0 maxpacket: 16 [ 802.107172][T11287] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 802.116421][T11287] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 802.299572][T11287] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 802.308894][T11287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.317381][T11287] usb 3-1: Product: syz [ 802.321677][T11287] usb 3-1: Manufacturer: syz [ 802.326616][T11287] usb 3-1: SerialNumber: syz [ 802.368802][T11287] usb 3-1: config 0 descriptor?? [ 802.409293][T11287] usb-storage 3-1:0.0: USB Mass Storage device detected [ 802.428415][T11287] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 802.615313][T11287] usb 3-1: USB disconnect, device number 70 20:24:53 executing program 2: syz_usb_connect(0x0, 0x33, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x6, 0x4, "f2208996"}]}}]}}]}}]}}, 0x0) 20:24:53 executing program 3: 20:24:53 executing program 5: 20:24:53 executing program 4: 20:24:53 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280), 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:53 executing program 0: 20:24:53 executing program 4: 20:24:53 executing program 3: 20:24:53 executing program 5: 20:24:53 executing program 0: [ 803.736327][ T3225] usb 3-1: new high-speed USB device number 71 using dummy_hcd 20:24:54 executing program 4: 20:24:54 executing program 5: [ 803.986247][ T3225] usb 3-1: Using ep0 maxpacket: 16 [ 804.106812][ T3225] usb 3-1: config 0 has an invalid interface descriptor of length 6, skipping [ 804.116385][ T3225] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 804.326913][ T3225] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 804.336446][ T3225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.344614][ T3225] usb 3-1: Product: syz [ 804.349134][ T3225] usb 3-1: Manufacturer: syz [ 804.353887][ T3225] usb 3-1: SerialNumber: syz [ 804.418118][ T3225] usb 3-1: config 0 descriptor?? [ 804.462245][ T3225] usb-storage 3-1:0.0: USB Mass Storage device detected [ 804.503976][ T3225] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 804.663547][ T3225] usb 3-1: USB disconnect, device number 71 20:24:55 executing program 0: 20:24:55 executing program 3: 20:24:55 executing program 4: 20:24:55 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xffffffff}, {0x14}}}, 0x30}}, 0x0) 20:24:55 executing program 2: syz_usb_connect(0x0, 0x33, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x6, 0x4, "f2208996"}]}}]}}]}}]}}, 0x0) 20:24:55 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b", 0xe) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) [ 805.646230][T18797] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 20:24:56 executing program 3: 20:24:56 executing program 4: 20:24:56 executing program 0: 20:24:56 executing program 5: [ 806.050317][ T9020] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 806.296681][ T9020] usb 3-1: Using ep0 maxpacket: 16 20:24:56 executing program 3: 20:24:56 executing program 4: 20:24:56 executing program 0: [ 806.419089][ T9020] usb 3-1: config 0 has an invalid interface descriptor of length 6, skipping [ 806.428588][ T9020] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 20:24:56 executing program 5: 20:24:56 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b", 0xe) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) [ 806.636728][ T9020] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 806.651252][ T9020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.660399][ T9020] usb 3-1: Product: syz [ 806.664965][ T9020] usb 3-1: Manufacturer: syz [ 806.669951][ T9020] usb 3-1: SerialNumber: syz 20:24:57 executing program 3: [ 806.912121][ T9020] usb 3-1: config 0 descriptor?? [ 806.968919][ T9020] usb-storage 3-1:0.0: USB Mass Storage device detected [ 807.026230][ T9020] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 807.159942][ T9020] usb 3-1: USB disconnect, device number 72 20:24:58 executing program 2: syz_usb_connect(0x0, 0x33, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x6, 0x4, "f2208996"}]}}]}}]}}]}}, 0x0) 20:24:58 executing program 4: 20:24:58 executing program 0: 20:24:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x560d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0b55ae919cf79e3dba624ea9e571a7ea3345ad"}) 20:24:58 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) 20:24:58 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b", 0xe) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:24:58 executing program 0: prlimit64(0x0, 0x0, &(0x7f00000001c0), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) 20:24:58 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r2) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) 20:24:58 executing program 5: 20:24:58 executing program 4: [ 808.359047][ T3225] usb 3-1: new high-speed USB device number 73 using dummy_hcd 20:24:58 executing program 0: socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000091005d7d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) 20:24:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) [ 808.606287][ T3225] usb 3-1: Using ep0 maxpacket: 16 [ 808.737331][ T3225] usb 3-1: config 0 has an invalid interface descriptor of length 6, skipping [ 808.747780][ T3225] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 808.927113][ T3225] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 808.939841][ T3225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.948267][ T3225] usb 3-1: Product: syz [ 808.953283][ T3225] usb 3-1: Manufacturer: syz [ 808.958781][ T3225] usb 3-1: SerialNumber: syz [ 809.018965][ T3225] usb 3-1: config 0 descriptor?? [ 809.059237][ T3225] usb-storage 3-1:0.0: USB Mass Storage device detected [ 809.094668][ T3225] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 809.260642][ T3225] usb 3-1: USB disconnect, device number 73 20:25:00 executing program 2: syz_usb_connect(0x0, 0x35, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0x4, "f2208996ec7c"}]}}]}}]}}]}}, 0x0) 20:25:00 executing program 5: shmget(0x0, 0x2000, 0x0, &(0x7f0000002000/0x2000)=nil) 20:25:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc5, 0xc5, 0x7, [@enum, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @datasec={0x0, 0xa, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], '='}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0xe7}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:25:00 executing program 3: shmget(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) 20:25:00 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:25:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e", 0xa8}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) 20:25:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udplite\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x123242, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 20:25:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 20:25:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x5606, &(0x7f00000000c0)) syz_extract_tcp_res(0x0, 0x0, 0x0) 20:25:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0xde85, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x4}, @timestamp={0x44, 0x4}]}}}}}) [ 810.425839][ T9021] usb 3-1: new high-speed USB device number 74 using dummy_hcd 20:25:00 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x67) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r1, &(0x7f0000000000)="8b064e25d2bed680", 0x5c8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 810.685753][ T9021] usb 3-1: Using ep0 maxpacket: 16 20:25:01 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x4, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0xa}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r4, 0xc91add0bf88807dd, 0x0, 0x0, {0x38}}, 0x14}}, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) [ 810.820924][ T9021] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 810.831334][ T9021] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 810.999521][ T9021] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 811.009330][ T9021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.017959][ T9021] usb 3-1: Product: syz [ 811.022288][ T9021] usb 3-1: Manufacturer: syz [ 811.027182][ T9021] usb 3-1: SerialNumber: syz [ 811.102579][ T9021] usb 3-1: config 0 descriptor?? [ 811.173782][ T9021] usb-storage 3-1:0.0: USB Mass Storage device detected [ 811.234532][ T9021] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 811.375094][ T3225] usb 3-1: USB disconnect, device number 74 [ 811.593441][T18931] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 20:25:02 executing program 2: syz_usb_connect(0x0, 0x35, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0x4, "f2208996ec7c"}]}}]}}]}}]}}, 0x0) 20:25:02 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:25:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) read$FUSE(r2, 0x0, 0x0) dup2(r1, r0) 20:25:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x3f00, r2}) [ 811.913976][T18931] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 20:25:02 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x4}], 0x1) semtimedop(0x0, 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x1, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 812.485596][ T9021] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 812.725452][ T9021] usb 3-1: Using ep0 maxpacket: 16 [ 812.846435][ T9021] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 812.856989][ T9021] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 20:25:03 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x11, r3, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 20:25:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) 20:25:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x50, 0xb, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x24, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x50}}, 0x0) 20:25:03 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x67) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r1, &(0x7f0000000000)="8b064e25d2bed680", 0x5c8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 20:25:03 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) [ 813.101512][ T9021] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 813.111178][ T9021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.120313][ T9021] usb 3-1: Product: syz [ 813.125478][ T9021] usb 3-1: Manufacturer: syz [ 813.130298][ T9021] usb 3-1: SerialNumber: syz 20:25:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}}}}}, 0x62) [ 813.294961][ T9021] usb 3-1: config 0 descriptor?? [ 813.340110][ T9021] usb-storage 3-1:0.0: USB Mass Storage device detected 20:25:03 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r3, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x11, r3, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) [ 813.401618][T18985] ptrace attach of "/root/syz-executor.0"[18984] was attempted by "/root/syz-executor.0"[18985] [ 813.428549][T18970] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 813.462574][ T9021] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 813.638255][ T9021] usb 3-1: USB disconnect, device number 75 [ 813.831973][T18998] ptrace attach of "/root/syz-executor.5"[18997] was attempted by "/root/syz-executor.5"[18998] [ 813.861062][T18996] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 813.974280][T19002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 813.983541][T19002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 814.081912][T19002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:25:04 executing program 2: syz_usb_connect(0x0, 0x35, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0x4, "f2208996ec7c"}]}}]}}]}}]}}, 0x0) 20:25:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x1000000}) 20:25:04 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[], 0x0) 20:25:04 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:25:04 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='./file0\x00') chroot(&(0x7f0000000000)='./file0/../file0/file0\x00') umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x0) 20:25:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d8c3f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b97679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 20:25:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0x0, 0x0, 0x98, 0x98, 0x300, 0x178, 0x178, 0x178, 0x178, 0x178, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x40}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) [ 814.836652][T19018] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 814.866839][T10420] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 815.058131][T19018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 815.102287][T19025] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 815.105573][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 815.239328][T19032] Cannot find add_set index 0 as target [ 815.327578][T10420] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 815.336918][T10420] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 20:25:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8914, &(0x7f0000000380)={'ip6erspan0\x00', {0x2, 0x0, @multicast2}}) [ 815.556944][T10420] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 815.566466][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.574609][T10420] usb 3-1: Product: syz [ 815.579127][T10420] usb 3-1: Manufacturer: syz [ 815.583875][T10420] usb 3-1: SerialNumber: syz 20:25:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a5ea4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 20:25:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="1303000400000000000003"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x10000000c) [ 815.762829][T10420] usb 3-1: config 0 descriptor?? [ 815.813377][T10420] usb-storage 3-1:0.0: USB Mass Storage device detected [ 815.937785][T10420] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 816.017803][T10420] usb 3-1: USB disconnect, device number 76 20:25:09 executing program 4: 20:25:09 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:25:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8f, &(0x7f0000000e40), 0x2}], 0x8d9, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) 20:25:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)={0x12f4, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfc6d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xec9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdcf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_NODE={0x11ac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "6ec974a0abed9e5203b531b3f9bcf064f12a79c783d7d869f8f519588366417960a74292e7f134e2a1c2af778096444b33982eb80ffd25753135fe0e28cfade1db0c6a9d5fc480700aeffb27a7d34e06fcb99633a44b3eff6478601a7d076c08a9ebd621289500b3c42424769ca7fcfed0dee29d517e30cd538c2d86e702b40ebbc219a2500682995816c0e2b12da5321f86d77aa1bf3ae6c5e3"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "77e8b9bb3aaba0e396ed4695b9f2f5c6cf68dcd5a3e8f323a8c1"}}, @TIPC_NLA_NODE_ID={0xac, 0x3, "bd2a2f6b6d268d47010e8245fc2532d1b0fa637abc4b8160225a9ea50796f2ed0d65d610b48181caa9a3906b473f50f3e0f5d8f723b94a5406c95a092ce1cbc1f34d5bb107172070355e6ef7c199e4c0026131bb8dd7eea220cb844173007ad1b199bc4509480e2bc74ffc1f19ed9189f2237cf510dfa9e528d0d25f02466b4607c14917520f31a28ab861c9c95aae1aee5a7881212019f8fe20170b35d1e92338bc8d86223ad1e1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7014}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76cc}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x12f4}, 0x1, 0x0, 0x0, 0x40851}, 0x20000040) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)=@can_newroute={0x1c, 0x18, 0x903, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000380)={r1, 0x2, 0x1, "09ac6845c257b79c10b869b47283a3b6d9b4d9d6a6259598f4ba732be1bd9fd55a0ec1d48c9b138636970366fe411ed922bad0da4b6ca5cd0a6667240fef718e1d"}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001800dd8d0000000000000000020000000000fe02000000000c00090008000000", @ANYRES32], 0x28}}, 0x0) 20:25:09 executing program 3: 20:25:09 executing program 2: [ 818.966329][T19082] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 819.076577][T19092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 20:25:09 executing program 2: 20:25:09 executing program 3: 20:25:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="ff"], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 20:25:09 executing program 0: [ 819.672182][T19102] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 819.826608][T19102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 819.884028][T19104] bond1: (slave veth205): Enslaving as an active interface with a down link [ 819.928805][T19105] bond1: (slave veth207): Enslaving as an active interface with a down link 20:25:10 executing program 2: 20:25:10 executing program 3: [ 819.998931][T19111] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 20:25:10 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:25:10 executing program 3: [ 820.755067][T19104] bond1: (slave veth209): Enslaving as an active interface with a down link [ 820.764406][T19102] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 820.811232][T19156] bond1: (slave veth211): Enslaving as an active interface with a down link 20:25:12 executing program 5: 20:25:12 executing program 0: 20:25:12 executing program 4: 20:25:12 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:25:12 executing program 2: 20:25:12 executing program 3: 20:25:12 executing program 3: 20:25:12 executing program 2: 20:25:12 executing program 0: 20:25:12 executing program 4: 20:25:12 executing program 5: 20:25:12 executing program 2: 20:25:12 executing program 3: 20:25:12 executing program 4: 20:25:12 executing program 0: 20:25:12 executing program 5: 20:25:13 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:25:13 executing program 2: 20:25:13 executing program 3: 20:25:13 executing program 0: 20:25:13 executing program 4: 20:25:13 executing program 5: 20:25:13 executing program 2: 20:25:13 executing program 3: 20:25:13 executing program 0: 20:25:13 executing program 4: 20:25:13 executing program 5: 20:25:14 executing program 2: 20:25:14 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:25:14 executing program 0: 20:25:14 executing program 3: 20:25:14 executing program 4: 20:25:14 executing program 5: 20:25:14 executing program 2: 20:25:14 executing program 3: 20:25:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da", 0xc0}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) 20:25:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000039140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@RTM_DELMDB={0x18, 0x55, 0x1, 0x0, 0x0, {0x7, r5}}, 0x18}}, 0x0) 20:25:14 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) ioprio_set$pid(0x2, 0x0, 0x0) 20:25:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_bond\x00', 0x500}) [ 824.561033][T19217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 824.613172][T19221] PF_BRIDGE: br_mdb_parse() with invalid attr [ 824.691899][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 824.730601][T19217] PF_BRIDGE: br_mdb_parse() with invalid ifindex 20:25:15 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) 20:25:15 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:25:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x33, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) 20:25:15 executing program 4: 20:25:15 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x40084149, 0x0) 20:25:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010000304000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="ffffa888000000002800128008000100677470001c00028008000100", @ANYRES32=r1], 0x5c}}, 0x0) 20:25:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 20:25:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x801) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) dup3(r1, r0, 0x0) [ 825.520718][T19253] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 825.530543][T19253] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:25:15 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) [ 825.642088][T19258] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 825.652006][T19258] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:25:16 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0xc01, 0x3, 0x208, 0xb8, 0x5002004a, 0x0, 0x0, 0x0, 0x170, 0x3c8, 0x3c8, 0x170, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz1\x00'}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 20:25:16 executing program 0: socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2, 0x1000000000000005, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102385}, 0x20) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14}}], 0x18}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 20:25:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 20:25:16 executing program 3: socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000100)) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 20:25:16 executing program 5: pipe(&(0x7f0000000100)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid=r2}]}]}, 0x24}}, 0x0) 20:25:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="b9800000c035004000000f30d07531f5f50fdb090920e03500004000c4636569b3ce4b50330026660f3881694f0f0f5c193a9af342d8860080000066b82001c4220d2d4f5d2e66420fc73366ba2000ed", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0x80}, "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", "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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:25:16 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:25:16 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getsockopt(0xffffffffffffffff, 0x3, 0x4, 0x0, &(0x7f0000000140)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_GET_TIMERSLACK(0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x100, 0x70bd2b, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000010) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'io'}]}, 0x4) 20:25:16 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x80984120, 0x0) 20:25:17 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0) r1 = openat$vnet(0xffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 20:25:17 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2, 0x1000000000000005, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102385}, 0x20) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 20:25:17 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, 0x0, 0x0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:25:17 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x40084146, 0x0) 20:25:17 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000001200), &(0x7f0000000000)=@udp6}, 0x20) 20:25:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59", 0x60}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) 20:25:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000680)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0xf98, 0x3a, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x5, 0x19, "e5fb000005005357cd99e33bca98e246dc9027eb3334ea443e7fdc4049b892d54090878bee496aa11e07fb0f1db1a0ebe2f95347b0317613063381165c01f08fea1048ea59a6f2273e02707fdd7defc02bde3192360593169594710bddd04aead6c89c87778555de42d23236534ba1a799a63eb4532003a703b249e4628e4706bccc7a264ee85014d99a7fd4565d3c416c835a741eb4e97140e834013724d23450072f0087ac65295ca0d7c601c30de0161560e2d20c5b1052e9b208e25470e9fa884ecd2082ec38b3cb19c083"}, {0x0, 0x1b, "14a142ef59c04e8e7b4db5309006bd98ec79847a52ed68124e8a24d3079fc53b81c039a7d59f992dcb481043f510a0ce1ebb98c07a624ff8c8cc0b4fd3b8e700196d1f5696e184393de669ffaebfbd494a9d6a5fedac0738ffc3dcb3c1b96e48fd063786ae5701f6aa5022621e665607848e20f162630df96d0a773993e97ae6b847e51883d73d66bb30b4375229cfd0c9c41f511bfbf2bca94caa7ce76be257173a4eae2b484117ac32acf6ea1a32def26c919c93055c2f9a640b2d847d527357902538828abd66b3d1a9b85034066154f0b2ec054f6a8712ec98e5"}, {0x0, 0x1f, "8cf0833ae2772f05d302c778833be4f2b9c43c83284b82e71ca1ee382af46513079a2f52da08c93afdfc1a18e4b677b307a1c7df90787cbd143b129bc8dbc39104eb21674d26fd4ced8626df256869e168d42f4d160ad1442cae2bd8fda0fc44a08759d245bfe8eba42ec7967c1e953256a057369159333bca73b498a882fb5e840d429804169a6446c1d1b013144ae0ee276a463ef69ea4c4636751083041811c9b549256c6a3a71e451f8fd4de25629b3de61cba78315412fa14e350bb03feaf63909bd7320561df80bc77f36d4561a5efcc324450355ed398d9e46e798e23e2a4a2c787728b9c549a1894c53dcdfe834c7785fb3c4331"}, {0x0, 0x2, "6598975984c98199c07565e33783bc472344c2fc4e"}, {0x0, 0x199, "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"}]}}}}}, 0xfca) 20:25:17 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, 0x0, 0x0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:25:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) 20:25:18 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x80184132, 0x0) 20:25:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @local}}) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)="bffb67f3bd103c", 0x7}, {&(0x7f0000000340)="0053e34372bc", 0x6}, {&(0x7f0000000380)="7f", 0x1}], 0x3) 20:25:18 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, 0x0, 0x0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:25:18 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x0, &(0x7f00000001c0)={0x77359400}) 20:25:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) dup3(r4, r1, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) r6 = fcntl$dupfd(r5, 0x0, r1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x385b, 0x0, [{}, {}, {}, {}, {0x1}, {}, {0x0, 0x0, 0x0, [], 0xff}]}}) 20:25:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 20:25:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000030000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000200)='\x00\x83\xc5\xcb\xc7\x108\xa4\x03\x9c0T3\xc5\x97\x95\xb5\x8fM\xddU\x10\xaaod\x96\xeeM\xbe\x0e\xe4\xcc\xc4\xcf,\x9f7\xcc(Z\x13`\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00c\r\x14\xd8g\x02S -\xfd\xb5a\xedf|\xc4\xf9\xd2J\xadi\xcc[\\P\xa6F\x8c^\xc7i)d\x9f\xfckW\x86\xe4Qg1\xbdD\x1c\x13O\\\x7fS/\xc9d!\x19\"\x16\xfdC\tz\xf1\xf3q\xfd\'.\xb4\x14\x14m_&\x88\x8cfI\x18&\xea5\xa0\x00\xd2\xcd\xf0\xd5\x03\x9f\x18\x8d6\xc9,\xc9Y\xb8\xc9\xdd\xadp3\xbe\x93C\xa3b\x18\xe7\xcdx\x86aA\x9e\x83\aKc\xba\x05\x19\xb1\x9cJ\xce2\x9fW\xd3', 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000080)=ANY=[], 0x560) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:25:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4000}]}}}]}, 0x3c}}, 0x0) 20:25:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59", 0x60}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) 20:25:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000130000003c000280080001004000000024000380080001002000000008000100305a0000080001000000000008000200050000000c810380080001000000000081010d41bddf0f6d"], 0x50}}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0x8090ae81, 0x0) 20:25:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x5}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000604b396600442f00fe"], 0x76) 20:25:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d8c3f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b97679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37c", 0x70, 0x401c005, 0x0, 0x0) 20:25:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000030003b05000000000000000000000000480001004400010009000100766c616e"], 0x5c}}, 0x0) 20:25:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x0, 0x0, 0x0) 20:25:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x801) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r1, r0, 0x0) io_setup(0x400, 0x0) 20:25:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x0, 0x0, 0x0) 20:25:21 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x1804, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x3}, 0x80, 0x0}, 0x20008041) socket$kcm(0x2, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpu.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r2, 0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') sendmsg(0xffffffffffffffff, 0x0, 0x20044814) 20:25:21 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2, 0x1000000000000005, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102385}, 0x20) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14}}], 0x18}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 20:25:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x0, 0x0, 0x0) 20:25:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340), 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 20:25:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}]}, 0x48}}, 0x0) 20:25:24 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)={0x28, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}]}, 0x28}}, 0x0) 20:25:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000180)={0x1c, r1, 0x707, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 20:25:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f0000006040)={&(0x7f00000060c0)={0x14, r1, 0x709}, 0x14}}, 0x0) 20:25:24 executing program 4: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x19}}) 20:25:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x8) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x600) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x10000) sendfile(r2, r3, 0x0, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 834.162415][T19487] tipc: Started in network mode [ 834.168305][T19487] tipc: Own node identity , cluster identity 4711 [ 834.176027][T19487] tipc: Failed to obtain node identity [ 834.181782][T19487] tipc: Enabling of bearer rejected, failed to enable media 20:25:24 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 20:25:24 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 20:25:24 executing program 0: [ 834.368999][T19495] tipc: Started in network mode [ 834.376835][T19495] tipc: Own node identity , cluster identity 4711 [ 834.383926][T19495] tipc: Failed to obtain node identity [ 834.390340][T19495] tipc: Enabling of bearer rejected, failed to enable media [ 834.472600][T19496] device vxcan3 entered promiscuous mode 20:25:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) 20:25:25 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x6558a7e3409167e0) open(0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = memfd_create(&(0x7f0000000000), 0x0) sendfile(r1, r0, 0x0, 0xfffffffe) 20:25:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000130000003c000280080001004000000024000380080001002000000008000100305a0000080001000000000008000200050000000c810380080001000000000081010d41bddf0f6d"], 0x50}}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:25:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0xb1c661d398500c73) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) unshare(0x2000400) fcntl$notify(r1, 0x402, 0xb1c661d398500c73) 20:25:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x84, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0x9, 0x1, @remote}]}, 0x84}}, 0x0) 20:25:25 executing program 4: 20:25:25 executing program 5: 20:25:25 executing program 4: 20:25:25 executing program 2: 20:25:25 executing program 1: 20:25:25 executing program 0: 20:25:26 executing program 5: 20:25:26 executing program 4: 20:25:26 executing program 3: 20:25:26 executing program 1: 20:25:26 executing program 2: 20:25:26 executing program 0: 20:25:26 executing program 4: 20:25:26 executing program 5: 20:25:27 executing program 5: 20:25:27 executing program 2: 20:25:27 executing program 4: 20:25:27 executing program 0: 20:25:27 executing program 1: 20:25:27 executing program 3: 20:25:27 executing program 1: 20:25:27 executing program 2: 20:25:27 executing program 5: 20:25:27 executing program 0: 20:25:27 executing program 4: 20:25:27 executing program 3: 20:25:28 executing program 1: 20:25:28 executing program 2: 20:25:28 executing program 5: 20:25:28 executing program 0: 20:25:28 executing program 4: 20:25:28 executing program 3: 20:25:28 executing program 5: 20:25:28 executing program 1: 20:25:28 executing program 2: 20:25:28 executing program 0: 20:25:28 executing program 4: 20:25:28 executing program 3: 20:25:29 executing program 2: 20:25:29 executing program 5: 20:25:29 executing program 1: 20:25:29 executing program 0: 20:25:29 executing program 4: 20:25:29 executing program 3: 20:25:29 executing program 2: 20:25:29 executing program 5: 20:25:29 executing program 1: 20:25:29 executing program 4: 20:25:29 executing program 0: 20:25:29 executing program 3: 20:25:29 executing program 2: 20:25:30 executing program 5: 20:25:30 executing program 1: 20:25:30 executing program 0: 20:25:30 executing program 4: 20:25:30 executing program 2: 20:25:30 executing program 5: 20:25:30 executing program 3: 20:25:30 executing program 1: 20:25:30 executing program 0: 20:25:30 executing program 4: 20:25:30 executing program 5: 20:25:30 executing program 2: 20:25:30 executing program 3: 20:25:31 executing program 4: 20:25:31 executing program 1: 20:25:31 executing program 0: 20:25:31 executing program 5: 20:25:31 executing program 2: 20:25:31 executing program 3: 20:25:31 executing program 1: 20:25:31 executing program 4: 20:25:31 executing program 0: 20:25:31 executing program 5: 20:25:31 executing program 2: 20:25:31 executing program 3: 20:25:31 executing program 4: 20:25:32 executing program 1: 20:25:32 executing program 0: 20:25:32 executing program 5: 20:25:32 executing program 2: 20:25:32 executing program 3: 20:25:32 executing program 4: 20:25:32 executing program 1: 20:25:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:25:32 executing program 0: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80000, 0x0) 20:25:32 executing program 2: 20:25:32 executing program 3: 20:25:32 executing program 4: 20:25:33 executing program 1: 20:25:33 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x338, 0x4c, 0x274, 0x0, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond=[0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7], 0x0, 0x1d8, 0x220, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 20:25:33 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfeffff, 0x0}) 20:25:33 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x1e, &(0x7f0000000280)=ANY=[@ANYBLOB="050f1f"]}) 20:25:33 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getsockopt(0xffffffffffffffff, 0x3, 0x4, &(0x7f00000002c0)=""/235, &(0x7f0000000140)=0xeb) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_GET_TIMERSLACK(0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x0, 0x0) 20:25:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000140)=0x0) r2 = socket$inet(0x2, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f0000000100)=[&(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000180)="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", 0x401}]) [ 843.165026][T19641] xt_CT: No such helper "syz1" 20:25:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="b9800000c035004000000f30d07531f5f50fdb090920e03500004000c4636569b3ce4b50330026660f3881694f0f0f5c193a9af342d8860080000066b82001c4220d2d4f5d2e66420fc73366ba2000ed", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 843.220680][T19647] xt_CT: No such helper "syz1" 20:25:33 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x145, &(0x7f00000005c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:25:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)={0x14, 0x1, 0x1, 0x301}, 0x14}}, 0x0) 20:25:33 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x338, 0x4c, 0x274, 0x0, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond=[0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7], 0x0, 0x1d8, 0x220, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 843.574601][ T9021] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 843.721073][T19672] xt_CT: No such helper "syz1" 20:25:34 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='x\x00\x00\x00$\x00\v/\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100736671004c00020012"], 0x78}}, 0x0) [ 843.894002][ T9021] usb 1-1: Using ep0 maxpacket: 16 20:25:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) [ 844.024250][ T9021] usb 1-1: unable to get BOS descriptor set 20:25:34 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 844.114539][ T9021] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 20:25:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000180)={0x14, r1, 0x707}, 0x14}}, 0x0) 20:25:34 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB='[d:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) [ 844.394305][ T9021] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 844.403598][ T9021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.413247][ T9021] usb 1-1: Product: syz [ 844.420114][ T9021] usb 1-1: Manufacturer: syz [ 844.427767][ T9021] usb 1-1: SerialNumber: syz [ 844.756493][ T9021] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 844.854624][T19701] libceph: resolve 'd' (ret=-3): failed [ 844.860535][T19701] libceph: Failed to parse monitor IPs: -3 [ 844.901387][T19703] libceph: resolve 'd' (ret=-3): failed [ 844.907324][T19703] libceph: Failed to parse monitor IPs: -3 [ 844.957427][ T9021] usb 1-1: USB disconnect, device number 8 20:25:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 20:25:35 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x8, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 20:25:35 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x3) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x338, 0x4c, 0x274, 0x0, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond=[0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7], 0x0, 0x1d8, 0x220, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 20:25:35 executing program 1: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) [ 845.921230][T19717] xt_CT: No such helper "syz1" [ 846.389544][ T0] NOHZ: local_softirq_pending 08 20:25:36 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) 20:25:36 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0xda, 0x0, 0x0) 20:25:36 executing program 1: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[], 0x0) 20:25:36 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[], 0x0) 20:25:36 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x8, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 20:25:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) 20:25:37 executing program 2: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x160, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x138, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x128, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}, @IFLA_VLAN_INGRESS_QOS={0x64, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa99, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffd, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcb0, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xae5f}}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x200f3af9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x58, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x38}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xfffffffc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x100}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x160}}, 0x48000) [ 847.064939][T11287] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 847.107069][ T3225] usb 2-1: new high-speed USB device number 18 using dummy_hcd 20:25:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffffff09000000000000ff56000000000053"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000fcffffffffffff00"}) [ 847.313360][T11287] usb 1-1: Using ep0 maxpacket: 8 20:25:37 executing program 2: syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x1, 0x103d01) pselect6(0x40, &(0x7f0000000100), &(0x7f00000001c0)={0x8}, 0x0, 0x0, 0x0) [ 847.393635][ T3225] usb 2-1: Using ep0 maxpacket: 8 [ 847.434450][T11287] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 847.446698][T11287] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 847.459951][T11287] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 847.470349][T11287] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 20:25:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000100), 0x4) r1 = socket$inet_sctp(0x2, 0x0, 0x84) dup3(0xffffffffffffffff, r1, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)=0x66) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1c", 0xcc}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='caif0\x00', 0x10) [ 847.483639][T11287] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 847.492776][T11287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.524726][ T3225] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 847.536791][ T3225] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 847.549495][ T3225] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 847.560261][ T3225] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 847.574674][ T3225] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 847.584886][ T3225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:25:37 executing program 5: r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000000)='./file0\x00', 0x0) [ 847.805012][T19753] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 847.812516][T19753] raw-gadget gadget: fail, usb_ep_enable returned -22 20:25:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x0, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000100)}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b0a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 847.904740][T19743] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 847.907463][ T3225] hub 2-1:1.0: bad descriptor, ignoring hub [ 847.912353][T19743] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 847.918005][ T3225] hub: probe of 2-1:1.0 failed with error -5 [ 848.025820][T11287] hub 1-1:1.0: bad descriptor, ignoring hub [ 848.032003][T11287] hub: probe of 1-1:1.0 failed with error -5 [ 848.149230][T19753] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 848.196692][T19753] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 848.232311][T19743] raw-gadget gadget: fail, usb_ep_enable returned -22 20:25:38 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="0f0147d1d1861900000f23c80f21f8350000e0000f23f8b9190b0000b8ba690000ba000000000f308fe938028d2f000000f30f2cc0b805000000f9e0a264df0f01c166ba4300ecc744240000000000c7442402bc0c0000c7442406000000000f011c24c4c11972d000", 0x69}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000013c0)={0x2020}, 0x2020) [ 848.269634][T19743] raw-gadget gadget: fail, usb_ep_enable returned -22 20:25:38 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001ac0), &(0x7f0000001b00)=0xc) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe0, 0x1, 0x0, 0x8, 0x7f}, 0x20) [ 848.489708][ T3225] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 848.615709][T11287] usblp 1-1:1.0: usblp1: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 848.809160][ T3225] usb 2-1: USB disconnect, device number 18 [ 848.845331][ T3225] usblp0: removed [ 848.958874][ T9020] usb 1-1: USB disconnect, device number 9 [ 849.014915][ T9020] usblp1: removed [ 849.186819][ T3225] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 849.454066][ T9020] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 849.464031][ T3225] usb 2-1: Using ep0 maxpacket: 8 [ 849.584134][ T3225] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 849.595476][ T3225] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 849.605821][ T3225] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 849.615941][ T3225] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 849.629314][ T3225] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 849.638881][ T3225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.696127][T19753] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 849.696871][ T9020] usb 1-1: Using ep0 maxpacket: 8 [ 849.710933][T19753] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 849.735496][ T3225] hub 2-1:1.0: bad descriptor, ignoring hub [ 849.741667][ T3225] hub: probe of 2-1:1.0 failed with error -5 [ 849.824273][ T9020] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 849.835606][ T9020] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 849.845867][ T9020] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 849.855986][ T9020] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 849.871220][ T9020] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 849.880488][ T9020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:25:40 executing program 1: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[], 0x0) [ 850.113509][ T3225] usblp: can't set desired altsetting 0 on interface 0 20:25:40 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 20:25:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='caif0\x00', 0x10) 20:25:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x0, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000100)}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b0a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 20:25:40 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001ac0), &(0x7f0000001b00)=0xc) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) [ 850.199494][ T9020] usb 1-1: can't set config #1, error -71 [ 850.251461][ T9020] usb 1-1: USB disconnect, device number 10 [ 850.306775][ T3225] usb 2-1: USB disconnect, device number 19 20:25:41 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}}], 0x300, 0x43, 0x0) epoll_create1(0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 20:25:41 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001ac0), &(0x7f0000001b00)=0xc) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0xa00) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) [ 851.293411][ T3225] usb 2-1: new high-speed USB device number 20 using dummy_hcd 20:25:41 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='caif0\x00', 0x10) 20:25:41 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) [ 851.543414][ T3225] usb 2-1: Using ep0 maxpacket: 8 [ 851.673704][ T3225] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 851.685069][ T3225] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 851.695356][ T3225] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 851.705451][ T3225] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 851.719373][ T3225] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 851.728662][ T3225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:25:42 executing program 2: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @random="a87709c4674f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {0x0, 0x8906, 0x3, 0x0, @wg=@data}}}}}, 0x0) [ 852.444942][T19876] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 852.452385][T19876] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 852.474725][T19886] not chained 70000 origins [ 852.479273][T19886] CPU: 1 PID: 19886 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 852.487942][T19886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.498465][T19886] Call Trace: [ 852.501766][T19886] dump_stack+0x21c/0x280 [ 852.506098][T19886] kmsan_internal_chain_origin+0x6f/0x130 [ 852.511827][T19886] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 852.517971][T19886] ? rb_erase+0x2347/0x27b0 [ 852.522477][T19886] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 852.528277][T19886] ? kmsan_get_metadata+0x116/0x180 [ 852.533467][T19886] ? kmsan_get_metadata+0x116/0x180 [ 852.538680][T19886] ? kmsan_set_origin_checked+0x95/0xf0 [ 852.544235][T19886] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 852.550306][T19886] ? kmsan_get_metadata+0x116/0x180 [ 852.555605][T19886] ? kmsan_set_origin_checked+0x95/0xf0 [ 852.561160][T19886] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 852.567223][T19886] ? _copy_from_user+0x201/0x310 [ 852.572172][T19886] ? kmsan_get_metadata+0x116/0x180 [ 852.577362][T19886] __msan_chain_origin+0x50/0x90 [ 852.582295][T19886] __copy_msghdr_from_user+0x4e1/0xc20 [ 852.588105][T19886] __sys_sendmmsg+0x635/0xf70 [ 852.592786][T19886] ? kmsan_get_metadata+0x117/0x180 [ 852.597975][T19886] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 852.603947][T19886] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 852.610057][T19886] ? pvclock_clocksource_read+0x2ee/0x520 [ 852.615787][T19886] ? kmsan_get_metadata+0x116/0x180 [ 852.620990][T19886] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 852.626791][T19886] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 852.632848][T19886] ? sched_clock_cpu+0x65/0x8e0 [ 852.637864][T19886] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 852.643660][T19886] ? kmsan_get_metadata+0x116/0x180 [ 852.648846][T19886] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 852.654645][T19886] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 852.660803][T19886] __se_sys_sendmmsg+0xbd/0xe0 [ 852.665565][T19886] __x64_sys_sendmmsg+0x56/0x70 [ 852.670411][T19886] do_syscall_64+0xad/0x160 [ 852.674919][T19886] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 852.680798][T19886] RIP: 0033:0x45d579 [ 852.684676][T19886] Code: Bad RIP value. [ 852.691081][T19886] RSP: 002b:00007fcd9090cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 852.700001][T19886] RAX: ffffffffffffffda RBX: 00000000000278c0 RCX: 000000000045d579 [ 852.707972][T19886] RDX: 0400000000000132 RSI: 0000000020004d80 RDI: 0000000000000004 [ 852.715937][T19886] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 852.723899][T19886] R10: 0000000004000000 R11: 0000000000000246 R12: 000000000118cf4c [ 852.731860][T19886] R13: 000000000169fb6f R14: 00007fcd9090d9c0 R15: 000000000118cf4c [ 852.739936][T19886] Uninit was stored to memory at: [ 852.744958][T19886] kmsan_internal_chain_origin+0xad/0x130 [ 852.750671][T19886] __msan_chain_origin+0x50/0x90 [ 852.756117][T19886] __copy_msghdr_from_user+0x4e1/0xc20 [ 852.761655][T19886] __sys_sendmmsg+0x635/0xf70 [ 852.766319][T19886] __se_sys_sendmmsg+0xbd/0xe0 [ 852.771081][T19886] __x64_sys_sendmmsg+0x56/0x70 [ 852.775919][T19886] do_syscall_64+0xad/0x160 [ 852.780416][T19886] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 852.786721][T19886] [ 852.789038][T19886] Uninit was stored to memory at: [ 852.794062][T19886] kmsan_internal_chain_origin+0xad/0x130 [ 852.799785][T19886] __msan_chain_origin+0x50/0x90 [ 852.804712][T19886] __copy_msghdr_from_user+0x4e1/0xc20 [ 852.810169][T19886] __sys_sendmmsg+0x635/0xf70 [ 852.814845][T19886] __se_sys_sendmmsg+0xbd/0xe0 [ 852.819607][T19886] __x64_sys_sendmmsg+0x56/0x70 [ 852.824456][T19886] do_syscall_64+0xad/0x160 [ 852.829137][T19886] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 852.835007][T19886] [ 852.837325][T19886] Uninit was stored to memory at: [ 852.842352][T19886] kmsan_internal_chain_origin+0xad/0x130 [ 852.848076][T19886] __msan_chain_origin+0x50/0x90 [ 852.853011][T19886] __copy_msghdr_from_user+0x4e1/0xc20 [ 852.858459][T19886] __sys_sendmmsg+0x635/0xf70 [ 852.863123][T19886] __se_sys_sendmmsg+0xbd/0xe0 [ 852.867886][T19886] __x64_sys_sendmmsg+0x56/0x70 [ 852.872732][T19886] do_syscall_64+0xad/0x160 [ 852.877225][T19886] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 852.883096][T19886] [ 852.885415][T19886] Uninit was stored to memory at: [ 852.890430][T19886] kmsan_internal_chain_origin+0xad/0x130 [ 852.896145][T19886] __msan_chain_origin+0x50/0x90 [ 852.901068][T19886] __copy_msghdr_from_user+0x4e1/0xc20 [ 852.906513][T19886] __sys_sendmmsg+0x635/0xf70 [ 852.911175][T19886] __se_sys_sendmmsg+0xbd/0xe0 [ 852.915926][T19886] __x64_sys_sendmmsg+0x56/0x70 [ 852.920775][T19886] do_syscall_64+0xad/0x160 [ 852.925277][T19886] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 852.931148][T19886] [ 852.933471][T19886] Uninit was stored to memory at: [ 852.938483][T19886] kmsan_internal_chain_origin+0xad/0x130 [ 852.944193][T19886] __msan_chain_origin+0x50/0x90 [ 852.949119][T19886] __copy_msghdr_from_user+0x4e1/0xc20 [ 852.954565][T19886] __sys_sendmmsg+0x635/0xf70 [ 852.959231][T19886] __se_sys_sendmmsg+0xbd/0xe0 [ 852.963980][T19886] __x64_sys_sendmmsg+0x56/0x70 [ 852.968823][T19886] do_syscall_64+0xad/0x160 [ 852.973317][T19886] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 852.979447][T19886] [ 852.981762][T19886] Uninit was stored to memory at: [ 852.986776][T19886] kmsan_internal_chain_origin+0xad/0x130 [ 852.992481][T19886] __msan_chain_origin+0x50/0x90 [ 852.997406][T19886] __copy_msghdr_from_user+0x4e1/0xc20 [ 853.002853][T19886] __sys_sendmmsg+0x635/0xf70 [ 853.007532][T19886] __se_sys_sendmmsg+0xbd/0xe0 [ 853.012300][T19886] __x64_sys_sendmmsg+0x56/0x70 [ 853.017152][T19886] do_syscall_64+0xad/0x160 [ 853.021670][T19886] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 853.027759][T19886] [ 853.030082][T19886] Uninit was stored to memory at: [ 853.035190][T19886] kmsan_internal_chain_origin+0xad/0x130 [ 853.040897][T19886] __msan_chain_origin+0x50/0x90 [ 853.045919][T19886] __copy_msghdr_from_user+0x4e1/0xc20 [ 853.051366][T19886] __sys_sendmmsg+0x635/0xf70 [ 853.057168][T19886] __se_sys_sendmmsg+0xbd/0xe0 [ 853.063308][T19886] __x64_sys_sendmmsg+0x56/0x70 [ 853.068164][T19886] do_syscall_64+0xad/0x160 [ 853.072772][T19886] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 853.078661][T19886] [ 853.080997][T19886] Local variable ----msg_sys@__sys_sendmmsg created at: [ 853.088014][T19886] __sys_sendmmsg+0xbb/0xf70 [ 853.092597][T19886] __sys_sendmmsg+0xbb/0xf70 [ 853.194902][ T3225] hub 2-1:1.0: bad descriptor, ignoring hub [ 853.201064][ T3225] hub: probe of 2-1:1.0 failed with error -5 [ 853.401912][T19876] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 853.414994][T19876] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 853.659642][ T3225] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 854.006711][ T3225] usb 2-1: USB disconnect, device number 20 [ 854.019970][ T3225] usblp0: removed 20:25:44 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="0f0147d1d1861900000f23c80f21f8350000e0000f23f8b9190b0000b8ba690000ba000000000f308fe938028d2f000000f30f2cc0b805000000f9e0a264df0f01c166ba4300ecc744240000000000c7442402bc0c0000c7442406000000000f011c24c4c11972d000", 0x69}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000013c0)={0x2020}, 0x2020) 20:25:44 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) [ 854.382986][ T3225] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 854.623227][ T3225] usb 2-1: Using ep0 maxpacket: 8 [ 854.763782][ T3225] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 854.775974][ T3225] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 854.786355][ T3225] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 854.796622][ T3225] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 854.810129][ T3225] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 854.819810][ T3225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.855506][T19876] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 854.876325][T19876] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 854.965249][ T3225] hub 2-1:1.0: bad descriptor, ignoring hub [ 854.971536][ T3225] hub: probe of 2-1:1.0 failed with error -5 20:25:45 executing program 1: perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:25:45 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001ac0), &(0x7f0000001b00)=0xc) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0xa00) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 20:25:45 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'netpci0\x00'}}}}}, 0x34}}, 0x0) 20:25:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6}, {0x8}}]}, 0x54}}, 0x0) 20:25:45 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) [ 855.242701][ T3225] usblp: can't set desired altsetting 0 on interface 0 [ 855.363966][ T3225] usb 2-1: USB disconnect, device number 21 [ 855.446342][T19942] tipc: Enabling of bearer rejected, failed to enable media 20:25:46 executing program 2: perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220407b5, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x280076ed, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a40c1, 0x103}}], 0x10002, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f&', 0x2, 0x801, 0x0, 0x0) 20:25:46 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) dup3(r3, r1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x73ec7}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000700)={0x1, 0x0, @pic={0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:25:46 executing program 1: perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220407b5, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 20:25:46 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201150000040040570415c2cc25000000010902"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0x5509, 0x0) [ 856.538514][T19959] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 857.046664][ T9021] usb 4-1: new high-speed USB device number 44 using dummy_hcd 20:25:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 20:25:47 executing program 1: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @random="a87709c4674f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {0x0, 0x8100, 0x3, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}, 0x0) 20:25:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) 20:25:47 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc0984124, 0x0) 20:25:47 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) [ 857.286773][T19990] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 857.325345][T19990] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 20:25:47 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @fwd={0xf}]}}, &(0x7f0000003580)=""/4096, 0x32, 0x1000, 0x1041}, 0x20) [ 857.464009][ T9021] usb 4-1: config 0 has no interfaces? [ 857.469969][ T9021] usb 4-1: New USB device found, idVendor=0457, idProduct=c215, bcdDevice=25.cc [ 857.479486][ T9021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:25:47 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x801) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r1, r0, 0x0) io_setup(0x0, 0x0) 20:25:47 executing program 1: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @random="a87709c4674f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {0x2c00, 0x0, 0x3, 0x0, @wg=@data}}}}}, 0x0) [ 857.599881][ T9021] usb 4-1: config 0 descriptor?? 20:25:48 executing program 4: socket$netlink(0x10, 0x3, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) [ 857.859485][ T9021] usb 4-1: USB disconnect, device number 44 20:25:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000000fc0)={0x58, 0x0, r4, [{0x7, 0x0, 0x3, 0x0, '-\\{'}, {0x0, 0x0, 0xe, 0x0, '\\}.#:-.]@\\+}{$'}]}, 0x58) [ 858.652518][ T8703] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 859.013513][ T8703] usb 4-1: config 0 has no interfaces? [ 859.019552][ T8703] usb 4-1: New USB device found, idVendor=0457, idProduct=c215, bcdDevice=25.cc [ 859.029171][ T8703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.054331][ T8703] usb 4-1: config 0 descriptor?? [ 859.299604][ T8706] usb 4-1: USB disconnect, device number 45 20:25:49 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="740000002400fbc700"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="840000002c0001cdd63fe14b3b3d120000000000", @ANYRES32=r4, @ANYBLOB="000800800000000003000000080001007533320058"], 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xfffffffffffffc72, 0x0) 20:25:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0013800b0001006970766c616e00000c0002800600020002000000140003"], 0x50}}, 0x0) 20:25:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r1, @ANYBLOB="3c00028038000100240001"], 0x58}}, 0x0) 20:25:49 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000400)="2076b5b00701d7254cea602c2f63109d0e02ecfd61c7cea38c000000000000000221b817f5f96d2bf90670a5b62225a5427d44d976dd07f7bd0c855aa9dee373693986eac3e6ffc26ddd1b7ea3ac5c01b7f1eb78dd3aab831246c98616922ff2f9cc46f02264ae000683c813fe428440f792a735feaf94036b848b889ec162bc81b677c1bf275596cb40d81d2e916fb1d1bf004477009f6059fe2c96178d3645a37e0d4d010d6c1aaf2d3656346e", 0xae, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r2, r4}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'wp256-generic\x00'}}) 20:25:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000019440)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffdf}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x6b, &(0x7f0000000180)="fee63bc32f751080b81a415e633e36778c8b8c3a5241ba41c3c58690fea848684cf1cddfd2174d4f51aaddaebacfd091764ac54572c592fdb1e545c4282976ffd913ecad2b14517f6de1242a1abd189cf77eb098302cd68a0f133bbc64cc752a57b17c4642e0a2e6f811f2"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) [ 859.500796][T20038] netlink: 'syz-executor.2': attribute type 19 has an invalid length. [ 859.722028][T20051] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 20:25:50 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002280)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 859.778418][T20056] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 20:25:50 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:50 executing program 2: 20:25:50 executing program 1: [ 859.919801][T20057] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 859.973406][T20056] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 860.008521][T20051] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 20:25:50 executing program 3: 20:25:50 executing program 1: 20:25:50 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:50 executing program 2: 20:25:50 executing program 4: creat(&(0x7f00000002c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 20:25:50 executing program 0: 20:25:51 executing program 3: 20:25:51 executing program 2: 20:25:51 executing program 1: 20:25:51 executing program 4: 20:25:51 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:51 executing program 3: 20:25:51 executing program 0: 20:25:51 executing program 2: 20:25:51 executing program 4: 20:25:51 executing program 1: 20:25:51 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:52 executing program 0: 20:25:52 executing program 3: 20:25:52 executing program 2: 20:25:52 executing program 4: 20:25:52 executing program 1: 20:25:52 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:52 executing program 0: 20:25:52 executing program 3: 20:25:52 executing program 2: 20:25:52 executing program 4: 20:25:52 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:52 executing program 1: 20:25:52 executing program 0: 20:25:52 executing program 3: 20:25:53 executing program 2: 20:25:53 executing program 4: 20:25:53 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(0xffffffffffffffff, r0, 0x0) 20:25:53 executing program 1: 20:25:53 executing program 0: 20:25:53 executing program 3: 20:25:53 executing program 4: 20:25:53 executing program 2: 20:25:53 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(0xffffffffffffffff, r0, 0x0) 20:25:53 executing program 1: 20:25:53 executing program 3: 20:25:53 executing program 0: 20:25:53 executing program 2: 20:25:53 executing program 4: 20:25:54 executing program 1: 20:25:54 executing program 3: 20:25:54 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(0xffffffffffffffff, r0, 0x0) 20:25:54 executing program 0: 20:25:54 executing program 2: 20:25:54 executing program 4: 20:25:54 executing program 1: 20:25:54 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) dup3(r0, 0xffffffffffffffff, 0x0) 20:25:54 executing program 3: 20:25:54 executing program 4: 20:25:54 executing program 0: 20:25:54 executing program 2: 20:25:55 executing program 1: 20:25:55 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) dup3(r0, 0xffffffffffffffff, 0x0) 20:25:55 executing program 4: 20:25:55 executing program 3: 20:25:55 executing program 0: 20:25:55 executing program 2: 20:25:55 executing program 1: 20:25:55 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) dup3(r0, 0xffffffffffffffff, 0x0) 20:25:55 executing program 4: 20:25:55 executing program 3: 20:25:55 executing program 0: 20:25:55 executing program 2: 20:25:56 executing program 1: 20:25:56 executing program 4: 20:25:56 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:56 executing program 3: 20:25:56 executing program 0: 20:25:56 executing program 2: 20:25:56 executing program 1: 20:25:56 executing program 4: 20:25:56 executing program 3: 20:25:56 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:56 executing program 2: 20:25:56 executing program 0: 20:25:56 executing program 1: 20:25:57 executing program 4: 20:25:57 executing program 3: 20:25:57 executing program 2: 20:25:57 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:57 executing program 0: 20:25:57 executing program 1: 20:25:57 executing program 4: 20:25:57 executing program 3: 20:25:57 executing program 0: 20:25:57 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:57 executing program 2: 20:25:57 executing program 4: 20:25:57 executing program 1: 20:25:58 executing program 0: 20:25:58 executing program 3: 20:25:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0x19, 0x4, 0x81000000004, 0x9f27, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x800000}, 0x40) 20:25:58 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x1c}}, 0x0) 20:25:58 executing program 1: 20:25:58 executing program 0: 20:25:58 executing program 3: 20:25:58 executing program 2: 20:25:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002140)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x5, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000000)=['/dev/snd/controlC#\x00'], 0x13}) 20:25:58 executing program 1: sendmsg$inet(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xb, 0x6, 0x209e20, 0x2, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000440)=""/130}, 0x20) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000000c0), &(0x7f0000000340)=""/203}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 20:25:58 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:58 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:25:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fgetxattr(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='u'], 0x0, 0x0) 20:25:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500), 0x0, 0x0) 20:25:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x28, r1, 0x6ad2803469f0fe0b, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}]}]}, 0x28}}, 0x0) [ 869.107582][T20223] ptrace attach of "/root/syz-executor.0"[20220] was attempted by "/root/syz-executor.0"[20223] 20:25:59 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:25:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfeffff, 0x0}) 20:25:59 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 869.417139][T20235] vcan0: MTU too low for tipc bearer [ 869.422816][T20235] tipc: Enabling of bearer rejected, failed to enable media 20:25:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x1) 20:25:59 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) 20:26:00 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:26:00 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 20:26:00 executing program 1: io_setup(0x7, &(0x7f0000000780)=0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000002500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) [ 869.889337][T20250] x_tables: duplicate underflow at hook 2 20:26:00 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200400, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r0) 20:26:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 20:26:00 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) [ 870.561353][T20275] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 20:26:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000680)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0x1298, 0x3a, 0xff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, [{0x0, 0x19, "e5fb000005005357cd99e33bca98e246dc9027eb3334ea443e7fdc4049b892d54090878bee496aa11e07fb0f1db1a0ebe2f95347b0317613063381165c01f08fea1048ea59a6f2273e02707fdd7defc02bde3192360593169594710bddd04aead6c89c87778555de42d23236534ba1a799a63eb4532003a703b249e4628e4706bccc7a264ee85014d99a7fd4565d3c416c835a741eb4e97140e834013724d23450072f0087ac65295ca0d7c601c30de0161560e2d20c5b1052e9b208e25470e9fa884ecd2082ec38b3cb19c083"}, {0x0, 0x1b, "14a142ef59c04e8e7b4db5309006bd98ec79847a52ed68124e8a24d3079fc53b81c039a7d59f992dcb481043f510a0ce1ebb98c07a624ff8c8cc0b4fd3b8e700196d1f5696e184393de669ffaebfbd494a9d6a5fedac0738ffc3dcb3c1b96e48fd063786ae5701f6aa5022621e665607848e20f162630df96d0a773993e97ae6b847e51883d73d66bb30b4375229cfd0c9c41f511bfbf2bca94caa7ce76be257173a4eae2b484117ac32acf6ea1a32def26c919c93055c2f9a640b2d847d527357902538828abd66b3d1a9b85034066154f0b2ec054f6a8712ec98e5"}, {0x0, 0x1f, "8cf0833ae2772f05d302c778833be4f2b9c43c83284b82e71ca1ee382af46513079a2f52da08c93afdfc1a18e4b677b307a1c7df90787cbd143b129bc8dbc39104eb21674d26fd4ced8626df256869e168d42f4d160ad1442cae2bd8fda0fc44a08759d245bfe8eba42ec7967c1e953256a057369159333bca73b498a882fb5e840d429804169a6446c1d1b013144ae0ee276a463ef69ea4c4636751083041811c9b549256c6a3a71e451f8fd4de25629b3de61cba78315412fa14e350bb03feaf63909bd7320561df80bc77f36d4561a5efcc324450355ed398d9e46e798e23e2a4a2c787728b9c549a1894c53dcdfe834c7785fb3c4331"}, {0x0, 0x3, "6598975984c98199c07565e33783bc472344c2fc4e6a32"}, {0x0, 0x1f8, "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"}, {0x0, 0x1, "c3dc73ee76fa"}]}}}}}, 0x12ca) 20:26:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 20:26:02 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:02 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, 0x0, 0x0) dup3(r1, r0, 0x0) 20:26:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x0, 0x98, 0x1e0, 0x278, 0x278, 0x340, 0x340, 0x340, 0x340, 0x340, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bridge_slave_0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10}}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'netpci0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @private}}}}, {{@ip={@empty, @dev, 0x0, 0x0, 'syzkaller0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) 20:26:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@allocspi={0xf8, 0x16, 0x311, 0x0, 0x0, {{{@in=@remote, @in=@broadcast}, {@in=@private, 0x0, 0x6c}, @in6}, 0x0, 0x5}}, 0xf8}, 0x8}, 0x0) 20:26:02 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 872.622015][T20317] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 872.733785][T20325] ipt_ECN: cannot use operation on non-tcp rule [ 872.810800][T20331] ipt_ECN: cannot use operation on non-tcp rule 20:26:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:03 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x2000016) 20:26:03 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0xda, 0x7000000, 0x0) 20:26:03 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, 0x0, 0x0) dup3(r1, r0, 0x0) 20:26:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 873.144525][T20336] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 20:26:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 873.646890][T20354] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 20:26:06 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:06 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, 0x0, 0x0) dup3(r1, r0, 0x0) 20:26:06 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000019500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x3, [@union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @typedef, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}, @restrict, @datasec={0x0, 0x9, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}], "db"}]}, {0x0, [0x0]}}, 0x0, 0x13f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:26:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x638, 0x310, 0x0, 0xd0, 0x1b0, 0x0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a], 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}, {{@ipv6={@ipv4={[], [], @private}, @remote, [], [], '\x00', 'caif0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @empty}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={[], [], @broadcast}, [], [], 'gre0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @common=@hbh={{0x48, 'hbh\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) 20:26:06 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:06 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$9p(r0, &(0x7f0000000040)="5bb12c7c31f90833", 0x8) [ 875.880050][T20376] Cannot find add_set index 0 as target [ 875.937128][T20382] Cannot find add_set index 0 as target 20:26:06 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:06 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000240)="c1", 0x1, 0x24044050, 0x0, 0x0) 20:26:06 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(0xffffffffffffffff, r0, 0x0) 20:26:06 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 20:26:07 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0285629, &(0x7f0000000340)={0x3, 0x0, 0x0, {0x0, @sdr}}) 20:26:09 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:09 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(0xffffffffffffffff, r0, 0x0) 20:26:09 executing program 3: 20:26:09 executing program 2: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x45024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 20:26:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000400)="2076b5b00701d7254cea602c2f63109d0e02ecfd61c7cea38c000000000000000221b817f5f96d2bf90670a5b62225a5427d44d976dd07f7bd0c855aa9dee373693986eac3e6ffc26ddd1b7ea3ac5c01b7f1eb78dd3aab831246c98616922ff2f9cc46f02264ae000683c813fe428440f792a735feaf94036b848b889ec162bc81b677c1bf275596cb40d81d2e916fb1d1bf004477009f6059fe2c96178d3645a37e0d4d010d6c1aaf2d3656346eea4836f5fa6691fe65f3cbb394f98ec02dd8062b822f0835077546137e8cf4fca5276983ac23dbaad9a20f483178858972541b1e5c13a086", 0xe6, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r2, r4}, &(0x7f0000000600)=""/247, 0xf7, &(0x7f0000000240)={&(0x7f0000000080)={'wp256-generic\x00'}}) 20:26:09 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:09 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(0xffffffffffffffff, r0, 0x0) 20:26:09 executing program 1: 20:26:10 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:10 executing program 3: 20:26:10 executing program 2: 20:26:10 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, 0xffffffffffffffff, 0x0) [ 880.933031][ T0] NOHZ: local_softirq_pending 08 20:26:12 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:12 executing program 1: 20:26:12 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:12 executing program 3: 20:26:12 executing program 2: 20:26:12 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, 0xffffffffffffffff, 0x0) 20:26:12 executing program 1: 20:26:12 executing program 3: 20:26:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 20:26:12 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, 0xffffffffffffffff, 0x0) 20:26:12 executing program 2: 20:26:13 executing program 1: 20:26:15 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:15 executing program 3: 20:26:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 20:26:15 executing program 2: 20:26:15 executing program 5: 20:26:15 executing program 1: 20:26:16 executing program 2: 20:26:16 executing program 1: 20:26:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 20:26:16 executing program 3: 20:26:16 executing program 5: 20:26:16 executing program 3: 20:26:19 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:19 executing program 2: 20:26:19 executing program 5: 20:26:19 executing program 1: 20:26:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 20:26:19 executing program 3: 20:26:19 executing program 1: 20:26:19 executing program 5: 20:26:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 20:26:19 executing program 3: 20:26:19 executing program 2: 20:26:20 executing program 5: 20:26:22 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 20:26:22 executing program 1: 20:26:22 executing program 2: 20:26:22 executing program 3: 20:26:22 executing program 5: 20:26:23 executing program 2: 20:26:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 20:26:23 executing program 3: 20:26:23 executing program 5: 20:26:23 executing program 1: 20:26:24 executing program 2: 20:26:26 executing program 3: 20:26:26 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 20:26:26 executing program 5: 20:26:26 executing program 1: 20:26:26 executing program 2: 20:26:27 executing program 3: 20:26:27 executing program 2: 20:26:27 executing program 1: 20:26:27 executing program 5: 20:26:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 20:26:27 executing program 3: 20:26:27 executing program 1: 20:26:30 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:30 executing program 2: 20:26:30 executing program 5: 20:26:30 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x28, r1, 0x6ad2803469f0fe0b, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}]}]}, 0x28}}, 0x0) 20:26:30 executing program 3: 20:26:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:30 executing program 3: 20:26:30 executing program 1: 20:26:30 executing program 5: 20:26:30 executing program 2: syz_usb_connect(0x0, 0x2f, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x4}]}}]}}]}}]}}, 0x0) 20:26:31 executing program 3: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) [ 901.251082][T11287] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 901.493786][T11287] usb 3-1: Using ep0 maxpacket: 16 [ 901.614399][T11287] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 901.623733][T11287] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 901.811271][T11287] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 901.820768][T11287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.828901][T11287] usb 3-1: Product: syz [ 901.833479][T11287] usb 3-1: Manufacturer: syz [ 901.838223][T11287] usb 3-1: SerialNumber: syz [ 901.931129][T11287] usb 3-1: config 0 descriptor?? [ 901.953803][T20711] not chained 80000 origins [ 901.958354][T20711] CPU: 0 PID: 20711 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 901.967031][T20711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.977090][T20711] Call Trace: [ 901.978054][T11287] usb-storage 3-1:0.0: USB Mass Storage device detected [ 901.980387][T20711] dump_stack+0x21c/0x280 [ 901.980409][T20711] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 901.980428][T20711] kmsan_internal_chain_origin+0x6f/0x130 [ 901.980442][T20711] ? kmsan_get_metadata+0x116/0x180 [ 901.980455][T20711] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 901.980467][T20711] ? kmsan_internal_set_origin+0x75/0xb0 [ 901.980488][T20711] ? kmsan_get_metadata+0x116/0x180 [ 901.980506][T20711] ? kmsan_get_metadata+0x116/0x180 [ 901.980523][T20711] ? kmsan_set_origin_checked+0x95/0xf0 [ 901.980542][T20711] ? kmsan_get_metadata+0x116/0x180 [ 901.980587][T20711] ? kmsan_get_metadata+0x116/0x180 [ 902.046940][T20711] ? kmsan_set_origin_checked+0x95/0xf0 [ 902.052502][T20711] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 902.058587][T20711] ? _copy_from_user+0x201/0x310 [ 902.063542][T20711] ? kmsan_get_metadata+0x116/0x180 [ 902.068756][T20711] __msan_chain_origin+0x50/0x90 [ 902.073704][T20711] do_recvmmsg+0x11ba/0x22c0 [ 902.078338][T20711] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 902.084160][T20711] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 902.090324][T20711] ? get_timespec64+0x2ca/0x360 [ 902.095190][T20711] __se_sys_recvmmsg+0x2d9/0x410 [ 902.100149][T20711] __x64_sys_recvmmsg+0x62/0x80 [ 902.105010][T20711] do_syscall_64+0xad/0x160 [ 902.109525][T20711] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 902.115416][T20711] RIP: 0033:0x45d579 [ 902.119301][T20711] Code: Bad RIP value. [ 902.123365][T20711] RSP: 002b:00007fe3e2e86c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 902.131960][T20711] RAX: ffffffffffffffda RBX: 00000000000269c0 RCX: 000000000045d579 [ 902.139944][T20711] RDX: 0400000000000ec0 RSI: 0000000020002ec0 RDI: 0000000000000003 [ 902.147929][T20711] RBP: 000000000118cf90 R08: 00000000200001c0 R09: 0000000000000000 [ 902.155906][T20711] R10: 000000000000000a R11: 0000000000000246 R12: 000000000118cf4c [ 902.163888][T20711] R13: 000000000169fb6f R14: 00007fe3e2e879c0 R15: 000000000118cf4c [ 902.171880][T20711] Uninit was stored to memory at: [ 902.176933][T20711] kmsan_internal_chain_origin+0xad/0x130 [ 902.182665][T20711] __msan_chain_origin+0x50/0x90 [ 902.187614][T20711] do_recvmmsg+0x11ba/0x22c0 [ 902.192224][T20711] __se_sys_recvmmsg+0x2d9/0x410 [ 902.197166][T20711] __x64_sys_recvmmsg+0x62/0x80 [ 902.202055][T20711] do_syscall_64+0xad/0x160 [ 902.206567][T20711] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 902.212454][T20711] [ 902.214777][T20711] Uninit was stored to memory at: [ 902.219820][T20711] kmsan_internal_chain_origin+0xad/0x130 [ 902.225556][T20711] __msan_chain_origin+0x50/0x90 [ 902.230502][T20711] do_recvmmsg+0x11ba/0x22c0 [ 902.235190][T20711] __se_sys_recvmmsg+0x2d9/0x410 [ 902.240141][T20711] __x64_sys_recvmmsg+0x62/0x80 [ 902.245034][T20711] do_syscall_64+0xad/0x160 [ 902.249548][T20711] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 902.255429][T20711] [ 902.257753][T20711] Uninit was stored to memory at: [ 902.262791][T20711] kmsan_internal_chain_origin+0xad/0x130 [ 902.268522][T20711] __msan_chain_origin+0x50/0x90 [ 902.273467][T20711] do_recvmmsg+0x11ba/0x22c0 [ 902.278066][T20711] __se_sys_recvmmsg+0x2d9/0x410 [ 902.283013][T20711] __x64_sys_recvmmsg+0x62/0x80 [ 902.287870][T20711] do_syscall_64+0xad/0x160 [ 902.292383][T20711] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 902.298271][T20711] [ 902.300597][T20711] Uninit was stored to memory at: [ 902.305634][T20711] kmsan_internal_chain_origin+0xad/0x130 [ 902.311358][T20711] __msan_chain_origin+0x50/0x90 [ 902.316304][T20711] do_recvmmsg+0x11ba/0x22c0 [ 902.320897][T20711] __se_sys_recvmmsg+0x2d9/0x410 [ 902.325846][T20711] __x64_sys_recvmmsg+0x62/0x80 [ 902.330706][T20711] do_syscall_64+0xad/0x160 [ 902.335212][T20711] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 902.341096][T20711] [ 902.343432][T20711] Uninit was stored to memory at: [ 902.348466][T20711] kmsan_internal_chain_origin+0xad/0x130 [ 902.354568][T20711] __msan_chain_origin+0x50/0x90 [ 902.359518][T20711] do_recvmmsg+0x11ba/0x22c0 [ 902.364124][T20711] __se_sys_recvmmsg+0x2d9/0x410 [ 902.369085][T20711] __x64_sys_recvmmsg+0x62/0x80 [ 902.374025][T20711] do_syscall_64+0xad/0x160 [ 902.378547][T20711] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 902.384437][T20711] [ 902.386776][T20711] Uninit was stored to memory at: [ 902.392508][T20711] kmsan_internal_chain_origin+0xad/0x130 [ 902.398256][T20711] __msan_chain_origin+0x50/0x90 [ 902.403198][T20711] do_recvmmsg+0x11ba/0x22c0 [ 902.407792][T20711] __se_sys_recvmmsg+0x2d9/0x410 [ 902.412734][T20711] __x64_sys_recvmmsg+0x62/0x80 [ 902.417595][T20711] do_syscall_64+0xad/0x160 [ 902.422104][T20711] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 902.427988][T20711] [ 902.430352][T20711] Uninit was stored to memory at: [ 902.435387][T20711] kmsan_internal_chain_origin+0xad/0x130 [ 902.441116][T20711] __msan_chain_origin+0x50/0x90 [ 902.446073][T20711] do_recvmmsg+0x11ba/0x22c0 [ 902.450671][T20711] __se_sys_recvmmsg+0x2d9/0x410 [ 902.455612][T20711] __x64_sys_recvmmsg+0x62/0x80 [ 902.460814][T20711] do_syscall_64+0xad/0x160 [ 902.465320][T20711] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 902.471204][T20711] [ 902.473528][T20711] Local variable ----msg_sys@do_recvmmsg created at: [ 902.480202][T20711] do_recvmmsg+0xbf/0x22c0 [ 902.484623][T20711] do_recvmmsg+0xbf/0x22c0 [ 902.512154][T11287] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 902.597971][T11287] usb 3-1: USB disconnect, device number 77 20:26:33 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:33 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:26:33 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004280)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000004340)='/dev/ppp\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file0\x00', 0x0, 0x0) symlink(&(0x7f0000002000)='./file0/file0/file0\x00', &(0x7f0000002080)='./file0/file0\x00') dup2(r1, r0) 20:26:33 executing program 3: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) 20:26:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004280)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file0\x00', 0x0, 0x0) symlink(&(0x7f0000002000)='./file0/file0/file0\x00', &(0x7f0000002080)='./file0/file0\x00') dup2(0xffffffffffffffff, r0) 20:26:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}]}, 0x34}}, 0x0) 20:26:34 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r5}) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r6 = accept4$unix(r2, &(0x7f0000000180), &(0x7f0000000100)=0x6e, 0x80000) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000280)='macvlan0\x00') bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x3ac, @ipv4={[], [], @private=0xa010100}, 0xfffffff8}, 0x1c) listen(r0, 0x1ff) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 20:26:34 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x400000, @private1, 0x6}, 0x1c) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x501, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r5}) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000280)={0x7, 'caif0\x00', {0x5}, 0x8}) ioctl$CHAR_RAW_RESETZONE(r1, 0x40101283, &(0x7f00000001c0)={0x7, 0x3}) listen(r0, 0x1ff) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x400, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x8}) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 20:26:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}]}, 0x34}}, 0x0) 20:26:34 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty, 0x2}, 0x1c) listen(r0, 0x1ff) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000180)={0x5, 0x32315241, 0x7, 0x0, 0x3, @discrete={0x1, 0xfff}}) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x100000001, 0x2100) creat(&(0x7f0000000100)='./file0\x00', 0x10) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f00000000c0)={{}, 0x8, 0x5, 0x81}) 20:26:35 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r5}) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r6 = accept4$unix(r2, &(0x7f0000000180), &(0x7f0000000100)=0x6e, 0x80000) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000280)='macvlan0\x00') bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x3ac, @ipv4={[], [], @private=0xa010100}, 0xfffffff8}, 0x1c) listen(r0, 0x1ff) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 20:26:37 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}]}, 0x34}}, 0x0) 20:26:37 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 20:26:37 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r5}) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r6 = accept4$unix(r2, &(0x7f0000000180), &(0x7f0000000100)=0x6e, 0x80000) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000280)='macvlan0\x00') bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x3ac, @ipv4={[], [], @private=0xa010100}, 0xfffffff8}, 0x1c) listen(r0, 0x1ff) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 20:26:37 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}}) 20:26:37 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x400000, @private1, 0x6}, 0x1c) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x501, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r5}) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000280)={0x7, 'caif0\x00', {0x5}, 0x8}) ioctl$CHAR_RAW_RESETZONE(r1, 0x40101283, &(0x7f00000001c0)={0x7, 0x3}) listen(r0, 0x1ff) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x400, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x8}) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 20:26:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x2c}}, 0x0) [ 907.141474][T11287] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 907.379897][T11287] usb 3-1: Using ep0 maxpacket: 16 [ 907.532981][T20799] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 907.740723][T11287] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 907.750519][T11287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.758776][T11287] usb 3-1: Product: syz [ 907.763294][T11287] usb 3-1: Manufacturer: syz [ 907.768032][T11287] usb 3-1: SerialNumber: syz 20:26:38 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}}) 20:26:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x2c}}, 0x0) [ 907.972364][T11287] usb 3-1: config 0 descriptor?? [ 908.024059][T11287] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 908.031328][T11287] mcba_usb 3-1:0.0 can0: couldn't start device: -2 [ 908.234199][T11287] mcba_usb: probe of 3-1:0.0 failed with error -2 [ 908.275918][T11287] usb 3-1: USB disconnect, device number 78 [ 908.339290][T20819] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 908.370071][ T8707] usb 6-1: new high-speed USB device number 4 using dummy_hcd 20:26:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x2c}}, 0x0) 20:26:38 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x400000, @private1, 0x6}, 0x1c) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x501, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r5}) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000280)={0x7, 'caif0\x00', {0x5}, 0x8}) ioctl$CHAR_RAW_RESETZONE(r1, 0x40101283, &(0x7f00000001c0)={0x7, 0x3}) listen(r0, 0x1ff) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x400, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x8}) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 908.609961][ T8707] usb 6-1: Using ep0 maxpacket: 16 20:26:38 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/246, 0xf6}], 0xca, &(0x7f0000001500)=[{&(0x7f0000001480)=""/67, 0x20000243}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() [ 908.852240][T20824] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 908.981555][ T8707] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 908.991262][ T8707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.999664][ T8707] usb 6-1: Product: syz [ 909.003987][ T8707] usb 6-1: Manufacturer: syz [ 909.008733][ T8707] usb 6-1: SerialNumber: syz [ 909.225257][ T8707] usb 6-1: config 0 descriptor?? [ 909.302890][ T8707] mcba_usb 6-1:0.0 can0: couldn't setup read URBs [ 909.309867][ T8707] mcba_usb 6-1:0.0 can0: couldn't start device: -2 [ 909.531900][ T8707] mcba_usb: probe of 6-1:0.0 failed with error -2 [ 909.617506][ T8707] usb 6-1: USB disconnect, device number 4 20:26:40 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:40 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}}) 20:26:40 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 20:26:40 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}}) [ 910.502932][ T8707] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 910.519904][ T3225] usb 3-1: new high-speed USB device number 79 using dummy_hcd 20:26:40 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x28) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x5, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x25, 0x5, 0x2) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004802) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x30}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x58}, 0x1, 0x0, 0x0, 0x80000}, 0x20000010) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xed) getitimer(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f00000001c0), 0x0) ioctl$int_out(r1, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2=0xe000000f, 0x0, 0x0, 'sh\x00', 0x0, 0x10000000}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x0, 'netdevsim0\x00'}, 0x18) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 20:26:41 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x4000000, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 910.749600][ T8707] usb 5-1: Using ep0 maxpacket: 16 [ 910.762969][T11287] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 910.792154][ T3225] usb 3-1: Using ep0 maxpacket: 16 [ 910.802902][ C0] sd 0:0:1:0: [sg0] tag#1542 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 910.813704][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB: Test Unit Ready [ 910.822347][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.832984][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.843053][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.853290][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.863811][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.873834][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.884914][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.896349][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.906408][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.913377][ T8707] usb 5-1: unable to get BOS descriptor or descriptor too short [ 910.916323][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.937385][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.947775][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.961505][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[c0]: 00 00 00 00 00 00 00 00 [ 911.009692][T11287] usb 6-1: Using ep0 maxpacket: 16 [ 911.104373][T20863] IPVS: ftp: loaded support on port[0] = 21 [ 911.211078][ T8707] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 911.220802][ T8707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.230048][ T8707] usb 5-1: Product: syz [ 911.234378][ T8707] usb 5-1: Manufacturer: syz [ 911.239106][ T8707] usb 5-1: SerialNumber: syz [ 911.370111][T11287] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 911.380510][T11287] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.391304][T11287] usb 6-1: Product: syz [ 911.395957][T11287] usb 6-1: Manufacturer: syz [ 911.401140][T11287] usb 6-1: SerialNumber: syz [ 911.625632][ T8707] usb 5-1: config 0 descriptor?? [ 911.701123][T11287] usb 6-1: config 0 descriptor?? [ 911.853235][ T8707] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 911.858357][ T3225] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 911.861386][ T8707] mcba_usb 5-1:0.0 can0: couldn't start device: -2 [ 911.871796][ T3225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.871914][ T3225] usb 3-1: Product: syz [ 911.891132][ T3225] usb 3-1: Manufacturer: syz [ 911.895883][ T3225] usb 3-1: SerialNumber: syz [ 912.014313][T11287] mcba_usb 6-1:0.0 can0: couldn't setup read URBs [ 912.023516][T11287] mcba_usb 6-1:0.0 can0: couldn't start device: -2 [ 912.060111][ T3225] usb 3-1: config 0 descriptor?? [ 912.133100][T18351] tipc: TX() has been purged, node left! [ 912.159641][ T8707] mcba_usb: probe of 5-1:0.0 failed with error -2 [ 912.164533][ T3225] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 912.173750][ T3225] mcba_usb 3-1:0.0 can0: couldn't start device: -2 20:26:42 executing program 3 (fault-call:1 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 912.208694][ T8707] usb 5-1: USB disconnect, device number 14 20:26:42 executing program 1 (fault-call:5 fault-nth:0): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) [ 912.351673][T11287] mcba_usb: probe of 6-1:0.0 failed with error -2 [ 912.359906][ T3225] mcba_usb: probe of 3-1:0.0 failed with error -2 [ 912.376003][T11287] usb 6-1: USB disconnect, device number 5 [ 912.404169][ T3225] usb 3-1: USB disconnect, device number 79 [ 912.523799][T20929] FAULT_INJECTION: forcing a failure. [ 912.523799][T20929] name failslab, interval 1, probability 0, space 0, times 1 [ 912.537485][T20929] CPU: 1 PID: 20929 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 912.546323][T20929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.556811][T20929] Call Trace: [ 912.560220][T20929] dump_stack+0x21c/0x280 [ 912.564761][T20929] should_fail+0x8b7/0x9e0 [ 912.569427][T20929] __should_failslab+0x1f6/0x290 [ 912.574647][T20929] should_failslab+0x29/0x70 [ 912.579597][T20929] kmem_cache_alloc_node+0xfe/0xdc0 [ 912.587170][T20929] ? __alloc_skb+0x23b/0xb30 [ 912.591981][T20929] __alloc_skb+0x23b/0xb30 [ 912.598414][T20929] netlink_sendmsg+0xdb9/0x1840 [ 912.603948][T20929] ____sys_sendmsg+0xc82/0x1240 [ 912.613658][T20929] ? netlink_getsockopt+0x17e0/0x17e0 [ 912.619133][T20929] __sys_sendmsg+0x6d1/0x840 [ 912.624227][T20929] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 912.632528][T20929] ? fput+0x82/0x320 [ 912.637155][T20929] ? kmsan_get_metadata+0x116/0x180 [ 912.643750][T20929] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 912.649760][T20929] ? kmsan_get_metadata+0x116/0x180 [ 912.655564][T20929] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 912.661447][T20929] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 912.667678][T20929] __se_sys_sendmsg+0x97/0xb0 [ 912.673248][T20929] __x64_sys_sendmsg+0x4a/0x70 [ 912.678889][T20929] do_syscall_64+0xad/0x160 [ 912.685805][T20929] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 912.691997][T20929] RIP: 0033:0x45d579 [ 912.695915][T20929] Code: Bad RIP value. [ 912.700045][T20929] RSP: 002b:00007fe3e2e86c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.709412][T20929] RAX: ffffffffffffffda RBX: 000000000002cd80 RCX: 000000000045d579 20:26:43 executing program 5 (fault-call:2 fault-nth:0): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x0, &(0x7f00000001c0)={0x77359400}) [ 912.717833][T20929] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 912.727151][T20929] RBP: 00007fe3e2e86ca0 R08: 0000000000000000 R09: 0000000000000000 [ 912.735353][T20929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.743730][T20929] R13: 000000000169fb6f R14: 00007fe3e2e879c0 R15: 000000000118cf4c 20:26:43 executing program 3 (fault-call:1 fault-nth:1): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:43 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) [ 913.188549][T20941] FAULT_INJECTION: forcing a failure. [ 913.188549][T20941] name failslab, interval 1, probability 0, space 0, times 0 [ 913.201830][T20941] CPU: 1 PID: 20941 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 913.210581][T20941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.220703][T20941] Call Trace: [ 913.224103][T20941] dump_stack+0x21c/0x280 [ 913.228557][T20941] should_fail+0x8b7/0x9e0 [ 913.233097][T20941] __should_failslab+0x1f6/0x290 [ 913.238156][T20941] should_failslab+0x29/0x70 [ 913.242878][T20941] __kmalloc_node_track_caller+0x1c9/0x12e0 [ 913.248889][T20941] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 913.255068][T20941] ? netlink_sendmsg+0xdb9/0x1840 [ 913.260247][T20941] ? netlink_sendmsg+0xdb9/0x1840 [ 913.265379][T20941] __alloc_skb+0x35f/0xb30 [ 913.269930][T20941] netlink_sendmsg+0xdb9/0x1840 [ 913.274908][T20941] ____sys_sendmsg+0xc82/0x1240 [ 913.279884][T20941] ? netlink_getsockopt+0x17e0/0x17e0 [ 913.285539][T20941] __sys_sendmsg+0x6d1/0x840 [ 913.290358][T20941] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 913.296541][T20941] ? fput+0x82/0x320 [ 913.300547][T20941] ? kmsan_get_metadata+0x116/0x180 [ 913.305856][T20941] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 913.311762][T20941] ? kmsan_get_metadata+0x116/0x180 [ 913.317069][T20941] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 913.323004][T20941] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 913.329272][T20941] __se_sys_sendmsg+0x97/0xb0 [ 913.334050][T20941] __x64_sys_sendmsg+0x4a/0x70 [ 913.338938][T20941] do_syscall_64+0xad/0x160 [ 913.343545][T20941] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 913.349521][T20941] RIP: 0033:0x45d579 [ 913.353459][T20941] Code: Bad RIP value. [ 913.357587][T20941] RSP: 002b:00007fe3e2e86c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.366088][T20941] RAX: ffffffffffffffda RBX: 000000000002cd80 RCX: 000000000045d579 [ 913.374148][T20941] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 20:26:43 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}}) [ 913.382207][T20941] RBP: 00007fe3e2e86ca0 R08: 0000000000000000 R09: 0000000000000000 [ 913.390257][T20941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.398313][T20941] R13: 000000000169fb6f R14: 00007fe3e2e879c0 R15: 000000000118cf4c 20:26:43 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:43 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x0, &(0x7f00000001c0)={0x77359400}) [ 913.633699][ T3225] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 913.879570][ T3225] usb 5-1: Using ep0 maxpacket: 16 [ 913.949291][ T8707] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 914.067979][ T3225] usb 5-1: unable to get BOS descriptor or descriptor too short [ 914.189421][ T8707] usb 3-1: Using ep0 maxpacket: 16 [ 914.330310][ T3225] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 914.339615][ T3225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.347747][ T3225] usb 5-1: Product: syz [ 914.352257][ T3225] usb 5-1: Manufacturer: syz [ 914.356999][ T3225] usb 5-1: SerialNumber: syz 20:26:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 914.550418][ T8707] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 914.559890][ T8707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.568159][ T8707] usb 3-1: Product: syz [ 914.572826][ T8707] usb 3-1: Manufacturer: syz [ 914.577608][ T8707] usb 3-1: SerialNumber: syz [ 914.589587][ T3225] usb 5-1: config 0 descriptor?? [ 914.637365][ T3225] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 914.644546][ T3225] mcba_usb 5-1:0.0 can0: couldn't start device: -2 [ 914.726328][ T8707] usb 3-1: config 0 descriptor?? 20:26:45 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000014, 0x0, &(0x7f00000001c0)={0x77359400}) [ 914.794851][ T8707] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 914.801673][ T8707] mcba_usb 3-1:0.0 can0: couldn't start device: -2 [ 914.971601][T20968] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 914.993899][ T3225] mcba_usb: probe of 5-1:0.0 failed with error -2 [ 915.029759][ T8707] mcba_usb: probe of 3-1:0.0 failed with error -2 [ 915.047868][ T3225] usb 5-1: USB disconnect, device number 15 [ 915.114562][ T8707] usb 3-1: USB disconnect, device number 80 20:26:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:45 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) [ 915.524429][T20991] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:26:46 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}}) [ 916.060059][T20906] usb 5-1: new high-speed USB device number 16 using dummy_hcd 20:26:46 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:26:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:46 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x40000000000001c, 0x0, &(0x7f00000001c0)={0x77359400}) [ 916.199944][ T8703] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 916.303461][T20906] usb 5-1: Using ep0 maxpacket: 16 [ 916.377510][T21006] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 916.459505][ T8703] usb 3-1: Using ep0 maxpacket: 16 [ 916.491184][T20906] usb 5-1: unable to get BOS descriptor or descriptor too short 20:26:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:46 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x2) [ 916.669738][T21013] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 916.741431][T20906] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 916.750879][T20906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.759197][T20906] usb 5-1: Product: syz [ 916.763507][T20906] usb 5-1: Manufacturer: syz [ 916.768241][T20906] usb 5-1: SerialNumber: syz [ 916.912783][ T8703] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 916.924767][ T8703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.927239][T20906] usb 5-1: config 0 descriptor?? [ 916.933089][ T8703] usb 3-1: Product: syz [ 916.933194][ T8703] usb 3-1: Manufacturer: syz [ 916.933304][ T8703] usb 3-1: SerialNumber: syz 20:26:47 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 917.031352][T20906] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 917.038032][T20906] mcba_usb 5-1:0.0 can0: couldn't start device: -2 [ 917.113569][ T8703] usb 3-1: config 0 descriptor?? 20:26:47 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x4) [ 917.248437][T21028] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 917.273784][ T8703] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 917.283498][ T8703] mcba_usb 3-1:0.0 can0: couldn't start device: -2 [ 917.365255][T20906] mcba_usb: probe of 5-1:0.0 failed with error -2 [ 917.397210][T20906] usb 5-1: USB disconnect, device number 16 [ 917.405146][ T8703] mcba_usb: probe of 3-1:0.0 failed with error -2 20:26:47 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000024, 0x0, &(0x7f00000001c0)={0x77359400}) [ 917.472774][ T8703] usb 3-1: USB disconnect, device number 81 20:26:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 917.765496][T21060] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:26:48 executing program 4: 20:26:48 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x14000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x0, 0x80000000, 0x2, 0x2}, 0x8, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x4, 0x8, 0x8001, 0x30a}) syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) 20:26:48 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0xe) 20:26:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:48 executing program 4: [ 918.199834][T21069] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:26:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:48 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x15) [ 918.610026][ T8706] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 918.833596][T21084] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 918.859393][ T8706] usb 3-1: Using ep0 maxpacket: 16 [ 918.993024][ T8706] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 919.005885][ T8706] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 919.189607][ T8706] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 919.198898][ T8706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.207035][ T8706] usb 3-1: Product: syz [ 919.211510][ T8706] usb 3-1: Manufacturer: syz [ 919.216243][ T8706] usb 3-1: SerialNumber: syz [ 919.239779][ T8706] usb 3-1: config 0 descriptor?? [ 919.282910][ T8706] usb-storage 3-1:0.0: USB Mass Storage device detected [ 919.295224][ T8706] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 919.483533][ T8706] usb 3-1: USB disconnect, device number 82 20:26:50 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:50 executing program 4: 20:26:50 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x40000000000002c, 0x0, &(0x7f00000001c0)={0x77359400}) 20:26:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:50 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x16) [ 920.299209][ T8706] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 920.337488][T21115] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:26:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 920.559583][ T8706] usb 3-1: Using ep0 maxpacket: 16 [ 920.682568][T21124] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 920.700591][ T8706] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 920.713743][ T8706] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 920.910018][ T8706] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 920.919529][ T8706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.927677][ T8706] usb 3-1: Product: syz [ 920.932464][ T8706] usb 3-1: Manufacturer: syz [ 920.937209][ T8706] usb 3-1: SerialNumber: syz [ 920.994520][ T8706] usb 3-1: config 0 descriptor?? [ 921.042868][ T8706] usb-storage 3-1:0.0: USB Mass Storage device detected [ 921.106608][ T8706] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 921.249986][ T8706] usb 3-1: USB disconnect, device number 83 20:26:51 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x16, 0xaf, 0x10, 0x10, 0x19d2, 0xffba, 0xa344, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x3a, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x40, 0x6, 0x21, {0x21, 0x4, "bf6adab1cff3b1e65638d48d1519e8c94a24d03c324d8c16a8696cb55b30fd"}}, &(0x7f0000000040)={0x0, 0x3, 0xe5, @string={0xe5, 0x3, "a1e49e6ca90f1dfea0994b704068fd2b6e86bcae39982bf729aebbe3a1939444d52111cade45b28c653643ba6bde6efabb5fae9d01abb2163e5eda2b2f782486c07f011edcccfd006c47a1e826bc000948cd9bd608b19136650889823e93c584df485acb8984e4b321935aeff2100b4c8d6b5920afb2d9d00d6b925900dcf835bbaac0a24c84de8184d5f577ddd5a7784e99bded58481f27dad4c7586011e5d5f9740d75cc9298b74bd0aa93e1a59948e21dfa4c74ae25a5ae6554b2ec991de0cc9a2cec2469af5dd37596c882bc79d6aca493bd2ae74b0395b91755312bad3e1b5e52"}}, &(0x7f0000000140)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0xc, "cb0ececf"}, @main=@item_012={0x1, 0x0, 0xa, "f2"}, @global=@item_4={0x3, 0x1, 0x4, "983a697d"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x88c}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x40, 0x0, 0xab, "3210c5585f283cabd81166ff2195b67a3163ee88eb05d5f4509add9868fc5dc76648c2d71b7180579ba957088de7bd354ed1c0ffcfd7aad6d82d6be1ec95313d825cbb935d316712912e83e1712a29339c658b6155227a061944e661c8745f6adfb9f0039f6f2b2318133848c53378456d75aa7bb50a9c7c428985bbea02af6a6e7181ba9adc407d70d9d44698479608098a4c21ca06b17f5a00636197df6168986986efe33a69a974773a"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xda}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x1, 0x64, "2208af31c0a071ed1a849cac194e1b7fe979c2bf29fff8d956777a0cddbd5999d92e43e09a58d8fcbf5a0878b4eb5f9690ebce376be22493a1f042695ffe498c6299f4223526c5072e9a63021e4179031141dd7b85cbd02240e8a68589e059b008ecef4e"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x7}}) 20:26:51 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x118) 20:26:51 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 20:26:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:51 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000034, 0x0, &(0x7f00000001c0)={0x77359400}) [ 921.498420][T21147] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:26:51 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0xe00) [ 921.930332][ T9021] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 922.198901][ T9021] usb 3-1: Using ep0 maxpacket: 16 [ 922.349063][ T9021] usb 3-1: config 0 has an invalid interface number: 58 but max is 0 [ 922.357856][ T9021] usb 3-1: config 0 has an invalid interface number: 242 but max is 0 [ 922.366430][ T9021] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 922.375750][ T9021] usb 3-1: config 0 has no interface number 0 [ 922.382124][ T9021] usb 3-1: config 0 has no interface number 1 [ 922.388381][ T9021] usb 3-1: config 0 interface 58 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 922.400335][ T9021] usb 3-1: too many endpoints for config 0 interface 242 altsetting 32: 137, using maximum allowed: 30 [ 922.411716][ T9021] usb 3-1: config 0 interface 242 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 137 [ 922.425349][ T9021] usb 3-1: config 0 interface 242 has no altsetting 0 [ 922.609476][ T9021] usb 3-1: New USB device found, idVendor=19d2, idProduct=ffba, bcdDevice=a3.44 [ 922.618993][ T9021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.627131][ T9021] usb 3-1: Product: syz [ 922.631725][ T9021] usb 3-1: Manufacturer: syz [ 922.636472][ T9021] usb 3-1: SerialNumber: syz [ 922.646072][ T9021] usb 3-1: config 0 descriptor?? [ 922.696736][ T9021] option 3-1:0.58: GSM modem (1-port) converter detected [ 923.122386][ T9021] usb 3-1: USB disconnect, device number 84 [ 923.130663][ T9021] option 3-1:0.58: device disconnected 20:26:53 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:26:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:53 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 20:26:53 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x1500) 20:26:53 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000038, 0x0, &(0x7f00000001c0)={0x77359400}) [ 923.740025][T21189] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 923.929001][ T9021] usb 3-1: new high-speed USB device number 85 using dummy_hcd 20:26:54 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x1600) [ 924.168814][ T9021] usb 3-1: Using ep0 maxpacket: 16 [ 924.304278][ T9021] usb 3-1: config 0 has an invalid interface number: 58 but max is 0 [ 924.312956][ T9021] usb 3-1: config 0 has an invalid interface number: 242 but max is 0 [ 924.321538][ T9021] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 924.330790][ T9021] usb 3-1: config 0 has no interface number 0 [ 924.337035][ T9021] usb 3-1: config 0 has no interface number 1 [ 924.343564][ T9021] usb 3-1: config 0 interface 58 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 924.354551][ T9021] usb 3-1: too many endpoints for config 0 interface 242 altsetting 32: 137, using maximum allowed: 30 [ 924.366023][ T9021] usb 3-1: config 0 interface 242 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 137 [ 924.379625][ T9021] usb 3-1: config 0 interface 242 has no altsetting 0 20:26:55 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="57bab44ee647ef752cf996571f6b60d6a7ecac01c2846d0b2e288e6a2b7638a145c5e5f9be41df97b8fa61f90cdf5f5cba8944b95270681d517fd24eba0030edf288c2928044677dd23e546b4743c9c22252843193a9e3c12d38c31e1032780f41ca54b05fedaa1d8f57fe90a95e8f91e1d4d1b0dd87a6fff5257a317234ec65852e279804f94cdd216b1773c96bc27dd1e6e83360f8f5d1a393bb00a3ca98da4d5a30d36cab885eb9f1e0dc490e23dbca5ab8536708", @ANYRES64, @ANYRES32], 0x0) 20:26:55 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 20:26:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:55 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x40000000000003c, 0x0, &(0x7f00000001c0)={0x77359400}) 20:26:55 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x1801) [ 924.769071][ T9021] usb 3-1: New USB device found, idVendor=19d2, idProduct=ffba, bcdDevice=a3.44 [ 924.778292][ T9021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.786634][ T9021] usb 3-1: Product: syz [ 924.832957][T21205] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 924.868833][ T9021] usb 3-1: config 0 descriptor?? [ 924.915071][ T9021] usb 3-1: can't set config #0, error -71 [ 924.956950][ T9021] usb 3-1: USB disconnect, device number 85 20:26:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xd, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 925.365894][T21222] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 925.452527][ T9021] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 925.698687][ T9021] usb 3-1: Using ep0 maxpacket: 16 [ 925.840755][ T9021] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 925.853679][ T9021] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 926.039666][ T9021] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 926.049150][ T9021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.057285][ T9021] usb 3-1: Product: syz [ 926.062003][ T9021] usb 3-1: Manufacturer: syz [ 926.066749][ T9021] usb 3-1: SerialNumber: syz [ 926.127608][ T9021] usb 3-1: config 0 descriptor?? [ 926.182241][ T9021] usb-storage 3-1:0.0: USB Mass Storage device detected [ 926.218882][ T9021] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 926.384818][ T3390] usb 3-1: USB disconnect, device number 86 20:26:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:26:57 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000048, 0x0, &(0x7f00000001c0)={0x77359400}) 20:26:57 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 20:26:57 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x40000) 20:26:57 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 927.179705][ T9021] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 927.321984][T21252] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 927.419304][ T9021] usb 3-1: Using ep0 maxpacket: 16 [ 927.499616][T10420] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 927.559908][ T9021] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 927.572681][ T9021] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 20:26:58 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x80000) [ 927.738747][T10420] usb 5-1: Using ep0 maxpacket: 16 [ 927.834911][ T9021] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 927.844457][ T9021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.852847][ T9021] usb 3-1: Product: syz [ 927.857164][ T9021] usb 3-1: Manufacturer: syz [ 927.861998][ T9021] usb 3-1: SerialNumber: syz [ 928.020371][T10420] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 928.029840][T10420] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.037970][T10420] usb 5-1: Product: syz [ 928.042441][T10420] usb 5-1: Manufacturer: syz [ 928.047176][T10420] usb 5-1: SerialNumber: syz [ 928.047649][ T9021] usb 3-1: config 0 descriptor?? 20:26:58 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x100}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0x0, 0x20, [], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f00000001c0)="773aaa46710e48c9904fbde1f76934dcfaca9e451372", 0x16) 20:26:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 928.153165][T10420] usb 5-1: config 0 descriptor?? [ 928.164887][ T9021] usb 3-1: can't set config #0, error -71 [ 928.202559][ T9021] usb 3-1: USB disconnect, device number 87 [ 928.207976][T10420] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 928.215316][T10420] mcba_usb 5-1:0.0 can0: couldn't start device: -2 [ 928.315320][T21278] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 928.340136][T10420] mcba_usb: probe of 5-1:0.0 failed with error -2 [ 928.404504][T10420] usb 5-1: USB disconnect, device number 17 20:26:58 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x80040) 20:26:58 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000058, 0x0, &(0x7f00000001c0)={0x77359400}) 20:26:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 928.698496][T21296] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:26:59 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x1000000) [ 928.814371][ T9021] usb 3-1: new high-speed USB device number 88 using dummy_hcd 20:26:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 929.069587][ T9021] usb 3-1: Using ep0 maxpacket: 16 [ 929.156079][T21304] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 929.209943][ T9021] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 929.222839][ T9021] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 929.451377][ T9021] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 929.461256][ T9021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.469698][ T9021] usb 3-1: Product: syz [ 929.474065][ T9021] usb 3-1: Manufacturer: syz [ 929.478992][ T9021] usb 3-1: SerialNumber: syz [ 929.540362][ T9021] usb 3-1: config 0 descriptor?? [ 929.581865][ T9021] usb-storage 3-1:0.0: USB Mass Storage device detected [ 929.621850][ T9021] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 929.790296][ T3390] usb 3-1: USB disconnect, device number 88 20:27:00 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:27:00 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 20:27:00 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x2000000) 20:27:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:00 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000060, 0x0, &(0x7f00000001c0)={0x77359400}) [ 930.614083][ T8703] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 930.803354][T21329] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 930.868592][ T8703] usb 3-1: Using ep0 maxpacket: 16 [ 930.989636][ T8703] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 931.002469][ T8703] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 931.178352][ T9021] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 931.349385][ T8703] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 931.358940][ T8703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.367085][ T8703] usb 3-1: Product: syz [ 931.371633][ T8703] usb 3-1: Manufacturer: syz [ 931.376376][ T8703] usb 3-1: SerialNumber: syz [ 931.448328][ T9021] usb 5-1: Using ep0 maxpacket: 16 [ 931.677146][ T8703] usb 3-1: config 0 descriptor?? [ 931.740268][ T8703] usb 3-1: can't set config #0, error -71 [ 931.759097][ T9021] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 931.768878][ T9021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.777014][ T9021] usb 5-1: Product: syz [ 931.781453][ T9021] usb 5-1: Manufacturer: syz 20:27:02 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') 20:27:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x25, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:02 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0xe000000) [ 931.786198][ T9021] usb 5-1: SerialNumber: syz [ 931.888824][ T8703] usb 3-1: USB disconnect, device number 89 [ 931.996379][ T9021] usb 5-1: config 0 descriptor?? [ 932.017744][T21352] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:27:02 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000068, 0x0, &(0x7f00000001c0)={0x77359400}) [ 932.079705][ T9021] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 932.086370][ T9021] mcba_usb 5-1:0.0 can0: couldn't start device: -2 20:27:02 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x15000000) [ 932.324068][ T9021] mcba_usb: probe of 5-1:0.0 failed with error -2 20:27:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 932.424722][ T9021] usb 5-1: USB disconnect, device number 18 20:27:02 executing program 2: syz_usb_connect(0x0, 0x4a, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xe0, 0x8a, 0x99, 0x10, 0x1199, 0x900a, 0xf223, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x1, 0xfc, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x54, 0xfb, 0xb3, 0x0, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x2, 0x1, 0x5, "3438fcd82e01ca4bed"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3, 0x7, "f2", "29ce46"}]}], [{{0x9, 0x5, 0x8}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000080)="faf78433da04756c5f2f51570269b3e109b0081a82db7ff143c70834f4b9234cc06a3e94182319849c425b229ea7308f46b82eb262af1e4021959025c572d0b1f23b15f426f113355332c141304d755fff5bce9ae162717e354b59c8972568", &(0x7f0000000100)=@buf="c6f2b969307e9e4ef077d8f71b039387ed3666fb75d73392172b9bfa73702499d643ba87a53121c8db63fc4d615864d29a427b37200bfb743ca61b784fb8c46f7eb8ee501a19fe2f1fe4443122a860db53ddf16a2f5b1f70d14f4afcd3bb6febbc9d6ceccb1b34eb85ec9b018da63b891f969ab5e66eb254047782ac2eb32c3ed356f1", 0x1}, 0x20) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) [ 932.744263][T21378] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 933.059370][T10420] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 933.301789][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 933.419167][T10420] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 933.589792][T10420] usb 3-1: New USB device found, idVendor=1199, idProduct=900a, bcdDevice=f2.23 [ 933.599001][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.607334][T10420] usb 3-1: Product: syz [ 933.611837][T10420] usb 3-1: Manufacturer: syz [ 933.616614][T10420] usb 3-1: SerialNumber: syz [ 934.085598][T10420] usb 3-1: USB disconnect, device number 90 20:27:04 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:27:04 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x16000000) 20:27:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3a, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:04 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 20:27:04 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x40000000000006c, 0x0, &(0x7f00000001c0)={0x77359400}) [ 934.770777][T10420] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 934.792066][ T3390] usb 5-1: new high-speed USB device number 19 using dummy_hcd 20:27:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:05 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x18010000) [ 935.018283][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 935.048786][ T3390] usb 5-1: Using ep0 maxpacket: 16 [ 935.139629][T10420] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 935.301557][T21418] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 935.329196][ T3390] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 935.338790][ T3390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.347011][ T3390] usb 5-1: Product: syz [ 935.351535][ T3390] usb 5-1: Manufacturer: syz [ 935.356314][ T3390] usb 5-1: SerialNumber: syz [ 935.378947][T10420] usb 3-1: New USB device found, idVendor=1199, idProduct=900a, bcdDevice=f2.23 [ 935.388313][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.396454][T10420] usb 3-1: Product: syz [ 935.400990][T10420] usb 3-1: Manufacturer: syz [ 935.405732][T10420] usb 3-1: SerialNumber: syz [ 935.581278][ T3390] usb 5-1: config 0 descriptor?? [ 935.630199][ T3390] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 935.636969][ T3390] mcba_usb 5-1:0.0 can0: couldn't start device: -2 20:27:06 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000070, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:06 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x40000800) 20:27:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4a, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:06 executing program 2: syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[], 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x4, 0x3, 0xb8a8}}, 0x30) sendmsg$rds(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)=""/210, 0xd2}, {&(0x7f0000000180)=""/139, 0x8b}], 0x2, &(0x7f00000015c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8}, &(0x7f0000000280)=0x72a7, &(0x7f00000002c0)=0x40, 0x8, 0x6, 0x7, 0x1, 0x1, 0x6}}, @fadd={0x58, 0x114, 0x6, {{0x3, 0x1}, &(0x7f0000000300)=0x1, &(0x7f0000000340)=0xffffffff80000001, 0x1000, 0x81, 0xffff, 0xa1, 0x0, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x4}, {&(0x7f0000000380)=""/175, 0xaf}, &(0x7f0000001580)=[{&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/250, 0xfa}], 0x3, 0x5c, 0x800}}], 0xf8}, 0x4001) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000001700)={0x1, 0x800, 0x5, 0xff, 0xffffffffffffff4e, 0x64, 0x9, 0x6, 0x8, 0x0, 0x7}) [ 936.039315][ T3390] mcba_usb: probe of 5-1:0.0 failed with error -2 [ 936.117693][ T3390] usb 5-1: USB disconnect, device number 19 [ 936.136391][T10420] usb 3-1: USB disconnect, device number 91 [ 936.356055][T21453] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:27:06 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x80000000000) [ 936.700207][T10420] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 936.978028][T10420] usb 3-1: device descriptor read/64, error 18 [ 937.368106][T10420] usb 3-1: device descriptor read/64, error 18 [ 937.638630][T10420] usb 3-1: new full-speed USB device number 93 using dummy_hcd 20:27:08 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:27:08 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x0, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 20:27:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4c, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:08 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x4000000000000) 20:27:08 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000074, 0x0, &(0x7f00000001c0)={0x77359400}) [ 937.908326][T10420] usb 3-1: device descriptor read/64, error 18 [ 938.146302][T21471] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 938.317863][T10420] usb 3-1: device descriptor read/64, error 18 [ 938.438226][ T3390] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 938.446820][T10420] usb usb3-port1: attempt power cycle 20:27:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 938.709436][ T3390] usb 5-1: device descriptor read/64, error 18 20:27:09 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x100000000000000) [ 939.098026][ T3390] usb 5-1: device descriptor read/64, error 18 [ 939.178560][T10420] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 939.368014][ T3390] usb 5-1: new high-speed USB device number 21 using dummy_hcd 20:27:09 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000078, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x68, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 939.638405][ T3390] usb 5-1: device descriptor read/64, error 18 20:27:10 executing program 2: syz_usb_connect(0x0, 0x112, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b90dc11058040f7018bd01020301090200010100000080090438000156e21800ba0bbffc44e72c71a693d6a158edb0119c0d9a01e941984aa8ce57da95b607ec4deb6cdc2202aba2c46fd83aaf80393b3ce967f5fea3777900940f3bd19d0b24c0f048cf4e02c343a80e30057889f351819de458318a46ecab4edffe7ed5f201c03c7ab3526d6d30879d70d80000000000000000869b6cd787b58925a757eafeb245a8833d2dc37945dee8eae303555e8b63226e97d1ad03e958d07179904b40f81e66420f9850cdb947716432fb8c65621b55865f3fde3b514a0a24010300810201020d240702030002ee23a017e4750c24080383000246b8ba53ee090500100000000000090af2208996ec7c06859b568ebf84403d40277d90de43c5cc6477e549fa1b21e2ceb6142fe61a392560fe2abe99489478c4e6554e06c4c778867f88054bca45e32c209feb06969f0ab75608c08843aba165b3"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000000)) pkey_alloc(0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000080)={0x1, 0xdc, 0x6, 0x2, 0x7, 0x5}) [ 939.757935][T10420] usb 3-1: device descriptor read/8, error -71 20:27:10 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x200000000000000) [ 939.969598][T10420] usb 3-1: device descriptor read/8, error -71 [ 940.027219][T21497] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 940.028000][ T3390] usb 5-1: device descriptor read/64, error 18 20:27:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 940.158588][ T3390] usb usb5-port1: attempt power cycle [ 940.397175][T21505] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 940.457805][T10420] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 940.558843][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 940.678424][T10420] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 940.686993][T10420] usb 3-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 940.702826][T10420] usb 3-1: config 0 has no interface number 0 [ 940.709659][T10420] usb 3-1: config 0 interface 56 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 940.868614][ T3390] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 940.888265][T10420] usb 3-1: New USB device found, idVendor=0458, idProduct=700f, bcdDevice=bd.18 [ 940.898307][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.906460][T10420] usb 3-1: Product: syz [ 940.911082][T10420] usb 3-1: Manufacturer: syz [ 940.915867][T10420] usb 3-1: SerialNumber: syz [ 940.988888][ T3390] usb 5-1: Invalid ep0 maxpacket: 0 [ 941.002178][T10420] usb 3-1: config 0 descriptor?? [ 941.085398][T10420] gspca_main: gspca_zc3xx-2.14.0 probing 0458:700f [ 941.168877][ T3390] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 941.258654][T10420] gspca_zc3xx: reg_w_i err -71 [ 941.277817][ T3390] usb 5-1: device descriptor read/8, error -71 20:27:11 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:27:11 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0xe00000000000000) 20:27:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x74, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:11 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000090, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:11 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x0, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) [ 941.489216][ T3390] usb 5-1: device descriptor read/8, error -71 [ 941.608302][ T3390] usb usb5-port1: unable to enumerate USB device [ 941.641882][T21521] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:27:12 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x1500000000000000) 20:27:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7a, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 941.900410][T10420] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 941.907005][T10420] gspca_zc3xx: probe of 3-1:0.56 failed with error -71 [ 941.970328][T10420] usb 3-1: USB disconnect, device number 95 [ 941.999112][ T3390] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 942.277885][ T3390] usb 5-1: device descriptor read/64, error 18 [ 942.408027][T21540] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 942.431280][T10420] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 942.667695][ T3390] usb 5-1: device descriptor read/64, error 18 [ 942.682203][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 942.808849][T10420] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 942.817208][T10420] usb 3-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 942.827939][T10420] usb 3-1: config 0 has no interface number 0 [ 942.834225][T10420] usb 3-1: config 0 interface 56 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 20:27:13 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x1600000000000000) [ 942.938561][ T3390] usb 5-1: new high-speed USB device number 25 using dummy_hcd 20:27:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x195, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 943.227842][ T3390] usb 5-1: device descriptor read/64, error 18 20:27:13 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000094, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="000228bd7000fedbdf250a0000005e0001007063690011000200303030303a30303a31302e30000000000800030001000000080001007063690011000200303030303a30303a31302e30000000000800030001000000"], 0x12}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c13e9966ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x25}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000040)={0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x1515], 0x9}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockname$tipc(r1, &(0x7f0000000200)=@id, &(0x7f0000000440)=0x10) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000180)={{0xc, 0x3}, {0x22, 0x9}, 0x8, 0x2, 0x1}) write$P9_RUNLINKAT(r1, &(0x7f00000003c0)={0x7, 0x4d, 0x1}, 0x7) syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) [ 943.448742][T10420] usb 3-1: New USB device found, idVendor=0458, idProduct=700f, bcdDevice=bd.18 [ 943.458459][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.617669][ T3390] usb 5-1: device descriptor read/64, error 18 [ 943.659746][T10420] usb 3-1: config 0 descriptor?? [ 943.679369][T10420] usb 3-1: can't set config #0, error -71 [ 943.738261][ T3390] usb usb5-port1: attempt power cycle [ 943.775309][T10420] usb 3-1: USB disconnect, device number 96 20:27:14 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x1801000000000000) [ 944.438198][T10420] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 944.449295][ T3390] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 944.581341][ T3390] usb 5-1: Invalid ep0 maxpacket: 0 [ 944.717907][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 944.748596][ T3390] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 944.848572][T10420] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 944.861509][T10420] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 20:27:15 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:27:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x26a, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:15 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000098, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:15 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x4000080000000000) 20:27:15 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x0, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) [ 945.028068][ T3390] usb 5-1: device descriptor read/8, error -71 [ 945.158381][T10420] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 945.159954][T21573] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 945.168529][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.184272][T10420] usb 3-1: Product: syz [ 945.188648][T10420] usb 3-1: Manufacturer: syz [ 945.193396][T10420] usb 3-1: SerialNumber: syz [ 945.267943][ T3390] usb 5-1: device descriptor read/8, error -71 [ 945.389123][ T3390] usb usb5-port1: unable to enumerate USB device [ 945.455872][T10420] usb 3-1: config 0 descriptor?? 20:27:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 945.503901][T10420] usb-storage 3-1:0.0: USB Mass Storage device detected [ 945.561841][T10420] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 20:27:16 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000100)="864c9a059bd6d131ed368552f6c65082521a5c041bfd24e0623d7928e26a7d7e0df6e59fa6b9f241cb218cf5068ef1", 0x2f) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) connect$rxrpc(r7, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) r8 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8001, 0x4000) ioctl$SG_GET_LOW_DMA(r8, 0x227a, &(0x7f0000000080)) r9 = dup3(r1, r0, 0x0) ioctl$TIOCSPTLCK(r9, 0x40045431, &(0x7f0000000000)) [ 945.705981][T10420] usb 3-1: USB disconnect, device number 97 [ 945.798165][ T3390] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 945.998255][T21600] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 946.068197][ T3390] usb 5-1: device descriptor read/64, error 18 [ 946.457571][ T3390] usb 5-1: device descriptor read/64, error 18 20:27:16 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x40000000000009c, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r2, r0, 0x0) 20:27:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3b6, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 946.730446][ T3390] usb 5-1: new high-speed USB device number 29 using dummy_hcd 20:27:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x2c3, 0x4, 0x8, 0x8, 0xb, "de1d7fc391a328f2"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) syz_usb_connect(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r1, @ANYRES32], 0x0) [ 947.007916][ T3390] usb 5-1: device descriptor read/64, error 18 [ 947.101166][T21615] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:27:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000011c0)='THAWED\x00', 0x7) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @broadcast}}}, 0x88) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x5, [@const={0x4, 0x0, 0x0, 0xa, 0x5}, @enum={0xf, 0x7, 0x0, 0x6, 0x4, [{0xe, 0x5562af16}, {0x4, 0x9}, {0xb, 0x1}, {0x2, 0x1}, {0xd, 0x6}, {0x4, 0x8e97}, {0xb, 0x10001}]}]}, {0x0, [0x61, 0x30, 0x2e]}}, &(0x7f0000000140)=""/4096, 0x6d, 0x1000}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001180)={r3, 0x200, 0x5, 0x7}) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000001200)) [ 947.397545][ T3390] usb 5-1: device descriptor read/64, error 18 [ 947.518248][ T3390] usb usb5-port1: attempt power cycle [ 948.238301][ T3390] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 948.427512][ T3390] usb 5-1: device descriptor read/8, error -71 20:27:18 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:27:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3b9, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)={0xe0, 0x1, 0x7}) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r3 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xa0600, 0x120, 0x8}, 0x18) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000000000001000000070000000000000700000000000000"]) dup3(r1, r0, 0x0) 20:27:18 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009504cf0102030109ea240001000000f21c8ef3ecdd36271aef285e70323b5e83db0086c500290500001d0000000009040000000014800000000000004fb52f9abd0d803d558f67f33e41cd92796e163f6194da92a1d3210caf76585e019b3eb047deeca9b7f67c2d7dec12801375846971641be10633efa7a372369a46e2ea26dbc7612a51c676dc538236e4e365219673b086c7b17b5280a564b64b6049d978d8ab7ce12339236901a90a0e1f267fd358c7d824e276ed3d86937037a963"], 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x42, 0x511881) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x80000, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000180)) uselib(&(0x7f0000000080)='./file0\x00') getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) 20:27:18 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000000a4, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:18 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, 0x0) [ 948.647600][ T3390] usb 5-1: device descriptor read/8, error -71 [ 948.666226][T21639] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 948.990419][ T8703] usb 3-1: new high-speed USB device number 98 using dummy_hcd 20:27:19 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44000104}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x1, 0x7, 0x200, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfffffffffffffff8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfff}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xb3fd18ed51dcfe1f}, 0x4000084) dup3(r1, r0, 0x0) [ 949.137379][ T3390] usb 5-1: new high-speed USB device number 31 using dummy_hcd 20:27:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 949.277335][ T8703] usb 3-1: device descriptor read/64, error 18 [ 949.278606][ T3390] usb 5-1: Using ep0 maxpacket: 16 [ 949.418985][ T3390] usb 5-1: unable to get BOS descriptor or descriptor too short [ 949.488087][ T3390] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 949.495825][ T3390] usb 5-1: can't read configurations, error -71 [ 949.633735][ T3390] usb usb5-port1: unable to enumerate USB device [ 949.677794][ T8703] usb 3-1: device descriptor read/64, error 18 [ 949.768790][T21656] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 949.968248][ T8703] usb 3-1: new high-speed USB device number 99 using dummy_hcd 20:27:20 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000000ac, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:20 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0x1, 0x2, 0x5, 0x2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x80b0, 0x7, 0x3f}}) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = dup(0xffffffffffffffff) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000c06050000e40000000000000000000005ff7f000700000005000100070000006500db3d9f0536070091"], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x2c008880) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r7}) connect$can_bcm(r2, &(0x7f0000001ff0)={0x1d, r7}, 0xffffffffffffff82) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r6, r0, 0x0) 20:27:20 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, 0x0) [ 950.249777][ T8703] usb 3-1: device descriptor read/64, error 18 20:27:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 950.622976][T21669] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 950.667997][ T8703] usb 3-1: device descriptor read/64, error 18 [ 950.791009][ T8703] usb usb3-port1: attempt power cycle [ 950.861737][T20906] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 951.127675][T20906] usb 5-1: Using ep0 maxpacket: 16 [ 951.247531][T20906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 951.307921][T20906] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 951.315669][T20906] usb 5-1: can't read configurations, error -71 [ 951.537877][ T8703] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 951.640442][ T8703] usb 3-1: Invalid ep0 maxpacket: 1 [ 951.807300][ T8703] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 952.048506][ T8703] usb 3-1: device descriptor read/8, error -71 20:27:22 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:27:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:22 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000007c0)={@empty, @empty, 0x0}, &(0x7f0000000800)=0xc) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) connect$can_bcm(r4, &(0x7f0000001ff0)={0x1d, r3}, 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x111, 0x2, 0x1, 0x4) dup3(r1, r0, 0x0) 20:27:22 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000000b4, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:22 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, 0x0) 20:27:22 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)='iQ1/wiseZess\x00') add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x5]}, 0x8) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x8000, 0x3, 0x4, 0x800, 0x80000000, {0x77359400}, {0x2, 0x8, 0x7f, 0x1, 0x6, 0x1f, "0e19c874"}, 0x8, 0x4, @planes=&(0x7f0000000140)={0x7, 0x4, @userptr=0x5, 0x1}, 0x70c9}) syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e21, 0x4, @private2}, {0xa, 0x4e20, 0x8000, @mcast1, 0x6}, 0x5, [0xbef, 0x2, 0x3, 0xf946, 0x7f, 0x6, 0x1, 0x80000000]}, 0x5c) [ 952.312821][ T8703] usb 3-1: device descriptor read/8, error -71 [ 952.437686][ T8703] usb usb3-port1: unable to enumerate USB device 20:27:22 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:27:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:23 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x3, 0x0) pipe2(&(0x7f0000000340), 0x40000) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000200)="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") connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) r3 = eventfd2(0x800, 0x1001) ioctl$int_out(r3, 0x4, &(0x7f0000000140)) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000100)={0x3ff, 0x1, 0x2, 0x12, 0x15, "87ec0da64ed98ff8b1f56de861547f3268f817"}) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = dup(0xffffffffffffffff) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) dup3(r1, r5, 0x0) [ 952.787342][T20906] usb 5-1: new high-speed USB device number 34 using dummy_hcd 20:27:23 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 952.857409][ T8703] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 952.959360][T21711] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 953.027432][T20906] usb 5-1: Using ep0 maxpacket: 16 [ 953.127233][ T8703] usb 3-1: Using ep0 maxpacket: 16 [ 953.149314][T20906] usb 5-1: unable to get BOS descriptor or descriptor too short 20:27:23 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 953.231867][T20906] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 953.239795][T20906] usb 5-1: can't read configurations, error -71 [ 953.257747][ T8703] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 953.270661][ T8703] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 20:27:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa00, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:23 executing program 1: syz_emit_ethernet(0x62, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xa}, @local, {[@noop, @timestamp={0x44, 0x8, 0x6e, 0x0, 0x7, [0x8]}, @end, @rr={0x7, 0xb, 0xe1, [@broadcast, @local]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "703fd61cbd0e66ef6b33187dbae67578"}]}}}}}}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:27:23 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000000bc, 0x0, &(0x7f00000001c0)={0x77359400}) [ 953.558812][ T8703] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 953.568221][ T8703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.576345][ T8703] usb 3-1: Product: syz [ 953.580914][ T8703] usb 3-1: Manufacturer: syz [ 953.585686][ T8703] usb 3-1: SerialNumber: syz [ 953.714900][T21728] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 953.940869][ T8703] usb 3-1: config 0 descriptor?? [ 954.083380][ T8703] usb-storage 3-1:0.0: USB Mass Storage device detected [ 954.154737][ T8703] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 20:27:24 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) [ 954.233956][ T8703] usb 3-1: USB disconnect, device number 102 20:27:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xb00, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4c, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 954.777377][T21756] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 954.977409][T21764] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 20:27:25 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) eventfd2(0x3, 0x80000) 20:27:25 executing program 2: syz_usb_connect(0x1, 0x4b6, &(0x7f0000000640)={{0x12, 0x1, 0x101, 0x78, 0x2b, 0x6f, 0x10, 0x403, 0xcc4a, 0x142e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a4, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe3, 0x0, 0xe, 0xb2, 0x52, 0xf1, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xffff, 0x3, 0xff}}, @hid_hid={0x9, 0x21, 0x2, 0x8a, 0x1, {0x22, 0xe64}}], [{{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x1f, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf6, 0x8000}, @generic={0xad, 0x2, "5f248c5e6e848fe7a5cd253ee695a43394b4d0dbd7bdad997157763726d1adb6d8fa9591a9155ca31061619a082b2b8e012146baa3a77326b9e14bc6ec15ead549e360354ac5ee381acd9e4269cc7b4c90ef3ab1d21e6b0502ca0ea38e32e732fed820e2bdbf62282499822f3de71711625aaf74be8d975335cbb1a1688831ea0e91a8ba0462e11f261efc30e2209dbe57d09e37b3b36e484d9c30a4a271ccd8e564eae0eb96a756839060"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x0, 0x5, 0x81, [@generic={0xc2, 0x6, "3a5a32035e262021a788fa2e13844c83452b557c01d4bf149c8001e3098cd3d248ac861eb077d6cb0388a5be3dba23a14130347a0e239a5861fde1113d2bffdce52b5677c814c5f4a7e732a6664390667346e2874f747790909cd518a0b38a0ce1649dbdc7d082e9568aaa62bfacf2eace65cade8e6284c7d807c260b1907574ef7d18e7ed27acdceb7c7f099d67a42f39c929ea801a9cae2f85a6a020e5014d48b9592cce1cca881929c14d5561d91b4527f3c7842307507ccd0a5340c38185"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3f, 0x3}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x6, 0x64, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf6, 0x3}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x1e, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x3ff}]}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x5, 0x7f, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x49, 0x20, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf8, 0x1f}, @generic={0xcd, 0x1b, "cb6821a08b7bc7ea5f86d63e0f44d1c07f9a00c1b3c4c91c8db90b461a366d3be36cfd2aeef281b6c4361da5915729a742ef56f09df7eec6abaffdd38cee5df87e06ba93ce8f19edd83f4115e2f97a2c7d2049f542911035b58f32a827b5a888dab7cbe8b745ca90cc229a2ebe486b38d9b4befbc33cce5db89b723bb047146c8a7610593d319fef54d3b61f552f01e7daa77f7fd737e3a03414eef25035c681d7b8a005d08718a37190ba105f9d2d4f898964fb2783457ba95364478ac03fde2828c9797b070ad76c5ed3"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0x4, 0x8, [@generic={0x3c, 0xd, "5e7ffcda7c3ee59b12d2c414166594dd83766b6bbf40076a71f8f3bf22c8f3294687de9f884881098eb327a3d5dc06dfdc77e801fa49c4eb41ce"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0xaf, 0x5a, 0x44, [@generic={0xe, 0x6, "9303a489b8faaaebba360f2e"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x64, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7f, 0x5}]}}, {{0x9, 0x5, 0xc540230b99c3168a, 0x1, 0x10, 0x80, 0x99, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x0, 0x6, 0x40}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x5, 0x40, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0xfff8}]}}, {{0x9, 0x5, 0xb, 0x6, 0x3ff, 0x0, 0x2, 0x5, [@generic={0xb8, 0xa, "e238e73e5c389f868bc93827f4e4c770b3846745deb4ae71b329f8c7a4a67c79b22a9db815acc621a3ac94e23bb32ec71a57ae2fac1a0f1752e7fffb9b3039e1fd882836394fe6a24c8ae2bd71802d2c886335533898dd7383cee5188613d73f105fdbee6be53f11b285de8f831693c1bd19eb0534a556f11c6f8c45e1ae92cc9897b3e1fc93afe9d5d153bbf21e7e41d61df8d19e36a8721ed7aa648fa07b1e8ee52dbb0d729de36073cbdfd30b312cad810b10f184"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x4, 0x6, 0x40, [@generic={0x85, 0xe, "451f1d71cb0515d97265966a863cc8ed1101f1f7e4c52bd1ad0363adcc201d4a30b835b796e85567e53a93cb746a5d2eeed85e7f3193c457828ce14eb55aea88479ed52d2bafeacd63e1f429b8cfd74f68bab9f3267e6584e2a6381b44c50b6df3c77007d90abe13bf0d80b12321f796b2e661f876bcad75d5dee87137a45fc24b1777"}]}}]}}]}}]}}, 0x0) 20:27:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc00, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:25 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000000d0, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:25 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x10001, 0xe02) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="117fa3732656e797aa575c043305933dc56a0866a6a0470b578ca7c3e00c579a3c3bcddc40da2d4fce66f03f8723d0fd91d2d25b00a1404103c9793a8fefecf1d5515d5b", 0x44}, {&(0x7f00000000c0)="ed3445b0d8ca730e3c62774bd29e4494b04b2035a9932cd0fd0ef76e548fe7f9eec7212774b302f406f24b5c6e1b675ae6a5d8f1e21178451299946a0107c7ec9b5f29f83d1c506dc2eebf2c1e8c9602431c7659618b330941cc2356dd80ac610abbe6b74f3c0e072be6589aa34f4a71", 0x70}, {&(0x7f0000000140)="b327b41fb0f9c1989ca4879b272b36562ff7c56f79c6541e7d61416e3871ce0da4bbcf32eec658f0fe5c5a59d5035d5a24db2245c02ef650a46cae84a42048f45ef3d40c208e23233e0c178eb383a37d5cd818d8ec37d146e7", 0x59}], 0x3, &(0x7f00000006c0)=[@iv={0xb0, 0x117, 0x2, 0x95, "a381ddffa6c44dfbce65ed18b2c5dbb50342a6a75fa0f2db774255958074747f473a6f1b9dd42527c2555f49682cb0c950b0011b6c7cb51868f571bcdaba7b80732f7214c3542c659c7ed2392d664683f66262f185843e19309604dabf0ebc08af9e7acf4de1792ca5fb41d262ed8291caa22117a31348b0c91ba1531b1042f7e0134f0c445424c0ec7852ec68a55098c1a9b28863"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x18}, @iv={0xe8, 0x117, 0x2, 0xcf, "a6f2ea56396e88acb8dfbc23af185f45a031b6e25c5d9515e22ca2841d9f0e98ef860e6e907e50d9232608bb4e92cff7ae54173934104da76c49199ab7452eb32d8e788b1a1397838c497cbbd8e48bb436f9e43b13428dc1996e6d7094c0d91b52f5ea6670b682a3aa08fc932834e120504c86e09d62c643d0db8e35280313451df367baf87ad96f2e7c566517d5fda64ca04a33069d38a666254202fc1d11a7b08d34bbdb1cc8a47265d3dd786377a8001a976e0324728139bdd32ab9426f481fc179e70dd7de080fdc22f8ef259e"}, @iv={0x88, 0x117, 0x2, 0x73, "4bfe01fce213a4f14c0a0532110395e89a0e258c8bc3084587a7b8dec31a80b69b0cbe17978019f070ce6b3cdf5961b7b703d73fbf686d34995d324aff0bd6993d47c555d6e3935db7ae05c190a55839c521e4632481b142569bc13af07c5bde453b8c1d15531d3f9d621ddac5d9397a786d16"}, @iv={0x1018, 0x117, 0x2, 0x1000, "b12730d1e9f35435df14e7132e6a5e0875f8a32fe28d043cadf79281df9adeb4eccfc49d67593053e1a71468c7b124bb157915a04ef866cfe7a93d853df8bb9c462d35b2114b49d37313440b27a6fe7e907671b558ebe21d3470c4883f1e2beb290aa39fda15f6fede81d31c1df008ba51070855ba77093cf5fce8fc5b1bd6385defc015d061a20f3bfb38bc3ca258537d8e245c680ac372c57335a05e4a640fc46e42fc0c209e8db9ad508f80e167463f89b8b619cda21847e65319def844fdc79de7d2305cc163977ae84e08b2ffcd2576e437d80198e185023e398898b7c36625285acf1c64a3ee0803e0c3387f35c3a8226aebce7f44a01bcabd8d7885baa3b5014614a63d6d99cefd284585352a26e8e4c7cd00c2fb27ca6b2081b71716e8311b524741d2a46d64daefde75afc0e18f54e23c76f11fd9f015a4e7188b48e21d3564331eef1424ffe272958a9f28e560c8edf83fff7662ec9e5f1ebe2a8bc70c314999e4a0191719abd7cbcce0c55a967b385fb33049f3c9e843d3a094b3c24d9a31899b985a897cdd865f225ea613eb24e918e4a6bf03a2b53136161286d0d3f33b3265b10f1310a63c3e96f1cb3506703f1a1ec74f1bed682cac4886d9ab126631199075a332de55563e51797eba9ac7a0159fa5e0241162f526e7ba0ea9476ed35d76a1e454d0013f356bab5cb4b2302d8ce020f98c8816286d4ffb877a4a4fdb49aee800fb3c2888d424f99fab14846c82f3009e2551d1d46804eea35ebf461712cd0c989465113075579bab749fdf2114d8e72ade3386be5203f66103372a161d2cf34cfd1e2ba1c2fc6ba8877f7f533ef8f8288f9c6cf9285239514f1531b2e04c74de8b49ffcdc97dc79f836a3b14d69e204d10aa9a8b72a980cc951e33e3918f0612f00831aff5f75ca92dd8eee929f06b7f04c7021a7e1bbea5d4499d353461b81ad347addcd83594a2fd41884c261582e680d799e55b6a821ad5d9a54a54111ca6d1ee0a861cb503d7e0b36820a823cc6b9f1bdbb0721589d66d7baf9802b7afe0db5dce9f987e3a379ccda4d6de20e967578a71608a9a7a6fcaf6af3c4e2a6dd9a6dd18960ad5953b10330169a8ebc630e64e5607801921c03c92e7b4c9435798190da0da8767d1131943f71e18abae919bd29e9ac82d1a01d09cf9ae3e787cd533e21449f7d139ba0926a216e49c709368c7dcb91a47b60f5d89c694f97b6692f68cc5b27f5d7d5f3a34ddffb2a2479ca9f6698084e193afd19ebd8355a9438db2eb997900226a625cea01705983afe00305ad18c7803f3ec7623c210819058f7ee73998a51e43a4069d36967533d81a0672a7cc9b02c05cae2e8b2230c62e9aff2baf64b23b2fdcb1501105fe855a106fb932dd27b169c5257be5f2bc417e56e87da13bd3d1bc9cc19164c87da877b282918e05b5aa050b0b9008d73b8f30fc77fdc7b0f77b65b0763a35ca5a167988c70f09c4df90ae404e77651bf91e8ef90e3ba59458fa97dc5b0433fc546e247caa7c02c6c141767b5b88175495ba8f03629d11d3057489cfb400ca868f5e71095d4a0b8298f259b3055801ebc4cc9c6cd09150b0de13e76124e2f54888fa1a8be4c8612db76e01dc1f804bf0ccbf3bdb01ba26dfd71f8c084fb0c0d15b3cd321c138aaec7cf7836d9987001e9c4dd0acfe2fa66f153328c7be47b57a1a0041942bebe062ebde6f92b9374f16e2e9126364053f704962a244c6ea4261c051143f4499b7220e3308c5fbe433a39405974a18a16828d5835a969d14640ee227c0831deb982056927691e65fc7982935c24afa306e663a494d024d93dc2fedbe75b0d411e3231a79963b891c8589db77bc4a77d196267ae2688ff4b6970d3fc68a2e14eaec18aae1d005570a9d35b4044f00d9781b9b45fc791249ff5ef5757e22e78dd4fd9c6d80e353c5643d18b0fc3818e675e115572d2e6ae707c1a9d68bfd83bb2698d1ca00d424f40b97be8cdf92339984a2e89589811a1f169f649b7b51d6ae9f55ef0df2215ca5495ffe4ad8120704d581a1beb5b18c933b9de4ba0de13974dae8c0b7cb42865185dbaff680923820f19d60c0683daac7973602b92a85bb59ce85c451dd1273e3846e980a03dfc62bde12b844789564affc558d2644e59b4fc5ba2fa915c222f9da366d27e7b63f6a56833d3e9a367c2e1cf53ccc0250c8bda2fd0969fba5fc31d8b60df61c5975dc8475965e4956478c9b21830e36872c03aaaebdd7e3a88d0ad9a8544ebe1c72abb625c0e9667e9297bbd31add2cb7d191687dd0464a0785a351d79a85a57a99e55584f417d3305a8efb2e982e2a85ff27f03ac0a6066e7ce14c22bbc764850bbf60baf0cb62dc30292708ec2db15c3caf9b4b642a0b04dca2366b341f2a7eb374bf735a6397c1d55d6fcfee5cbce16f510f571a941769b7e5952662b15779b1cac58bc7d49e2d676846ce64a9100c7701821f55cec1445c2a128703c1f405867680ae5de4dee66224a356cad5de25a0ffd5ca8eafc8e62febaf1bf2daf7f1e3caf634cf63d2dd8169af54506d697ce22b4bb96f1bae2df0b47d33d826de65b4cefc12476c0b3f6ce7743a775e0b5b9d0e93a684c9670f512cbf3eb688a680a0cd6cd38441327946a16fe88b7b0f413a5e43d77b525ff765f15e54fc50a077b20200cfb81a934c55197f81c459fb564faac8789e6ead0eba7613840a0feb75fdd0bd17b4a30e956233795a6282519299f5ac7964d29b67343bc65cbcf07cb136b5cb369060a41e4ddc012ce0b241110c88715ce0db47eb86399a8780eb95d4c8e43225af47c28250bea73efdeeaeda34d7629655c7a9c3217200055a443c44a5fba46ab4de4fdb6373c977227e12cbb426cb6fbb4f053a8bab83a1a1a2e7e629758076884461557a6a8894d5ffbb3065beb3b6ec9ba6592e06455f4bd100a29dd3c9ab79d75958f487eb7fec03ab9abf8254c164247f7e22f1550c457b3dd2877b214bebfc5ecbbe4e814d65fa6d41d066879c7c9904547320d7dc0f73324fac90e181161688dc2582e79b20ffa1693454ff0a38b3c0907d2dcf8c78e0b27032d3205ed7e8c5f59a5598969340971779a77f7bef974c9ca03bdccda9209fc43d501a6c62cb512dfef00ee13ae8a74e439e329b7cdb6829c19fb49cb1862ddbf6610c6673b40ba179826832b6aa7194fbb81ef3cbb5b53f639de163066173ba9995925261b7a4d9ec487bec330ba078f341470894c0e22c7e9adefe964dfdc63f739926d35211db98fb7a72fe5d84573738cd9b0aa0ad193b0f91eb452c796dfa2b497a8a8ac80dc275d5a9085bde77a41ff31e7a3a1cb683060fee41e10932113f30b1a5420be1a2c5481fe224a0ded15c46b0fbb3e38db76e6973285ceb510cc69b56ff4f7686be2275284a79ef147bf749519cc4437891a3b5c0c1ff6455373167477744f32d77f26746eb843c507fc579a4283ef716215a934e1f3ac137e4e57a04bd2111923d10236749b962d922812896bec2c3b61f5d440b32db605a50436eeab61028bd42402179f5addc7c86bfd9aad421c2c5188c067342a11f6e65b9d0d297da4a1872ddf743e557f30daf450ef725fd1fd814b3a537dcafbdd62dbe78d86938de30097fc6bfb0d75f094eb1cf7a021b3d98153382fa5e93314c3c6a5d7ce3cd22fed7e24e8fd9f407ae445dc19f42334dea80c27a2fed459f83734989a7fcca1580294d7d326d54acbd58ddafec01ab7d968c2666e9c2ca0aca5452d3cff45d095df840023f73e48d5110bf7c87f1a5a8a48d0482c0f94b1c8ce844a3c328f61d37007c23a2c36d9a23d88bf2cc6cf6c2161fcdfeadc22956c3cca01165a1870ab665a2a8f9498d7b919d6c81f79dc27684b215ed33da7b090e6a04023eac479ee83806f9650ad34494ae504da79e77a1a5ea11cd9959a81e0e50a61eb19399165d1bb0239ab4d9b89815e535bf6ae376eb534eaaa164851c315dcab270c2762b1ec92294e02084fe0075605af5b3d1629fcfbe1b7846deb2566a5b17432e0dbcb71a7e6639a5cf272c055b5e2931990c869bb84554f04caea044d6b02357e60d3a33fbaeae3b8ebe93c5bb521e67dff6941a084b147f6a1bec31f103823f12871691079965464621420321edde70a276446d8a2b486cec51887c59390711bab26a1962ad8b1cd7c2c1abdb621dfd44aca13e0f6b6483cca0ab63093d980e77d865db67ede1d16207272012500c198414c125ce16d15634de875738c38146144835a7283d37adca908406b4559f03efbf2f8ceec7ba656e297cc51598c5eb92a418985258b91e96f89dd4c94b46ef8bb037b7afff43d475119d7d90e9f3e17b75b4fc76b6f35ac65e3eb386617033852d4a7b0d2dc7bb80de4f44e44b1106db8ea4e0f1371125225a38154406eb64f1d3d54420f1a8dac53d8ce6d52df5047cb17f6393fb2bace4595ee652cdd52176bf21edd9328b5ef964ec523d93bb57450f0013e0c7fcebde74699d006b069d7daa9c491402f7f878925dad619dd0ab92a04d27bb19043c739b96e53ef97b3b5fa4322d94919bd0bc5b360a35835fe713c4d5efbc41d8b93089f98812f63e438c0e658b4251afabdb2d5b79f3e2456922e20d01270e89b5e385ee47d4bfb526eeb9d53929e93682c95678c8aa777e952127c0acaf908a28ff920207b7e104bcaea8c3e696ff1ae2745ac43ee52fedcdf94116da60a848d05006ae0aff8787b5580028c9e9aa916f63d5c943b5c40db8d26e65517473379a00158da0928be988a78179b5ae8b91ba4431aadf34f599857b4eef8568bba582935d53721b9598d97b6804ce0e345fb0c816b72898c3904c4c94884382b9530f5cf9da4cac33478cb9e5dfbe2f590dda9e34dfc5b4449a135a34c41aaf4ea8c61fa598b80b8bcf69b8193c056c100a51ea13df6c95625162489ad82edb43cd298e4f20f15c54eb3edea7dfdd3ad0c143d41dbaeb8c953551cba29f6d24a798f6cd1d307d66d252e7df674f982d707a76076b024881dbd170d959d237e7b4050e458b02542bc775c341c265cf17141457c8aaf60b444ff07b9413842bd378d07dea9b7ad78ef14871e2bb66e4f031fe7cafd85de7cd80cd9bfe8da8510621575bffe7dc7d9855c7fd7802fa54182fd8a6c37cdaa33857777c2cbf19cc0e67a927b2e106742b7ae52436b2069e84ab8f1a9330dbe35b0e76134f2f647b84028f260f07c93d8909f61579971096704975d4eeab3dbe97bd39231a5dc5d0f6417f3035d64a24cba0a98be72f79e50c57286d04ac8b6de6018f4b1a387cd00198bcefaa48fa313a6b83c8226987b16067a1c68e7aa15e8517ab314edfbbc0a537bc9fb83ebabb579232b2fb67ecb46f1b9f10892acb921a377ee5882d8e0bb231aced119d514142fc1731150c8767c98385c1697c9538d88baf888817b12211f0cd45e1c133080283937d89f99fc77d8323acaa45156eb9d35b6a54f0bd8ef37ae7e2029e1f31a783a7bc54d4c7d13a3da421b178b086f517ebe82438aeaae5a357d839c58392843c132524f0a6b0cb28491d81771feba31848df664c8d6646cd7ce021423bdb6be2c4ce1478f84d251571f2fbd84a7f0197c1c883dfe88409a8e475e97b4bcf4a8146e0a49413735b87fbc362e0b67e19642624d9d6b5e1a1b1d9bcca571ea7027edb0ab31f068b0461488505617192f5cab7d05daaad0a6ab477fdc068c74e91cca465162e9eea19b3115ad497036f00f1a68de7c0829b0217e2bfb521e3d61de9a037fec433fa"}, @iv={0x98, 0x117, 0x2, 0x82, "9701f00ae6a3935f5fcbed3a63aa97ad13118a6ef18cc3c98e2f67f5ecf3d234a2629bacbf9d37d45e202966c46f1579f1cadbc27c400bbb3bd1a488eaff6df0ee4e05e7a00d79f38116270baf863f4beaacb4ccdb4e6ada2cab8a08c5bef9fb20822fd1c8e275b8a739a81c79289ca533b9fc4faeddeb8a2b9acc317e9745492bb8"}, @iv={0x20, 0x117, 0x2, 0x9, "5c397ec25cbcc9ff6e"}], 0x1338, 0x24004010}, 0x40884) [ 955.543688][T21776] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 955.817028][ T8703] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 956.038682][ T8706] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 956.067031][ T8703] usb 3-1: Invalid ep0 maxpacket: 16 [ 956.227460][ T8703] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 956.277135][ T8706] usb 5-1: Using ep0 maxpacket: 16 [ 956.470402][ T8706] usb 5-1: unable to get BOS descriptor or descriptor too short [ 956.479050][ T8703] usb 3-1: Invalid ep0 maxpacket: 16 [ 956.484795][ T8703] usb usb3-port1: attempt power cycle 20:27:27 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:27:27 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r6}) connect$can_bcm(r0, &(0x7f0000000080)={0x1d, r6}, 0x10) dup3(r1, r0, 0x0) 20:27:27 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000000d8, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xd00, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 956.757539][ T8706] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 956.767295][ T8706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.775459][ T8706] usb 5-1: Product: syz [ 956.779935][ T8706] usb 5-1: Manufacturer: syz [ 956.784703][ T8706] usb 5-1: SerialNumber: syz [ 956.991710][T21796] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 957.054709][ T8706] usb 5-1: config 0 descriptor?? [ 957.166086][ T8706] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 957.172979][ T8706] mcba_usb 5-1:0.0 can0: couldn't start device: -2 [ 957.296925][ T8703] usb 3-1: new low-speed USB device number 105 using dummy_hcd 20:27:27 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 957.397622][ T8703] usb 3-1: Invalid ep0 maxpacket: 16 [ 957.556883][ T8703] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 957.597348][ T8706] mcba_usb: probe of 5-1:0.0 failed with error -2 [ 957.667695][ T8703] usb 3-1: Invalid ep0 maxpacket: 16 [ 957.673507][ T8703] usb usb3-port1: unable to enumerate USB device [ 957.697719][ T8706] usb 5-1: USB disconnect, device number 36 20:27:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe00, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:28 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) keyctl$assume_authority(0x10, 0x0) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) [ 958.227362][ T8706] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 958.363215][T21837] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 958.518982][ T8706] usb 5-1: Using ep0 maxpacket: 16 [ 958.687693][ T8706] usb 5-1: unable to get BOS descriptor or descriptor too short 20:27:29 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000000e0, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:29 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1555555555555563, [{0x0, &(0x7f0000000000)=@string={0x0, 0x3, "79b679922a39189a8b8d9387578cce9ffa9cecdf30676d411e54e08965a9fe275f0ccaefbfc3dcfe942c98e447301ebbce0fa97c8dbd60a68ef32b84e66b418ec9d8ad35bb6f7b953592d8ab2de0fb224451275b81c9539e9bca4b5e3b8eb2e8f30938"}}, {0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x437}}, {0x0, &(0x7f00000000c0)=@string={0x0, 0x3, "1d570452d0eacfc60cded6e00f26021b956eddb3bef1436860af3a1cac5a028c9f46299d24aa088e9d8ed5330b01b56641eca566fdf262445cad19b68c3fdce2b637d34b75f342a1d86f99fc4c495079ce6a08823956de1b585b24f87e274cc9d8b0d18c04f5d296248e043d129d22e88a5e4bfabfb2b972792818a50cba876d7656a4c03ae62263466e2c4a24223025c455f8f942deefa86546bb070811edaf2881a65c7a48a7a23265bfa0ff868330d64ea1925db5630f50f24bc6385672e1f4cd71e152ab9453d7505a1b275b4727e69dd53335ce56647242473fcde74f"}}]}) [ 959.167660][ T8706] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 959.175502][ T8706] usb 5-1: can't read configurations, error -71 20:27:29 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f0000000000)={0x0, 0x7, 0x0}) connect$can_bcm(r2, &(0x7f0000001ff0), 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) [ 959.547287][T21858] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:27:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1100, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 959.966701][ T8706] usb 5-1: new high-speed USB device number 38 using dummy_hcd 20:27:30 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) [ 960.207202][ T8706] usb 5-1: Using ep0 maxpacket: 16 20:27:30 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)=ANY=[@ANYBLOB="120100009504cf100819151300000102030109022400010000000009040000012787c5000900000000000000000904f2208996ec7c06"], 0x0) r0 = request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='S}\x00', 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendto$inet(r2, &(0x7f0000000380)="f0e478cdd54b740ca05732de776e735c58ec1170a27027cda0095abcf5273298cc4b3f546481450f32c9b4be08dc0817f7b48967f1cf8f7f22cd2f5a0ce1dd549df92e6a83d0213901ca5bb12309efefa9ce18e97382af98805e7108cc6a568100b60cf118b54d639e39e59e5c4c4432db3e7dfdd90db83920bebceace", 0x7d, 0xc840, &(0x7f0000000400)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {0x3}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x200000000000000}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, r4, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @remote}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x2c}}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008000}, 0x24000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$P9_RREADDIR(r6, &(0x7f00000001c0)={0xb, 0x29, 0x801, {0x7}}, 0xb) add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x2, 0x0, "3f154f770e820cb97d654aad2a343562f27cc67761dc4e571427808c3fa1d9bb7cce0936b855e4c5e44e5bfc34a24568ef7f59961d3db0991f6ba175e6896250b615590e33ff40706f7b01a0c23e4fc35fe105d3a0abd1aa8285262dcda06861bef22449e70a405401d328a38d440e4081"}, 0x79, r0) [ 960.307179][T21871] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 960.408052][ T8706] usb 5-1: unable to get BOS descriptor or descriptor too short 20:27:30 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000000e8, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:30 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000000)) [ 960.750455][ T8706] usb 5-1: string descriptor 0 read error: -22 [ 960.757109][ T8706] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 960.757783][T10420] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 960.766305][ T8706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.901483][ T8706] usb 5-1: config 0 descriptor?? [ 960.964299][ T8706] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 960.972004][ T8706] mcba_usb 5-1:0.0 can0: couldn't start device: -2 [ 961.011517][T10420] usb 3-1: Using ep0 maxpacket: 16 20:27:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x220402, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getpeername$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xcb) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x382c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48044}, 0x80) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000001ff0), 0x10) connect$can_bcm(r4, &(0x7f0000001ff0), 0x10) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)=0xffff7819) dup3(r5, r4, 0x0) 20:27:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1200, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:31 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 961.138300][ T8706] mcba_usb: probe of 5-1:0.0 failed with error -2 [ 961.180745][ T8706] usb 5-1: USB disconnect, device number 38 [ 961.187493][T10420] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 961.201612][T10420] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 961.266724][T21900] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 961.367705][T10420] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 961.386560][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.395049][T10420] usb 3-1: Product: syz [ 961.399763][T10420] usb 3-1: Manufacturer: syz [ 961.404537][T10420] usb 3-1: SerialNumber: syz 20:27:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:31 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 961.618559][T10420] usb 3-1: config 0 descriptor?? [ 961.664287][T10420] usb-storage 3-1:0.0: USB Mass Storage device detected [ 961.729269][T10420] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 961.750479][T21920] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 961.882226][T10420] usb 3-1: USB disconnect, device number 107 [ 961.987981][ T8706] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 962.236831][ T8706] usb 5-1: Using ep0 maxpacket: 16 [ 962.408531][ T8706] usb 5-1: unable to get BOS descriptor or descriptor too short 20:27:32 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:27:32 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xc40, 0x0) read$qrtrtun(r3, &(0x7f0000000040)=""/45, 0x2d) dup3(r1, r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r6}) r7 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r10}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x100, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x7f, 0x3, "70ba6c8ab2c0128bbef76367ec51eabb3c1e601f4c010d69c5effd35493d23c24a2791d0c198983f2346d53f81bc02003c64d9c9c5b71962a938c4a255058a92bb4d0e45c68fb097c3f91fbf480151283af9988ea0f6a3922ced48c68b5a82bd4a000f878f254c9d2aa3f2e31d0882bc1ed6a55c60b0b1cb259460"}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 20:27:32 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000000f0, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2500, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 962.676566][T10420] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 962.676696][ T8706] usb 5-1: string descriptor 0 read error: -71 [ 962.692990][ T8706] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 962.702265][ T8706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.949070][ T8706] usb 5-1: config 0 descriptor?? [ 962.969356][ T8706] usb 5-1: can't set config #0, error -71 [ 962.980334][T21946] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 962.996499][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 963.102198][ T8706] usb 5-1: USB disconnect, device number 39 [ 963.117697][T10420] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 963.130578][T10420] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 20:27:33 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000102030109022400010080000009040000012787c5000905000000000000000904f2f48996ec7c06"], 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)="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") 20:27:33 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) socket$inet(0x2, 0x3, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000200)={0x401, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, r4]}, 0x2) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) openat2(r4, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x840, 0x86, 0x3}, 0x18) r5 = open(&(0x7f0000000540)='./file1\x00', 0x2480, 0x1c0) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000280)) 20:27:33 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 20:27:33 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 20:27:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2f00, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 963.787418][T10420] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 963.796738][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 20:27:34 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 963.865774][T21967] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 963.924109][T10420] usb 3-1: config 0 descriptor?? [ 963.987637][T10420] usb 3-1: can't set config #0, error -71 [ 964.031713][T10420] usb 3-1: USB disconnect, device number 108 20:27:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3a00, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:34 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$IMDELTIMER(r4, 0x80044941, &(0x7f0000000000)) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r5 = accept4$inet6(r4, 0x0, &(0x7f0000000080), 0x80000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000000c0)) dup3(r1, r0, 0x0) 20:27:34 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000104, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:34 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 964.227790][T20906] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 964.356637][T21989] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 964.450388][T10420] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 964.476916][T20906] usb 5-1: Using ep0 maxpacket: 16 20:27:34 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 964.637192][T20906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 964.727962][T10420] usb 3-1: device descriptor read/64, error 18 [ 964.896847][T20906] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 964.906060][T20906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.914502][T20906] usb 5-1: Product: syz [ 964.918931][T20906] usb 5-1: Manufacturer: syz [ 964.923654][T20906] usb 5-1: SerialNumber: syz 20:27:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f00, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 965.136680][T10420] usb 3-1: device descriptor read/64, error 18 [ 965.194476][T20906] usb 5-1: config 0 descriptor?? [ 965.196653][T22004] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 965.298221][T20906] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 965.304883][T20906] mcba_usb 5-1:0.0 can0: couldn't start device: -2 [ 965.417037][T10420] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 965.577615][T20906] mcba_usb: probe of 5-1:0.0 failed with error -2 [ 965.625209][T20906] usb 5-1: USB disconnect, device number 40 [ 965.686567][T10420] usb 3-1: device descriptor read/64, error 18 [ 966.076606][T10420] usb 3-1: device descriptor read/64, error 18 [ 966.196881][T10420] usb usb3-port1: attempt power cycle [ 966.239367][T20906] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 966.487678][T20906] usb 5-1: Using ep0 maxpacket: 16 [ 966.689267][T20906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 966.966473][T10420] usb 3-1: new high-speed USB device number 111 using dummy_hcd 20:27:37 executing program 2: syz_usb_connect(0x0, 0x96, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe5, 0x1d, 0x7f, 0x10, 0x5ac, 0x24b, 0xcd93, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x52, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x5, 0x1, 0x20}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "b021b1df1a"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x528, 0x8, 0x3, 0x20}, {0x6, 0x24, 0x1a, 0x182}}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1}]}}]}}]}}]}}, 0x0) [ 967.136828][T10420] usb 3-1: device descriptor read/8, error -71 20:27:37 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:27:37 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) getrandom(&(0x7f0000000080)=""/204, 0xcc, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000000)={0x17, 0x1}) dup3(r1, r0, 0x0) 20:27:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:37 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x40000000000010c, 0x0, &(0x7f00000001c0)={0x77359400}) [ 967.236528][T20906] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 967.245744][T20906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.254362][T20906] usb 5-1: Product: syz [ 967.356653][T10420] usb 3-1: device descriptor read/8, error -71 [ 967.412419][T22048] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 967.503220][T20906] usb 5-1: config 0 descriptor?? 20:27:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="1ce748864e2445eaa20939c813edf9aeb823214ef553a0f546b9b4221a53fbb9bb9c3a4e28b70c1350a3a93d1f22e3024fab4732115a322491", 0x39}, {&(0x7f00000000c0)="3cce758037071ed7835da30bfceff5926e1bd4a69b252bfb4b048cf65a59dbd5ec81f200ec03be1613b688dae456886951c5e23e946ce37a41370de00bc797e96cb4d068d3a70ad50e9a850cded64b50a7c29a39c6583293b036d3d83ce8411c874fb12755617b8e69628bf57865f75691c45535bf0e9dee2a2cbf547a9a89a3e7be65a9032decc5c77786b76c1f6b2ef6dff349f6ec2720e8f79037f212391e86eef4b1bdc7fbd3523304811e0b26ccaaef59161fb71914ef050550577e0bb7e1127137dbc2d0981a33f596c9b2acc3eb6a5e1701d6fd21961ca5dd0d8c5196233bd0", 0xe3}, {&(0x7f00000001c0)="0011fd929b5ecb9f7f92bc7745ff6f3c5605f2f46fb9", 0x16}], 0x3, 0x7f, 0xff, 0x2) r1 = dup(r0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000280)={'TPROXY\x00'}, &(0x7f00000002c0)=0x1e) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000000)={0x3, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) chown(&(0x7f0000000080)='./file0\x00', r7, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, [], 0x3e}, @in=@empty, 0x4e23, 0x5e2c, 0x4e24, 0x3f, 0x2, 0x80, 0x0, 0x2c, r4, r7}, {0xffffffffffffff7f, 0x7, 0x45b4c34d, 0xaf, 0x5, 0xb72, 0x80000001, 0x9}, {0x1ff, 0x7fffffff, 0x3, 0x7e6}, 0x20, 0x6e6bb8, 0x2, 0x0, 0x3}, {{@in=@empty, 0x4d5, 0xff}, 0xa, @in6=@ipv4={[], [], @multicast2}, 0x3500, 0x2, 0x3, 0xf9, 0x5, 0x8, 0x81}}, 0xe8) sendto$inet(r3, &(0x7f0000000300)="42fdc60b5e23", 0x6, 0x4000000, &(0x7f0000000340)={0x2, 0x4e20, @broadcast}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003845ebceb10d804300a3a5801020301090212000200"/37], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) [ 967.575414][T20906] usb 5-1: can't set config #0, error -71 [ 967.669821][T20906] usb 5-1: USB disconnect, device number 41 20:27:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4788, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:38 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:27:38 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fcntl$dupfd(r4, 0x406, r2) [ 967.926317][T10420] usb 3-1: new high-speed USB device number 112 using dummy_hcd 20:27:38 executing program 0: getpid() clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 968.027182][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 968.054677][T22070] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 968.147876][T10420] usb 3-1: config 0 has an invalid interface number: 82 but max is 0 [ 968.156518][T10420] usb 3-1: config 0 has no interface number 0 [ 968.162810][T10420] usb 3-1: config 0 interface 82 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 968.186611][T20906] usb 5-1: new high-speed USB device number 42 using dummy_hcd 20:27:38 executing program 0: getpid() clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 968.188210][T22079] ptrace attach of "/root/syz-executor.0"[22078] was attempted by "/root/syz-executor.0"[22079] 20:27:38 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000114, 0x0, &(0x7f00000001c0)={0x77359400}) [ 968.466881][T20906] usb 5-1: device descriptor read/64, error 18 [ 968.480272][T10420] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice=cd.93 [ 968.489598][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.498542][T10420] usb 3-1: Product: syz [ 968.502860][T10420] usb 3-1: Manufacturer: syz [ 968.507815][T10420] usb 3-1: SerialNumber: syz [ 968.657476][T22085] ptrace attach of "/root/syz-executor.0"[22084] was attempted by "/root/syz-executor.0"[22085] [ 968.756407][T10420] usb 3-1: config 0 descriptor?? [ 968.804723][T10420] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.82/input/input5 [ 968.860351][T20906] usb 5-1: device descriptor read/64, error 18 [ 969.026640][ T8706] usb 3-1: USB disconnect, device number 112 [ 969.139867][T20906] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 969.416745][T20906] usb 5-1: device descriptor read/64, error 18 [ 969.797671][T10420] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 969.817250][T20906] usb 5-1: device descriptor read/64, error 18 [ 969.936989][T20906] usb usb5-port1: attempt power cycle [ 970.056453][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 970.177070][T10420] usb 3-1: config 0 has an invalid interface number: 82 but max is 0 [ 970.185432][T10420] usb 3-1: config 0 has no interface number 0 [ 970.192536][T10420] usb 3-1: config 0 interface 82 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 970.646524][T20906] usb 5-1: new high-speed USB device number 44 using dummy_hcd 20:27:41 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x20, 0x67, 0x98, 0x10, 0x2ca3, 0x31, 0x6b3b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x36, 0xfd, 0x0, 0xd8, 0x24, 0xf5}}]}}]}}, 0x0) 20:27:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4800, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:41 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r2 = dup3(r1, r0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) 20:27:41 executing program 0: getpid() clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:27:41 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x40000000000011c, 0x0, &(0x7f00000001c0)={0x77359400}) [ 970.826237][T10420] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice=cd.93 [ 970.835469][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.844244][T10420] usb 3-1: Product: syz [ 970.848717][T10420] usb 3-1: Manufacturer: syz [ 971.078877][T22131] ptrace attach of "/root/syz-executor.0"[22127] was attempted by "/root/syz-executor.0"[22131] [ 971.092802][T22132] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 971.157623][T10420] usb 3-1: config 0 descriptor?? 20:27:41 executing program 4: syz_usb_connect(0x4, 0x24, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc1a}}, {0x68, &(0x7f0000000140)=@string={0x68, 0x3, "4dde69b8df4776f844d3da63b9c9adfb3953c4a802d09d56e3e1853abf50d2be000da5a02fbae03cdedcc51275aa72050247f6ea28409c6e321b602764a1bdfd05771363e54c1840651fb70cbdc3c440237a4d7b7c107a73d9d62efdaf55f0be4235c1072b7f"}}]}) prctl$PR_CAP_AMBIENT(0x2f, 0x6, 0x2) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="723d311d7e00000000000000000000000000000000000c00"/56], 0x48) 20:27:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 971.196490][T20906] usb 5-1: device descriptor read/8, error -71 [ 971.289329][T10420] usb 3-1: can't set config #0, error -71 [ 971.392916][T10420] usb 3-1: USB disconnect, device number 113 [ 971.406165][T20906] usb 5-1: device descriptor read/8, error -71 20:27:42 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x111003) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x9aa, 0x8000, 0x0, 0x80, 0x1, 0x8, [], 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x40) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x0, 0x0) dup3(r3, r2, 0x0) 20:27:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4888, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 971.780488][T22152] ptrace attach of "/root/syz-executor.0"[22151] was attempted by "/root/syz-executor.0"[22152] 20:27:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 971.966098][T10420] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 972.207281][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 972.327175][T10420] usb 3-1: config 0 has an invalid interface number: 54 but max is 0 [ 972.335456][T10420] usb 3-1: config 0 has no interface number 0 [ 972.342039][T10420] usb 3-1: config 0 interface 54 has no altsetting 0 [ 972.407465][T22163] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:27:42 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000120, 0x0, &(0x7f00000001c0)={0x77359400}) [ 972.697180][T10420] usb 3-1: New USB device found, idVendor=2ca3, idProduct=0031, bcdDevice=6b.3b [ 972.706627][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.714769][T10420] usb 3-1: Product: syz [ 972.719352][T10420] usb 3-1: Manufacturer: syz [ 972.724104][T10420] usb 3-1: SerialNumber: syz 20:27:43 executing program 4: syz_usb_connect(0x2, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) [ 972.940103][T10420] usb 3-1: config 0 descriptor?? [ 972.979899][T10420] usb-storage 3-1:0.54: USB Mass Storage device detected [ 973.041539][T10420] usb-storage 3-1:0.54: Quirks match for vid 2ca3 pid 0031: 2000000 [ 973.227622][T11597] usb 3-1: USB disconnect, device number 114 [ 973.336705][T20906] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 973.737343][T20906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 973.906445][T20906] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 973.914197][T20906] usb 5-1: can't read configurations, error -71 [ 973.996162][T10420] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 974.256184][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 974.377694][T10420] usb 3-1: config 0 has an invalid interface number: 54 but max is 0 [ 974.386415][T10420] usb 3-1: config 0 has no interface number 0 [ 974.392660][T10420] usb 3-1: config 0 interface 54 has no altsetting 0 [ 974.636189][T20906] usb 5-1: new full-speed USB device number 47 using dummy_hcd 20:27:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009504cf10081915130000010295ec9031e14eda5efb612903010973870800085ce15fdbc5a6dfec8d803ba115f6b4a337e1cf2f6baacb80949a9dba97d472aa4376fa849f81b615e0976d04b3405257bbf15411bad7eff98d045f786cf1f86db46b6d00"/121], 0x0) 20:27:45 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)=""/134, &(0x7f00000000c0)=0x86) dup3(r1, r0, 0x0) 20:27:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:27:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4a00, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:45 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000124, 0x0, &(0x7f00000001c0)={0x77359400}) [ 974.715965][T10420] usb 3-1: New USB device found, idVendor=2ca3, idProduct=0031, bcdDevice=6b.3b [ 974.725275][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.734123][T10420] usb 3-1: Product: syz [ 974.738719][T10420] usb 3-1: Manufacturer: syz [ 974.836430][T22197] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 974.841317][T22201] ptrace attach of "/root/syz-executor.0"[22200] was attempted by "/root/syz-executor.0"[22201] 20:27:45 executing program 0: getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 974.895176][T10420] usb 3-1: config 0 descriptor?? [ 974.962985][T10420] usb 3-1: can't set config #0, error -71 [ 975.047161][T20906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 975.142097][T10420] usb 3-1: USB disconnect, device number 115 [ 975.346943][T20906] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 975.354772][T20906] usb 5-1: can't read configurations, error -71 [ 975.411622][T22219] ptrace attach of "/root/syz-executor.0"[22218] was attempted by "/root/syz-executor.0"[22219] 20:27:45 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x500a}}, {0x7e, &(0x7f0000000380)=@string={0x7e, 0x3, "0cda8f2cff8c5c0aa3640a9d37ecdfbc1b3cc8819fa2252b22c700ff804acff2d5f82cf41eba0c06ebee04dc5036509b5a956d02bc519a600da61f2c4d5349ca65f0e010b8cca127ba960fbfadf483a856bddb3bb9644c1cdee4334dab626f860da30b2bf23afba7dc21d10122a6d6c67f52b99a57e759f8c9643e30"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc0c}}, {0x32, &(0x7f0000000180)=@string={0x32, 0x3, "a14c6c61d104e65264519988b31f108b3c5ebcdf2d574bcbe98fec903d54d8888feabd88d7a8ecce3d755a6e840edb24"}}, {0x6a, &(0x7f00000001c0)=@string={0x6a, 0x3, "da9861b2d6216178983ad6308550a523dabeccb5d41b3c66b8fede3a448f2c3710df9950f3e7bb83bb50a8bb1b9985487dc49c13fd0e007c41de2b5ca6e54e5c17ada3dd009bfb8b0f7e1d0b1e09831ee2a91e761dbd2779f7438a00081ac572c12f8351345dc27f"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x200a}}]}) 20:27:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4c00, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:45 executing program 0: getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 975.462005][T20906] usb usb5-port1: attempt power cycle 20:27:45 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) connect$can_bcm(r3, &(0x7f0000000000), 0xfffffffffffffed5) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0xffff}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x0, 0x8000]}}]}}]}, 0x8c}}, 0x0) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) dup3(r1, r0, 0x0) [ 975.616281][T10420] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 975.689080][T22225] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:27:46 executing program 0: getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 975.734434][T22230] ptrace attach of "/root/syz-executor.0"[22226] was attempted by "/root/syz-executor.0"[22230] 20:27:46 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000128, 0x0, &(0x7f00000001c0)={0x77359400}) [ 975.866137][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 975.906701][T10420] usb 3-1: too many configurations: 236, using maximum allowed: 8 [ 976.004166][T22239] ptrace attach of "/root/syz-executor.0"[22238] was attempted by "/root/syz-executor.0"[22239] [ 976.037816][T10420] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 976.045840][T10420] usb 3-1: can't read configurations, error -61 [ 976.236099][T20906] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 976.337256][T20906] usb 5-1: Using ep0 maxpacket: 16 [ 976.356796][T10420] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 976.497073][T20906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 976.605902][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 976.646663][T10420] usb 3-1: too many configurations: 236, using maximum allowed: 8 [ 976.750398][T20906] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 976.759999][T20906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.768557][T20906] usb 5-1: Product: ⲏ賿ੜ撣鴊볟㰛臈ꊟ⬥윢＀䪀먞،㙐魐镚ɭ冼悚꘍Ⱏ卍쩉რ첸➡隺뼏ꢃ뵖㯛撹᱌䴳披虯ꌍ⬋㫲ꟻ⇜Ǒ꘢웖剿骹擉〾 [ 976.788233][T20906] usb 5-1: Manufacturer: 倊 [ 976.793001][T20906] usb 5-1: SerialNumber: П [ 976.799720][T10420] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 976.807651][T10420] usb 3-1: can't read configurations, error -61 [ 976.889554][T10420] usb usb3-port1: attempt power cycle [ 977.057487][T20906] usb 5-1: config 0 descriptor?? [ 977.104317][T20906] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 977.111162][T20906] mcba_usb 5-1:0.0 can0: couldn't start device: -2 [ 977.237033][T20906] mcba_usb: probe of 5-1:0.0 failed with error -2 [ 977.302218][T20906] usb 5-1: USB disconnect, device number 48 [ 977.625756][T10420] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 977.716847][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 977.755973][T10420] usb 3-1: too many configurations: 236, using maximum allowed: 8 [ 977.906559][T10420] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 977.914308][T10420] usb 3-1: can't read configurations, error -61 [ 978.123497][T11597] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 978.139303][T10420] usb 3-1: new high-speed USB device number 119 using dummy_hcd 20:27:48 executing program 2: socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000950495b6e8c9c7473b9f611c902d73cf1008191513000001020301090224001b0000000009040000012787c5000905000000000000000904f2208996ec7c06"], 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) splice(r3, &(0x7f0000000200)=0xa4, r0, &(0x7f0000000240)=0xa3, 0x10000, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet_dccp_buf(r5, 0x21, 0xc, &(0x7f0000000080), 0x0) 20:27:48 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:27:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5865, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:48 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev}, &(0x7f00000000c0)=0xc) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r4}, 0x6d) r5 = dup3(r1, r0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000140)) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x640880, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self\x00', 0xa0281, 0x0) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r7) fcntl$setlease(r6, 0x400, 0x0) 20:27:48 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x40000000000012c, 0x0, &(0x7f00000001c0)={0x77359400}) [ 978.375701][T11597] usb 5-1: Using ep0 maxpacket: 16 [ 978.375775][T10420] usb 3-1: device descriptor read/8, error -71 [ 978.586003][T10420] usb 3-1: device descriptor read/8, error -71 [ 978.596292][T11597] usb 5-1: unable to get BOS descriptor or descriptor too short [ 978.706181][T10420] usb usb3-port1: unable to enumerate USB device 20:27:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:49 executing program 4: syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') 20:27:49 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 978.906642][T11597] usb 5-1: string descriptor 0 read error: -71 [ 978.913302][T11597] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 978.922663][T11597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.950910][T11597] usb 5-1: config 0 descriptor?? [ 978.987038][T11597] usb 5-1: can't set config #0, error -71 [ 979.025742][T11597] usb 5-1: USB disconnect, device number 49 [ 979.097265][T22293] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 979.126474][T10420] usb 3-1: new high-speed USB device number 120 using dummy_hcd 20:27:49 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x10a00, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r9}) sendmmsg(r6, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) io_submit(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x40, r0, &(0x7f0000000000)="bd49210bcac231c38e5f469516a6c2d3d65b17506c18beeb97648c0d96e0e272845451f86ed7d231191bfde31f208dc4d0db25103ac76b9830c23c28f26318a2bc6e012f3db80061933e7ee8264da1c92593e077bd8d2aaf66f19f3bb64f070791a32b919beac2519d2d1db2861948665295f16bc530f493e46d5888082a0010915afcf5379dbbbaae465ce0f17e1afd6b3386a4e4b1e7c808a235259bb612f77b753046928e1b4a164310fa5da8ac1c54405e33655ad5b235c4a81dabe292a7a7f5f6ecacb8da5bf69e3d90b9084eae19eb53911cd702745092ac82ab8cdc9ac7dd0d27ae7ce239b53f94f716693a088b7a30f1df", 0xf5, 0x0, 0x0, 0x0, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x10, r4, &(0x7f0000000180)="46b658a16a841d8adad1233e451f09ab187a88bb5bd0e5deb44aa9495c18132b5986fdbef2f5b074d055247b7a1594fbbdd99fbbaeac42f57f575ee047d024e4a5f29b1c16ff35e66dc02c871ba0112c066009c1fa848939d91212ee79a4f269f3341a24aad2ce1279022db8b34444de62267e238e00561f93", 0x79, 0x1, 0x0, 0x2, r5}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x20, r6, &(0x7f00000002c0)="5d9bc6d8b2f512bcbc1cb3636620521317112d5150c098f3b033903d765b25bddea11802fe0e9a1e3186d5e4caa37fdd8d4a2634f66a2e5b0e0656a784991b8eeb6d01800000585a15fa79cb90d6d9b4041750a31a05cea0531cfb1ea917072aec7680b872070cfaa0932be3de3da530e634d6edbec3069d188b990ee7f5c993ebd667d14702006a0166c3499884b5764f59101a8f413f065cea4bb3a91ab44b279097b982a38171877cdd2d3afa7017e877", 0xb2, 0x5ed, 0x0, 0x2}]) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) [ 979.395678][T10420] usb 3-1: device descriptor read/64, error 18 20:27:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6558, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:50 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000130, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:50 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 979.786325][T10420] usb 3-1: device descriptor read/64, error 18 [ 979.816990][T22310] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 980.055703][T11287] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 980.063892][T10420] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 980.305781][T11287] usb 5-1: Using ep0 maxpacket: 16 [ 980.336091][T10420] usb 3-1: device descriptor read/64, error 18 [ 980.466937][T11287] usb 5-1: unable to get BOS descriptor or descriptor too short [ 980.720069][T11287] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 980.729753][T11287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.738236][T11287] usb 5-1: Product: syz [ 980.742550][T11287] usb 5-1: Manufacturer: syz [ 980.747507][T11287] usb 5-1: SerialNumber: syz [ 980.753466][T10420] usb 3-1: device descriptor read/64, error 18 [ 980.876090][T10420] usb usb3-port1: attempt power cycle [ 981.073041][T11287] usb 5-1: config 0 descriptor?? [ 981.162992][T11287] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 981.169940][T11287] mcba_usb 5-1:0.0 can0: couldn't start device: -2 [ 981.496809][T11287] mcba_usb: probe of 5-1:0.0 failed with error -2 [ 981.596422][T10420] usb 3-1: new high-speed USB device number 122 using dummy_hcd 20:27:52 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000148, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6800, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:52 executing program 2: lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$GETALL(r0, 0x0, 0xd, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x1000, 0xfc00]) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) 20:27:52 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 982.096027][T10420] usb 3-1: device descriptor read/8, error -71 20:27:52 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 982.294510][T22338] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 982.314877][T10420] usb 3-1: device descriptor read/8, error -71 20:27:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6a02, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:53 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 982.885547][T10420] usb 3-1: new high-speed USB device number 123 using dummy_hcd 20:27:53 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 982.976562][T10420] usb 3-1: Using ep0 maxpacket: 16 [ 983.003922][T22358] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 983.107229][T10420] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 983.120088][T10420] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 983.326326][T10420] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 983.335759][T10420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.343902][T10420] usb 3-1: Product: syz [ 983.348422][T10420] usb 3-1: Manufacturer: syz [ 983.353176][T10420] usb 3-1: SerialNumber: syz [ 983.421426][T10420] usb 3-1: config 0 descriptor?? [ 983.477330][T10420] usb-storage 3-1:0.0: USB Mass Storage device detected [ 983.532762][T10420] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 983.674429][T11597] usb 3-1: USB disconnect, device number 123 [ 984.496297][T11597] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 984.765905][T11597] usb 3-1: Using ep0 maxpacket: 16 [ 984.916870][T11597] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 984.929873][T11597] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 985.186757][T11597] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 985.196323][T11597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.204469][T11597] usb 3-1: Product: syz [ 985.208966][T11597] usb 3-1: Manufacturer: syz [ 985.213706][T11597] usb 3-1: SerialNumber: syz [ 985.558431][T11597] usb 3-1: config 0 descriptor?? [ 985.775612][T11597] usb 3-1: can't set config #0, error -71 [ 985.807616][T11597] usb 3-1: USB disconnect, device number 124 20:27:59 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f00000000c0)='./file0\x00') sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)={0x424, 0x3f3, 0x200, 0x70bd2a, 0x25dfdbfc, {0x7, 0x0, 0x3e, [0x2, 0x3, 0x1, 0x0, 0xffff2a02, 0x0, 0xc3e6, 0x1f, 0xffff0000, 0x5, 0x4, 0x80, 0x3, 0xff, 0x3, 0x0, 0x101, 0x3, 0x3ff, 0x0, 0x1f, 0x2, 0x0, 0x1, 0x20, 0x100, 0x0, 0x8, 0xff, 0x3, 0x8, 0xffffffff, 0x3, 0x0, 0x1, 0x5, 0x73, 0xffff8000, 0x7f, 0x3, 0x6, 0x2, 0x7fffffff, 0x0, 0x7, 0x1, 0x7fff, 0xfffffffd, 0xfffffffb, 0x7f, 0x5, 0x6, 0x3, 0x101, 0x8001, 0x80000000, 0x80, 0x40f, 0x8, 0x401, 0x8, 0x7fff, 0x101, 0xfffffffd], [0x9, 0x7fff, 0x8, 0x7fff, 0x725dd633, 0x0, 0x6, 0x9, 0x7fffffff, 0x311, 0x9, 0x4, 0x4, 0x4, 0x1000, 0x8, 0x3, 0x9, 0x8, 0x8001, 0xb1, 0x28d, 0x816a, 0xdb, 0xf3, 0x7f, 0x80, 0x3, 0x0, 0x10000, 0x3f, 0xcc, 0x8, 0x20, 0x8000, 0x9, 0x9, 0x5, 0xbbf8, 0xd4c5, 0x101, 0x1, 0x5, 0x4, 0x8, 0x8, 0x1, 0xc9fc, 0x6, 0x0, 0xffffffff, 0x7, 0x81, 0x8, 0x19, 0x1f, 0x7f, 0xfffffff7, 0x8, 0x2, 0x1, 0x9, 0x2, 0x7fff], [0x79b34f14, 0x8000, 0x36, 0x4000000, 0x0, 0x0, 0x7847, 0xa9, 0x2, 0x6, 0x7fffffff, 0x8000, 0x6, 0x2, 0x5, 0x2, 0x800, 0x1, 0xc1, 0x8, 0x390f, 0x800, 0x100, 0x3, 0x1, 0xfffffff9, 0x5, 0x9, 0x4, 0x7fff, 0xdc57, 0x81, 0x10001, 0x100, 0x4, 0x8, 0x1000, 0x9, 0x1f, 0x7, 0xd0, 0x0, 0x5, 0x10001, 0x2, 0xffff, 0x6, 0x1, 0xfffffffb, 0x5a, 0x6, 0x7, 0x1f, 0x3, 0x69ae15e6, 0x7, 0x8, 0x0, 0xfffffffe, 0x31c, 0x4, 0x1, 0x8, 0x7], [0x2, 0x7, 0xe62, 0x3, 0x6, 0x7f, 0xe31, 0x81, 0x8, 0xa0, 0x800, 0x2, 0x1, 0x3, 0xffffffff, 0x0, 0x6, 0x8, 0x9, 0x2, 0x2, 0x7fff, 0x6, 0x3, 0xa7a, 0x7, 0x4, 0x4, 0x1, 0x6, 0xc54, 0x4, 0x1, 0x2, 0x1, 0x8, 0x400, 0x2, 0x100, 0x800, 0x3, 0xffff, 0x0, 0x385, 0xfffffffe, 0xf02e, 0x2, 0x8, 0x1, 0x20, 0x2, 0x0, 0x5, 0x7fffffff, 0x7, 0x7f, 0x101, 0x6000000, 0xff9, 0xffffffff, 0x0, 0x7, 0x800, 0xfffffffa], 0x3, ['[@\x00']}, [""]}, 0x424}, 0x1, 0x0, 0x0, 0x40080}, 0x40844) 20:27:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6c00, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:27:59 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000150, 0x0, &(0x7f00000001c0)={0x77359400}) 20:27:59 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000000)=""/156) 20:27:59 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 988.900538][ T8707] usb 5-1: USB disconnect, device number 50 [ 989.065600][T22402] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:27:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7400, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 989.366458][ T3225] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 989.487528][T22416] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:27:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7a00, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 989.575240][ T8707] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 989.625420][ T3225] usb 3-1: Using ep0 maxpacket: 16 [ 989.700698][T22420] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 989.766272][ T3225] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 989.779235][ T3225] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 989.815050][ T8707] usb 5-1: Using ep0 maxpacket: 16 20:28:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8100, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 989.965365][ T3225] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 989.974591][ T3225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.983199][ T3225] usb 3-1: Product: syz [ 989.987704][ T3225] usb 3-1: Manufacturer: syz [ 989.989072][ T8707] usb 5-1: unable to get BOS descriptor or descriptor too short [ 989.992457][ T3225] usb 3-1: SerialNumber: syz [ 990.276070][ T8707] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 990.277453][ T3225] usb 3-1: config 0 descriptor?? [ 990.285528][ T8707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.285641][ T8707] usb 5-1: Product: syz [ 990.303091][ T8707] usb 5-1: Manufacturer: syz [ 990.308001][ T8707] usb 5-1: SerialNumber: syz [ 990.347554][T22428] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 990.417335][ T3225] usb-storage 3-1:0.0: USB Mass Storage device detected 20:28:00 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000154, 0x0, &(0x7f00000001c0)={0x77359400}) [ 990.531520][ T8707] usb 5-1: config 0 descriptor?? [ 990.565055][ T3225] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 990.640151][ T8707] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 990.646389][ T3225] usb 3-1: USB disconnect, device number 125 [ 990.646926][ T8707] mcba_usb 5-1:0.0 can0: couldn't start device: -2 20:28:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8847, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 991.056183][ T8707] mcba_usb: probe of 5-1:0.0 failed with error -2 [ 991.157049][ T8707] usb 5-1: USB disconnect, device number 51 [ 991.315282][ T3225] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 991.417802][T22461] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 991.565667][ T3225] usb 3-1: Using ep0 maxpacket: 16 [ 991.675279][ T8707] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 991.699051][ T3225] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 991.712153][ T3225] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 20:28:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8848, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 991.915842][ T8707] usb 5-1: Using ep0 maxpacket: 16 [ 991.956197][ T3225] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 991.965720][ T3225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.973861][ T3225] usb 3-1: Product: syz [ 991.978547][ T3225] usb 3-1: Manufacturer: syz [ 991.983308][ T3225] usb 3-1: SerialNumber: syz [ 992.077947][ T8707] usb 5-1: unable to get BOS descriptor or descriptor too short [ 992.161695][ T3225] usb 3-1: config 0 descriptor?? [ 992.192224][T22471] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:28:02 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000158, 0x0, &(0x7f00000001c0)={0x77359400}) [ 992.537062][ T3225] usb 3-1: can't set config #0, error -71 [ 992.570560][ T3225] usb 3-1: USB disconnect, device number 126 20:28:02 executing program 4: syz_usb_connect(0x4, 0x190, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0xd9, 0xb8, 0x75, 0x10, 0x1bc7, 0x1045, 0xeabc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x17e, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x53, 0x0, 0xa, 0xff, 0x3d, 0x27, 0x0, [], [{{0x9, 0x5, 0xf, 0x0, 0x400, 0x1f, 0x3, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0xaa, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7fff}, @generic={0xd, 0x24, "522ca67860f31fb893e206"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xd1, 0x9, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x3, 0x1, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x6728}, @generic={0x74, 0x3615a097f65b23ea, "b55f34910f9427e0ec9ae6459c14598b3787f59a0fedcdd71ec206c474cc8722aafa747aaa5f3ce21c331861386e1416e020507dc04570dbbe4251bef8584bff172098eaf1f65d1a84a45b2d40f7e3c00a41e2eea7587ea2d21c28fb0b14d10983aa99c3d66ad5fa77fdf9554a65b60cd8b3"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x6, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0xa5}]}}, {{0x9, 0x5, 0x80, 0x10, 0x228, 0x81, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5c, 0x7}, @generic={0x59, 0x21, "4154efa392d9bbae5519ab08a350c1059061259d401550ba37ce2aff0fc826a95035ce054121f3ba2e6c626bec43f7aea17eb57e38e94015592d9194c8986fd5b1662ca55956330e2056f8d0084876e919cc6577f2718f"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x1, 0x8, 0x40}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x8, 0x5, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x7, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfb, 0x5}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x36, 0x20, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x9}]}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x100000006) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x28) write$sequencer(r0, &(0x7f00000000c0)=[@n={0x3, 0xff, @SEQ_NOTEON=@note=0x3e, 0x84}], 0x4) eventfd2(0x1000, 0x0) 20:28:02 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x121041) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) write$evdev(r0, &(0x7f0000000040), 0xc00) syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x9100) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x1, 0x17, 0x9, 0xe9, "8ba474047dc0d9f46dd33cac953298c4c927d96328b72f51598f00fb20683ba2"}) 20:28:02 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:28:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9501, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 992.736192][ T8707] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=58.3a [ 992.745615][ T8707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.754242][ T8707] usb 5-1: Product: syz [ 992.892200][ T8707] usb 5-1: config 0 descriptor?? [ 992.945569][ T8707] usb 5-1: can't set config #0, error -71 [ 992.977327][ T8707] usb 5-1: USB disconnect, device number 52 [ 993.039618][ T28] audit: type=1326 audit(1598300883.331:7): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=22488 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603ba code=0x0 [ 993.143430][T22496] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 993.160389][T11287] usb 3-1: new high-speed USB device number 127 using dummy_hcd 20:28:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xb603, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 993.409402][T11287] usb 3-1: Using ep0 maxpacket: 16 [ 993.440620][T22501] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 993.536241][T11287] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 993.549216][T11287] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 20:28:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xb903, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 993.755466][T11287] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 993.764829][T11287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.772959][T11287] usb 3-1: Product: syz [ 993.777892][T11287] usb 3-1: Manufacturer: syz [ 993.782622][T11287] usb 3-1: SerialNumber: syz [ 993.899682][T22508] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 993.973401][T11287] usb 3-1: config 0 descriptor?? 20:28:04 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x40000000000015c, 0x0, &(0x7f00000001c0)={0x77359400}) [ 994.040377][T11287] usb-storage 3-1:0.0: USB Mass Storage device detected [ 994.139444][T11287] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 994.232011][T11287] usb 3-1: USB disconnect, device number 127 20:28:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfeff, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 994.582843][T22524] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:28:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xff0f, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:28:05 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) pwritev(r0, &(0x7f0000001380)=[{&(0x7f00000000c0)="d053e3fb3cc67f1799854a2962c302e3728ee33c7cb0e534218e04c7f11a0a19c18e75e3b10c2b4db657009ac0a9d94796c95c644cda14922ddd802e2ee93f51dce7d168755c160739f1a82e0db660d0305b72a15c998167382bc0fb4035", 0x5e}, {&(0x7f0000000140)="c58c5b1fc2684b7ed13b5a1815276d09fbd2417e8c05046d7831537cb927a8566e17de10ca65df8db6a102b09bff797e9f370b7dae903ea9cbfe0f4508217c261dbe7ab916084ac73d717e8a3b3b57d04b71f2be99330fd8dba151b4dcd6f602ab", 0x61}, {&(0x7f00000001c0)="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", 0xfd}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="4e97bad2d8b4be3ef230d80defea905809eaa42f7c69e72e8a8b8019ea90bb1436cc9201443820255f69869e8fd6dc38a8b02cdf1a5af5edde27387a14fbf41693a12d3538212ef454fd91fffb83b56d1937f59787de4540ab63b44da5137171fe119b4c23dd54fbcec87df3b9", 0x6d}, {&(0x7f0000001340)="310f93f8aca64330888669be30032fb923e1e1a9", 0x14}], 0x6, 0xfff, 0xe57a) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000000)) dup3(r1, r0, 0x0) 20:28:05 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000480)={0x1eb, 0x2, 0x8}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) ioprio_set$uid(0x3, r3, 0x6003) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r2, 0x300, 0x1, 0x0, {0x26}}, 0x14}, 0x1, 0xa0028000, 0x0, 0x8800}, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xdb0d8145497ead5d}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4880) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r2, @ANYBLOB="080028bd7000fbdbdf25130000000e000002006e657464657673696d300000080003000000000008000b0005000000060011000b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30d100080003000200000008000b000000000006001100defb00000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b009706000006001100200000000e0001006e657464657673696d0000000f00ddcd04d0a763de02006e657464657673696d300000080003000100000008000b000300000006001100000019d40000000000000000000000000000005894e7572cd516b4bd70d645fc9e5904"], 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) [ 994.981290][T22532] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:28:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xff7f, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 995.415711][ T8706] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 995.555009][T22546] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 995.654782][ T8706] usb 3-1: Using ep0 maxpacket: 16 [ 995.785069][ T8706] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 995.797875][ T8706] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 20:28:06 executing program 4: syz_usb_connect(0x5, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xb9, 0xb3, 0xb9, 0x10, 0x573, 0x4d36, 0xfb70, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x8b, &(0x7f00000000c0)=@string={0x8b, 0x3, "77c757c6d2aca1f659927bd92f50c69d9e682ec49b321c1907fc31c91191dd8163a49c32b9125ce53a008bb60def48e008aeb0d3c5a0e5d4b55f11f4fb41d7f19b8579241c8f46289e1a73cf4823b4e5e9661fa193c52f0144e014368f4069d3c7974051f8fd9986acec56f3dfac228cc48e4579ed333ddf230fa4da10b356fc4eadb03abd0bda3cac"}}, {0x69, &(0x7f0000000040)=@string={0x69, 0x3, "15d55010d3555bb2334d452f6676ddb8b9e5a7b306e6c5204b0253233c50e1eeea3a0c855b45b7eadbdd580ed2d720996a1bc692afd7d78344624b065260b1b6f22e4edec68262ba78de27ea4c3afd25a653ff5a15306f91ba0ed34072624ee2b6ad135da5596e"}}]}) 20:28:06 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000160, 0x0, &(0x7f00000001c0)={0x77359400}) 20:28:06 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x4, 0x2, "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", 0xf3, 0x0, 0x1, 0x1, 0x4, 0x0, 0x8, 0x1}, r5}}, 0x120) 20:28:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffe, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:28:06 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 996.038846][ T8706] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 996.048945][ T8706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.057262][ T8706] usb 3-1: Product: syz [ 996.061579][ T8706] usb 3-1: Manufacturer: syz [ 996.066391][ T8706] usb 3-1: SerialNumber: syz [ 996.221997][T22555] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 996.224244][ T8706] usb 3-1: config 0 descriptor?? [ 996.283320][ T8706] usb-storage 3-1:0.0: USB Mass Storage device detected [ 996.353155][ T8706] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 20:28:06 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) [ 996.488606][T11597] usb 3-1: USB disconnect, device number 2 20:28:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x34000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 996.735521][ T8706] usb 5-1: new high-speed USB device number 53 using dummy_hcd 20:28:07 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000000)) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) [ 996.970858][T22580] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 996.995353][ T8706] usb 5-1: Using ep0 maxpacket: 16 [ 997.155460][ T8706] usb 5-1: unable to get BOS descriptor or descriptor too short 20:28:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3ffff, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 997.253203][ T8706] usb 5-1: config 0 has no interfaces? [ 997.275428][ T3225] usb 3-1: new high-speed USB device number 3 using dummy_hcd 20:28:07 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000168, 0x0, &(0x7f00000001c0)={0x77359400}) [ 997.450998][ T8706] usb 5-1: New USB device found, idVendor=0573, idProduct=4d36, bcdDevice=fb.70 [ 997.460439][ T8706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.469248][ T8706] usb 5-1: Product: syz [ 997.473590][ T8706] usb 5-1: Manufacturer: 픕ၐ嗓뉛䴳⽅癦룝뎧⃅ɋ⍓值㫪蔌䕛๘ퟒ餠᭪鋆힯菗扄ً恒뚱⻲苆멢㩌◽厦嫿〕酯຺䃓扲궶崓妥 [ 997.474572][T22593] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 997.490500][ T8706] usb 5-1: SerialNumber: syz [ 997.567334][ T3225] usb 3-1: Using ep0 maxpacket: 16 [ 997.648870][ T8706] usb 5-1: config 0 descriptor?? [ 997.695788][ T3225] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 997.708999][ T3225] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 997.902227][ T3225] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 997.911538][ T3225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.919953][ T3225] usb 3-1: Product: syz [ 997.924428][ T3225] usb 3-1: Manufacturer: syz [ 997.929614][ T3225] usb 3-1: SerialNumber: syz [ 997.942667][ T8706] usb 5-1: USB disconnect, device number 53 [ 998.032218][ T3225] usb 3-1: config 0 descriptor?? [ 998.096575][ T3225] usb-storage 3-1:0.0: USB Mass Storage device detected [ 998.107429][ T3225] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 20:28:08 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009504b110087c1d754f35b58020b81901020b018996ec7c062f3ae31d3c2d9db1cf10a40000004cbd90a800c41502bdd45c0000000050c2df1190a92687ccd5da0d8b0cbbe2e7ff9b1a097ea51dd1a0103a06dceeece370bdeecb65f7c2b531d65092e1540c0a3dd8f31022b9db03d9ac46e3a5dab0ed8da4cd76122b2493c6fecdb8fc96d201af520bbb16c694dd55eea497e16978a6860c6543cff7c82a19202b8b10515940"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f00000000c0)) 20:28:08 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x208200, 0x0) getsockopt$inet_buf(r7, 0x0, 0x2a, &(0x7f00000001c0)=""/184, &(0x7f0000000280)=0xb8) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000ffdbdf25020000000500130002000000060001000400000008001800e000000105000700020000000c000f000300000000000000050007000200000008001700a9cf631cbc98f8ccf894007b8c6706eb46fc4a7aa95a98b8f02995273d3fe0ff4840e170f9e2", @ANYRES32=r6, @ANYBLOB="06001c0006000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4) dup3(r1, r0, 0x0) [ 998.211912][T11287] usb 3-1: USB disconnect, device number 3 [ 998.715011][T11287] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 998.724719][ T8706] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 998.955707][T11287] usb 3-1: Using ep0 maxpacket: 16 [ 998.987611][ T8706] usb 5-1: Using ep0 maxpacket: 16 [ 998.999504][T11287] usb 3-1: too many configurations: 184, using maximum allowed: 8 [ 999.125717][T11287] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 999.133461][T11287] usb 3-1: can't read configurations, error -61 [ 999.174465][ T8706] usb 5-1: unable to get BOS descriptor or descriptor too short [ 999.256990][ T8706] usb 5-1: config 0 has no interfaces? [ 999.314874][T11287] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 999.554599][T11287] usb 3-1: Using ep0 maxpacket: 16 [ 999.596221][T11287] usb 3-1: too many configurations: 184, using maximum allowed: 8 20:28:10 executing program 4: syz_usb_connect(0x6, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000240)={0xf, 0x0, 0x0, 0x0}) [ 999.726089][T11287] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 999.733928][T11287] usb 3-1: can't read configurations, error -61 20:28:10 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) connect$can_bcm(r3, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:28:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x40000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:28:10 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000178, 0x0, &(0x7f00000001c0)={0x77359400}) 20:28:10 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 999.774549][ T8706] usb 5-1: New USB device found, idVendor=0573, idProduct=4d36, bcdDevice=fb.70 [ 999.783778][ T8706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.792499][ T8706] usb 5-1: Product: syz [ 999.797083][ T8706] usb 5-1: Manufacturer: 픕ၐ嗓뉛䴳⽅癦룝뎧⃅ɋ⍓值㫪蔌䕛๘ퟒ餠᭪鋆힯菗扄ً恒뚱⻲苆멢㩌◽厦嫿〕酯຺䃓扲궶崓妥 [ 999.815926][T11287] usb usb3-port1: attempt power cycle [ 1000.029103][T22641] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1000.220581][ T8706] usb 5-1: config 0 descriptor?? [ 1000.258221][ T8706] usb 5-1: can't set config #0, error -71 20:28:10 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x40, 0x700, 0x5, 0x4a7cfc81, {{0x8, 0x4, 0x2, 0x2, 0x20, 0x66, 0x0, 0x7f, 0x4, 0x0, @private=0xa010102, @private=0xa010100, {[@noop, @generic={0x83, 0x9, "60be049b5edddb"}]}}}}}) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r7}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)="9c7644b60b8c6cb4aaab54d231ae203af933ff789562946cbc84297c2c4f27f87266652e5e2dac242bd16f7824fcd1d119111040517432e1ddc6daeb77b52c626b2c05928a8c3c5b141c619db826dd2852ec31f02a3a8023e0e9ddd44633ece8fa4c4951b2e8b135119bbf79d7b578e297d7e38d23b86c9dea22a94e8c77cf49af794a29e104d3c05024f1210a6fab709e927c50d346b2d0a0488ad32c8bb3b2feb45f566297b047df72b9372c775ce6b714a545599a00d450b9b695f7ec19ed24ec3d232bf9e6ac7485f7ea708f32229092360588a9c91c052282f360d4d54631d6d8785c527a52b3", 0xe9, r4}, 0x68) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0x3, {0xa, 0x4e21, 0xfffffffc, @rand_addr=' \x01\x00', 0x800}}}, 0x3a) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r3}, 0x10) dup3(r1, r0, 0x0) [ 1000.317145][ T8706] usb 5-1: USB disconnect, device number 54 20:28:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffff, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 1000.574724][T11287] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1000.715347][T11287] usb 3-1: Using ep0 maxpacket: 16 [ 1000.756027][T11287] usb 3-1: too many configurations: 184, using maximum allowed: 8 20:28:11 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000002000)={{0x0, 0x0, 0x80}}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r2, r0, 0x0) [ 1000.910339][T22663] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1000.935503][T11287] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1000.943753][T11287] usb 3-1: can't read configurations, error -61 20:28:11 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x2e44, 0x180002) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000080)=0x5) syz_usb_connect(0x1, 0x1b, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0xb7, 0x10, 0xb6, 0x10, 0x4cb, 0x117, 0x7f74, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0xff}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x340a}}, {0xd3, &(0x7f0000000100)=@string={0xd3, 0x3, "aaa6ad77e24de76f150d0d63c55faf1a874902f3af5c1e0acf26b532eeb02c70d581c3b8824c73ea64b80607c9cdf862d3ee4e5ca3b0a14ad0299f79556b3f8e6a4d0e803ecbbc7f5f20780f85f031ad025b53911e21960e0f9a072f556b706345e6b91de6ba9d6fe9d645128fcd11d56f4cd5d3191c8673bc56fc2e14a92024d7e26b595f2ad041b3cfb529a8ac11ac4145d09cc02fe37b8292f1a93df98a011a885432cb54d2020a38bfd4d65d08050b19c1fd090ae2b8254ace6b1c0beb592278ff59972d87105bc5a2b24f0d67890a"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x861}}, {0x93, &(0x7f0000000440)=@string={0x93, 0x3, "ffe607e78b54c2fa7dfa6cb23051e85239d428415196c43801d6f1d353e8922e9487febb4aba6d80da30d4a0129c37335eea950845100ed4d7de0c63f87112e6e9b4a9ae04bc499990b8b8601cfa3c891de1c18fce06fe84007d3dfc1faed9795d8ee43239f185df96e06ee9edd9470ed698150066e95abdcf34fea8142a20cf753ae1faf4d87823e80df2d458b76c2b48"}}]}) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x1ff, 0x8, 0x7, 0xdd, 0x1, "6bb5f99fda448b0d"}) 20:28:11 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000180, 0x0, &(0x7f00000001c0)={0x77359400}) [ 1001.144626][T11287] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1001.238448][T11287] usb 3-1: Using ep0 maxpacket: 16 [ 1001.283954][T11287] usb 3-1: too many configurations: 184, using maximum allowed: 8 [ 1001.432485][ T8707] usb 5-1: new low-speed USB device number 55 using dummy_hcd 20:28:11 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) set_robust_list(&(0x7f0000001180)={&(0x7f00000010c0)={&(0x7f0000001080)}, 0x8, &(0x7f0000001140)={&(0x7f0000001100)}}, 0x18) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r3}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000080)={{r0}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000000)={0x0, 0x5, 0x28000000, 0x3f, {0x9, 0x2, 0x4, 0x0, 0x9}, [0x1000, 0x8001, 0x2, 0x9, 0x401]}}, @devid}) 20:28:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x400300, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:28:11 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) timer_create(0x2, &(0x7f0000001480)={0x0, 0x3, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000014c0)=0x0) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000001540)={{r2, r3+60000000}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10400, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"fcf7bd67dc9839aed17e771914bf6231", 0x0, 0x0, {0x10001}, {0x6, 0x6}, 0x1f, [0xb98b, 0x7, 0xfffffffffffffffd, 0x0, 0x4, 0x2, 0x3ff, 0x10001, 0x5, 0x1, 0xf81, 0x0, 0x1, 0x32ad, 0x7fffffff]}) socket$inet(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_RM_DEV_V2(r8, 0x5000943a, &(0x7f00000001c0)={{r4}, r9, 0xc2d0d25137c258bc, @unused=[0x101, 0x7ff, 0x9, 0x80000001], @name="df3e808402cdc25f2daddb412a07f2e3f296d97c79bcc423a25db951d049687201c6b150306296334da992145b24ce1146a97bba895ce4fa1f19bf5d6c758cb528c90d0a307105686e4bc72743c49d2fe18762e48bbd9cacb3bf8df99be752c2b0d187e1b984ccc79e10d94d4b5865cd00f29d26cdcb2d19e8197bba5a18322d1b06c7ec205c7914cdf7324d532ffc46dbebdd2dfd28a817e55e5a714011eb0752806f8c1440808b948a2c4059de0eb5b4769d56c0d5de3f5cd2d4a27655333cee852e6576701dde7adf6405a9fb0bdee7c67ac42e343576ee5052e7a9f55734682841e039808a53032162beeee09cf12bdd64c9716d11e52410ca7dc5827d0af7f717b7bb41e40dc8c10f6c27664f232c34c33887213b040b4e7540d22e35520b6ede5f18f9b469f3d252bc4e85162a3ed7864abd19cb5b6fba2f03e459eaf406a5f195ea6292de623bd3632ccaac042c6849f0828f9d7b1ba917a14b863c6b3fe42f4e1743d27a31cd97c05c18286698792158c7201f4ef8e2112a7b24fea0c44ce5449848b0fb4f84cb4d94c2b4a092aea357a388a6e6b5e684bdfa2cf6182319f7c849bb85428357f6dcf622d8c5c3335b5e8580b5c4627cebe05255d6cb1d900ed70591535658709237d3f54022e2caae5069f78a256d5685c791a14de3a9d9a653a9b3ca42c65c8b9db485c4babd7ff4e34ce44c802eeb711745748bbd95cc508baf0cabbdcb4104fce72b4c85bc570f2cde15f06d1f507492fbab27860115c43242ab4a19dea059dc03850ea0e1e5ebc60c5669f4684739aa15b8a4b2268fb471c789755f1c8ded7b309d66ec52e609b5026a9f4eaa783ccb12d6838c43acec4bbe44eeca28f7ea41a83d692f011961a90adb6774d7ea1e6809c58a2a2c4ac951bb5d536cf88af76c4f4a36444a3f076ea07d42cf140fe237c22077dd69a0b8d4c8a8f114317c0ec882975cd89f86fd8385e5673902115192c449e488964a1514e3524853d43bca3639b723d7bebab7dca232ab3b70d42aec5005225b28aab7cfade30c581ca0a4d9f78de728cf8606a47b52cbafa020cecbae9f8c163b2c0c0924cd6fe10a5b2bcaf6542a3f34322311618e4b078fa0e47a511b673b0aebbc869dfcf46a4d83551d8e06890e4c7bd9f36777213969318702d15ab977c823c5244797aa6d16cb06288ab1a9cf8f8b5826dfd86e9a6fe60ab3fdaea85ee36a9dc5f6e777680fbae5643262f9afc107e5746df948fa189e38bc6fde90749ee07879a3bf455b4729a76dee1fefc902b394876b87b8c227288edcc63a3e3ce93bd5f1d0335ca40be8720e026f25a445b3903a6366240cbd481d594fbf029bbdcfd414c7585f99079ad1aeaaedb07c01b8a2dc3402a04036e565465b3758e824a4ff5025522dfac03b21bfaf04a6b409cb015a5853c9c13fa15d9e06eea50b41c64f4f5f01944e0797fdc4ee86655049968b918ad991d25ef53c7e20cd1f47d0430928a3b4e4a37822d8b76f913e4a06b93b267d272162c1d34be6bedbe933e8f3ce83a731bae795f4ce3c87951576f7bc0612089417d85987e34c9d166f3e9ce01708328b963adc73e3f2de4a3465b6f3967cdbe75597b9834ce00f59e8fbc4863a281fb812279a727a3c427e7f725989a684cf0db3ada281d4bd2592d11658b6245b11e0e6d54f14a3bf792d269123f2f1d75b7081071d47b385e585fb695132ff4e7e51314d04a88ac697b9ee04b41e79def02ecd37842602da733517ddc6cb0a5e39876f99cb2e52b590917ba3282b12a0cd68224109a273e4df26e21054c29fca034968fa3d4d6ae03662c645913f4ad434c73b975f5829c10ed30ffc9a5fab6ee3d22d660d282c753543a5de028820ac5a4ef05478a30e28bd91ed66f4bd88e90989803e0265ac4373a604b8baee984ad573e15a0763c07ddc14ac50a204c62be0787522338452daa0c856a471c0f278967d9326dac0ed340e46853e5072793378cf52a21b0ea1dbe6996735769e79a1a040f17c5822744c97fbf647951fadee1c797aca79a9aa5f6ece6261a2b1dc04347f7a55bc5ac7a16e228b0afcc0b7e7bfd3d990c102ace5e7df34bd7036a66c48c74c49eb3d65faa5272d8de42c971d9d358914612b93f1fa62fe1a905b5275e5f24a96c25a0a18efcfce65defd1de3d32a0c2d297cb0755305ca27c3e5fc0230285626435aa7b99f39fd83156554112d946143313107d3afbf4f10b53d3be0708412644c736e88ad8e2bc98202d845fe8749b0909a62bd2d6346f631f618e03dd24bbfe06004b23119b1467f093ef74c6ac2e8f10428ae044164f6e72d955004724ad318700272a7c01026e77be8952d7b210b48b3785cc64c908bf78c99f75b9a31147566f560b6cfcc4f28452120d35a278770275efce2ac72ed049c31b6823352d3525cf64775de0dfe42b9ba0f8fcaba57c99f4da6eba28841fe933d93cf146a92140ee2bb3ed0daf943ab5ec5255beee6bc6679a778249a87168bb1672a51e32c9635e8b883cc7857d0b5b66356cbc79aab661984451561f157cfd4795354312975dd0295fb4f6f1c59c2337b5461765bcfce203e728e3db2a28e444440facce569340c7a08c69c16dcbf9c7568df1ede929e28ff1a293154f495a2a6ad21c95352047e42e40f739bb8d1c11c2aa5cd880d4a403a14f85f4386c9de73bf880122411bc63781133eff55929b792232d858fc45e538b64c9f12af082843e41dd09aae57db35eeb3b285498075a281dbd8347a22aa6806bb88863ec090f693b4b52fea31a53b118efd15f1cac7122ff8568658a4379610cb827fbf3432508c23f09517b7d35bed71e0d8b477c7b66221b785a0b6e9c955a6055197bc4cfe0517d7470830b310a36f6b2fa7c479cde1a51c5cd640955787e52e1a08adb9ebe3d12183f5720787a6d1205db20fb7944c2ce5f32c21c3e974300ce052002e7c42a0ab619834c8c566a01c21df3aace179ca0f2d10fc2507dc07e12d722e358167b276e0389cb617cee88e1051117876d1ba4ff3cf037ad147af373780b5d4f14480cc11e3b404e073127c74a9dadb0b0720cb335348ee75f6d124f33d90730cfe359624cb6acd93c7e2162114874d26cb2dce61341115099934aae47c6161b375cc9bb9947ed4db82b80207907cb8dc61559da73413dfa97d7685e443871acc847acc6ef65b17de5720f26afba7ca60ccae2e39488f1499a77dfdd8654e6f225094362dec9616a09921f62d96b9dd20592d9e486f672d95bd165d6fccd97bfc0134786eb9cc880a3595e470d4c2bc49b59d28ea224219f32a2f131ef0f0a386a8b7bffa020edd02b94f29508bb1c554d7318767c811dc41ea012833ad90a1d6335cf6a563f9b5a9d3555eb1e229928b4c2f4d21465221fb2d2fdae6df268accca02e4c4d0d2987521b7cb91f9b4302853badb9bdf04f3776fb0c51e03ed1f1b06d40534685fc2f73c92e800b2d906dbec1c1329c3f469e7bcf8360ab7b72efb4895802065b253fa180dd062b63d7d8b584354a804d4b8e9d4e1fc88d16eef78656277dec2fa4a61bdbb76da77df013cff5cd2c8b3dc94cd2bf633a17223ebae7e9c48dd9024c5024c5a034659dbf1f0fe29c8b04f96fe1d5c21a835ee27b071d40e5d887914a33e24ba2b4e3994ebabf457bad113f06298d6b814a3a50713496da63340a2f69d06650b07c796b8a605a85f3c60b0ecd732a8bea0c10cd8b0cb6bae798f987b2280b05530d0f7265e827b4fb9cce6f8503c8f0270675f9c14765d6eb242944edac7cd4d8d8df697bad7f9b0f610e593bb0da62d971e91283073c9ff1c73d0a8ca5a188bd2a458afcf99e6150116308e679fff1dbf5b2fe85b6d8d63fd4cc6790b38d04a08871c302dffb697885023df849ba94f4450188a2fc10c2455385c08b52cfc5055a563ad79f7983096cb27b1704033e1afb36beaecff7195819e33806f5baf42184829c04ab7dc4cfe7deea62d5f37f63f80a7ba8e66bc99e25c2e247281d65e2938b1a70411c671b5919b58bd20b4a99f6fd654606f25c0c6b12c2acfbab9c9220f4b7067e0f89bdf7bcfb68f458462e36d1605daf69adf8c29f6c78d70549fec377aeaf80af909f6e8f7c511df960dc5fda9732360b6f4be72996f0286d27372442a1ce6ca148558d584ae4204f7e06c7e7d991e628eb8abf91fc296755dd07d22d0577c07a55067e585ace9b45b40be7f34fa8602f6dcbb650fe6373af55ecfa284c273a79cdb84449fe7753967ab31e8ada7fcf8029a5b5922bc54a65275e03e0449b3837ce8c0353c508024ddc16f599283c87fcb9e64fe2be9a8acd21ce1628d71c5d81c85bf44929c682b53e54dcfff58bb924c5c6c633041a0456d0759f5bd2446e7aa1141e731e70d4662d2e7faa6a11f69743e50778ce6ba7adb2a84174ed79060ccf889798dc1f7fbb0ec6b9433371fe57d4079709f95b9dc9f88a83d4807f5d91f638fdcc0f5e4e992fcd4db5e2a5bcd1856926ffc9a04359ac25cff91941e17b771c5d262fb08d93ee616184b3e66537047c6fbcb22b5a70fffa80236239fc7c2cb185be5f7f53f34fd918afb8122e8b61ee0ff60a72c9a098c10b6a6937d0152afa9a25d6023c63c65c62f3e9838d1154f1d199279af4287f538277f677ff5a9f8ab41eddecafbd3ea93726635bd7c82985b90dd06aa98afaf65c708611caf95cdb4958c9289a8ca9277114ae8df533b19d185be9ed438765c6c69ff2c577129d4ad9042b5dd4995b2587280ede6520c00499eefe7140997b8774ba72099b8990a097728fc26ee5c8adeef013ad701f54e97bcfafd1ca63dc93494557deefb317bbe6816ccf5f1d3df084ff7d76db27302bfbe003276bb48bb358683623c213fcde82ec8babbb8df39313353f20444d87d22f2fc32b6c1a260f66289b21e5eef50c296b15a673909f36cbe07111a39a64ff40e23726749de21340c74f38b1cf1ad07d7c57286c3a8cf89ba29c9f334f51122421160e6f539afa9f04b24624d576e24a2c7d57da623f373b5c19dca0dae54f2ca04835327cb510c63c9e23c62ccea7de13dc7ba06d96e2f9ac28e64138b5032c37bc3cc7e069934fbd3bd907c2ec05d716c33d83ce3a8441911fc25590c852ecf4c975b2fbe76f05cbb3370623acc3585ee700bf1ca06110ace70a06556fe083461d1a9f80a3eec6b61c713f387b5922a596229708c8a9933ec110f3a589edeeeaab71262f82cd4c6743ebe18c4b4e9f1a60d79d88d30b6dc28a2ccb0608f457414833496e36350800be352d03c61f7b0b3f42d67ae0df52999a8989c9f69c1622b6b3607c2b230b5c5fdea399c352bb403075cfa46b3fc9337d0c0a372841d0372c9a8208504ce1b4e48e1aba5bbe3853e193924dc50c8f52fb178d3941d6aefc57c7d8da5cbf5aad960648cd9c6b0d7c2f9c287245ddc08e4eccaf381aceade886a61c492ea24d52d3f90b7c235f290249e8a09e3ccc872930b8fa6cc4cdaf0ea1b765f321bcfc38190f2ce52b8c71bae16922f1952e8569278aff3fb965d138c9908bba030ce1a6ceb1f35330a9495c6ea7a738b814f3754411b4f0d583a50c82e9b9fccf8f498604482390f062e21a38701a814519e55b35a91ca180e53d9d9ba171091057b5efcc15b66ba69066e703a719121c15352bbe2e5481ed31ef1adcf9b6a30e2a24aa687a4ca175dd1d8"}) writev(r0, &(0x7f0000001440)=[{&(0x7f00000011c0)="bd2d82875ab738220d528cb929c8ade0b7f5dbdc84d2b351a84e10672357b31b4a2db68680118afdbbf3990adbcdd5d3492943a0a9596951fb6f08bca08884af500f2d0a931ca44d9e217386c8e47804f00a94c4b98dbd1497f658e615f0efa1c567c19953a6d191614b9ea0234482cb9e013e5e8026b6b139ceda7cdd78779ada469fe129cfcb90a9d0feab8665ce10599369800dbf7c22f5e5bd4a0f6ac9a684a16b7e4810120595859d8fbf3dd67bb8feb7bf1e05ae5a8823bdcc964e944249e4abe116a30f4acf9c27b164c39e68401a337ccf0e2db419ced66cfdb1fd7754d63f27f5c9", 0xe6}, {&(0x7f00000012c0)="b6c2fc68f64b7c8f41835536bb9076674a4c7412254e9a39605250d46c586122c223528fb7cfc769f2c465eaaa3743066023c91b207860d4e45c89e97afc4cf940eaafd0e5b9de8681347839b1c64ffba62d36400782d9dba6248a", 0x5b}, {&(0x7f0000001340)="a121bc137b41bd8cf779f830b30f6237f3967fcc1941ab69b71e2a2e70158182ecc610c9ed037fe0b41e42f566644950aaf1c6d77767d31b45c5618962bb5d2e9b9e03c15c29c75700043c0a31cc4ea5f9d03987c1e179f6f2aee39d4c4dd632102e848b8997ea5ab4c1fa019d9a18d493968754f047865984914b2dd012075b40d23816b863f46120db52a04b12e5bd7b36efd25abcf8596552ba8dbffd1e4582f5351de3c53702c6a5ef760c20e96277d3def0d2039717ee0390e998a6d51043d0f815658266ff27545070e45550ca54237d28debc96254002db84e6273dfdf226eca8419d3a122630704f", 0xec}], 0x3) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000040)=0xf900) [ 1001.665628][T11287] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1001.673365][T11287] usb 3-1: can't read configurations, error -71 [ 1001.680869][ T8707] usb 5-1: Invalid ep0 maxpacket: 16 [ 1001.723278][T11287] usb usb3-port1: unable to enumerate USB device [ 1001.741442][T22678] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1001.844595][ T8707] usb 5-1: new low-speed USB device number 56 using dummy_hcd 20:28:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:28:12 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x6], 0x1, 0x400, 0x0, 0xffffffffffffffff}) connect$can_bcm(r3, &(0x7f00000000c0), 0x6b) dup3(r1, r0, 0x0) [ 1002.085564][ T8707] usb 5-1: Invalid ep0 maxpacket: 16 [ 1002.097931][ T8707] usb usb5-port1: attempt power cycle [ 1002.108417][T22690] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:28:12 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000184, 0x0, &(0x7f00000001c0)={0x77359400}) [ 1002.304544][T11287] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1002.555845][T11287] usb 3-1: Using ep0 maxpacket: 16 [ 1002.676272][T11287] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 1002.689394][T11287] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1002.834542][ T8707] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 1002.865370][T11287] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1002.874876][T11287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.883103][T11287] usb 3-1: Product: syz [ 1002.887726][T11287] usb 3-1: Manufacturer: syz [ 1002.892479][T11287] usb 3-1: SerialNumber: syz [ 1002.944614][ T8707] usb 5-1: Invalid ep0 maxpacket: 16 [ 1002.958846][T11287] usb 3-1: config 0 descriptor?? [ 1003.007762][T11287] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1003.035013][T11287] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1003.094979][ T8707] usb 5-1: new low-speed USB device number 58 using dummy_hcd 20:28:13 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:28:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:28:13 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000000040), 0x10) dup3(r1, r0, 0x0) [ 1003.185113][ T8707] usb 5-1: Invalid ep0 maxpacket: 16 [ 1003.190872][ T8707] usb usb5-port1: unable to enumerate USB device [ 1003.217244][T11287] usb 3-1: USB disconnect, device number 8 [ 1003.484251][T22717] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:28:14 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x40000000000018c, 0x0, &(0x7f00000001c0)={0x77359400}) [ 1004.004606][T11287] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1004.244225][T11287] usb 3-1: Using ep0 maxpacket: 16 20:28:14 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12200000000000000002120001008739fe4a25f5a325e800000000000000000000854cb3"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 20:28:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 1004.366080][T11287] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 1004.379278][T11287] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1004.438363][T22733] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1004.595583][T11287] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1004.604921][T11287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.613055][T11287] usb 3-1: Product: syz [ 1004.617526][T11287] usb 3-1: Manufacturer: syz [ 1004.622269][T11287] usb 3-1: SerialNumber: syz [ 1004.734923][T11287] usb 3-1: config 0 descriptor?? [ 1004.777675][T11287] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1004.818787][T11287] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1004.835456][ T8707] usb 5-1: new high-speed USB device number 59 using dummy_hcd 20:28:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) 20:28:15 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r3 = dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x72, &(0x7f0000000080)={r8, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x11d8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000100)={r8, 0x6, 0xfffffffa, 0x800, 0x81, 0x7f, 0x4, 0x8000, {r9, @in={{0x2, 0x4e22, @multicast2}}, 0x9, 0x4, 0x2, 0x7f, 0x3}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfc, 0x3ff}, &(0x7f0000000040)=0x18) 20:28:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 1005.055043][T11287] usb 3-1: USB disconnect, device number 9 [ 1005.104549][ T8707] usb 5-1: device descriptor read/64, error 18 [ 1005.251894][T22758] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:28:15 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000194, 0x0, &(0x7f00000001c0)={0x77359400}) [ 1005.494226][ T8707] usb 5-1: device descriptor read/64, error 18 20:28:15 executing program 2: syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009504cf10281915130000010203010902240001000000000904000087c50009050000fb9cbc039300000000000904f2208996ec7c06f15cd902c78954be516d6ea25d7e76a5457d6b0ffb0ab88d76e3e8e825fc6e"], 0x0) 20:28:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 1005.774551][ T8707] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1005.810500][T22773] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1006.054520][ T8707] usb 5-1: device descriptor read/64, error 18 [ 1006.064469][T11287] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1006.304058][T11287] usb 3-1: Using ep0 maxpacket: 16 [ 1006.425194][T11287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.435603][T11287] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 135, using maximum allowed: 30 [ 1006.447300][T11287] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 135 [ 1006.464133][ T8707] usb 5-1: device descriptor read/64, error 18 [ 1006.589288][ T8707] usb usb5-port1: attempt power cycle [ 1006.654411][T11287] usb 3-1: New USB device found, idVendor=1928, idProduct=1315, bcdDevice= 0.00 [ 1006.663730][T11287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.673042][T11287] usb 3-1: Product: syz [ 1006.677455][T11287] usb 3-1: Manufacturer: syz [ 1006.682193][T11287] usb 3-1: SerialNumber: syz 20:28:17 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:28:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x90280, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0xfff, 0x3}, 0x90) dup3(r1, r0, 0x0) 20:28:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:28:17 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x40000000000019c, 0x0, &(0x7f00000001c0)={0x77359400}) [ 1007.028343][T11287] usb 3-1: config 0 descriptor?? [ 1007.183956][T22787] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1007.327149][T11287] usb 3-1: USB disconnect, device number 10 [ 1007.344833][ T8707] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1007.534508][ T8707] usb 5-1: device descriptor read/8, error -61 20:28:17 executing program 4: r0 = epoll_create(0x9) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @dev={[], 0x28}, 'macvlan0\x00'}}, 0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = dup(r2) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000040)={r3, 0x7, 0xfe, "986dee379ffa1f0e8d1109ff18271daa374c192a01ec5822840879c75869cd6cd4add5e36440ab6f9c0c8f25eb6e0b2c4220e5"}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x4}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12011003845eeb10080000000000ae0001001000006726eb2000786d4c1038fff900000021d8e14c185b479b05ac09092bdc7786f7ad956b29cf4671672ec5d6523d"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xfe, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}]}) 20:28:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7f}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001ff0), 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r4, r0, 0x0) 20:28:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 1007.764283][ T8707] usb 5-1: device descriptor read/8, error -71 [ 1007.910015][T22811] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1008.074432][ T3225] usb 3-1: new high-speed USB device number 11 using dummy_hcd 20:28:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:28:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r6}) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x1d, r6}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x4, 0x1af0, 0x4, {}, {}, {0x7, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x40, 0x2, 0x0, 0x0, "35a2824bba5cd8a346bbd648c7c691cd085bc1ad66fba197b7fe3b13c926e86d6be9393f3bb34c03a55acabf50cacccd16dc0c2378ca4e98afd354ad6eb02c82"}}, 0x80}}, 0x4004) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) r7 = accept(r1, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='selinuxfs\x00', 0x801, &(0x7f00000001c0)='{#,%\x00') [ 1008.281128][T22822] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1008.355875][ T3225] usb 3-1: Using ep0 maxpacket: 16 20:28:18 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000001a4, 0x0, &(0x7f00000001c0)={0x77359400}) [ 1008.485014][ T3225] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.495459][ T3225] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 135, using maximum allowed: 30 [ 1008.506644][ T3225] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 135 [ 1008.556623][ T8707] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1008.658467][ T8707] usb 5-1: Using ep0 maxpacket: 16 [ 1008.724454][ T3225] usb 3-1: New USB device found, idVendor=1928, idProduct=1315, bcdDevice= 0.00 [ 1008.733988][ T3225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.744107][ T3225] usb 3-1: Product: syz [ 1008.748430][ T3225] usb 3-1: Manufacturer: syz [ 1008.753169][ T3225] usb 3-1: SerialNumber: syz [ 1008.834868][ T8707] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1008.842720][ T8707] usb 5-1: no configurations [ 1008.847878][ T8707] usb 5-1: can't read configurations, error -22 20:28:19 executing program 2: syz_usb_connect(0x3, 0x1b, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0xcc, 0x9b, 0x41, 0xff, 0x12d1, 0x1004, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xf9, 0x0, 0x0, 0x5}}]}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = signalfd(r1, &(0x7f0000000080)={[0x6]}, 0x8) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r3}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) 20:28:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 1008.893910][ T3225] usb 3-1: config 0 descriptor?? [ 1008.913726][ C0] raw-gadget gadget: ignoring, device is not running [ 1008.934448][ T3225] usb 3-1: can't set config #0, error -32 [ 1008.955207][ T3225] usb 3-1: USB disconnect, device number 11 [ 1008.989647][ T8707] usb usb5-port1: unable to enumerate USB device [ 1009.081433][T22839] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1009.486325][ T3225] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1009.743884][ T3225] usb 3-1: Invalid ep0 maxpacket: 512 [ 1009.904293][ T3225] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1010.154652][ T3225] usb 3-1: Invalid ep0 maxpacket: 512 [ 1010.160926][ T3225] usb usb3-port1: attempt power cycle 20:28:20 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:28:20 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r3 = dup3(r1, r0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@empty, @loopback, 0x0}, &(0x7f0000000080)=0xc) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x48a}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) 20:28:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:28:20 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000001c0, 0x0, &(0x7f00000001c0)={0x77359400}) [ 1010.574090][T22859] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1010.944444][ T3225] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1011.078651][ T3225] usb 3-1: Invalid ep0 maxpacket: 512 20:28:21 executing program 4: syz_usb_connect(0x0, 0xf9, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0xd9, 0x7c, 0x83, 0x10, 0x2040, 0x6611, 0x36a1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x1, 0x40, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x1, 0x1c, 0x9c, 0x6b, 0x0, [], [{{0x9, 0x5, 0x0, 0x8, 0x220, 0x19, 0x40, 0xd6, [@generic={0x9e, 0x22, "7f26e0a8f1e8e51d41fc4a106ae4ae39e66c7e3932a0ef96a29304865523823541b1c546ce41ca925bfa8a9795047f3d6304cf88794fd7bfafcd391d24d740dd322642464f2442652eeb00934287b44bec49996288b0a950530a8860d12b787a1448acde8357f065a1fb4783adcbd1b07c9c3ff0e78316654393093fdc757e416b571a1024a188de4bac0d767f5f5ffec05f205418d828661e9a7f62"}, @generic={0x2e, 0xe, "4cf0a6f0a9aa3d64e2e872dd9a0b3d975e8013fa9ab981ef9f42105611f51e4d648a62c9cbc7e7fdccd086de"}]}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 20:28:21 executing program 1: keyctl$assume_authority(0x10, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) pipe(&(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000140)={0x1, 0x9}, 0xff50) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x7, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) accept$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) dup3(r1, r0, 0x0) 20:28:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xb000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 1011.244671][ T3225] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1011.322868][T22877] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1011.385244][ T3225] usb 3-1: Invalid ep0 maxpacket: 512 [ 1011.398336][ T3225] usb usb3-port1: unable to enumerate USB device 20:28:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:28:21 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x264, 0x5}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={r3, 0x28, "2463c013a9cce279579ddb3a9d1e6afce0ed5b099e9faa462374ce77951b071019d6a7b0ae0a9157"}, &(0x7f00000000c0)=0x30) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:28:22 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000001c8, 0x0, &(0x7f00000001c0)={0x77359400}) [ 1011.790764][T22889] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1011.824032][ T8707] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1012.073903][ T8707] usb 5-1: Using ep0 maxpacket: 16 20:28:22 executing program 2: syz_usb_connect(0x2, 0x62, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2f, 0xf1, 0xca, 0x10, 0x411, 0x67, 0x6405, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0x46, 0x0, 0x1, 0x6a, 0x5d, 0x26, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0x96, 0x0, 0x9}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x0, 0x7, 0x20, [@generic={0x0, 0x7, "8e3cca5c5025be38501d7dff2420569d153644a980233cc10375f9a99ba6fd950d7bafb5be0ebcbf9ea540a4cfc74ce01fbba4af30b918e742ac2f48985055662b800e1a65e951b6273c7796801a6ede6605fa5c6354c48ca9c8ce563214482efbf07ee5add1e4b48242296929ff520c8e199e54e6ecaa3d4e247ce77938c026311a3c36989a840ed996ab5f1ea08798d03125a692019d022df8bb80b80914720aa9"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x5, 0x1, 0xbb, [@generic={0x0, 0x6, "2611d13a0ed97f31e421ec1bf4112f9eb3183f8a8a44ff652f8453afe8db7b289b10df6487915d999d7737352b3b3fe6e04f4b67ad216451f360aecb395239c965df25f7629cd13377a43a5d6792662bef7dadd3531ed06f3852392a751cf7e9a30d860f293a5b93b841c443c88411c54838789b7345913d164255b83a3f90977e4a37f59f6094f2bd8979baed2b97683a92"}, @uac_iso={0x0, 0x25, 0x1, 0x80, 0x10, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x0, 0x0, 0x6, [@generic={0x0, 0xc, "1026ed1d6eac7a58a0e0eb2d5a3bc16ceeeba41574883ee49ac77cd09aebf7e6383dce5ecbeb6bc221ded3b109c896bcfe1f58877c5a00a9dc84db5d5e59cecc3059ef33c32d88bfddb720ae76f3f9916c7c6baca890fd0d4eccc1c752d63895c0ec96de87ff887dfa4c02815aefe6cbccefbfae93721211e78364a309f4e2d5495ba9de"}, @uac_iso={0x0, 0x25, 0x1, 0x84, 0x0, 0x7}]}}, {{0x9, 0x5, 0x3, 0x10, 0x79f, 0x1f, 0x6, 0x3}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x1, 0x9, 0x80, [@uac_iso={0x0, 0x25, 0x1, 0x3, 0x0, 0x800}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x8, 0x25, 0x40, [@generic={0x0, 0x22, "ad6670b9bdb0a3ebb5112485801eb23991e54f1389946812d26e5405faea088b0760e8892fd600c487499a90575058e3306fe0aa75754303bb557a3fcacb7b592bd6ffb619ba8c99ea73672b095b6dc63a77a396ab9fce6a526cca8bf27924fda0d2488f9c3209d062692efb271ed47ee4ea10232c730fb54197b3aaf6ed8d7f49ea756b3bd44735c7e59155265b7d4f90e35d0a68f0a4bc3dd1fcc3c92a1faf365f7a20ff5f949237db9e10f363b4750cde8552021912aca94aeb724219c8c66479f1"}]}}]}}]}}]}}, 0x0) 20:28:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xd000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 1012.235669][ T8707] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1012.323950][ T8707] usb 5-1: config 64 has an invalid interface number: 11 but max is 0 [ 1012.332557][ T8707] usb 5-1: config 64 has no interface number 0 [ 1012.339617][ T8707] usb 5-1: config 64 interface 11 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1012.415362][T22903] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1012.504415][ T8707] usb 5-1: New USB device found, idVendor=2040, idProduct=6611, bcdDevice=36.a1 [ 1012.513860][ T8707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.522002][ T8707] usb 5-1: Product: syz [ 1012.526583][ T8707] usb 5-1: Manufacturer: syz [ 1012.531350][ T8707] usb 5-1: SerialNumber: syz [ 1012.586395][ T8707] tm6000: Error -22 while registering [ 1012.592021][ T8707] tm6000: probe of 5-1:64.11 failed with error -22 [ 1012.644169][ T3390] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1012.796802][ T8706] usb 5-1: USB disconnect, device number 63 [ 1013.025809][ T3390] usb 3-1: config 0 has an invalid interface number: 70 but max is 0 [ 1013.034313][ T3390] usb 3-1: config 0 has no interface number 0 [ 1013.040538][ T3390] usb 3-1: config 0 interface 70 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1013.052066][ T3390] usb 3-1: config 0 interface 70 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1013.234747][ T3390] usb 3-1: New USB device found, idVendor=0411, idProduct=0067, bcdDevice=64.05 [ 1013.246274][ T3390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.254606][ T3390] usb 3-1: Product: syz [ 1013.258951][ T3390] usb 3-1: Manufacturer: syz [ 1013.263880][ T3390] usb 3-1: SerialNumber: syz [ 1013.301079][ T3390] usb 3-1: config 0 descriptor?? [ 1013.494587][ T3390] usb 3-1: reset full-speed USB device number 16 using dummy_hcd [ 1013.585003][ T3225] usb 5-1: new high-speed USB device number 64 using dummy_hcd 20:28:24 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x2, [@ptr, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @typedef, @fwd, @struct, @const, @ptr, @typedef, @restrict, @int, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}], "dd"}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var]}}, 0x0, 0x17e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:28:24 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r6, 0xb}) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:28:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:28:24 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000001d0, 0x0, &(0x7f00000001c0)={0x77359400}) [ 1013.863703][ T3225] usb 5-1: Using ep0 maxpacket: 16 [ 1013.960825][T22929] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1014.064730][ T3225] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1014.144832][ T3225] usb 5-1: config 64 has an invalid interface number: 11 but max is 0 [ 1014.153211][ T3225] usb 5-1: config 64 has no interface number 0 [ 1014.159883][ T3225] usb 5-1: config 64 interface 11 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1014.364634][ T3225] usb 5-1: New USB device found, idVendor=2040, idProduct=6611, bcdDevice=36.a1 [ 1014.373957][ T3225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.382097][ T3225] usb 5-1: Product: syz [ 1014.386721][ T3225] usb 5-1: Manufacturer: syz [ 1014.391470][ T3225] usb 5-1: SerialNumber: syz [ 1014.484086][ T3390] usb 3-1: device descriptor read/64, error -71 20:28:24 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x5e, 0xeb, 0x10, 0x4d8, 0xa30, 0x583a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xb5, 0x3}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 20:28:24 executing program 1: setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040)=0x6, 0x4) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000000)={'veth1_virt_wifi\x00', {0x2, 0x4e23, @private=0xa010102}}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000001ff0), 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) 20:28:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) [ 1014.584578][ T3225] usb 5-1: can't set config #64, error -71 [ 1014.604938][ T3225] usb 5-1: USB disconnect, device number 64 [ 1014.703678][T22946] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:28:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x10000000, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0x10, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3a]}]}, 0x40}}, 0x0) 20:28:25 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000001d8, 0x0, &(0x7f00000001c0)={0x77359400}) 20:28:25 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000001080)='fou\x00') sendmsg$FOU_CMD_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r5, 0x29, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x20}}, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r5, 0xd00, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x60000c45}, 0x0) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) dup3(r1, r0, 0x0) [ 1015.173758][ T3225] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1015.293905][ T3390] ieee80211 phy4: rt2x00usb_vendor_request: Error - Vendor Request 0x09 failed for offset 0x0000 with error -71 [ 1015.306101][ T3390] ===================================================== [ 1015.313165][ T3390] BUG: KMSAN: uninit-value in rt2500usb_bbp_read+0x19f/0x7e0 [ 1015.321252][ T3390] CPU: 1 PID: 3390 Comm: kworker/1:2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1015.329583][ T3390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.339692][ T3390] Workqueue: usb_hub_wq hub_event [ 1015.344726][ T3390] Call Trace: [ 1015.348054][ T3390] dump_stack+0x21c/0x280 [ 1015.352404][ T3390] kmsan_report+0xf7/0x1e0 [ 1015.356842][ T3390] __msan_warning+0x58/0xa0 [ 1015.361368][ T3390] rt2500usb_bbp_read+0x19f/0x7e0 [ 1015.366417][ T3390] rt2500usb_probe_hw+0x48f/0x2710 [ 1015.371543][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1015.377371][ T3390] ? rt2500usb_queue_init+0x200/0x200 [ 1015.383454][ T3390] rt2x00lib_probe_dev+0xc58/0x3620 [ 1015.388671][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1015.394517][ T3390] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1015.400687][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1015.406029][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1015.412040][ T3390] rt2x00usb_probe+0x80a/0xfb0 [ 1015.416838][ T3390] rt2500usb_probe+0x50/0x60 [ 1015.421514][ T3390] ? rt2800_brightness_set+0x1090/0x1090 [ 1015.427229][ T3390] usb_probe_interface+0xece/0x1550 [ 1015.432456][ T3390] ? usb_register_driver+0x900/0x900 [ 1015.437848][ T3390] really_probe+0xf20/0x20b0 [ 1015.442548][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1015.447772][ T3390] driver_probe_device+0x293/0x390 [ 1015.453002][ T3390] __device_attach_driver+0x63f/0x830 [ 1015.458406][ T3390] bus_for_each_drv+0x2ca/0x3f0 [ 1015.463274][ T3390] ? coredump_store+0xf0/0xf0 [ 1015.467985][ T3390] __device_attach+0x4e2/0x7f0 [ 1015.472773][ T3390] device_initial_probe+0x4a/0x60 [ 1015.478422][ T3390] bus_probe_device+0x177/0x3d0 [ 1015.483317][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1015.489140][ T3390] device_add+0x3b0e/0x40d0 [ 1015.493684][ T3390] usb_set_configuration+0x380f/0x3f10 [ 1015.499168][ T3390] ? usb_set_configuration+0xb41/0x3f10 [ 1015.504776][ T3390] usb_generic_driver_probe+0x138/0x300 [ 1015.510348][ T3390] ? usb_choose_configuration+0xe70/0xe70 [ 1015.516085][ T3390] usb_probe_device+0x311/0x490 [ 1015.520969][ T3390] ? usb_register_device_driver+0x540/0x540 [ 1015.526872][ T3390] really_probe+0xf20/0x20b0 [ 1015.531482][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1015.536704][ T3390] driver_probe_device+0x293/0x390 [ 1015.541841][ T3390] __device_attach_driver+0x63f/0x830 [ 1015.547320][ T3390] bus_for_each_drv+0x2ca/0x3f0 [ 1015.552468][ T3390] ? coredump_store+0xf0/0xf0 [ 1015.557975][ T3390] __device_attach+0x4e2/0x7f0 [ 1015.563581][ T3390] device_initial_probe+0x4a/0x60 [ 1015.568803][ T3390] bus_probe_device+0x177/0x3d0 [ 1015.573846][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1015.579852][ T3390] device_add+0x3b0e/0x40d0 [ 1015.584398][ T3390] usb_new_device+0x1bd4/0x2a30 [ 1015.589540][ T3390] hub_event+0x5e7b/0x8a70 [ 1015.593988][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1015.599181][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1015.605259][ T3390] ? led_work+0x7c0/0x7c0 [ 1015.609670][ T3390] process_one_work+0x1688/0x2140 [ 1015.614724][ T3390] worker_thread+0x10bc/0x2730 [ 1015.619479][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1015.624681][ T3390] kthread+0x551/0x590 [ 1015.628744][ T3390] ? process_one_work+0x2140/0x2140 [ 1015.633935][ T3390] ? kthread_blkcg+0x110/0x110 [ 1015.638690][ T3390] ret_from_fork+0x1f/0x30 [ 1015.643098][ T3390] [ 1015.645453][ T3390] Local variable ----reg.i.i@rt2500usb_bbp_read created at: [ 1015.652738][ T3390] rt2500usb_bbp_read+0x98/0x7e0 [ 1015.657667][ T3390] rt2500usb_bbp_read+0x98/0x7e0 [ 1015.662584][ T3390] ===================================================== [ 1015.669498][ T3390] Disabling lock debugging due to kernel taint [ 1015.675635][ T3390] Kernel panic - not syncing: panic_on_warn set ... [ 1015.682301][ T3390] CPU: 1 PID: 3390 Comm: kworker/1:2 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1015.692007][ T3390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.702061][ T3390] Workqueue: usb_hub_wq hub_event [ 1015.707078][ T3390] Call Trace: [ 1015.710362][ T3390] dump_stack+0x21c/0x280 [ 1015.714743][ T3390] panic+0x4d7/0xef7 [ 1015.718643][ T3390] ? add_taint+0x17c/0x210 [ 1015.723053][ T3390] kmsan_report+0x1df/0x1e0 [ 1015.727566][ T3390] __msan_warning+0x58/0xa0 [ 1015.732064][ T3390] rt2500usb_bbp_read+0x19f/0x7e0 [ 1015.737177][ T3390] rt2500usb_probe_hw+0x48f/0x2710 [ 1015.742279][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1015.748088][ T3390] ? rt2500usb_queue_init+0x200/0x200 [ 1015.753801][ T3390] rt2x00lib_probe_dev+0xc58/0x3620 [ 1015.758998][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1015.764796][ T3390] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1015.770941][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1015.776142][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1015.781355][ T3390] rt2x00usb_probe+0x80a/0xfb0 [ 1015.786122][ T3390] rt2500usb_probe+0x50/0x60 [ 1015.790728][ T3390] ? rt2800_brightness_set+0x1090/0x1090 [ 1015.796352][ T3390] usb_probe_interface+0xece/0x1550 [ 1015.801574][ T3390] ? usb_register_driver+0x900/0x900 [ 1015.806874][ T3390] really_probe+0xf20/0x20b0 [ 1015.811469][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1015.816666][ T3390] driver_probe_device+0x293/0x390 [ 1015.821867][ T3390] __device_attach_driver+0x63f/0x830 [ 1015.827415][ T3390] bus_for_each_drv+0x2ca/0x3f0 [ 1015.832270][ T3390] ? coredump_store+0xf0/0xf0 [ 1015.836949][ T3390] __device_attach+0x4e2/0x7f0 [ 1015.841715][ T3390] device_initial_probe+0x4a/0x60 [ 1015.846732][ T3390] bus_probe_device+0x177/0x3d0 [ 1015.851579][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1015.857378][ T3390] device_add+0x3b0e/0x40d0 [ 1015.861893][ T3390] usb_set_configuration+0x380f/0x3f10 [ 1015.867356][ T3390] ? usb_set_configuration+0xb41/0x3f10 [ 1015.872913][ T3390] usb_generic_driver_probe+0x138/0x300 [ 1015.878452][ T3390] ? usb_choose_configuration+0xe70/0xe70 [ 1015.884166][ T3390] usb_probe_device+0x311/0x490 [ 1015.889040][ T3390] ? usb_register_device_driver+0x540/0x540 [ 1015.894924][ T3390] really_probe+0xf20/0x20b0 [ 1015.899513][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1015.904720][ T3390] driver_probe_device+0x293/0x390 [ 1015.909833][ T3390] __device_attach_driver+0x63f/0x830 [ 1015.915214][ T3390] bus_for_each_drv+0x2ca/0x3f0 [ 1015.920151][ T3390] ? coredump_store+0xf0/0xf0 [ 1015.924828][ T3390] __device_attach+0x4e2/0x7f0 [ 1015.929593][ T3390] device_initial_probe+0x4a/0x60 [ 1015.935159][ T3390] bus_probe_device+0x177/0x3d0 [ 1015.940026][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1015.945843][ T3390] device_add+0x3b0e/0x40d0 [ 1015.950626][ T3390] usb_new_device+0x1bd4/0x2a30 [ 1015.956267][ T3390] hub_event+0x5e7b/0x8a70 [ 1015.960707][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1015.965911][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1015.971715][ T3390] ? led_work+0x7c0/0x7c0 [ 1015.976047][ T3390] process_one_work+0x1688/0x2140 [ 1015.981098][ T3390] worker_thread+0x10bc/0x2730 [ 1015.985863][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1015.991182][ T3390] kthread+0x551/0x590 [ 1015.995275][ T3390] ? process_one_work+0x2140/0x2140 [ 1016.000575][ T3390] ? kthread_blkcg+0x110/0x110 [ 1016.005530][ T3390] ret_from_fork+0x1f/0x30 [ 1016.010551][ T3390] ------------[ cut here ]------------ [ 1016.016021][ T3390] kernel BUG at mm/kmsan/kmsan.h:87! [ 1016.021307][ T3390] invalid opcode: 0000 [#1] SMP [ 1016.026221][ T3390] CPU: 1 PID: 3390 Comm: kworker/1:2 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1016.035902][ T3390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.045940][ T3390] Workqueue: usb_hub_wq hub_event [ 1016.050960][ T3390] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 1016.057522][ T3390] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 1016.077099][ T3390] RSP: 0018:ffff888120eb6528 EFLAGS: 00010046 [ 1016.083138][ T3390] RAX: 0000000000000002 RBX: 0000000005890068 RCX: 0000000005890068 [ 1016.091085][ T3390] RDX: 0000000000000000 RSI: 0000000000000480 RDI: ffff888120eb660c [ 1016.099029][ T3390] RBP: ffff888120eb65d0 R08: ffffea000000000f R09: ffff88812fffa000 [ 1016.106975][ T3390] R10: 0000000000000002 R11: ffff888120ef8000 R12: 0000000000000000 [ 1016.114935][ T3390] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 1016.122885][ T3390] FS: 0000000000000000(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 1016.131789][ T3390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1016.138348][ T3390] CR2: 00000000016a3b73 CR3: 0000000115a2e000 CR4: 00000000001406e0 [ 1016.146306][ T3390] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1016.154254][ T3390] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1016.162199][ T3390] Call Trace: [ 1016.165477][ T3390] kmsan_check_memory+0xd/0x10 [ 1016.170223][ T3390] iowrite8+0x99/0x300 [ 1016.174367][ T3390] pvpanic_panic_notify+0xb7/0xe0 [ 1016.179388][ T3390] ? pvpanic_mmio_remove+0x60/0x60 [ 1016.184479][ T3390] atomic_notifier_call_chain+0x123/0x290 [ 1016.190199][ T3390] panic+0x560/0xef7 [ 1016.194099][ T3390] ? add_taint+0x17c/0x210 [ 1016.198506][ T3390] kmsan_report+0x1df/0x1e0 [ 1016.202999][ T3390] __msan_warning+0x58/0xa0 [ 1016.207490][ T3390] rt2500usb_bbp_read+0x19f/0x7e0 [ 1016.212505][ T3390] rt2500usb_probe_hw+0x48f/0x2710 [ 1016.217608][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1016.223397][ T3390] ? rt2500usb_queue_init+0x200/0x200 [ 1016.228745][ T3390] rt2x00lib_probe_dev+0xc58/0x3620 [ 1016.233920][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1016.239703][ T3390] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1016.246625][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1016.251803][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1016.256998][ T3390] rt2x00usb_probe+0x80a/0xfb0 [ 1016.261755][ T3390] rt2500usb_probe+0x50/0x60 [ 1016.266322][ T3390] ? rt2800_brightness_set+0x1090/0x1090 [ 1016.271932][ T3390] usb_probe_interface+0xece/0x1550 [ 1016.277125][ T3390] ? usb_register_driver+0x900/0x900 [ 1016.282396][ T3390] really_probe+0xf20/0x20b0 [ 1016.286965][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1016.292143][ T3390] driver_probe_device+0x293/0x390 [ 1016.297234][ T3390] __device_attach_driver+0x63f/0x830 [ 1016.302586][ T3390] bus_for_each_drv+0x2ca/0x3f0 [ 1016.307774][ T3390] ? coredump_store+0xf0/0xf0 [ 1016.312457][ T3390] __device_attach+0x4e2/0x7f0 [ 1016.317213][ T3390] device_initial_probe+0x4a/0x60 [ 1016.322224][ T3390] bus_probe_device+0x177/0x3d0 [ 1016.327115][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1016.332907][ T3390] device_add+0x3b0e/0x40d0 [ 1016.337426][ T3390] usb_set_configuration+0x380f/0x3f10 [ 1016.342880][ T3390] ? usb_set_configuration+0xb41/0x3f10 [ 1016.348416][ T3390] usb_generic_driver_probe+0x138/0x300 [ 1016.353940][ T3390] ? usb_choose_configuration+0xe70/0xe70 [ 1016.359635][ T3390] usb_probe_device+0x311/0x490 [ 1016.373590][ T3390] ? usb_register_device_driver+0x540/0x540 [ 1016.379470][ T3390] really_probe+0xf20/0x20b0 [ 1016.384039][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1016.389236][ T3390] driver_probe_device+0x293/0x390 [ 1016.394459][ T3390] __device_attach_driver+0x63f/0x830 [ 1016.399823][ T3390] bus_for_each_drv+0x2ca/0x3f0 [ 1016.404665][ T3390] ? coredump_store+0xf0/0xf0 [ 1016.409337][ T3390] __device_attach+0x4e2/0x7f0 [ 1016.414097][ T3390] device_initial_probe+0x4a/0x60 [ 1016.419099][ T3390] bus_probe_device+0x177/0x3d0 [ 1016.423940][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1016.429723][ T3390] device_add+0x3b0e/0x40d0 [ 1016.434216][ T3390] usb_new_device+0x1bd4/0x2a30 [ 1016.439050][ T3390] hub_event+0x5e7b/0x8a70 [ 1016.443462][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1016.448635][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1016.454427][ T3390] ? led_work+0x7c0/0x7c0 [ 1016.458732][ T3390] process_one_work+0x1688/0x2140 [ 1016.463750][ T3390] worker_thread+0x10bc/0x2730 [ 1016.468501][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1016.473697][ T3390] kthread+0x551/0x590 [ 1016.477760][ T3390] ? process_one_work+0x2140/0x2140 [ 1016.482939][ T3390] ? kthread_blkcg+0x110/0x110 [ 1016.487701][ T3390] ret_from_fork+0x1f/0x30 [ 1016.492103][ T3390] Modules linked in: [ 1016.496351][ T3390] ---[ end trace 72f9769ef16dd94e ]--- [ 1016.501803][ T3390] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 1016.508380][ T3390] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 1016.528047][ T3390] RSP: 0018:ffff888120eb6528 EFLAGS: 00010046 [ 1016.534526][ T3390] RAX: 0000000000000002 RBX: 0000000005890068 RCX: 0000000005890068 [ 1016.542624][ T3390] RDX: 0000000000000000 RSI: 0000000000000480 RDI: ffff888120eb660c [ 1016.550593][ T3390] RBP: ffff888120eb65d0 R08: ffffea000000000f R09: ffff88812fffa000 [ 1016.558549][ T3390] R10: 0000000000000002 R11: ffff888120ef8000 R12: 0000000000000000 [ 1016.566496][ T3390] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 1016.575400][ T3390] FS: 0000000000000000(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 1016.584313][ T3390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1016.590881][ T3390] CR2: 00000000016a3b73 CR3: 0000000115a2e000 CR4: 00000000001406e0 [ 1016.598838][ T3390] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1016.606806][ T3390] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1016.614752][ T3390] Kernel panic - not syncing: Fatal exception [ 1016.620868][ T3390] ------------[ cut here ]------------ [ 1016.626312][ T3390] kernel BUG at mm/kmsan/kmsan.h:87! [ 1016.631647][ T3390] invalid opcode: 0000 [#2] SMP [ 1016.636520][ T3390] CPU: 1 PID: 3390 Comm: kworker/1:2 Tainted: G B D 5.8.0-rc5-syzkaller #0 [ 1016.646220][ T3390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.656638][ T3390] Workqueue: usb_hub_wq hub_event [ 1016.661645][ T3390] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 1016.668280][ T3390] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 1016.688201][ T3390] RSP: 0018:ffff888120eb5f08 EFLAGS: 00010002 [ 1016.694269][ T3390] RAX: 0000000000000003 RBX: 0000000005200000 RCX: 0000000005200000 [ 1016.702237][ T3390] RDX: 0000000000000000 RSI: 0000000000000480 RDI: ffff888120eb5fec [ 1016.710198][ T3390] RBP: ffff888120eb5fb0 R08: ffffea000000000f R09: ffff88812fffa000 [ 1016.718155][ T3390] R10: 0000000000000002 R11: ffff888120ef8000 R12: 0000000000000000 [ 1016.726906][ T3390] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 1016.734863][ T3390] FS: 0000000000000000(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 1016.743769][ T3390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1016.750414][ T3390] CR2: 00000000016a3b73 CR3: 0000000115a2e000 CR4: 00000000001406e0 [ 1016.758373][ T3390] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1016.766329][ T3390] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1016.774273][ T3390] Call Trace: [ 1016.777555][ T3390] kmsan_check_memory+0xd/0x10 [ 1016.782361][ T3390] iowrite8+0x99/0x300 [ 1016.786439][ T3390] pvpanic_panic_notify+0xb7/0xe0 [ 1016.791462][ T3390] ? pvpanic_mmio_remove+0x60/0x60 [ 1016.796566][ T3390] atomic_notifier_call_chain+0x123/0x290 [ 1016.802279][ T3390] panic+0x560/0xef7 [ 1016.806213][ T3390] ? __show_regs+0xbfb/0xef0 [ 1016.810811][ T3390] ? irq_work_queue+0x103/0x3d0 [ 1016.815759][ T3390] oops_end+0x2c6/0x2d0 [ 1016.819892][ T3390] die+0x317/0x370 [ 1016.823595][ T3390] do_trap+0x3c0/0x760 [ 1016.827650][ T3390] handle_invalid_op+0x18b/0x230 [ 1016.832563][ T3390] ? kmsan_internal_check_memory+0x3c0/0x3d0 [ 1016.838516][ T3390] ? kmsan_internal_check_memory+0x3c0/0x3d0 [ 1016.844473][ T3390] exc_invalid_op+0x60/0x80 [ 1016.848965][ T3390] asm_exc_invalid_op+0x12/0x20 [ 1016.853792][ T3390] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 1016.860356][ T3390] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 1016.880019][ T3390] RSP: 0018:ffff888120eb6528 EFLAGS: 00010046 [ 1016.886075][ T3390] RAX: 0000000000000002 RBX: 0000000005890068 RCX: 0000000005890068 [ 1016.894039][ T3390] RDX: 0000000000000000 RSI: 0000000000000480 RDI: ffff888120eb660c [ 1016.901993][ T3390] RBP: ffff888120eb65d0 R08: ffffea000000000f R09: ffff88812fffa000 [ 1016.909942][ T3390] R10: 0000000000000002 R11: ffff888120ef8000 R12: 0000000000000000 [ 1016.917901][ T3390] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 1016.925859][ T3390] ? kmsan_internal_check_memory+0x324/0x3d0 [ 1016.931823][ T3390] kmsan_check_memory+0xd/0x10 [ 1016.936578][ T3390] iowrite8+0x99/0x300 [ 1016.940755][ T3390] pvpanic_panic_notify+0xb7/0xe0 [ 1016.945779][ T3390] ? pvpanic_mmio_remove+0x60/0x60 [ 1016.950875][ T3390] atomic_notifier_call_chain+0x123/0x290 [ 1016.956577][ T3390] panic+0x560/0xef7 [ 1016.960459][ T3390] ? add_taint+0x17c/0x210 [ 1016.964865][ T3390] kmsan_report+0x1df/0x1e0 [ 1016.969533][ T3390] __msan_warning+0x58/0xa0 [ 1016.974045][ T3390] rt2500usb_bbp_read+0x19f/0x7e0 [ 1016.979052][ T3390] rt2500usb_probe_hw+0x48f/0x2710 [ 1016.984141][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1016.989951][ T3390] ? rt2500usb_queue_init+0x200/0x200 [ 1016.995344][ T3390] rt2x00lib_probe_dev+0xc58/0x3620 [ 1017.000545][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1017.006338][ T3390] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1017.012578][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1017.017848][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1017.023132][ T3390] rt2x00usb_probe+0x80a/0xfb0 [ 1017.027895][ T3390] rt2500usb_probe+0x50/0x60 [ 1017.032463][ T3390] ? rt2800_brightness_set+0x1090/0x1090 [ 1017.038142][ T3390] usb_probe_interface+0xece/0x1550 [ 1017.043341][ T3390] ? usb_register_driver+0x900/0x900 [ 1017.048621][ T3390] really_probe+0xf20/0x20b0 [ 1017.053217][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1017.058927][ T3390] driver_probe_device+0x293/0x390 [ 1017.064024][ T3390] __device_attach_driver+0x63f/0x830 [ 1017.069378][ T3390] bus_for_each_drv+0x2ca/0x3f0 [ 1017.074206][ T3390] ? coredump_store+0xf0/0xf0 [ 1017.078871][ T3390] __device_attach+0x4e2/0x7f0 [ 1017.083622][ T3390] device_initial_probe+0x4a/0x60 [ 1017.088625][ T3390] bus_probe_device+0x177/0x3d0 [ 1017.093466][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1017.099283][ T3390] device_add+0x3b0e/0x40d0 [ 1017.103799][ T3390] usb_set_configuration+0x380f/0x3f10 [ 1017.109253][ T3390] ? usb_set_configuration+0xb41/0x3f10 [ 1017.114808][ T3390] usb_generic_driver_probe+0x138/0x300 [ 1017.120341][ T3390] ? usb_choose_configuration+0xe70/0xe70 [ 1017.126036][ T3390] usb_probe_device+0x311/0x490 [ 1017.130867][ T3390] ? usb_register_device_driver+0x540/0x540 [ 1017.136826][ T3390] really_probe+0xf20/0x20b0 [ 1017.141405][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1017.146591][ T3390] driver_probe_device+0x293/0x390 [ 1017.151681][ T3390] __device_attach_driver+0x63f/0x830 [ 1017.157049][ T3390] bus_for_each_drv+0x2ca/0x3f0 [ 1017.161880][ T3390] ? coredump_store+0xf0/0xf0 [ 1017.166535][ T3390] __device_attach+0x4e2/0x7f0 [ 1017.171282][ T3390] device_initial_probe+0x4a/0x60 [ 1017.176295][ T3390] bus_probe_device+0x177/0x3d0 [ 1017.181137][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1017.186930][ T3390] device_add+0x3b0e/0x40d0 [ 1017.191443][ T3390] usb_new_device+0x1bd4/0x2a30 [ 1017.196551][ T3390] hub_event+0x5e7b/0x8a70 [ 1017.200980][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1017.206168][ T3390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1017.212000][ T3390] ? led_work+0x7c0/0x7c0 [ 1017.216428][ T3390] process_one_work+0x1688/0x2140 [ 1017.221532][ T3390] worker_thread+0x10bc/0x2730 [ 1017.226278][ T3390] ? kmsan_get_metadata+0x116/0x180 [ 1017.231465][ T3390] kthread+0x551/0x590 [ 1017.235514][ T3390] ? process_one_work+0x2140/0x2140 [ 1017.240691][ T3390] ? kthread_blkcg+0x110/0x110 [ 1017.245432][ T3390] ret_from_fork+0x1f/0x30 [ 1017.249834][ T3390] Modules linked in: [ 1017.253709][ T3390] ---[ end trace 72f9769ef16dd94f ]--- [ 1017.259218][ T3390] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 1017.265814][ T3390] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 1017.285407][ T3390] RSP: 0018:ffff888120eb6528 EFLAGS: 00010046 [ 1017.291475][ T3390] RAX: 0000000000000002 RBX: 0000000005890068 RCX: 0000000005890068 [ 1017.299507][ T3390] RDX: 0000000000000000 RSI: 0000000000000480 RDI: ffff888120eb660c [ 1017.307463][ T3390] RBP: ffff888120eb65d0 R08: ffffea000000000f R09: ffff88812fffa000 [ 1017.315427][ T3390] R10: 0000000000000002 R11: ffff888120ef8000 R12: 0000000000000000 [ 1017.324944][ T3390] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 1017.332924][ T3390] FS: 0000000000000000(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 1017.341826][ T3390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1017.348395][ T3390] CR2: 00000000016a3b73 CR3: 0000000115a2e000 CR4: 00000000001406e0 [ 1017.356343][ T3390] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1017.364291][ T3390] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1017.372236][ T3390] Kernel panic - not syncing: Fatal exception [ 1017.379092][ T3390] Kernel Offset: disabled [ 1017.383426][ T3390] Rebooting in 86400 seconds..