1287.194462][T14073] usb usb3-port1: attempt power cycle [ 1287.284732][T16210] usb 5-1: USB disconnect, device number 54 [ 1287.623988][T14073] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1287.724363][T14073] usb 3-1: Invalid ep0 maxpacket: 0 [ 1287.854067][T16210] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1287.884160][T14073] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1288.004112][T14073] usb 3-1: Invalid ep0 maxpacket: 0 [ 1288.011178][T14073] usb usb3-port1: unable to enumerate USB device [ 1288.094155][T16210] usb 5-1: Using ep0 maxpacket: 8 [ 1288.214187][T16210] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1288.228739][T16210] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1288.238586][T16210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.251761][T16210] usb 5-1: config 0 descriptor?? 17:39:57 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:39:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000), 0x10) 17:39:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)=0x60) 17:39:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)) 17:39:57 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 17:39:57 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1289.872570][T14784] usb 5-1: USB disconnect, device number 55 17:39:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)) 17:39:57 executing program 3: getresuid(&(0x7f0000000400), 0x0, 0x0) 17:39:57 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x2}, {0x2}, {0x6}]}) shmctl$IPC_SET(0x0, 0x1, 0x0) [ 1290.158267][ T37] audit: type=1326 audit(1620409197.555:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11884 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66549 code=0x0 17:39:57 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x3}}}) 17:39:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) [ 1290.225277][ T9481] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1290.254027][T14073] usb 1-1: new high-speed USB device number 56 using dummy_hcd 17:39:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)=ANY=[@ANYBLOB=')']) [ 1290.414611][ T9481] usb 3-1: device descriptor read/64, error 18 [ 1290.425242][T14784] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1290.504202][T14073] usb 1-1: Using ep0 maxpacket: 16 [ 1290.634925][T14073] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1290.654231][T14073] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1290.655300][ T9536] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1290.663581][T14073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.689097][T14784] usb 5-1: Using ep0 maxpacket: 8 [ 1290.694292][ T9481] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1290.706866][T14073] usb 1-1: config 0 descriptor?? [ 1290.746500][T14073] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1290.815009][T14784] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1290.828568][T14784] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1290.838269][T14784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.852442][T14784] usb 5-1: config 0 descriptor?? [ 1290.898164][ T9481] usb 3-1: device descriptor read/64, error 18 [ 1290.915549][ T9536] usb 6-1: Using ep0 maxpacket: 8 [ 1290.963678][T14784] usb 1-1: USB disconnect, device number 56 [ 1290.993655][ T37] audit: type=1326 audit(1620409198.385:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11884 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66549 code=0x0 [ 1291.025280][ T9481] usb usb3-port1: attempt power cycle [ 1291.074992][ T9536] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1291.084784][ T9536] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1291.093624][ T9536] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1291.103033][T14073] usb 5-1: USB disconnect, device number 56 [ 1291.114906][ T9536] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1291.128189][ T9536] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1291.140941][ T9536] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1291.152357][ T9536] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1291.254990][ T9536] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1291.273145][ T9536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1291.291624][ T9536] usb 6-1: SerialNumber: syz [ 1291.336142][T11893] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1291.355944][ T9536] hub 6-1:5.0: bad descriptor, ignoring hub [ 1291.361996][ T9536] hub: probe of 6-1:5.0 failed with error -5 [ 1291.444249][ T9481] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1291.534902][ T9481] usb 3-1: Invalid ep0 maxpacket: 0 [ 1291.587157][ T9536] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1291.674059][T14073] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1291.685096][ T9481] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1291.774660][ T9481] usb 3-1: Invalid ep0 maxpacket: 0 [ 1291.780404][ T9481] usb usb3-port1: unable to enumerate USB device [ 1291.914174][T14073] usb 5-1: Using ep0 maxpacket: 8 [ 1292.034320][T14073] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1292.047545][T14073] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1292.058182][T14073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.073229][T14073] usb 5-1: config 0 descriptor?? [ 1292.225290][T11893] usb 6-1: reset high-speed USB device number 47 using dummy_hcd [ 1292.464225][T11893] usb 6-1: Using ep0 maxpacket: 8 [ 1292.606682][T11942] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1292.840337][T14073] usb 6-1: USB disconnect, device number 47 [ 1292.850466][T14073] usblp0: removed [ 1293.624093][ T9481] usb 6-1: new high-speed USB device number 48 using dummy_hcd 17:40:01 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:01 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$inet(r0, &(0x7f0000019000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @loopback}}}], 0x20}}], 0x1, 0x0) 17:40:01 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40049409, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 17:40:01 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 17:40:01 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1293.711164][T27506] usb 5-1: USB disconnect, device number 57 17:40:01 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x8, 0x3, 0x1) ioctl$sock_proto_private(0xffffffffffffffff, 0x89eb, &(0x7f00000000c0)="fb") r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_proto_private(0xffffffffffffffff, 0x89eb, &(0x7f00000000c0)="fb") r1 = fork() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r1) 17:40:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) [ 1293.863966][ T9481] usb 6-1: Using ep0 maxpacket: 8 17:40:01 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) [ 1293.984844][ T9481] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1293.993257][ T9481] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1294.019492][ T9481] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1294.060560][ T9481] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1294.065498][ T9536] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1294.079908][ T9481] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1294.092398][T14073] usb 1-1: new high-speed USB device number 57 using dummy_hcd 17:40:01 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x0, 0x0, @c}, 0x29, 0x0) 17:40:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) [ 1294.173590][ T9481] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1294.227008][ T9481] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 17:40:01 executing program 3: add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="22f9ff95dd5d5df64470354921858095df55c77c4ae5561d14acfff20f0dd385ac8310a2766150ed863966c910d889b8ee54bcf0df8a30e5d886a1905073672246a3792c00fc462ffbef14e0282b32092140d60a416dbe3b0b192f1670bd80893933f92b841e429ab7815cc333aa68cbf8e305531a2d22c11d4268e1eecb63f96ba431d9e220f1b5dd3007bf38fdbab909dd31e7c8cd71ec253b47d9deb99f46bb94e2eb8bdb08124a50b1a33eb66352462118bdaa8c7fcb008be1c4c2c5913aa98ff0b5ddcac370bf0a25e2f4bae83428f4a55afe", 0xfffffffffffffe11, 0x0) [ 1294.304685][ T9536] usb 3-1: device descriptor read/64, error 18 [ 1294.314144][ T9481] usb 6-1: string descriptor 0 read error: -71 [ 1294.320581][ T9481] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1294.334602][T27506] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1294.340574][ T9481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 17:40:01 executing program 1: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x40) [ 1294.374633][ T9481] usb 6-1: can't set config #5, error -71 [ 1294.384282][T14073] usb 1-1: Using ep0 maxpacket: 16 [ 1294.423160][ T9481] usb 6-1: USB disconnect, device number 48 [ 1294.505107][T14073] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1294.524440][T14073] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1294.546501][T14073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.572352][T14073] usb 1-1: config 0 descriptor?? [ 1294.604172][ T9536] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1294.646645][T14073] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1294.671305][T27506] usb 5-1: Using ep0 maxpacket: 8 [ 1294.804537][T27506] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1294.814080][ T9481] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1294.821289][T27506] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1294.832469][T27506] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1294.846819][ T9536] usb 3-1: device descriptor read/64, error 18 [ 1294.854414][T27506] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1294.869998][T14073] usb 1-1: USB disconnect, device number 57 [ 1294.874868][T27506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.909223][T27506] usb 5-1: config 0 descriptor?? [ 1294.994913][ T9536] usb usb3-port1: attempt power cycle [ 1295.054147][ T9481] usb 6-1: Using ep0 maxpacket: 8 [ 1295.171693][T27506] usb 5-1: USB disconnect, device number 58 [ 1295.175235][ T9481] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1295.187685][ T9481] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1295.218776][ T9481] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1295.240299][ T9481] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1295.260980][ T9481] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1295.273074][ T9481] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1295.290298][ T9481] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1295.384137][ T9481] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1295.400066][ T9481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1295.424291][ T9536] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1295.440649][ T9481] usb 6-1: SerialNumber: syz [ 1295.465890][T12009] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1295.485216][ T9481] hub 6-1:5.0: bad descriptor, ignoring hub [ 1295.491258][ T9481] hub: probe of 6-1:5.0 failed with error -5 [ 1295.525162][ T9536] usb 3-1: Invalid ep0 maxpacket: 0 [ 1295.683983][ T9536] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1295.736418][ T9481] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1295.744111][T27506] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1295.805694][ T9536] usb 3-1: Invalid ep0 maxpacket: 0 [ 1295.812475][ T9536] usb usb3-port1: unable to enumerate USB device [ 1296.055084][T27506] usb 5-1: Using ep0 maxpacket: 8 [ 1296.204250][T27506] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1296.214693][T27506] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1296.227600][T27506] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1296.242409][T27506] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1296.253039][T27506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.273693][T27506] usb 5-1: config 0 descriptor?? [ 1296.374916][T12009] usb 6-1: reset high-speed USB device number 49 using dummy_hcd [ 1296.614132][T12009] usb 6-1: Using ep0 maxpacket: 8 [ 1296.767016][T12056] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1297.021584][T14784] usb 6-1: USB disconnect, device number 49 [ 1297.030524][T14784] usblp0: removed 17:40:05 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001240)=@req={0x28, &(0x7f0000001200)={'wg2\x00', @ifru_addrs=@l2tp={0x2, 0x0, @remote}}}) 17:40:05 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000031c0), 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000380), 0x0, 0x0, 0x1) 17:40:05 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 17:40:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) [ 1297.916095][T14073] usb 5-1: USB disconnect, device number 59 17:40:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={0x0, 0xf0ff7f00000000}}, 0x0) 17:40:05 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000031c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) 17:40:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x3, 0x7100, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 17:40:05 executing program 3: syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x8e600) 17:40:05 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280), &(0x7f0000000340)=0x8) [ 1298.281348][T14784] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1298.295033][ T9481] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1298.304163][ T7981] usb 1-1: new high-speed USB device number 58 using dummy_hcd 17:40:05 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000003c0), 0x10) [ 1298.493985][T14073] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1298.555227][ T9481] usb 3-1: Using ep0 maxpacket: 8 [ 1298.560377][T14784] usb 6-1: Using ep0 maxpacket: 8 [ 1298.567039][ T7981] usb 1-1: Using ep0 maxpacket: 16 [ 1298.674052][ T9481] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1298.687484][ T7981] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1298.700411][T14784] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1298.709249][T14784] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1298.721041][ T7981] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1298.731621][ T9481] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1298.741670][T14784] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1298.753025][ T7981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.762553][T14073] usb 5-1: Using ep0 maxpacket: 8 [ 1298.768091][ T9481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.778013][T14784] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1298.791491][ T7981] usb 1-1: config 0 descriptor?? [ 1298.802846][ T9481] usb 3-1: config 0 descriptor?? [ 1298.809549][T14784] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1298.845231][T14784] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1298.867392][ T7981] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1298.878882][T14784] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1298.896852][T14073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1298.908741][T14073] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1298.919651][T14073] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1298.946318][T14073] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1298.956495][T14073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.980777][T14073] usb 5-1: config 0 descriptor?? [ 1298.999232][T14784] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1299.013521][T14784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1299.035079][T14784] usb 6-1: SerialNumber: syz [ 1299.055629][T12094] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1299.075944][T14784] hub 6-1:5.0: bad descriptor, ignoring hub [ 1299.082010][T14784] hub: probe of 6-1:5.0 failed with error -5 [ 1299.101626][ T9536] usb 1-1: USB disconnect, device number 58 [ 1299.109534][ T7981] usb 3-1: USB disconnect, device number 18 [ 1299.242907][T14073] usb 5-1: USB disconnect, device number 60 [ 1299.358322][T14784] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1299.664735][ T7981] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1299.813995][T14073] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1299.904321][ T7981] usb 3-1: Using ep0 maxpacket: 8 [ 1299.905280][ T3239] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.915961][ T3239] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.024675][ T7981] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1300.042768][ T7981] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1300.053780][ T7981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.068074][T14073] usb 5-1: Using ep0 maxpacket: 8 [ 1300.076581][ T7981] usb 3-1: config 0 descriptor?? [ 1300.164787][T12094] usb 6-1: reset high-speed USB device number 50 using dummy_hcd [ 1300.184843][T14073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1300.203267][T14073] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1300.221384][T14073] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1300.235898][T14073] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1300.245897][T14073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.260790][T14073] usb 5-1: config 0 descriptor?? [ 1300.416231][T12094] usb 6-1: Using ep0 maxpacket: 8 [ 1300.576740][T12164] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1300.821189][T14784] usb 6-1: USB disconnect, device number 50 [ 1300.834706][T14784] usblp0: removed 17:40:09 executing program 1: syz_open_dev$vcsa(&(0x7f00000031c0), 0xffffffffffffffff, 0x0) 17:40:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 17:40:09 executing program 0: syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:40:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:40:09 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:09 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1301.908202][ T9531] usb 3-1: USB disconnect, device number 19 [ 1301.941274][ T7981] usb 5-1: USB disconnect, device number 61 17:40:09 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0x2, @sdr}}) 17:40:09 executing program 3: openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) 17:40:09 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x145) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[], 0xff6c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000002c0)=ANY=[]) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='pids.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xffffffff, @multicast}}]}]}]}, 0x58}}, 0x0) 17:40:09 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) [ 1302.334311][ T9536] usb 6-1: new high-speed USB device number 51 using dummy_hcd 17:40:09 executing program 3: syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) 17:40:09 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x5451, 0x0) 17:40:09 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x8901, 0x0) 17:40:09 executing program 3: syz_open_dev$dri(&(0x7f0000000580), 0x0, 0x0) [ 1302.504355][ T9531] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1302.524123][ T7981] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1302.624199][ T9536] usb 6-1: Using ep0 maxpacket: 8 17:40:10 executing program 0: syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1302.744985][ T9536] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1302.763391][ T9536] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1302.774686][ T7981] usb 5-1: Using ep0 maxpacket: 8 [ 1302.784440][ T9531] usb 3-1: Using ep0 maxpacket: 8 [ 1302.803555][ T9536] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1302.835163][ T9536] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1302.845798][ T9536] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1302.872836][ T9536] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1302.894927][ T7981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1302.896953][ T9536] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1302.908139][ T7981] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1302.928807][ T7981] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1302.942800][ T7981] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1302.944563][ T9531] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1302.952887][ T7981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.973932][ T9531] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1302.983252][ T9531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.000854][ T7981] usb 5-1: config 0 descriptor?? [ 1303.003953][ T9531] usb 3-1: config 0 descriptor?? [ 1303.042861][ T9536] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1303.062440][ T9536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1303.085135][ T9536] usb 6-1: SerialNumber: syz [ 1303.111033][T12212] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1303.135194][ T9536] hub 6-1:5.0: bad descriptor, ignoring hub [ 1303.141246][ T9536] hub: probe of 6-1:5.0 failed with error -5 [ 1303.267948][ T7981] usb 5-1: USB disconnect, device number 62 [ 1303.302034][T27506] usb 3-1: USB disconnect, device number 20 [ 1303.377208][ T9536] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1303.834232][ T7981] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1303.884015][T27506] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1304.054650][T12212] usb 6-1: reset high-speed USB device number 51 using dummy_hcd [ 1304.074378][ T7981] usb 5-1: Using ep0 maxpacket: 8 [ 1304.134365][T27506] usb 3-1: Using ep0 maxpacket: 8 [ 1304.194940][ T7981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1304.204773][ T7981] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1304.215313][ T7981] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1304.229041][ T7981] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1304.238638][ T7981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.251765][ T7981] usb 5-1: config 0 descriptor?? [ 1304.264943][T27506] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1304.279405][T27506] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1304.290627][T27506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.302203][T27506] usb 3-1: config 0 descriptor?? [ 1304.327838][T12212] usb 6-1: Using ep0 maxpacket: 8 [ 1304.486590][T12278] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1304.735894][ T7981] usb 6-1: USB disconnect, device number 51 [ 1304.744744][ T7981] usblp0: removed 17:40:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) [ 1305.567050][T14073] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1305.814047][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1305.887257][T27506] usb 5-1: USB disconnect, device number 63 [ 1305.934138][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1305.954230][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1305.962986][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1305.990450][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1306.005907][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1306.020642][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1306.032086][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 17:40:13 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:13 executing program 0: syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:40:13 executing program 1: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/245, 0x535}, {&(0x7f0000000300)=""/170, 0x14}, {&(0x7f0000000e00)=""/96, 0x123a}, {&(0x7f0000000600)=""/204, 0x1bc}, {&(0x7f0000001040)=""/4096, 0x1011}], 0x5}}], 0x14, 0x0, 0x0) 17:40:13 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x80108907, 0x0) 17:40:13 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1306.124837][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1306.141681][ T9536] usb 3-1: USB disconnect, device number 21 [ 1306.177802][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1306.225434][T14073] usb 6-1: SerialNumber: syz 17:40:13 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x3, 0x0) 17:40:13 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x8940, 0x0) [ 1306.295855][T12308] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1306.315403][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1306.321454][T14073] hub: probe of 6-1:5.0 failed with error -5 17:40:13 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "856ca622be4d62ad82c08dd8ad98ef9e"}) 17:40:13 executing program 1: r0 = fsopen(&(0x7f0000000080)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='3:&[\x00', &(0x7f0000000100)="c4", 0x1) 17:40:13 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000031c0), 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0), 0xc, 0x0) [ 1306.524188][ T9531] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1306.572365][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 17:40:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={0x0, 0x4}}, 0x0) [ 1306.774208][ T9536] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1306.804978][ T9531] usb 5-1: Using ep0 maxpacket: 8 [ 1306.884334][T14073] usb 6-1: USB disconnect, device number 52 [ 1306.903766][T14073] usblp0: removed [ 1306.955205][ T9531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1306.973444][ T9531] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1306.991023][ T9531] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1307.005676][ T9531] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1307.015504][ T9531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.026499][ T9531] usb 5-1: config 0 descriptor?? [ 1307.064282][ T9536] usb 3-1: Using ep0 maxpacket: 8 [ 1307.204184][ T9536] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1307.217264][ T9536] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1307.229004][ T9536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.242555][ T9536] usb 3-1: config 0 descriptor?? [ 1307.282937][T16210] usb 5-1: USB disconnect, device number 64 17:40:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) [ 1307.521937][ T4852] usb 3-1: USB disconnect, device number 22 [ 1307.824174][T14073] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1307.904081][T16210] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1308.064427][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1308.094101][ T4852] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1308.174101][T16210] usb 5-1: Using ep0 maxpacket: 8 [ 1308.184989][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1308.193390][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1308.209504][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1308.221302][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1308.240794][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1308.257878][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1308.269438][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1308.325105][T16210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1308.334688][ T4852] usb 3-1: Using ep0 maxpacket: 8 [ 1308.335085][T16210] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1308.349957][T16210] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1308.354983][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1308.365628][T16210] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1308.381924][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1308.384393][T16210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.400873][T14073] usb 6-1: SerialNumber: syz [ 1308.402280][T16210] usb 5-1: config 0 descriptor?? [ 1308.445855][T12393] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1308.454264][ T4852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1308.468569][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1308.481747][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1308.504387][ T4852] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1308.528998][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.552976][ T4852] usb 3-1: config 0 descriptor?? [ 1308.716317][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1313.164256][T14073] usb 6-1: USB disconnect, device number 53 17:40:20 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x80045500, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 17:40:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) 17:40:20 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 17:40:20 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) [ 1313.211866][T14073] usblp0: removed [ 1313.211948][ T9531] usb 5-1: USB disconnect, device number 65 [ 1313.243333][ T4852] usb 3-1: USB disconnect, device number 23 17:40:20 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT]) 17:40:20 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x628402, 0x0) 17:40:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x5452, 0x0) 17:40:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0045516, 0x0) 17:40:21 executing program 1: socket$inet(0x2, 0x0, 0x10000) 17:40:21 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x48004) sendmmsg$inet6(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000e80)={0xa, 0x4e21, 0x0, @local, 0x5}, 0x1c, 0x0}}], 0x2, 0x0) [ 1313.784326][ T9531] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1313.814042][ T4852] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1313.823952][T14073] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1314.034073][ T9531] usb 5-1: Using ep0 maxpacket: 8 [ 1314.094219][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1314.114129][ T4852] usb 3-1: Using ep0 maxpacket: 8 [ 1314.154227][ T9531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1314.164828][ T9531] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1314.175163][ T9531] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1314.188585][ T9531] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1314.199611][ T9531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.215535][ T9531] usb 5-1: config 0 descriptor?? [ 1314.236251][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1314.253227][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1314.264251][ T4852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1314.283099][ T4852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1314.295178][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1314.307256][ T4852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1314.322056][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1314.334459][ T4852] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1314.346208][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1314.358116][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.367739][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1314.379724][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1314.394445][ T4852] usb 3-1: config 0 descriptor?? [ 1314.474541][ T9531] usb 5-1: USB disconnect, device number 66 [ 1314.504401][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1314.513783][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1314.532460][T14073] usb 6-1: SerialNumber: syz [ 1314.555884][T12451] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1314.575619][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1314.581678][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1314.642726][T16210] usb 3-1: USB disconnect, device number 24 [ 1314.789570][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1315.033990][ T9531] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1315.214030][T16210] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1315.275494][ T9531] usb 5-1: Using ep0 maxpacket: 8 [ 1315.394166][ T9531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1315.404213][ T9531] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1315.415660][ T9531] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1315.430244][ T9531] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1315.441083][ T9531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.452504][ T9531] usb 5-1: config 0 descriptor?? [ 1315.463651][T16210] usb 3-1: Using ep0 maxpacket: 8 [ 1315.584693][T16210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1315.601917][T16210] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1315.613292][T16210] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1315.632279][T16210] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1315.642125][T16210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.659058][T16210] usb 3-1: config 0 descriptor?? [ 1319.384331][T27506] usb 6-1: USB disconnect, device number 54 [ 1319.412825][T27506] usblp0: removed [ 1319.413138][T14073] usb 5-1: USB disconnect, device number 67 17:40:26 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:26 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 17:40:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 17:40:26 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 17:40:26 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) [ 1319.493045][T16210] usb 3-1: USB disconnect, device number 25 17:40:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) 17:40:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000040)=0x60) 17:40:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000000)) 17:40:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x541b, 0x0) 17:40:27 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 17:40:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x5421, 0x0) [ 1320.004092][T27506] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1320.044004][T16210] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1320.084351][T14073] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1320.254317][T27506] usb 6-1: Using ep0 maxpacket: 8 [ 1320.294253][T16210] usb 3-1: Using ep0 maxpacket: 8 [ 1320.334913][T14073] usb 5-1: Using ep0 maxpacket: 8 [ 1320.374123][T27506] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1320.382892][T27506] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1320.396295][T27506] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1320.407902][T27506] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1320.418747][T16210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1320.429051][T27506] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1320.441489][T16210] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1320.452577][T27506] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1320.463679][T16210] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1320.464735][T14073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1320.478853][T27506] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1320.479002][T16210] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1320.505773][T14073] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1320.512810][T16210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.524843][T14073] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1320.545603][T14073] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1320.549253][T16210] usb 3-1: config 0 descriptor?? [ 1320.567242][T14073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.576248][T27506] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1320.590883][T27506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1320.602149][T14073] usb 5-1: config 0 descriptor?? [ 1320.620935][T27506] usb 6-1: SerialNumber: syz [ 1320.665722][T12545] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1320.685184][T27506] hub 6-1:5.0: bad descriptor, ignoring hub [ 1320.691215][T27506] hub: probe of 6-1:5.0 failed with error -5 [ 1320.813295][ T9531] usb 3-1: USB disconnect, device number 26 [ 1320.860183][T16210] usb 5-1: USB disconnect, device number 68 [ 1320.926210][T27506] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1321.181884][T12604] udc-core: couldn't find an available UDC or it's busy [ 1321.194013][T12604] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1321.245917][ T4852] usb 6-1: USB disconnect, device number 55 [ 1321.263425][ T4852] usblp0: removed [ 1321.374099][ T9531] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1321.424342][T16210] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1321.614257][ T9531] usb 3-1: Using ep0 maxpacket: 8 [ 1321.664513][T16210] usb 5-1: Using ep0 maxpacket: 8 [ 1321.734082][ T9531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1321.745244][ T9531] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1321.757514][ T9531] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1321.775894][ T9531] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1321.787297][T16210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1321.799208][ T9531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.812421][T16210] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1321.825010][T16210] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1321.839236][ T9531] usb 3-1: config 0 descriptor?? [ 1321.851125][T16210] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1321.862433][T16210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.892933][T16210] usb 5-1: config 0 descriptor?? [ 1323.543967][T16216] usb 5-1: USB disconnect, device number 69 17:40:31 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:31 executing program 3: add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9) 17:40:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, &(0x7f0000000ac0)=0x18) 17:40:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 17:40:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:40:31 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1323.661780][T16210] usb 3-1: USB disconnect, device number 27 17:40:31 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 17:40:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, &(0x7f0000000ac0)=0x18) 17:40:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, &(0x7f0000000ac0)=0x18) 17:40:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000340), 0x4) 17:40:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, &(0x7f0000000ac0)=0x18) [ 1323.974230][ T9531] usb 6-1: new high-speed USB device number 56 using dummy_hcd 17:40:31 executing program 3: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0) [ 1324.083035][ T4852] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1324.224598][ T9531] usb 6-1: Using ep0 maxpacket: 8 [ 1324.244947][T16210] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1324.344122][ T4852] usb 5-1: Using ep0 maxpacket: 8 [ 1324.344121][ T9531] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1324.344157][ T9531] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1324.367653][ T9531] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1324.379553][ T9531] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1324.390456][ T9531] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1324.402416][ T9531] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1324.413702][ T9531] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1324.484720][ T4852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1324.494222][T16210] usb 3-1: Using ep0 maxpacket: 8 [ 1324.506111][ T4852] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1324.506240][ T9531] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1324.519901][ T4852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1324.536758][ T4852] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1324.548188][ T4852] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1324.560618][ T9531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1324.564951][ T4852] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1324.579725][ T4852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.581046][ T9531] usb 6-1: SerialNumber: syz [ 1324.591806][ T4852] usb 5-1: config 0 descriptor?? [ 1324.614911][T16210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1324.631042][T16210] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1324.654978][T16210] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1324.655341][T12638] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1324.701921][T16210] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1324.714959][ T9531] hub 6-1:5.0: bad descriptor, ignoring hub [ 1324.720999][ T9531] hub: probe of 6-1:5.0 failed with error -5 [ 1324.735239][T16210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.759942][T16210] usb 3-1: config 0 descriptor?? [ 1324.907848][ T4852] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1324.932540][ T4852] usb 5-1: USB disconnect, device number 70 [ 1324.935288][ T9531] usblp 6-1:5.0: usblp1: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1324.952639][ T4852] usblp0: removed [ 1325.012813][T16216] usb 3-1: USB disconnect, device number 28 [ 1325.157493][T12638] udc-core: couldn't find an available UDC or it's busy [ 1325.166303][T12638] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1325.294367][T14784] usb 6-1: USB disconnect, device number 56 [ 1325.303581][T14784] usblp1: removed [ 1325.514017][ T4852] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1325.593999][T16216] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1325.764052][ T4852] usb 5-1: Using ep0 maxpacket: 8 [ 1325.834189][T16216] usb 3-1: Using ep0 maxpacket: 8 [ 1325.904244][ T4852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1325.914263][ T4852] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1325.926331][ T4852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1325.937577][ T4852] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1325.948695][ T4852] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1325.962472][T16216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1325.963969][ T4852] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1325.981529][T16216] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1325.981585][T16216] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1326.002704][ T4852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.014135][T16216] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1326.023406][T16216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.027124][ T4852] usb 5-1: config 0 descriptor?? [ 1326.047395][T16216] usb 3-1: config 0 descriptor?? [ 1326.335787][ T4852] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1326.351848][ T4852] usb 5-1: USB disconnect, device number 71 [ 1326.370283][ T4852] usblp0: removed 17:40:35 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:35 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:35 executing program 3: r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="b5", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000580), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="db", 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, r0, r1}, 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={'michael_mic\x00'}}) 17:40:35 executing program 1: getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, &(0x7f0000000ac0)=0x18) 17:40:35 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 17:40:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) [ 1327.870453][ T4852] usb 3-1: USB disconnect, device number 29 17:40:35 executing program 1: getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, &(0x7f0000000ac0)=0x18) 17:40:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)) 17:40:35 executing program 1: getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, &(0x7f0000000ac0)=0x18) [ 1328.224222][T16216] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1328.254232][T14073] usb 6-1: new high-speed USB device number 57 using dummy_hcd 17:40:35 executing program 3: mq_open(&(0x7f0000000040)='sysfs\x00', 0x0, 0x0, 0x0) [ 1328.274251][T14784] usb 5-1: new high-speed USB device number 72 using dummy_hcd 17:40:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, &(0x7f0000000ac0)=0x18) 17:40:35 executing program 3: syz_open_dev$amidi(&(0x7f0000000000), 0x0, 0x7f2c84185580fce2) [ 1328.424033][T16216] usb 1-1: device descriptor read/64, error 18 [ 1328.534113][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1328.554153][ T4852] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1328.574150][T14784] usb 5-1: Using ep0 maxpacket: 8 [ 1328.655033][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1328.667883][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1328.693074][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1328.704036][T16216] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1328.714620][T14784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1328.725026][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1328.735518][T14784] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1328.747241][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1328.759069][T14784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1328.771601][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1328.782292][T14784] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1328.793577][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1328.808122][T14784] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1328.822811][T14784] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1328.832941][T14784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.844163][T14784] usb 5-1: config 0 descriptor?? [ 1328.865010][ T4852] usb 3-1: Using ep0 maxpacket: 8 [ 1328.896702][T16216] usb 1-1: device descriptor read/64, error 18 [ 1328.914984][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1328.929542][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1328.943612][T14073] usb 6-1: SerialNumber: syz [ 1328.985943][T12752] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1329.004377][ T4852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1329.014259][T16216] usb usb1-port1: attempt power cycle [ 1329.015221][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1329.025953][ T4852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1329.036177][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1329.043847][ T4852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1329.059423][ T4852] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1329.070940][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.083213][ T4852] usb 3-1: config 0 descriptor?? [ 1329.105804][T14784] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1329.162947][T14784] usb 5-1: USB disconnect, device number 72 [ 1329.201422][T14784] usblp0: removed [ 1329.233186][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1329.343721][T14073] usb 3-1: USB disconnect, device number 30 [ 1329.434163][T16216] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1329.486731][T12826] udc-core: couldn't find an available UDC or it's busy [ 1329.493701][T12826] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1329.524741][T16216] usb 1-1: Invalid ep0 maxpacket: 0 [ 1329.537573][ T4852] usb 6-1: USB disconnect, device number 57 [ 1329.551453][ T4852] usblp0: removed [ 1329.674149][T16216] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1329.714034][T14784] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1329.765741][T16216] usb 1-1: Invalid ep0 maxpacket: 0 [ 1329.771393][T16216] usb usb1-port1: unable to enumerate USB device [ 1329.964018][T14073] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1329.974992][T14784] usb 5-1: Using ep0 maxpacket: 8 [ 1330.094869][T14784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1330.105247][T14784] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1330.117135][T14784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1330.128376][T14784] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1330.139185][T14784] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1330.153078][T14784] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1330.162974][T14784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.177904][T14784] usb 5-1: config 0 descriptor?? [ 1330.244053][T14073] usb 3-1: Using ep0 maxpacket: 8 [ 1330.384276][T14073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1330.394646][T14073] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1330.407482][T14073] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1330.427083][T14073] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1330.441852][T14073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.452759][T14784] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 73 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1330.493445][T14073] usb 3-1: config 0 descriptor?? [ 1330.512492][T14784] usb 5-1: USB disconnect, device number 73 [ 1330.522805][T14784] usblp0: removed 17:40:39 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_coalesce={0x1}}) 17:40:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, &(0x7f0000000ac0)=0x18) 17:40:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:40:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 17:40:39 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1332.144376][T16210] usb 3-1: USB disconnect, device number 31 17:40:39 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000031c0), 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:40:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, &(0x7f0000000ac0)=0x18) 17:40:39 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) [ 1332.514157][T16216] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1332.522011][ T9531] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1332.524098][T14073] usb 1-1: new high-speed USB device number 63 using dummy_hcd 17:40:40 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x5452, 0x0) 17:40:40 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, &(0x7f0000000ac0)=0x18) 17:40:40 executing program 3: sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x244, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd1, 0x1, "edbf601005936a9334c2d961761ae988df6c6aa21af216202a89a9243f829acf4f909d813f2e50da293dea37f8bebd6b783ac021af0664d69bae0b0f5e6bbb03c16b1e330735115ab90f86988d844649e30f62b151efd1f7150409d659176d84e896d426198e8c261176cf07d04e5de34e0ea6887f1554b03b393759011f538d49ba1eeeacf38be500e35d4ee1d474b5c9aa9d904f3fcf7b24cc4e606746116aa9e8e9518d9e9a1b957d9243be0783eb74291e30a25d094cf2c0e0579eee7d3e7904cc0234ae6184b3b6981ba8"}, @INET_DIAG_REQ_BYTECODE={0x5d, 0x1, "48e29c9e37388dddfd9524ff09111e9cd997482136e8a0ee6cc71b4dcb039b04e5fe8d792de24212d3626188f3e24524974d529cca2d11b56dee7fdf835050e58c31605a11f73db49f26740b4b618f92c5776b98c316bbb986"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "335cda0e24cae73c35d71e171c579efed57b488c0681d30cdd6c012187e7d4afca9188a123d52ff3b468a4649be06a6635d4df6a66f4bffa8c94cf15185da89540509ffc265b93b1711dcd557011121a942cf1cf8bc288df38403f09d420feaef93b429f3c4c0a9062e7237dfb195920318ae11fb27476e7af676d02190a2352bf546a2eb36d49b60b284de6b6dabcced2484ce9b2bfde3cb8c2c1e77cb3fc815d6246b6547f8d213baa0049f5ca2804498399e814c4bbbbb2ab49703a"}]}, 0x244}}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000340)) [ 1332.684028][T16210] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1332.763996][T14073] usb 1-1: device descriptor read/64, error 18 [ 1332.774107][T16216] usb 5-1: Using ep0 maxpacket: 8 [ 1332.780035][ T9531] usb 6-1: Using ep0 maxpacket: 8 [ 1332.904309][T16216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1332.914292][ T9531] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1332.922673][ T9531] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1332.935300][T16216] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1332.948147][ T9531] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1332.960447][T16216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1332.971424][T16210] usb 3-1: Using ep0 maxpacket: 8 [ 1332.976757][ T9531] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1332.987917][T16216] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1332.998834][ T9531] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1333.010552][T16216] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1333.025176][ T9531] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1333.036268][T16216] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1333.047772][ T9531] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1333.054287][T14073] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1333.065021][T16216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.082460][T16216] usb 5-1: config 0 descriptor?? [ 1333.105062][T16210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1333.116106][T16210] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1333.133714][T16210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1333.160358][T16210] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1333.175008][ T9531] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1333.194369][ T9531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1333.202576][ T9531] usb 6-1: SerialNumber: syz [ 1333.209410][T16210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.220686][T16210] usb 3-1: config 0 descriptor?? [ 1333.245782][T12873] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1333.265415][ T9531] hub 6-1:5.0: bad descriptor, ignoring hub [ 1333.271463][ T9531] hub: probe of 6-1:5.0 failed with error -5 [ 1333.304217][T14073] usb 1-1: device descriptor read/64, error 18 [ 1333.367211][T16216] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1333.393848][T16216] usb 5-1: USB disconnect, device number 74 [ 1333.427045][T16216] usblp0: removed [ 1333.442085][T14073] usb usb1-port1: attempt power cycle [ 1333.486005][ T9531] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1333.537650][ T9536] usb 3-1: USB disconnect, device number 32 [ 1333.565117][ T9531] usb 6-1: USB disconnect, device number 58 [ 1333.600123][ T9531] usblp0: removed [ 1333.894149][T14073] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1333.944127][T16216] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1334.004169][T14073] usb 1-1: Invalid ep0 maxpacket: 0 [ 1334.044009][ T9531] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1334.074013][ T9536] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1334.174317][T14073] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1334.184045][T16216] usb 5-1: Using ep0 maxpacket: 8 [ 1334.284822][ T9531] usb 6-1: Using ep0 maxpacket: 8 [ 1334.304157][T14073] usb 1-1: Invalid ep0 maxpacket: 0 [ 1334.305630][T16216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1334.310468][T14073] usb usb1-port1: unable to enumerate USB device [ 1334.319479][ T9536] usb 3-1: Using ep0 maxpacket: 8 [ 1334.332270][T16216] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1334.342289][T16216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1334.354031][T16216] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1334.367088][T16216] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1334.381278][T16216] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1334.392782][T16216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.414648][ T9531] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1334.424881][T16216] usb 5-1: config 0 descriptor?? [ 1334.440162][ T9531] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1334.454664][ T9536] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1334.465900][ T9536] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1334.477467][ T9531] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1334.494025][ T9536] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1334.514234][ T9531] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1334.523360][ T9531] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1334.536074][ T9536] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1334.546196][ T9536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.555262][ T9531] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1334.566526][ T9531] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1334.581791][ T9536] usb 3-1: config 0 descriptor?? [ 1334.664870][ T9531] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1334.699229][T16216] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 75 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1334.714024][ T9531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1334.722172][ T9531] usb 6-1: SerialNumber: syz [ 1334.750475][T16216] usb 5-1: USB disconnect, device number 75 [ 1334.789639][T16216] usblp0: removed [ 1334.797236][T12873] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1334.815488][ T9531] hub 6-1:5.0: bad descriptor, ignoring hub [ 1334.822413][ T9531] hub: probe of 6-1:5.0 failed with error -5 [ 1335.055467][ T9531] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1335.106445][ T9531] usb 6-1: USB disconnect, device number 59 [ 1335.130904][ T9531] usblp0: removed 17:40:43 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:43 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="8e", 0x1}, {&(0x7f00000000c0)='b', 0x1}, {0x0}, {&(0x7f0000000180)="b9", 0x1}], 0x4}, 0x0) 17:40:43 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, &(0x7f0000000ac0)=0x18) 17:40:43 executing program 4: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:43 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 17:40:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) [ 1336.251947][T14073] usb 3-1: USB disconnect, device number 33 17:40:43 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 17:40:43 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, &(0x7f0000000ac0)=0x18) 17:40:43 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 17:40:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000ac0)) 17:40:44 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000ac0)) [ 1336.594147][ T4852] usb 5-1: new high-speed USB device number 76 using dummy_hcd 17:40:44 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) [ 1336.654447][T14784] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1336.662319][ T9481] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1336.884195][T14073] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1336.904100][ T4852] usb 5-1: Using ep0 maxpacket: 8 [ 1336.911137][T14784] usb 1-1: device descriptor read/64, error 18 [ 1336.974098][ T9481] usb 6-1: Using ep0 maxpacket: 8 [ 1337.064152][ T4852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1337.074239][ T4852] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1337.084887][ T4852] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1337.098568][ T4852] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1337.108048][ T4852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.117104][ T9481] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1337.132962][ T4852] usb 5-1: config 0 descriptor?? [ 1337.142620][ T9481] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1337.151552][T14073] usb 3-1: Using ep0 maxpacket: 8 [ 1337.161174][ T9481] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1337.174156][ T9481] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1337.183681][ T9481] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1337.199643][T14784] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1337.211810][ T9481] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1337.226099][ T9481] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1337.274755][T14073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1337.289583][T14073] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1337.300352][T14073] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1337.314344][T14073] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1337.323430][T14073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.332102][ T9481] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1337.345533][T14073] usb 3-1: config 0 descriptor?? [ 1337.350756][ T9481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1337.368013][ T9481] usb 6-1: SerialNumber: syz [ 1337.395645][T13017] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1337.407525][T14784] usb 1-1: device descriptor read/64, error 18 [ 1337.418340][ T9481] hub 6-1:5.0: bad descriptor, ignoring hub [ 1337.429655][ T9481] hub: probe of 6-1:5.0 failed with error -5 [ 1337.524485][T14784] usb usb1-port1: attempt power cycle [ 1337.621350][T13011] udc-core: couldn't find an available UDC or it's busy [ 1337.628511][T13011] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1337.634376][ T9531] usb 3-1: USB disconnect, device number 34 [ 1337.655300][ T9481] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1337.674995][ T4852] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1337.736605][ T4852] usb 5-1: USB disconnect, device number 76 [ 1337.754901][ T9481] usb 6-1: USB disconnect, device number 60 [ 1337.766413][ T4852] usblp1: removed [ 1337.800940][ T9481] usblp0: removed [ 1337.934089][T14784] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1338.024619][T14784] usb 1-1: Invalid ep0 maxpacket: 0 [ 1338.174078][T14784] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1338.204062][ T9531] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1338.224201][ T9481] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1338.274139][T14784] usb 1-1: Invalid ep0 maxpacket: 0 [ 1338.279892][T14784] usb usb1-port1: unable to enumerate USB device [ 1338.464107][ T9481] usb 6-1: Using ep0 maxpacket: 8 [ 1338.494254][ T9531] usb 3-1: Using ep0 maxpacket: 8 [ 1338.584668][ T9481] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1338.593581][ T9481] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1338.604849][ T9481] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1338.616316][ T9481] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1338.626831][ T9481] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1338.638681][ T9481] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1338.649622][ T9481] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1338.654854][ T9531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1338.672860][ T9531] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1338.682805][ T9531] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1338.697781][ T9531] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1338.708024][ T9531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.723112][ T9531] usb 3-1: config 0 descriptor?? [ 1338.747224][ T9481] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1338.764082][ T9481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1338.772293][ T9481] usb 6-1: SerialNumber: syz [ 1338.816194][T13017] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1338.835082][ T9481] hub 6-1:5.0: bad descriptor, ignoring hub [ 1338.841123][ T9481] hub: probe of 6-1:5.0 failed with error -5 [ 1339.064349][ T9481] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1339.115196][ T9481] usb 6-1: USB disconnect, device number 61 [ 1339.141385][ T9481] usblp0: removed 17:40:47 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000ac0)) 17:40:47 executing program 4: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 17:40:47 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 17:40:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) [ 1340.375388][ T9481] usb 3-1: USB disconnect, device number 35 17:40:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a80), &(0x7f0000000ac0)=0x18) 17:40:47 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='environ\x00') 17:40:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a80), &(0x7f0000000ac0)=0x18) 17:40:48 executing program 3: clone(0x40004900, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000500)="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") 17:40:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a80), &(0x7f0000000ac0)=0x18) [ 1340.753967][T14784] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1340.764792][ T9531] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1340.774538][ T4852] usb 1-1: new high-speed USB device number 71 using dummy_hcd 17:40:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, 0x0) [ 1340.887317][T13149] IPVS: ftp: loaded support on port[0] = 21 [ 1340.954271][ T9481] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1341.014207][T14784] usb 5-1: Using ep0 maxpacket: 8 [ 1341.014266][ T9531] usb 6-1: Using ep0 maxpacket: 8 [ 1341.042232][ T4852] usb 1-1: Using ep0 maxpacket: 16 [ 1341.094401][T13172] IPVS: ftp: loaded support on port[0] = 21 [ 1341.148349][T14784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1341.154731][ T9531] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1341.168998][T14784] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1341.179264][ T9531] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1341.183570][ T4852] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1341.199144][ T9531] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1341.216538][ T9531] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1341.221416][T14784] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1341.228175][ T9531] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1341.239539][ T9481] usb 3-1: Using ep0 maxpacket: 8 [ 1341.252398][ T9531] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1341.259736][ T4852] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1341.268177][ T9531] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1341.287466][ T4852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.301369][T14784] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1341.311736][T14784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.322462][ T4852] usb 1-1: config 0 descriptor?? [ 1341.340106][T14784] usb 5-1: config 0 descriptor?? [ 1341.364891][ T9531] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1341.371413][ T4852] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1341.383087][ T9531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1341.414852][ T9481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1341.423202][ T9531] usb 6-1: SerialNumber: syz [ 1341.427628][ T9481] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1341.454316][ T9481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1341.465799][T13126] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1341.480123][ T9481] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1341.485437][ T9531] hub 6-1:5.0: bad descriptor, ignoring hub [ 1341.510167][ T9531] hub: probe of 6-1:5.0 failed with error -5 [ 1341.517327][ T9481] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1341.541976][ T9481] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1341.552637][ T9481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.572981][ T9481] usb 3-1: config 0 descriptor?? [ 1341.707126][ T9531] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1341.764915][ T9531] usb 6-1: USB disconnect, device number 62 [ 1341.802821][T13128] udc-core: couldn't find an available UDC or it's busy [ 1341.824178][ T9531] usblp0: removed [ 1341.833512][T13128] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1341.854908][ T9536] usb 1-1: USB disconnect, device number 71 [ 1341.865950][ T9481] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1341.895076][T14784] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1341.946165][ T9481] usb 3-1: USB disconnect, device number 36 [ 1341.978246][T14784] usb 5-1: USB disconnect, device number 77 [ 1342.019694][ T9481] usblp0: removed [ 1342.035974][T14784] usblp1: removed [ 1342.294021][ T9531] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1342.444073][ T9481] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1342.534042][ T9531] usb 6-1: Using ep0 maxpacket: 8 [ 1342.654246][ T9531] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1342.662649][ T9531] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1342.672153][ T9531] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1342.682767][ T9531] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1342.693058][ T9531] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1342.694771][ T9481] usb 3-1: Using ep0 maxpacket: 8 [ 1342.712989][ T9531] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1342.722947][ T9531] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1342.814629][ T9531] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1342.823721][ T9531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1342.833460][ T9531] usb 6-1: SerialNumber: syz [ 1342.854869][ T9481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1342.856217][T13126] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1342.871877][ T9481] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1342.890871][ T9481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1342.903717][ T9481] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1342.915148][ T9531] hub 6-1:5.0: bad descriptor, ignoring hub [ 1342.920065][ T9481] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1342.921176][ T9531] hub: probe of 6-1:5.0 failed with error -5 [ 1342.954000][ T9481] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1342.963098][ T9481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.982990][ T9481] usb 3-1: config 0 descriptor?? [ 1343.139399][ T9531] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1343.198423][ T9531] usb 6-1: USB disconnect, device number 63 [ 1343.223231][ T9531] usblp0: removed [ 1343.265558][ T9481] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1343.304115][ T9481] usb 3-1: USB disconnect, device number 37 [ 1343.320975][ T9481] usblp0: removed 17:40:51 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0xb, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 17:40:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, 0x0) 17:40:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 17:40:51 executing program 4: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:40:51 executing program 3: socketpair(0x26, 0x5, 0x7f, &(0x7f0000000440)) 17:40:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x0, 0x10}, 0x0) 17:40:51 executing program 3: getpgrp(0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) sync() 17:40:51 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "633bb55bb96c9f7c7b3b57dc74d54154dc68a26454a5e74152a1be4e5da951b419dcaafc5bfcfa05476bd2e2aa5a4419272168bec2aa48092299440d5b05f23f"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x11, r0, r0) [ 1344.124425][ T9481] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1344.145791][T27506] usb 1-1: new high-speed USB device number 72 using dummy_hcd 17:40:51 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "633bb55bb96c9f7c7b3b57dc74d54154dc68a26454a5e74152a1be4e5da951b419dcaafc5bfcfa05476bd2e2aa5a4419272168bec2aa48092299440d5b05f23f"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x2, r0, 0x0) 17:40:51 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "633bb55bb96c9f7c7b3b57dc74d54154dc68a26454a5e74152a1be4e5da951b419dcaafc5bfcfa05476bd2e2aa5a4419272168bec2aa48092299440d5b05f23f"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x6, r0, r0) [ 1344.204095][ T9531] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1344.334061][T14784] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1344.384580][T27506] usb 1-1: Using ep0 maxpacket: 16 [ 1344.394376][ T9481] usb 5-1: Using ep0 maxpacket: 8 [ 1344.444868][ T9531] usb 3-1: Using ep0 maxpacket: 8 [ 1344.505574][T27506] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1344.518593][T27506] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1344.532509][ T9481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1344.542490][T27506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.548404][ T9481] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1344.561624][T14784] usb 6-1: device descriptor read/64, error 18 [ 1344.563763][T27506] usb 1-1: config 0 descriptor?? [ 1344.577026][ T9481] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1344.580979][ T9531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1344.596524][ T9481] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1344.621803][ T9481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.622031][ T9531] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1344.645752][ T9481] usb 5-1: config 0 descriptor?? [ 1344.673453][T27506] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1344.702461][ T9531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1344.725821][ T9531] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1344.738933][ T9531] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1344.754129][ T9531] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1344.763315][ T9531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.775835][ T9531] usb 3-1: config 0 descriptor?? [ 1344.856692][T14784] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1345.035459][ T9531] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1345.064047][T14784] usb 6-1: device descriptor read/64, error 18 [ 1345.087166][ T9531] usb 3-1: USB disconnect, device number 38 [ 1345.091841][T14074] usb 1-1: USB disconnect, device number 72 [ 1345.120711][T13300] udc-core: couldn't find an available UDC or it's busy [ 1345.121996][ T9531] usblp0: removed [ 1345.132019][T13300] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1345.166376][ T9481] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 78 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1345.194519][T14784] usb usb6-port1: attempt power cycle [ 1345.221065][ T9481] usb 5-1: USB disconnect, device number 78 [ 1345.261165][ T9481] usblp0: removed [ 1345.624104][ T9531] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1345.634253][T14784] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1345.824224][T14784] usb 6-1: device descriptor read/8, error -61 [ 1345.864144][ T9531] usb 3-1: Using ep0 maxpacket: 8 [ 1345.984144][ T9531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1345.993851][ T9531] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1346.004457][ T9531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1346.014809][ T9531] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1346.025176][ T9531] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1346.038828][ T9531] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1346.048077][ T9531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.059104][ T9531] usb 3-1: config 0 descriptor?? [ 1346.094121][T14784] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1346.284140][T14784] usb 6-1: device descriptor read/8, error -61 [ 1346.325856][ T9531] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1346.342251][ T9531] usb 3-1: USB disconnect, device number 39 [ 1346.367820][ T9531] usblp0: removed [ 1346.416061][T14784] usb usb6-port1: unable to enumerate USB device 17:40:54 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1e, &(0x7f00000002c0)="dcefa047", 0x4) 17:40:54 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000200), 0x0, &(0x7f0000000280)) 17:40:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 17:40:54 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:40:54 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x6, r0) 17:40:54 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "633bb55bb96c9f7c7b3b57dc74d54154dc68a26454a5e74152a1be4e5da951b419dcaafc5bfcfa05476bd2e2aa5a4419272168bec2aa48092299440d5b05f23f"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x3, r0, 0x0) 17:40:54 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "9815467c31d0e7096ad377e33a90f45ace2e617cf15299d7673df1b41fe886e99e7821a61a836c3af8383917780936b06836843d2130a6bf26715766b86fdce4"}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 17:40:54 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 17:40:54 executing program 1: socket$inet(0x2, 0x0, 0x616d) [ 1347.224238][ T9481] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1347.244889][T14784] usb 5-1: new high-speed USB device number 79 using dummy_hcd 17:40:54 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) munlockall() [ 1347.284077][ T9531] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1347.404112][T27506] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1347.494117][ T9481] usb 1-1: Using ep0 maxpacket: 16 [ 1347.518189][T14784] usb 5-1: Using ep0 maxpacket: 8 [ 1347.534144][ T9531] usb 3-1: Using ep0 maxpacket: 8 [ 1347.614545][ T9481] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1347.615108][T27506] usb 6-1: device descriptor read/64, error 18 [ 1347.629046][ T9481] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1347.643408][ T9481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.660920][ T9481] usb 1-1: config 0 descriptor?? [ 1347.663016][ T9531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1347.666291][T14784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1347.691417][ T9531] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1347.695607][T14784] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1347.715784][T14784] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1347.725427][ T9531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1347.733310][ T9481] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1347.754386][T14784] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1347.768571][T14784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.771980][ T9531] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1347.792099][T14784] usb 5-1: config 0 descriptor?? [ 1347.823000][ T9531] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1347.854686][ T9531] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1347.871100][ T9531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.883249][ T9531] usb 3-1: config 0 descriptor?? [ 1347.924033][T27506] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1348.063674][T14784] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 79 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1348.077785][T14784] usb 5-1: USB disconnect, device number 79 [ 1348.103601][T14784] usblp0: removed [ 1348.114218][T27506] usb 6-1: device descriptor read/64, error 18 [ 1348.153694][ T4852] usb 1-1: USB disconnect, device number 73 [ 1348.156629][ T9531] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1348.220912][ T9531] usb 3-1: USB disconnect, device number 40 [ 1348.234272][T27506] usb usb6-port1: attempt power cycle [ 1348.268438][ T9531] usblp0: removed [ 1348.644029][T27506] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1348.694190][ T9531] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1348.814353][T27506] usb 6-1: device descriptor read/8, error -61 [ 1348.934369][ T9531] usb 3-1: Using ep0 maxpacket: 8 [ 1349.055177][ T9531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1349.065132][ T9531] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1349.076406][ T9531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1349.087286][T27506] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1349.094970][ T9531] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1349.106827][ T9531] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1349.120908][ T9531] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1349.130918][ T9531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.143729][ T9531] usb 3-1: config 0 descriptor?? [ 1349.274135][T27506] usb 6-1: device descriptor read/8, error -61 [ 1349.394280][T27506] usb usb6-port1: unable to enumerate USB device [ 1349.420750][ T9531] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1349.457695][ T9531] usb 3-1: USB disconnect, device number 41 [ 1349.491139][ T9531] usblp0: removed 17:40:57 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x4, &(0x7f00000002c0)="dcefa047", 0x4) 17:40:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x2, 0x0, 0x0, 0x0) 17:40:57 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:57 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 17:40:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:40:57 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "633bb55bb96c9f7c7b3b57dc74d54154dc68a26454a5e74152a1be4e5da951b419dcaafc5bfcfa05476bd2e2aa5a4419272168bec2aa48092299440d5b05f23f"}, 0x48, 0xfffffffffffffffe) keyctl$search(0x11, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0) 17:40:57 executing program 1: r0 = gettid() ptrace$getregset(0x4204, r0, 0x0, 0x0) 17:40:57 executing program 3: syz_io_uring_setup(0x6d36, &(0x7f0000001200)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001280), &(0x7f00000012c0)) 17:40:57 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x2, r0) 17:40:57 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x109002) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 17:40:57 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x2, 0x0, 0x700) [ 1350.294089][ T9531] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1350.294202][ T9481] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1350.354357][ T4852] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1350.544253][ T9531] usb 1-1: Using ep0 maxpacket: 16 [ 1350.544253][T14074] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1350.585074][ T9481] usb 5-1: Using ep0 maxpacket: 8 [ 1350.604872][ T4852] usb 3-1: Using ep0 maxpacket: 8 [ 1350.705756][ T9481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1350.711572][ T9531] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1350.724112][ T4852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1350.738283][T14074] usb 6-1: device descriptor read/64, error 18 [ 1350.738471][ T9531] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1350.754032][ T9531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.754055][ T9481] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1350.765077][ T9531] usb 1-1: config 0 descriptor?? [ 1350.792584][ T4852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1350.803553][ T4852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1350.824927][ T9481] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1350.826632][ T9531] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1350.859741][ T4852] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1350.880718][ T9481] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1350.891160][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.901519][ T9481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.912236][ T4852] usb 3-1: config 0 descriptor?? [ 1350.939255][ T9481] usb 5-1: config 0 descriptor?? [ 1351.024271][T14074] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1351.032550][T27506] usb 1-1: USB disconnect, device number 74 [ 1351.214933][T14074] usb 6-1: device descriptor read/64, error 18 [ 1351.226140][ T9481] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 80 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1351.265007][ T9481] usb 5-1: USB disconnect, device number 80 [ 1351.296758][ T9481] usblp0: removed [ 1351.334898][T14074] usb usb6-port1: attempt power cycle [ 1351.382346][T13506] udc-core: couldn't find an available UDC or it's busy [ 1351.390463][T13506] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1351.435379][ T4852] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1351.449664][ T4852] usb 3-1: USB disconnect, device number 42 [ 1351.475163][ T4852] usblp0: removed [ 1351.654187][T27506] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1351.754071][T14074] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1351.914222][T27506] usb 1-1: Using ep0 maxpacket: 16 17:40:59 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:40:59 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff) 17:40:59 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 17:40:59 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1351.934605][T14074] usb 6-1: device descriptor read/8, error -61 [ 1352.064799][T27506] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1352.111470][T27506] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1352.123193][T27506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.143021][T27506] usb 1-1: config 0 descriptor?? [ 1352.204058][T14074] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1352.206580][T27506] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1352.314500][ T9531] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1352.354100][ T4852] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1352.374903][T14074] usb 6-1: device descriptor read/8, error -61 [ 1352.413032][T27506] usb 1-1: USB disconnect, device number 75 [ 1352.495122][T14074] usb usb6-port1: unable to enumerate USB device [ 1352.594042][ T9531] usb 5-1: Using ep0 maxpacket: 8 [ 1352.594158][ T4852] usb 3-1: Using ep0 maxpacket: 8 [ 1352.724169][ T9531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1352.724890][ T4852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1352.734766][ T9531] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1352.753046][ T4852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1352.758020][ T9531] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1352.763496][ T4852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1352.778707][ T9531] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1352.798292][ T4852] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1352.800456][ T9531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.812031][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.824477][ T9531] usb 5-1: config 0 descriptor?? [ 1352.853151][ T4852] usb 3-1: config 0 descriptor?? 17:41:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 17:41:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002e80), 0xffffffffffffffff) 17:41:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x0, 0x0, 0x0) [ 1353.086087][ T9531] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 81 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 17:41:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0}}) 17:41:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @local}}}) [ 1353.144182][ T9531] usb 5-1: USB disconnect, device number 81 [ 1353.181336][ T9531] usblp0: removed [ 1353.254320][T14074] usb 1-1: new high-speed USB device number 76 using dummy_hcd 17:41:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) [ 1353.322653][T13582] udc-core: couldn't find an available UDC or it's busy [ 1353.341458][T13582] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:41:00 executing program 3: clone3(&(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000002f40)=""/247, 0x0}, 0x58) [ 1353.399219][ T4852] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1353.433727][ T4852] usb 3-1: USB disconnect, device number 43 [ 1353.468703][ T4852] usblp0: removed [ 1353.504175][T14074] usb 1-1: Using ep0 maxpacket: 16 [ 1353.624172][T27506] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1353.624749][T14074] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1353.702104][T14074] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1353.731542][T14074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.762616][T14074] usb 1-1: config 0 descriptor?? [ 1353.807414][T14074] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 17:41:01 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:41:01 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2020) 17:41:01 executing program 3: sync() setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x2, 0x30, 0x0, 0x210) 17:41:01 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1353.895369][T27506] usb 6-1: Using ep0 maxpacket: 8 [ 1354.012198][ T4852] usb 1-1: USB disconnect, device number 76 [ 1354.045024][T27506] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1354.077098][T27506] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1354.122539][T27506] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1354.135818][T27506] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1354.147324][T27506] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1354.160988][T27506] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1354.172653][T27506] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1354.268403][T14074] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1354.284428][T27506] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1354.293650][T27506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1354.303335][T27506] usb 6-1: SerialNumber: syz [ 1354.344412][ T9536] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1354.345860][T13622] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1354.365735][T27506] hub 6-1:5.0: bad descriptor, ignoring hub [ 1354.371722][T27506] hub: probe of 6-1:5.0 failed with error -5 [ 1354.514100][T14074] usb 5-1: Using ep0 maxpacket: 8 [ 1354.596061][ T9536] usb 3-1: Using ep0 maxpacket: 8 [ 1354.601838][T27506] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 76 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1354.604031][ T4852] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1354.634938][T14074] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1354.645504][T14074] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1354.657939][T14074] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1354.673811][T14074] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1354.685323][T14074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.708125][T14074] usb 5-1: config 0 descriptor?? [ 1354.761663][ T9536] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1354.775043][ T9536] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1354.785637][ T9536] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1354.806543][ T9536] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1354.816179][ T9536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.827395][ T9536] usb 3-1: config 0 descriptor?? [ 1354.894473][ T4852] usb 1-1: Using ep0 maxpacket: 16 [ 1355.024375][ T4852] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1355.042347][ T4852] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1355.051646][ T4852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.072020][ T4852] usb 1-1: config 0 descriptor?? [ 1355.136440][ T4852] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1355.234688][T13622] usb 6-1: reset high-speed USB device number 76 using dummy_hcd [ 1355.290725][T13667] udc-core: couldn't find an available UDC or it's busy [ 1355.298034][T13667] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1355.343641][T16216] usb 1-1: USB disconnect, device number 77 [ 1355.484083][T13622] usb 6-1: Using ep0 maxpacket: 8 [ 1355.638196][T13697] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1355.694074][T14074] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 82 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1355.721107][T14074] usb 5-1: USB disconnect, device number 82 [ 1355.724615][ T9536] usblp 3-1:0.0: usblp2: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1355.750247][T14074] usblp1: removed [ 1355.774530][ T9536] usb 3-1: USB disconnect, device number 44 [ 1355.805349][ T9536] usblp2: removed 17:41:03 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) [ 1355.880318][T16216] usb 6-1: USB disconnect, device number 76 [ 1355.896164][T16216] usblp0: removed [ 1356.134139][T14074] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1356.254208][ T9481] usb 1-1: new high-speed USB device number 78 using dummy_hcd 17:41:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:03 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_setup(0x42fd, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 17:41:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f00000007c0)={'ip6gre0\x00', 0x0}) 17:41:03 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1356.374028][T14074] usb 5-1: Using ep0 maxpacket: 8 [ 1356.494351][ T9481] usb 1-1: Using ep0 maxpacket: 16 [ 1356.506176][T14074] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 17:41:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x1060, 0x1, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "e3c1cd9ad05926856973fbee4cde375eef7f240c037cedf3faab690b2091d62f", "df445717c9a2ed03562f0b3c975a57b53d3117cccdced2f527b114e098844e99"}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x3, 0x5d, 0x100, 0x3, 0x13, 'syz1\x00', "cc95585244557abe4cc13668d35c75b172584f26ac30834b6661e22c85838e32", "2570ae4dbe7b804904e2ba944f769581450f6e7d0f1034b1c0d7a694990c3e54", [{}, {}, {0x8, 0x5, {0x1}}, {0x7, 0x0, {0x1, 0xff000000}}, {0x9, 0xc4e4, {0x1, 0x7}}, {0x2, 0x0, {0x1, 0x2}}, {0x0, 0xb3, {0x3, 0x8}}, {}, {}, {}, {}, {}, {0x7ff, 0x7, {0x1}}, {}, {0x0, 0x0, {0x3}}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x2, {0x1, 0x40}}]}}}, {{0x254, 0x1, {{0x1}, 0x0, 0x4, 0x2, 0x2, 0x5, 'syz0\x00', "c19f1a766d0e2257bf6a94381f5e81bb20653552b5e1c001ad09688fcd9d7a88", "f675d3cf458fe444665946eaf89ef0fad3022c47c014fb1fbb8482c7c6a4dd3d", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffff, 0x8}, {0x0, 0x0, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "f0c0c655bdf14cbb54efbde56c7ac347df957dc33778a9abb47d948e8df9123a", "1b553d9d6def5760ee0cf27b71759171dc5418bea55c547a3147e6cd2934341a", [{0x6, 0xff, {0x3, 0x800}}, {0x5, 0x5, {0x1, 0x6}}, {0x6, 0x0, {0x2, 0x2}}, {0xeb8, 0x3, {0x2, 0x5}}, {0x200, 0x3, {0x0, 0xe5}}, {0x8000, 0x0, {0x3, 0xaec4}}, {0x8, 0x7, {0x1, 0x63}}, {0x5, 0x5, {0x0, 0x81}}, {0x76b, 0x6, {0x3, 0x7ff}}, {0x0, 0xfff9, {0x0, 0x3}}, {0x1, 0x8}, {0x0, 0x1, {0x2, 0x2}}, {0x0, 0x0, {0x0, 0x5}}, {}, {}, {}, {0x3, 0x100}, {0x0, 0x0, {0x3}}, {}, {0x0, 0x0, {0x3}}, {0x0, 0xd10b}, {0xcbf, 0x100, {0x3, 0x1}}, {0x3ff, 0xff3, {0x3, 0xa9}}, {0x6, 0x3, {0x1, 0xffff}}, {0x8, 0x7ff, {0x3, 0x3}}, {0x0, 0x9, {0x0, 0x8}}, {0x3, 0x1ff, {0x0, 0x3}}, {0x3, 0x40, {0x1, 0x6}}, {0x2, 0xff80, {0x3, 0x3}}, {0x1, 0x0, {0x3, 0x9}}, {0x0, 0x4, {0x0, 0x1e}}, {0x7, 0x5, {0x3}}, {0x0, 0x0, {0x0, 0x7fffffff}}, {0x8, 0x46, {0x3, 0x3}}, {0xfb, 0x0, {0x3}}, {0xfffa, 0x0, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "c54cc97d7c96e8437a34714aac81f65c4f53ab0d8c7da51115a70c253a40f606", "998be8adf50aeb94baa7aafe809d88c31459ee183b610a2c31b128dc811a3cd2"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "47b15517fc7d08a3c66dba17c00305c2b6c7ece001cde96d89cffe41dc113bbe", "3516749af688915ce885c4c0d654574d048bd16b82c3c725b1bab64a351c4813", [{}, {}, {}, {}, {}, {}, {}, {0x5, 0x2bf, {0x2, 0x7fffffff}}, {0x1c2, 0x800, {0x0, 0x8}}, {0x8000, 0x5, {0x2, 0x7bc}}, {0x6, 0x1, {0x0, 0x5}}, {0x2, 0xa7e, {0x2, 0x8}}, {0x40, 0xfd5, {0x1, 0x4}}, {0x0, 0x0, {0x0, 0x8}}, {0x40}, {}, {}, {}, {}, {0x6}, {0x0, 0x2, {0x0, 0x4}}, {}, {}, {}, {}, {}, {}, {0x7fff, 0x800}, {0x1, 0x8}, {0xe0, 0xfff, {0x2, 0x9}}, {0x100, 0x5, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "2cbfb7fb7b8009e95d23fe0c03ef87a7a64207bf968024952811dcdfbb5e82d1", "8337368bb2483c98f593f6a0a3a1e49157d6db625fd1c24f82ac846c311d045b"}}}]}, 0x1060}}, 0x0) [ 1356.538007][T14074] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 17:41:04 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x240101, 0x0) signalfd(r0, &(0x7f00000008c0), 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x9, 0x8}, &(0x7f0000000140)=0xc) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "633bb55bb96c9f7c7b3b57dc74d54154dc68a26454a5e74152a1be4e5da951b419dcaafc5bfcfa05476bd2e2aa5a4419272168bec2aa48092299440d5b05f23f"}, 0x48, 0xfffffffffffffffe) [ 1356.579283][T14074] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1356.616086][ T9481] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 17:41:04 executing program 1: add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) fork() [ 1356.645196][ T9481] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1356.657001][T14074] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1356.683357][T14074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.693632][ T9481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.722218][ T9481] usb 1-1: config 0 descriptor?? [ 1356.733392][T14074] usb 5-1: config 0 descriptor?? 17:41:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @broadcast}, 0xc) [ 1356.752460][T16216] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1356.785241][ T9536] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1356.787661][ T9481] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 17:41:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8923, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0}}) 17:41:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x11, r0) 17:41:04 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1356.995295][ T9481] usb 1-1: USB disconnect, device number 78 [ 1357.005713][T14074] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 83 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1357.035666][T16216] usb 3-1: Using ep0 maxpacket: 8 [ 1357.041020][T14074] usb 5-1: USB disconnect, device number 83 [ 1357.060793][T14074] usblp0: removed [ 1357.094121][ T9536] usb 6-1: Using ep0 maxpacket: 8 [ 1357.165517][T16216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1357.185145][T16216] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1357.217269][T16216] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1357.240097][T16216] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1357.254375][ T9536] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1357.264792][ T9536] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1357.273785][T16216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.292583][ T9536] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1357.312720][T16216] usb 3-1: config 0 descriptor?? [ 1357.326704][ T9536] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1357.353412][ T9536] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1357.369559][ T9536] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1357.396014][ T9536] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1357.534188][T14074] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1357.564229][ T9536] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1357.573722][ T9536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1357.574348][ T9481] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1357.585412][ T9536] usb 6-1: SerialNumber: syz [ 1357.617126][T16216] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1357.629746][T13766] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1357.665235][ T9536] hub 6-1:5.0: bad descriptor, ignoring hub [ 1357.671261][ T9536] hub: probe of 6-1:5.0 failed with error -5 [ 1357.679687][T16216] usb 3-1: USB disconnect, device number 45 [ 1357.707918][T16216] usblp0: removed [ 1357.784026][T14074] usb 5-1: Using ep0 maxpacket: 8 [ 1357.853979][ T9481] usb 1-1: Using ep0 maxpacket: 16 [ 1357.889270][ T9536] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 77 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1357.910403][T14074] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1357.944604][T14074] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1357.964044][T14074] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1357.979188][ T9481] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1357.998666][ T9481] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1358.009567][T14074] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1358.019644][ T9481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.028638][T14074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.039327][ T9481] usb 1-1: config 0 descriptor?? [ 1358.053285][T14074] usb 5-1: config 0 descriptor?? [ 1358.106634][ T9481] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1358.325565][ T9536] usb 1-1: USB disconnect, device number 79 [ 1358.534825][T13766] usb 6-1: reset high-speed USB device number 77 using dummy_hcd 17:41:06 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) [ 1358.814200][T13766] usb 6-1: Using ep0 maxpacket: 8 [ 1358.976464][T13849] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1359.016645][T14074] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 84 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1359.043664][T14074] usb 5-1: USB disconnect, device number 84 [ 1359.068550][T14074] usblp1: removed [ 1359.181777][ T9536] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1359.206872][ T5115] usb 6-1: USB disconnect, device number 77 [ 1359.225946][ T5115] usblp0: removed [ 1359.434096][T14074] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1359.434103][ T9536] usb 1-1: Using ep0 maxpacket: 16 [ 1359.564119][ T9536] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1359.577147][ T9536] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1359.589262][ T9536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.601186][ T9536] usb 1-1: config 0 descriptor?? 17:41:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:07 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:41:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x25, &(0x7f00000002c0)="dcefa047", 0x4) 17:41:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0xc020660b, 0x0) [ 1359.667176][ T9536] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1359.674083][T14074] usb 5-1: Using ep0 maxpacket: 8 [ 1359.768288][T13900] TCP: TCP_TX_DELAY enabled 17:41:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x15, &(0x7f00000002c0)="dcefa047", 0x4) [ 1359.794814][T14074] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1359.813087][T14074] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 17:41:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @remote, 0x924}}}, 0x90) [ 1359.838134][T14074] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1359.869214][T14074] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1359.907328][T14074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.945291][T14074] usb 5-1: config 0 descriptor?? 17:41:07 executing program 3: process_madvise(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) [ 1359.976359][ T9481] usb 1-1: USB disconnect, device number 80 17:41:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)={0xec4, 0x1, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_PAYLOAD={0xead, 0xa, "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"}]}, 0xec4}}, 0x0) 17:41:07 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0xfffffcd5) 17:41:07 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1360.144240][ T9536] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1360.184389][ T4852] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1360.205833][T14074] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 85 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 17:41:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x17, &(0x7f00000002c0)="dcefa047", 0x4) [ 1360.243169][T14074] usb 5-1: USB disconnect, device number 85 [ 1360.273178][T14074] usblp0: removed [ 1360.414170][ T9536] usb 6-1: Using ep0 maxpacket: 8 [ 1360.434181][ T4852] usb 3-1: Using ep0 maxpacket: 8 [ 1360.544264][ T9536] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1360.552908][ T9536] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1360.554719][ T4852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1360.576567][ T9536] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1360.598868][ T4852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 17:41:08 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) [ 1360.641438][ T4852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1360.646588][ T9536] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1360.676319][ T4852] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1360.696865][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.698670][ T9536] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1360.712983][ T4852] usb 3-1: config 0 descriptor?? [ 1360.734017][T14074] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1360.776162][ T9536] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1360.819459][ T9536] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1360.935085][ T9536] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1360.946326][ T9536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1360.956343][ T9536] usb 6-1: SerialNumber: syz [ 1360.986716][T14074] usb 5-1: Using ep0 maxpacket: 8 [ 1360.996879][T13906] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1361.006040][ T4852] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1361.034003][T14073] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1361.055592][ T4852] usb 3-1: USB disconnect, device number 46 [ 1361.064943][ T9536] hub 6-1:5.0: bad descriptor, ignoring hub [ 1361.070969][ T9536] hub: probe of 6-1:5.0 failed with error -5 [ 1361.075272][ T4852] usblp0: removed [ 1361.104980][T14074] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1361.131354][T14074] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1361.155775][T14074] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1361.171049][T14074] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1361.193456][T14074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.210231][T14074] usb 5-1: config 0 descriptor?? [ 1361.288302][T14073] usb 1-1: Using ep0 maxpacket: 16 [ 1361.288527][ T9536] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 78 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1361.347156][ T3239] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.353491][ T3239] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.414138][T14073] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1361.429506][T14073] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1361.440714][T14073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.454600][T14073] usb 1-1: config 0 descriptor?? [ 1361.479667][T14074] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 86 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1361.506630][T14073] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1361.536754][T14074] usb 5-1: USB disconnect, device number 86 [ 1361.716485][T14073] usb 1-1: USB disconnect, device number 81 [ 1362.285175][T13906] usb 6-1: reset high-speed USB device number 78 using dummy_hcd [ 1362.544049][T13906] usb 6-1: Using ep0 maxpacket: 8 [ 1362.696214][T13991] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1362.734370][T14074] usblp1: removed 17:41:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:10 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0xfffffffffffffffe) 17:41:10 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 17:41:10 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:41:10 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) [ 1362.855181][T14073] usb 6-1: USB disconnect, device number 78 [ 1362.876404][T14073] usblp0: removed 17:41:10 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0xb, 0x9, 0x9}, 0x10}, 0x78) 17:41:10 executing program 3: clone3(&(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000002e40)=""/221, 0xdd, 0x0, 0x0}, 0x58) 17:41:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) [ 1363.104160][T14074] usb 5-1: new high-speed USB device number 87 using dummy_hcd 17:41:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xa, &(0x7f00000002c0)="dcefa047", 0x4) [ 1363.174283][ T5115] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1363.204071][ T4852] usb 3-1: new high-speed USB device number 47 using dummy_hcd 17:41:10 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 17:41:10 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1031, &(0x7f0000000f00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000f80), &(0x7f0000000fc0)) [ 1363.354119][T14074] usb 5-1: Using ep0 maxpacket: 8 17:41:10 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1363.384079][T14073] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1363.415011][T14074] usb 5-1: device descriptor read/all, error -71 [ 1363.454248][ T4852] usb 3-1: Using ep0 maxpacket: 8 [ 1363.464190][ T5115] usb 1-1: Using ep0 maxpacket: 16 [ 1363.574975][ T4852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1363.598175][ T4852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1363.616562][ T5115] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1363.630940][ T4852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1363.639273][ T5115] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1363.646937][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1363.659309][ T5115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.693543][ T5115] usb 1-1: config 0 descriptor?? [ 1363.696095][ T4852] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1363.721660][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.733208][ T4852] usb 3-1: config 0 descriptor?? [ 1363.746789][ T5115] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1363.794909][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1363.803320][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1363.815014][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1363.831986][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1363.842865][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1363.859839][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1363.870571][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1363.964857][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1363.969118][ T5115] usb 1-1: USB disconnect, device number 82 [ 1363.974395][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1363.999133][T14073] usb 6-1: SerialNumber: syz [ 1364.009318][ T4852] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1364.045949][T14036] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1364.063098][ T4852] usb 3-1: USB disconnect, device number 47 [ 1364.070851][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1364.086805][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1364.126861][ T4852] usblp0: removed [ 1364.299610][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 79 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1364.915263][T14036] usb 6-1: reset high-speed USB device number 79 using dummy_hcd [ 1365.154050][T14036] usb 6-1: Using ep0 maxpacket: 8 [ 1365.316323][T14096] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1365.541394][ T4852] usb 6-1: USB disconnect, device number 79 [ 1365.564026][ T4852] usblp0: removed 17:41:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:13 executing program 4: ptrace$peekuser(0x3, 0x0, 0x0) sync() 17:41:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, 0x0) 17:41:13 executing program 3: clone3(&(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000003300)}, 0x58) 17:41:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:41:13 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:41:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "abd0bac8"}, &(0x7f0000000080)=0x28) 17:41:13 executing program 1: syz_io_uring_setup(0x88d, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 17:41:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400100000001010200000000000000000a0000049800018006000340000300002c00018014000300fe8000000000000000000000000000bb14000400ff01000000000000000000000000000114000180080001006401010208000200ac1e000106000340000200000c00028005000100ba0000000c00028005000100840000002c00018014000300fc010000000000000000000000000000140004"], 0x140}}, 0x0) 17:41:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002100, 0x0) 17:41:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x22, &(0x7f00000002c0)="dcefa047", 0x4) [ 1366.353786][T14137] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'. 17:41:13 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev}}) [ 1366.405644][T27506] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1366.415227][ T4852] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1366.534416][ T5115] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1366.654089][ T4852] usb 1-1: Using ep0 maxpacket: 16 [ 1366.674129][T27506] usb 3-1: Using ep0 maxpacket: 8 [ 1366.775040][ T4852] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1366.788269][ T4852] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1366.804445][ T5115] usb 6-1: Using ep0 maxpacket: 8 [ 1366.810292][T27506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1366.824544][ T4852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.824626][T27506] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1366.846141][ T4852] usb 1-1: config 0 descriptor?? [ 1366.860234][T27506] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1366.875366][T27506] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1366.885599][T27506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.902281][T27506] usb 3-1: config 0 descriptor?? [ 1366.906517][ T4852] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1366.947598][ T5115] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1366.958600][ T5115] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1366.980267][ T5115] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1366.995850][ T5115] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1367.009225][ T5115] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1367.022298][ T5115] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1367.036200][ T5115] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1367.110243][ T9536] usb 1-1: USB disconnect, device number 83 [ 1367.151534][ T5115] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1367.160759][ T5115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1367.175857][ T5115] usb 6-1: SerialNumber: syz [ 1367.191356][T27506] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1367.215875][T14130] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1367.225048][T27506] usb 3-1: USB disconnect, device number 48 [ 1367.235729][ T5115] hub 6-1:5.0: bad descriptor, ignoring hub [ 1367.241751][ T5115] hub: probe of 6-1:5.0 failed with error -5 [ 1367.270146][T27506] usblp0: removed [ 1367.459648][ T5115] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 80 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1367.754204][T27506] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1368.004252][T27506] usb 3-1: Using ep0 maxpacket: 8 [ 1368.115913][T14130] usb 6-1: reset high-speed USB device number 80 using dummy_hcd [ 1368.134172][T27506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1368.143964][T27506] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1368.153648][T27506] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1368.171322][T27506] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1368.181698][T27506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.198515][T27506] usb 3-1: config 0 descriptor?? [ 1368.374121][T14130] usb 6-1: Using ep0 maxpacket: 8 [ 1368.526970][T14188] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1368.668772][T27506] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1368.682444][T27506] usb 3-1: USB disconnect, device number 49 [ 1368.707634][T27506] usblp1: removed [ 1368.759410][T14073] usb 6-1: USB disconnect, device number 80 [ 1368.769328][T14073] usblp0: removed 17:41:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:16 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x0, 0x401) write$cgroup_subtree(r0, &(0x7f0000000200)={[{0x0, 'cpu'}]}, 0x5) 17:41:16 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001300)={{0x2, 0x0, @dev}, {0x306, @random="089ff9c3dcc9"}, 0x0, {0x2, 0x0, @empty}, 'batadv0\x00'}) 17:41:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8921, &(0x7f00000007c0)={'ip6gre0\x00', 0x0}) 17:41:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:41:16 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:41:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 17:41:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) 17:41:16 executing program 1: add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) 17:41:16 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) clone3(&(0x7f0000003340)={0x0, 0x0, 0x0, &(0x7f0000002e00), {}, &(0x7f0000002e40)=""/221, 0xdd, &(0x7f0000002f40)=""/247, &(0x7f0000003300)=[0x0], 0x1}, 0x58) 17:41:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2063, 0x0) 17:41:17 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x2, &(0x7f0000001bc0), 0x8) [ 1369.594271][T14073] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1369.664724][ T9536] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1369.754080][T14074] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1369.834112][T14073] usb 3-1: Using ep0 maxpacket: 8 [ 1369.924126][ T9536] usb 1-1: Using ep0 maxpacket: 16 [ 1369.954314][T14073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1369.964372][T14073] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1369.974829][T14073] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1369.994601][T14073] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1370.004455][T14073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.016770][T14074] usb 6-1: Using ep0 maxpacket: 8 [ 1370.035884][T14073] usb 3-1: config 0 descriptor?? [ 1370.064738][ T9536] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1370.078049][ T9536] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1370.096039][ T9536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.107765][ T9536] usb 1-1: config 0 descriptor?? [ 1370.134866][T14074] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1370.143421][T14074] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1370.167370][T14074] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1370.180144][T14074] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1370.186677][ T9536] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1370.209661][T14074] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1370.230794][T14074] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1370.242404][T14074] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1370.299468][T14073] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1370.327615][T14073] usb 3-1: USB disconnect, device number 50 [ 1370.334401][T14074] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1370.346128][T14074] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1370.369151][T14074] usb 6-1: SerialNumber: syz [ 1370.374661][T14073] usblp0: removed [ 1370.398996][ T9531] usb 1-1: USB disconnect, device number 84 [ 1370.415750][T14237] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1370.435471][T14074] hub 6-1:5.0: bad descriptor, ignoring hub [ 1370.442256][T14074] hub: probe of 6-1:5.0 failed with error -5 [ 1370.657984][T14074] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 81 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1370.844055][T14073] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1371.084044][T14073] usb 3-1: Using ep0 maxpacket: 8 [ 1371.204237][T14073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1371.218995][T14073] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1371.230578][T14073] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1371.244916][T14073] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1371.254845][T14073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.274296][T14073] usb 3-1: config 0 descriptor?? [ 1371.425375][T14237] usb 6-1: reset high-speed USB device number 81 using dummy_hcd [ 1371.664116][T14237] usb 6-1: Using ep0 maxpacket: 8 [ 1371.846479][T14294] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1371.899368][T14073] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1371.941972][T14073] usb 3-1: USB disconnect, device number 51 [ 1371.961042][T14073] usblp1: removed [ 1372.070214][ T9531] usb 6-1: USB disconnect, device number 81 [ 1372.092382][ T9531] usblp0: removed 17:41:20 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0}}) 17:41:20 executing program 3: add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x10, 0x0) 17:41:20 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:41:20 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "633bb55bb96c9f7c7b3b57dc74d54154dc68a26454a5e74152a1be4e5da951b419dcaafc5bfcfa05476bd2e2aa5a4419272168bec2aa48092299440d5b05f23f"}, 0x48, 0xfffffffffffffffe) keyctl$search(0x6, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0) 17:41:20 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:41:20 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "633bb55bb96c9f7c7b3b57dc74d54154dc68a26454a5e74152a1be4e5da951b419dcaafc5bfcfa05476bd2e2aa5a4419272168bec2aa48092299440d5b05f23f"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x4, r0, r0) 17:41:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x0, 0x1, &(0x7f0000000080)=@raw=[@ldst], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:41:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 17:41:20 executing program 3: add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) 17:41:20 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "633bb55bb96c9f7c7b3b57dc74d54154dc68a26454a5e74152a1be4e5da951b419dcaafc5bfcfa05476bd2e2aa5a4419272168bec2aa48092299440d5b05f23f"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x4, r0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r0, 0x0) 17:41:20 executing program 4: socketpair(0x10, 0x2, 0x0, &(0x7f0000000100)) [ 1372.904428][ T9531] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1372.944343][ T4852] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1373.064372][T14073] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1373.164429][ T9531] usb 1-1: Using ep0 maxpacket: 16 [ 1373.194146][ T4852] usb 3-1: Using ep0 maxpacket: 8 [ 1373.304139][ T9531] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1373.315229][ T4852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1373.318331][ T9531] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1373.326937][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1373.340495][ T9531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.348873][ T4852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1373.359384][ T4852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1373.361975][ T9531] usb 1-1: config 0 descriptor?? [ 1373.394234][ T4852] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1373.403356][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.430972][ T4852] usb 3-1: config 0 descriptor?? [ 1373.455020][ T9531] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1373.474292][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1373.482738][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1373.522112][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1373.546827][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1373.565399][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1373.577232][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1373.591280][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1373.654628][ T9531] usb 1-1: USB disconnect, device number 85 [ 1373.684161][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1373.696919][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1373.718409][T14073] usb 6-1: SerialNumber: syz [ 1373.725970][ T4852] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1373.765885][T14344] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1373.768650][ T4852] usb 3-1: USB disconnect, device number 52 [ 1373.785316][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1373.791362][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1373.824625][ T4852] usblp0: removed [ 1374.015359][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 82 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1374.287827][ T4852] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1374.534879][ T4852] usb 3-1: Using ep0 maxpacket: 8 [ 1374.634917][T14344] usb 6-1: reset high-speed USB device number 82 using dummy_hcd [ 1374.660792][ T4852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1374.679428][ T4852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1374.691168][ T4852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1374.709995][ T4852] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1374.719624][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.734323][ T4852] usb 3-1: config 0 descriptor?? [ 1374.924007][T14344] usb 6-1: Using ep0 maxpacket: 8 [ 1375.087457][T14401] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1375.199007][ T4852] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1375.241608][ T4852] usb 3-1: USB disconnect, device number 53 [ 1375.253367][ T4852] usblp1: removed [ 1375.312086][T27506] usb 6-1: USB disconnect, device number 82 [ 1375.321258][T27506] usblp0: removed 17:41:23 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @remote}}) 17:41:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x9, &(0x7f00000002c0)="dcefa047", 0x4) 17:41:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, 0x0, 0x2, 0x301}, 0x14}}, 0x0) 17:41:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000010) 17:41:23 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:41:23 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 17:41:23 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002e80), 0xffffffffffffffff) 17:41:23 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$clear(0xb, r2) 17:41:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x14, &(0x7f00000002c0)="dcefa047", 0x4) 17:41:23 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x210) 17:41:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x0) [ 1376.184066][T27506] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1376.224297][ T9531] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1376.494278][T27506] usb 3-1: Using ep0 maxpacket: 8 [ 1376.499512][ T9531] usb 6-1: Using ep0 maxpacket: 8 [ 1376.644959][T27506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1376.654865][ T9531] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1376.663233][ T9531] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1376.674247][T27506] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1376.685573][ T9531] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1376.696723][T27506] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1376.711260][ T9531] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1376.721323][T27506] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1376.731410][ T9531] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1376.743371][T27506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.752149][ T9531] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1376.763294][ T9531] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1376.777572][T27506] usb 3-1: config 0 descriptor?? [ 1376.874361][ T9531] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1376.883489][ T9531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1376.893494][ T9531] usb 6-1: SerialNumber: syz [ 1376.925699][T14449] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1376.954519][ T9531] hub 6-1:5.0: bad descriptor, ignoring hub [ 1376.960587][ T9531] hub: probe of 6-1:5.0 failed with error -5 [ 1377.038881][T27506] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1377.063381][T27506] usb 3-1: USB disconnect, device number 54 [ 1377.082596][T27506] usblp0: removed [ 1377.186401][ T9531] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1377.624133][T27506] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1377.844725][T14449] usb 6-1: reset high-speed USB device number 83 using dummy_hcd [ 1377.874009][T27506] usb 3-1: Using ep0 maxpacket: 8 [ 1378.004059][T27506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1378.014768][T27506] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1378.025517][T27506] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1378.038628][T27506] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1378.048116][T27506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.061281][T27506] usb 3-1: config 0 descriptor?? [ 1378.094163][T14449] usb 6-1: Using ep0 maxpacket: 8 [ 1378.266270][T14500] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1378.329327][T27506] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1378.353475][T27506] usb 3-1: USB disconnect, device number 55 [ 1378.363758][T27506] usblp1: removed [ 1378.492851][T14074] usb 6-1: USB disconnect, device number 83 [ 1378.501383][T14074] usblp0: removed 17:41:26 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x1060, 0x1, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{0x2, 0x9}, 0x1, 0x9, 0x7cc5, 0x835, 0x1b, 'syz0\x00', "e3c1cd9ad05926856973fbee4cde375eef7f240c037cedf3faab690b2091d62f", "df445717c9a2ed03562f0b3c975a57b53d3117cccdced2f527b114e098844e99", [{0x9, 0x3, {0x3, 0xfc1f}}, {0xc510, 0x1, {0x0, 0xffffffff}}, {0x1ff, 0x7, {0x3, 0x7}}, {0x9, 0x80, {0x0, 0x7}}, {0x4, 0x80, {0x0, 0xffff}}, {0xff01, 0x3, {0x0, 0x800}}, {0x1, 0x1f, {0x0, 0x81}}, {0x7, 0x4, {0x1, 0x7bf0}}, {0x3, 0x0, {0x0, 0xb065}}, {0x0, 0x0, {0x0, 0x1}}, {}, {}, {}, {0x7ff, 0x6, {0x1}}, {0x4, 0x2cf, {0x3, 0x6}}, {0x2, 0x1000, {0x0, 0x20}}, {0x3f, 0x7fff, {0x3, 0x2}}, {0x0, 0x7, {0x2}}, {0x3f, 0xdb0, {0x2, 0x2}}, {0x8001, 0x8, {0x2, 0x6}}, {0x2, 0x4000, {0x0, 0x3}}, {0x0, 0x0, {0x3, 0x3}}, {0x8, 0x1}, {0x3, 0x9, {0x2, 0x6377}}, {}, {0x200, 0x0, {0x3, 0xc000000}}, {0x2, 0x6, {0x4d028c97fe9aa00c, 0x9}}, {0x7, 0x1f, {0x2, 0xdd7c}}, {0x3f, 0x6, {0x1, 0x6}}, {0x6, 0xcc, {0x1, 0x726}}, {0x1, 0x1, {0x2, 0x101}}, {0x7, 0x4, {0x2, 0x80}}, {0xf763, 0x7, {0x3, 0xfffffff7}}, {0x2, 0x0, {0x3, 0x9214}}, {0x2, 0x7f, {0x3, 0xfffffff8}}, {0x1000, 0x3, {0x1, 0x3f}}, {0x4, 0x4, {0x0, 0x3}}, {0x7, 0x4, {0x1}}, {0x7fff, 0x9, {0x2, 0x4}}, {0x0, 0x8, {0x1, 0x2ea1}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x3, 0x5d, 0x100, 0x3, 0x13, 'syz1\x00', "cc95585244557abe4cc13668d35c75b172584f26ac30834b6661e22c85838e32", "2570ae4dbe7b804904e2ba944f769581450f6e7d0f1034b1c0d7a694990c3e54", [{0x40, 0x1000, {0x0, 0x3}}, {0xff, 0x400, {0x2, 0x7}}, {0x8, 0x5, {0x1, 0xffff}}, {0x7, 0x0, {0x1, 0xff000000}}, {0x9, 0xc4e4, {0x1, 0x7}}, {0x2, 0x0, {0x1, 0x2}}, {0x7, 0xb3, {0x3, 0x8}}, {0x6, 0x8, {0x1, 0x4}}, {0x20, 0x1, {0x2}}, {0xfff, 0x9, {0x1, 0x1}}, {0x40, 0x6, {0x1, 0x14}}, {0x40, 0x400, {0x3, 0x8}}, {0x7ff, 0x7, {0x1, 0x9}}, {0xfffd, 0x1, {0x3, 0x4}}, {0x800, 0x2fc9, {0x3, 0x5}}, {0x1, 0x8, {0x1, 0x6}}, {0x3, 0x1, {0x3, 0x7}}, {0x100, 0x0, {0x2, 0x1}}, {0x401, 0xd7b, {0x1, 0x400}}, {0x6, 0x8, {0x0, 0x9c11}}, {0x7bd, 0x2, {0x0, 0x4}}, {0x40, 0x8000, {0x1, 0x1ff}}, {0x1, 0x0, {0x3, 0x7fff}}, {0x2, 0x2, {0x1, 0x7}}, {0x1, 0x3000, {0x1, 0x7fffffff}}, {0xffe2, 0x8, {0x0, 0x9}}, {0xffe1, 0xfc01, {0x3, 0x7fffffff}}, {0x2255, 0xe4, {0x2, 0x80000000}}, {0x7, 0xc00, {0x3, 0x3}}, {0x0, 0x2, {0x1, 0x1}}, {0x2, 0x5, {0x1, 0x6a2}}, {0xfff7, 0x3, {0x3, 0xa360}}, {0x8000, 0xfffd, {0x0, 0x6}}, {0xac3, 0x8, {0x0, 0x7}}, {0x1, 0x7fff, {0x0, 0xffff6b2e}}, {0x6, 0xffff, {0x1, 0x3}}, {0x5, 0x7ff, {0x1, 0x8}}, {0x1, 0x9, {0x0, 0x1}}, {0x353e}, {0x7f, 0x2, {0x1, 0x40}}]}}}, {{0x254, 0x1, {{0x1, 0xcc}, 0x54, 0x4, 0x2, 0x2, 0x5, 'syz0\x00', "c19f1a766d0e2257bf6a94381f5e81bb20653552b5e1c001ad09688fcd9d7a88", "f675d3cf458fe444665946eaf89ef0fad3022c47c014fb1fbb8482c7c6a4dd3d", [{0xfcdc, 0x200, {0x2, 0x6}}, {0x2, 0xffff, {0x1, 0x22}}, {0x1, 0x1, {0x1, 0x9}}, {0x6, 0x1, {0x1, 0x2}}, {0xfff, 0x3ff, {0x1, 0x9}}, {0x9, 0x3ff, {0x0, 0x1}}, {0x800, 0x2, {0xdfcf12c52b7a778e, 0xb480}}, {0x5, 0x1, {0x3}}, {0x19a, 0x6, {0x2, 0x6}}, {0x81, 0x0, {0x2, 0x3}}, {0x3, 0x1000, {0x3, 0x200}}, {0xb1, 0x0, {0x3, 0x3ff}}, {0x7, 0x80, {0x0, 0x1f}}, {0x40, 0x8, {0x3, 0x3}}, {0x100, 0x8, {0x1, 0x1f8}}, {0x0, 0x9, {0x3, 0x6}}, {0x4, 0x493, {0x3, 0x4}}, {0x5, 0x0, {0x2, 0x3}}, {0x9, 0x2, {0x3, 0x1}}, {0x8, 0xcbc7, {0x1, 0x7}}, {0x100, 0x4, {0x3, 0x6}}, {0x0, 0x81, {0x2, 0x1}}, {0x7}, {0x4, 0x20, {0x0, 0x100}}, {0x400, 0x7fff, {0x3, 0x1b53}}, {0x3f, 0x5, {0x0, 0x7fffffff}}, {0x2, 0x5, {0x1, 0x800}}, {0x8, 0x4, {0x1}}, {0x287, 0x61, {0x0, 0x4}}, {0x8000, 0x401, {0x3, 0x2}}, {0x6, 0x1f, {0x3, 0x400}}, {0xe7, 0x80, {0x3, 0x40}}, {0x401, 0x7, {0x1, 0x1}}, {0xfff8, 0x5, {0x2, 0x4}}, {0x1, 0x400, {0x3, 0x6}}, {0x9, 0x6, {0x0, 0x3ff}}, {0x49, 0xfcdd, {0x0, 0x800}}, {0xffff, 0x8, {0x3, 0x66}}, {0x49, 0x400, {0x2, 0x6}}, {0x3cc3, 0x5, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0xfffff000}, 0x3, 0x7c, 0x1, 0x6, 0x1f, 'syz1\x00', "f0c0c655bdf14cbb54efbde56c7ac347df957dc33778a9abb47d948e8df9123a", "1b553d9d6def5760ee0cf27b71759171dc5418bea55c547a3147e6cd2934341a", [{0x6, 0xff, {0x3, 0x800}}, {0x5, 0x5, {0x1, 0x6}}, {0x0, 0x0, {0x0, 0x2}}, {0xeb8, 0x3, {0x2, 0x5}}, {0x200, 0x3, {0x0, 0xe5}}, {0x8000, 0x0, {0x3, 0xaec4}}, {0x8, 0x7, {0x1, 0x63}}, {0x5, 0x5, {0x0, 0x81}}, {0x76b, 0x6, {0x3, 0x7ff}}, {0x3f, 0xfff9, {0x0, 0x3}}, {0x1, 0x8, {0x1}}, {0x0, 0x1, {0x2, 0x2}}, {0xbc52, 0x401, {0x1, 0x5}}, {0xfff, 0x3, {0x2, 0x7ff}}, {0xfffa, 0x1, {0x2, 0x7fff}}, {0x1f, 0x30, {0x1}}, {0x3, 0x100, {0x2, 0x3}}, {0x7fff, 0x0, {0x3}}, {0x2, 0x2, {0x3, 0x6}}, {0x0, 0x0, {0x3, 0xbcd5}}, {0x0, 0xd10b, {0x0, 0x9a9}}, {0xcbf, 0x100, {0x3, 0x1}}, {0x3ff, 0xff3, {0x3, 0xa9}}, {0x6, 0x3, {0x1, 0xffff}}, {0x8, 0x7ff, {0x3, 0x3}}, {0x0, 0x9, {0x0, 0x8}}, {0x3, 0x1ff, {0x0, 0x3}}, {0x3, 0x40, {0x1, 0x6}}, {0x2, 0xff80, {0x3, 0x3}}, {0x1, 0x0, {0x3, 0x9}}, {0x8, 0x4, {0x0, 0x1e}}, {0x7, 0x5, {0x3, 0x7f}}, {0x1ff, 0x2, {0x2, 0x7fffffff}}, {0x8, 0x46, {0x3, 0x3}}, {0xfb, 0x0, {0x3}}, {0xfffa, 0x0, {0x2, 0x8}}, {0xfff9, 0x7fff, {0x0, 0x1}}, {0x400, 0xffff, {0x3, 0x100}}, {0x5, 0x2, {0x2, 0x1ff}}, {0x2, 0x1b, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x20}, 0x8, 0x0, 0x0, 0xfffa, 0x1f, 'syz0\x00', "c54cc97d7c96e8437a34714aac81f65c4f53ab0d8c7da51115a70c253a40f606", "998be8adf50aeb94baa7aafe809d88c31459ee183b610a2c31b128dc811a3cd2", [{0x80, 0xd3, {0x1, 0x2}}, {0x6, 0xb37a, {0x0, 0x4}}, {0x1000, 0x1ff, {0x0, 0x7}}, {0x800, 0x12ca, {0x0, 0x5}}, {0x9, 0x7f, {0x0, 0x8}}, {0x9, 0x6, {0x1, 0x8001}}, {0x4, 0x9, {0x0, 0x2470}}, {0x6, 0x1c9, {0x0, 0xfffffffc}}, {0x9, 0x3, {0xe611750488713c34, 0x8000}}, {0x20, 0x400, {0x1, 0x401}}, {0xffff, 0x1, {0x2, 0x81}}, {0x2, 0x6, {0x0, 0x2}}, {0xff5b, 0x1ff, {0x3}}, {0x7, 0x7ff, {0x1, 0x376a}}, {0x0, 0x7ff, {0x0, 0x3}}, {0xff, 0xfff7, {0x2, 0x3}}, {0x0, 0x5, {0x1, 0xfffffffa}}, {0xff, 0x100, {0x1, 0x1000}}, {0xfff, 0xe7a0, {0x3, 0x80000000}}, {0x5, 0xfffc, {0x0, 0x2}}, {0x1ff, 0x430, {0x1, 0xac70}}, {0x9, 0x8001, {0x0, 0x7}}, {0x5, 0x0, {0x0, 0x5}}, {0x1, 0x6, {0x0, 0xe63}}, {0x0, 0x20, {0x2, 0x80000001}}, {0x0, 0x0, {0x1, 0xc8d9}}, {0x607, 0x100, {0x3}}, {0x8, 0x6, {0x1, 0x20}}, {0x0, 0x101, {0x2, 0x80000000}}, {0x3, 0x1, {0x2, 0xc13}}, {0x0, 0x0, {0x0, 0x77}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "47b15517fc7d08a3c66dba17c00305c2b6c7ece001cde96d89cffe41dc113bbe", "3516749af688915ce885c4c0d654574d048bd16b82c3c725b1bab64a351c4813", [{}, {}, {}, {}, {0x3190, 0xa84, {0x1}}, {0x1ac8, 0x7fff, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "2cbfb7fb7b8009e95d23fe0c03ef87a7a64207bf968024952811dcdfbb5e82d1", "8337368bb2483c98f593f6a0a3a1e49157d6db625fd1c24f82ac846c311d045b"}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) 17:41:26 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 17:41:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) 17:41:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x13, &(0x7f00000002c0)="dcefa047", 0x4) 17:41:26 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:41:26 executing program 3: add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f00000001c0)="10de", 0x2, 0xfffffffffffffffd) 17:41:26 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(r0) 17:41:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x10, &(0x7f00000002c0)="dcefa047", 0x4) 17:41:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000440)) 17:41:26 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001bc0)=0x40000, 0x8) 17:41:26 executing program 3: add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000300)={0x0, "f65068733e5159256b6ae77fa17847a549d05839b7abdb706c26918ed5d19d11e4b61c651430f56ace17d97e66c0d2957e09bd14ef0f0f5e38702e7c44d187bf"}, 0x48, r0) [ 1379.364006][ T4852] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1379.384163][T14074] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1379.624008][ T4852] usb 3-1: Using ep0 maxpacket: 8 [ 1379.644281][T14074] usb 6-1: Using ep0 maxpacket: 8 [ 1379.754845][ T4852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1379.765207][ T4852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1379.777684][T14074] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1379.786217][ T4852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1379.801623][T14074] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1379.811279][T14074] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1379.822872][ T4852] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1379.832931][T14074] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1379.843082][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.852815][T14074] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1379.869964][ T4852] usb 3-1: config 0 descriptor?? [ 1379.875983][T14074] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1379.891094][T14074] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1380.004271][T14074] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1380.013370][T14074] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1380.021810][T14074] usb 6-1: SerialNumber: syz [ 1380.054080][T14550] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1380.084647][T14074] hub 6-1:5.0: bad descriptor, ignoring hub [ 1380.090740][T14074] hub: probe of 6-1:5.0 failed with error -5 [ 1380.155270][ T4852] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1380.187314][ T4852] usb 3-1: USB disconnect, device number 56 [ 1380.202359][ T4852] usblp0: removed [ 1380.315501][T14074] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1380.754019][ T4852] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1380.934607][T14550] usb 6-1: reset high-speed USB device number 84 using dummy_hcd [ 1380.994428][ T4852] usb 3-1: Using ep0 maxpacket: 8 [ 1381.114120][ T4852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1381.123819][ T4852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1381.135805][ T4852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1381.149875][ T4852] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1381.159858][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.170919][ T4852] usb 3-1: config 0 descriptor?? [ 1381.204191][T14550] usb 6-1: Using ep0 maxpacket: 8 [ 1381.346306][T14605] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1381.435072][ T4852] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1381.461627][ T4852] usb 3-1: USB disconnect, device number 57 [ 1381.496172][ T4852] usblp1: removed [ 1381.573236][T16216] usb 6-1: USB disconnect, device number 84 [ 1381.585015][T16216] usblp0: removed 17:41:29 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @empty}}) 17:41:29 executing program 3: renameat(0xffffffffffffffff, &(0x7f0000002880)='./file0\x00', 0xffffffffffffffff, 0x0) 17:41:29 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "633bb55bb96c9f7c7b3b57dc74d54154dc68a26454a5e74152a1be4e5da951b419dcaafc5bfcfa05476bd2e2aa5a4419272168bec2aa48092299440d5b05f23f"}, 0x48, 0xfffffffffffffffe) keyctl$link(0xc, 0x0, r0) 17:41:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x11, &(0x7f00000002c0)="dcefa047", 0x4) 17:41:29 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:41:29 executing program 0: openat$vcs(0xffffffffffffff9c, 0x0, 0x430200, 0x0) 17:41:29 executing program 4: keyctl$clear(0xc, 0x0) 17:41:29 executing program 3: clone3(&(0x7f00000002c0)={0x1e4220100, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2$9p(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 17:41:29 executing program 1: clone3(&(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:41:29 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 17:41:29 executing program 4: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) [ 1382.447527][T14669] IPVS: ftp: loaded support on port[0] = 21 [ 1382.454145][T27506] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1382.544217][ T9531] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1382.717887][T14669] IPVS: ftp: loaded support on port[0] = 21 [ 1382.734240][T27506] usb 3-1: Using ep0 maxpacket: 8 [ 1382.814158][ T9531] usb 6-1: Using ep0 maxpacket: 8 [ 1382.866178][T27506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1382.885080][T27506] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1382.914927][T27506] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1382.941022][T27506] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1382.963049][T27506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.973109][ T9531] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1382.985215][ T9531] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1383.011224][T27506] usb 3-1: config 0 descriptor?? [ 1383.023543][ T9531] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1383.057471][ T9531] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1383.080917][ T9531] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1383.106572][ T9531] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1383.127968][ T9531] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1383.245068][ T9531] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1383.257828][ T9531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1383.268909][ T9531] usb 6-1: SerialNumber: syz [ 1383.299630][T14659] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1383.316506][T27506] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1383.345311][ T9531] hub 6-1:5.0: bad descriptor, ignoring hub [ 1383.351590][ T9531] hub: probe of 6-1:5.0 failed with error -5 [ 1383.383742][T27506] usb 3-1: USB disconnect, device number 58 [ 1383.424531][T27506] usblp0: removed [ 1383.573711][ T9531] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 85 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1383.954094][T27506] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1384.234059][T27506] usb 3-1: Using ep0 maxpacket: 8 [ 1384.334622][T14656] usb 6-1: reset high-speed USB device number 85 using dummy_hcd [ 1384.354773][T27506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1384.367164][T27506] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1384.384878][T27506] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1384.414347][T27506] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1384.433700][T27506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.447070][T27506] usb 3-1: config 0 descriptor?? [ 1384.584130][T14656] usb 6-1: Using ep0 maxpacket: 8 [ 1384.726395][T14659] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1384.770461][T27506] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1384.817378][T27506] usb 3-1: USB disconnect, device number 59 [ 1384.862699][T27506] usblp1: removed [ 1384.955861][T16216] usb 6-1: USB disconnect, device number 85 [ 1384.975699][T16216] usblp0: removed 17:41:32 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:32 executing program 0: openat$vfio(0xffffffffffffff9c, &(0x7f0000000080), 0x84201, 0x0) 17:41:32 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 17:41:32 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 17:41:32 executing program 3: clone3(&(0x7f00000002c0)={0x1e4220100, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2$9p(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 17:41:32 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:41:33 executing program 1: bpf$BPF_GET_BTF_INFO(0x3, 0x0, 0x0) [ 1385.577531][T14797] IPVS: ftp: loaded support on port[0] = 21 17:41:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x1b, &(0x7f0000000140)=@gcm_128={{}, "1f5365613408ba4f", "d4a1d52fe2f810f82af9deeab3538d93", "97438502", "5dfe6fd3872ed67a"}, 0x28) 17:41:33 executing program 4: r0 = eventfd2(0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0xc0000) 17:41:33 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffff7f00000000}], 0x9}, 0x0) [ 1385.815992][T16216] usb 3-1: new high-speed USB device number 60 using dummy_hcd 17:41:33 executing program 0: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x5}, 0x0) 17:41:33 executing program 3: clone3(&(0x7f00000002c0)={0x1e4220100, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2$9p(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="abd26992ff010000ab8edda5070c3542e8acd6830c178800000000000001fb05a7cf42bea1e8f21f52b60b28ec6758d39d45340e8c32af99ddfa4cc9604cd862fa3a5cc7c6f4b54f0114549487fff8eba10999d2e2bf37f49a2febaf6c001e00000000000000000062305e8da0c6327f461d010739d374689aa7cd562201052eae351e9654465e797d392f7cd725260b8b02d08e18309905f37bcdf0c93c46db80cd42ef74f8f519c54cb04ff27886e6d097dadd93e7c4dc4c8916ca5b919f687a73a51c25aad0fdfa8e691e99d7e435be3c89e333c21dff2d99f1f96a790e0f88d999ea045b099507521f7adcbdea74f46edf291f7771f22510882d98b0bd298de36097b634c03f3e863f69992f7625fe5f89a5023db75c0e9aad47537907addc816e282e821db14e4ceb1d8e6fbe757eb2572a5c6c60113e64fef434175b5469bce7683ab27961d1233eefc49bc06cbd7c9d54f0989be244a1dd0e380afec4c6ee3230a7fd02e427f5ced6bf6db69a91700d908a0f30ec078694774dce745a83664ad91bef704a7a762169e9ff3679d1be5d2dd8adbddea10a64fa2c2bdd561c589622a4664a9621209e9fb4a47a08ab25e42ece", @ANYRES16=r0, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) [ 1385.974182][T27506] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1386.074658][T16216] usb 3-1: Using ep0 maxpacket: 8 [ 1386.090667][T14851] IPVS: ftp: loaded support on port[0] = 21 [ 1386.227592][T16216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1386.244432][T16216] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1386.257228][T27506] usb 6-1: Using ep0 maxpacket: 8 [ 1386.295927][T16216] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1386.318530][T16216] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1386.330013][T16216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.347995][T16216] usb 3-1: config 0 descriptor?? [ 1386.394898][T27506] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1386.403340][T27506] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1386.417609][T27506] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1386.431308][T27506] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1386.441894][T27506] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1386.454509][T27506] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1386.466147][T27506] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1386.554831][T27506] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1386.564044][T27506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1386.572154][T27506] usb 6-1: SerialNumber: syz [ 1386.616252][T14813] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1386.625679][T16216] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1386.655224][T27506] hub 6-1:5.0: bad descriptor, ignoring hub [ 1386.661419][T27506] hub: probe of 6-1:5.0 failed with error -5 [ 1386.694344][T16216] usb 3-1: USB disconnect, device number 60 [ 1386.725278][T16216] usblp0: removed [ 1386.869602][T27506] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1387.214057][T16216] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1387.474103][T16216] usb 3-1: Using ep0 maxpacket: 8 [ 1387.485889][T14808] usb 6-1: reset high-speed USB device number 86 using dummy_hcd [ 1387.614155][T16216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1387.624206][T16216] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1387.636221][T16216] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1387.649920][T16216] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1387.661400][T16216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.692333][T16216] usb 3-1: config 0 descriptor?? [ 1387.744854][T14808] usb 6-1: Using ep0 maxpacket: 8 [ 1387.886229][T14813] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1387.947077][T16216] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1387.997252][T16216] usb 3-1: USB disconnect, device number 61 [ 1388.022123][T16216] usblp1: removed [ 1388.116145][T27506] usb 6-1: USB disconnect, device number 86 [ 1388.140681][T27506] usblp0: removed 17:41:36 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000100)={0x240}, 0x0) 17:41:36 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0xa, &(0x7f0000000040)) 17:41:36 executing program 0: socket(0x28, 0x0, 0xe4) 17:41:36 executing program 3: clone3(&(0x7f00000002c0)={0x1e4220100, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2$9p(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 17:41:36 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:41:36 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:36 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) 17:41:36 executing program 4: process_vm_writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)=""/177, 0xb1}], 0x1, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/50, 0x32}, {0x0}], 0x2, 0x0) [ 1388.735341][T14944] IPVS: ftp: loaded support on port[0] = 21 17:41:36 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x70}]}}, &(0x7f0000000180)=""/154, 0x2a, 0x9a, 0x1}, 0x20) [ 1388.974046][ T4852] usb 3-1: new high-speed USB device number 62 using dummy_hcd 17:41:36 executing program 4: openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 17:41:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) 17:41:36 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000000)="86f56e5b1baa11a0b758401a3ca27d4c", 0x10) 17:41:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x2, 0x0, 0x300) [ 1389.134224][T27506] usb 6-1: new high-speed USB device number 87 using dummy_hcd 17:41:36 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x0) writev(r0, 0x0, 0x0) 17:41:36 executing program 4: getresuid(&(0x7f0000000080), &(0x7f00000000c0), 0x0) [ 1389.244050][ T4852] usb 3-1: Using ep0 maxpacket: 8 17:41:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@dstopts_2292={{0xf}}], 0x18}}], 0x2, 0x0) [ 1389.365138][ T4852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1389.389692][ T4852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1389.404061][T27506] usb 6-1: Using ep0 maxpacket: 8 [ 1389.422092][ T4852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1389.471129][ T4852] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1389.507526][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.532950][ T4852] usb 3-1: config 0 descriptor?? [ 1389.544387][T27506] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1389.552776][T27506] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1389.594215][T27506] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1389.624019][T27506] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1389.633223][T27506] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1389.664027][T27506] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1389.673812][T27506] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1389.774343][T27506] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1389.783443][T27506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1389.807506][ T4852] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1389.811163][T27506] usb 6-1: SerialNumber: syz [ 1389.864393][ T4852] usb 3-1: USB disconnect, device number 62 [ 1389.876212][T14957] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1389.905228][T27506] hub 6-1:5.0: bad descriptor, ignoring hub [ 1389.911255][T27506] hub: probe of 6-1:5.0 failed with error -5 [ 1389.924514][ T4852] usblp0: removed [ 1390.127234][T27506] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1390.384199][ T4852] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1390.634001][ T4852] usb 3-1: Using ep0 maxpacket: 8 [ 1390.754919][ T4852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1390.764574][T14951] usb 6-1: reset high-speed USB device number 87 using dummy_hcd [ 1390.783499][ T4852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1390.802868][ T4852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1390.828299][ T4852] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1390.843272][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.864307][ T4852] usb 3-1: config 0 descriptor?? [ 1391.044165][T14951] usb 6-1: Using ep0 maxpacket: 8 [ 1391.199648][T14957] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1391.238815][ T4852] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1391.283062][ T4852] usb 3-1: USB disconnect, device number 63 [ 1391.300705][ T4852] usblp1: removed [ 1391.417785][T16216] usb 6-1: USB disconnect, device number 87 [ 1391.440141][T16216] usblp0: removed 17:41:39 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:41:39 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:39 executing program 1: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 17:41:39 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x410402, 0x0) 17:41:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x28, 0x6, 0x0, @dev, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "1dadb7fc4887b9cad8c268a5484126e9"}]}}}}}}}}, 0x0) 17:41:39 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/meminfo\x00', 0x0, 0x0) 17:41:39 executing program 0: keyctl$link(0x8, 0x0, 0xfffffffffffffffe) 17:41:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000b80)={0x0, 0x0}) 17:41:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xfff00000}, {0x6}]}, 0x10) 17:41:39 executing program 4: get_robust_list(0x0, 0x0, &(0x7f0000000180)) [ 1392.104074][T16216] usb 3-1: new high-speed USB device number 64 using dummy_hcd 17:41:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 17:41:39 executing program 0: r0 = socket(0x2, 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x24048004) [ 1392.364159][T16216] usb 3-1: Using ep0 maxpacket: 8 [ 1392.394165][T13037] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1392.495669][T16216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1392.524474][T16216] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1392.554540][T16216] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1392.594229][T16216] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1392.594274][T16216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.615296][T16216] usb 3-1: config 0 descriptor?? [ 1392.634079][T13037] usb 6-1: Using ep0 maxpacket: 8 [ 1392.760585][T13037] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1392.794121][T13037] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1392.802889][T13037] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1392.823708][T13037] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1392.833245][T13037] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1392.853030][T13037] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1392.862969][T13037] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1392.917764][T16216] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1392.954747][T13037] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1392.967404][T16216] usb 3-1: USB disconnect, device number 64 [ 1392.973994][T13037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1392.982121][T13037] usb 6-1: SerialNumber: syz [ 1392.991956][T16216] usblp0: removed [ 1393.045714][T15076] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1393.065183][T13037] hub 6-1:5.0: bad descriptor, ignoring hub [ 1393.071981][T13037] hub: probe of 6-1:5.0 failed with error -5 [ 1393.280252][T13037] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 88 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1393.514164][T16216] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1393.784060][T16216] usb 3-1: Using ep0 maxpacket: 8 [ 1393.924812][T16216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1393.934590][T16216] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1393.946640][T16216] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1393.960327][T16216] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1393.970042][T16216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.981071][T16216] usb 3-1: config 0 descriptor?? [ 1394.054735][T15076] usb 6-1: reset high-speed USB device number 88 using dummy_hcd [ 1394.304319][T15076] usb 6-1: Using ep0 maxpacket: 8 [ 1394.445699][T15121] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1394.487744][T16216] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1394.522031][T16216] usb 3-1: USB disconnect, device number 65 [ 1394.541661][T16216] usblp1: removed [ 1394.671565][ T5115] usb 6-1: USB disconnect, device number 88 [ 1394.691222][ T5115] usblp0: removed 17:41:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x16, &(0x7f0000000140)=@gcm_128={{}, "1f5365613408ba4f", "d4a1d52fe2f810f82af9deeab3538d93", "97438502", "5dfe6fd3872ed67a"}, 0x28) 17:41:42 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:42 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$alg(r0, &(0x7f0000000300)=""/162, 0xa2) 17:41:42 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x31a3da2a66574d3f, 0xffffffffffffffff, 0x10000000) 17:41:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x11, 0x0, 0x0) 17:41:42 executing program 1: r0 = epoll_create(0x9) fgetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0) 17:41:42 executing program 3: r0 = socket(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x8, 0x0, &(0x7f0000000140)) 17:41:42 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x10, r2}, 0x14) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 17:41:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8980, 0x0) 17:41:42 executing program 3: r0 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040), 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x9, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x8) 17:41:42 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendmsg$alg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 17:41:42 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x5) 17:41:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x7, &(0x7f0000000140)=@gcm_128={{}, "1f5365613408ba4f", "d4a1d52fe2f810f82af9deeab3538d93", "97438502", "5dfe6fd3872ed67a"}, 0x28) [ 1395.574062][T14073] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1395.824222][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1395.948990][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1395.957473][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1395.966730][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1395.977998][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1395.987612][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1395.998498][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1396.008607][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1396.094578][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1396.103659][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1396.118006][T14073] usb 6-1: SerialNumber: syz [ 1396.145875][T15168] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1396.165190][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1396.171220][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1396.398196][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1397.044916][T15168] usb 6-1: reset high-speed USB device number 89 using dummy_hcd [ 1397.284012][T15168] usb 6-1: Using ep0 maxpacket: 8 [ 1397.426864][T15199] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1397.653572][T16216] usb 6-1: USB disconnect, device number 89 [ 1397.662262][T16216] usblp0: removed 17:41:45 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000003400)=[{&(0x7f0000000180)='F', 0x1}], 0x1) 17:41:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="6d0507000000994c0afc21be2900001e47e2252cb7882b9abb2a2f8fb9399e0400c33f00102b0200000089da006a001499b2d1b301000000def66e54e4c909c01e8c4e61f8a0e814f7e2acdd0063c7caa4"], 0x2) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 17:41:45 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x0) 17:41:45 executing program 2: getrlimit(0x0, &(0x7f0000000180)) 17:41:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000400)="f477dbd2c3d1cf6bdc102e2bb408", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x3, r1}, 0x14) 17:41:45 executing program 0: pipe2(&(0x7f0000001740)={0xffffffffffffffff}, 0x0) writev(r0, 0x0, 0x0) 17:41:45 executing program 3: r0 = socket(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 17:41:45 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x80) [ 1398.248829][T15228] ptrace attach of "/root/syz-executor.4"[15226] was attempted by "/root/syz-executor.4"[15228] 17:41:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000100), 0xc) 17:41:46 executing program 4: socket(0x2, 0x3, 0x1) 17:41:46 executing program 3: socket(0x1c, 0x0, 0x0) [ 1398.774237][ T5115] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1399.054052][ T5115] usb 6-1: Using ep0 maxpacket: 8 [ 1399.174194][ T5115] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1399.182688][ T5115] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1399.192156][ T5115] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1399.203114][ T5115] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1399.213735][ T5115] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1399.225073][ T5115] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1399.235432][ T5115] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1399.334290][ T5115] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1399.343538][ T5115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1399.352048][ T5115] usb 6-1: SerialNumber: syz [ 1399.395764][T15236] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1399.425547][ T5115] hub 6-1:5.0: bad descriptor, ignoring hub [ 1399.436753][ T5115] hub: probe of 6-1:5.0 failed with error -5 [ 1399.650673][ T5115] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 90 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1400.294679][T15236] usb 6-1: reset high-speed USB device number 90 using dummy_hcd [ 1400.554057][T15236] usb 6-1: Using ep0 maxpacket: 8 [ 1400.726228][T15266] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1400.951098][ T5115] usb 6-1: USB disconnect, device number 90 [ 1400.963017][ T5115] usblp0: removed 17:41:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:48 executing program 1: clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)='`') socketpair(0x1, 0x4, 0x6, &(0x7f00000012c0)) 17:41:48 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140), 0x10}, 0x78) 17:41:48 executing program 0: syz_open_dev$rtc(&(0x7f0000000500), 0x1000, 0x2) 17:41:48 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7fff}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x3, 0x18}, @ldst={0x3, 0x0, 0x1, 0x9, 0x4, 0x2, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xd, 0xb, 0xb, 0xfffffffffffffffe, 0xfffffffffffffff6}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000000c0)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001140)={0x4, 0x7, 0x81, 0x3f}, 0x10}, 0x78) 17:41:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x803, 0x2) clone(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x40000}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1000004000}, 0x0, 0x0, 0x80000000000001, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@empty, 0x3506, 0x4, 0x2, 0x1}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 17:41:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) exit_group(0x0) syz_emit_ethernet(0x66, &(0x7f0000000440)={@broadcast, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x805}, {0x0, 0x0, 0x0, 0x0, 0x58}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x9) creat(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x5, 0x7f, 0x2, 0x8, 0x0, 0xcd3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={0x0}, 0x2002, 0x9, 0x0, 0x2, 0x0, 0x3, 0x345, 0x0, 0x8, 0x0, 0xb2bc}, 0xffffffffffffffff, 0x0, r0, 0xa) 17:41:49 executing program 1: socket$inet(0x2, 0x5, 0xff) 17:41:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x12000000, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) 17:41:49 executing program 0: getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xee01]) setfsgid(r0) getgroups(0x2, &(0x7f0000000200)=[0x0, r0]) setresgid(0x0, r1, 0x0) 17:41:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x8000000, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) 17:41:49 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) [ 1401.924115][ T4852] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1402.204165][ T4852] usb 6-1: Using ep0 maxpacket: 8 [ 1402.334257][ T4852] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1402.342829][ T4852] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1402.352235][ T4852] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1402.366691][ T4852] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1402.375980][ T4852] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1402.387874][ T4852] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1402.398111][ T4852] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1402.504298][ T4852] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1402.513402][ T4852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1402.521761][ T4852] usb 6-1: SerialNumber: syz [ 1402.565873][T15300] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1402.585888][ T4852] hub 6-1:5.0: bad descriptor, ignoring hub [ 1402.592643][ T4852] hub: probe of 6-1:5.0 failed with error -5 [ 1402.798981][ T4852] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 91 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1403.444609][T15300] usb 6-1: reset high-speed USB device number 91 using dummy_hcd [ 1403.694067][T15300] usb 6-1: Using ep0 maxpacket: 8 [ 1403.846366][T15340] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1404.070975][ T4852] usb 6-1: USB disconnect, device number 91 [ 1404.100317][ T4852] usblp0: removed 17:41:52 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140), 0x10}, 0x78) 17:41:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x4020940d, 0x0) 17:41:52 executing program 1: ustat(0x2, &(0x7f0000002080)) 17:41:52 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001640)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000001500)=[{&(0x7f0000000240)="3ae180d81a3d392aa1a950448b80753bb3017ce7205852d810db0c14eb9dbb8b8dcbc77695384d75bd71555084e744af456bbd050ea36abd9d678a4bf723f955d69cb49d19e63e940457cdceb1275ca48bb7979dafcd8d08a57551ab8dc521c4e19738e2b494b4a0c957718e9eeb3ec7928ca538b2187eb7d695d9421ced0631142002bbbb959dd13c6f4d28b5979de7a8", 0x91}], 0x1, &(0x7f0000001600)=[@cred], 0x20}, 0x1) 17:41:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x803, 0x2) clone(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x40000}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1000004000}, 0x0, 0x0, 0x80000000000001, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@empty, 0x3506, 0x4, 0x2, 0x1}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 17:41:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:52 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:41:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 17:41:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @dev}, 0x3a, {0x2, 0x0, @empty}, 'batadv_slave_1\x00'}) 17:41:52 executing program 2: openat$zero(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) 17:41:52 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, &(0x7f0000000180)) 17:41:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00640000bf5500804f24e300000900"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x8, 0x0, 0x0, 0x0) 17:41:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x21, &(0x7f0000000080)="ecaa1110", 0x4) 17:41:52 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) shutdown(r0, 0x0) [ 1405.014372][ T5115] usb 6-1: new high-speed USB device number 92 using dummy_hcd 17:41:52 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) connect(r0, &(0x7f0000000400)=@un=@file={0x0, './file0\x00'}, 0x80) [ 1405.264600][ T5115] usb 6-1: Using ep0 maxpacket: 8 17:41:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x16}]}) [ 1405.385392][ T5115] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1405.393814][ T5115] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1405.470742][ T5115] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config 17:41:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x803, 0x2) clone(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x40000}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1000004000}, 0x0, 0x0, 0x80000000000001, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@empty, 0x3506, 0x4, 0x2, 0x1}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 1405.512359][ T5115] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1405.546307][ T5115] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1405.586927][ T5115] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1405.599423][ T37] audit: type=1326 audit(1620409313.005:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15404 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66549 code=0x0 [ 1405.612477][ T5115] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1405.673615][ T37] audit: type=1326 audit(1620409313.045:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15404 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66549 code=0x0 [ 1405.774268][ T5115] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1405.783369][ T5115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1405.824107][ T5115] usb 6-1: SerialNumber: syz [ 1405.865759][T15371] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1405.905337][ T5115] hub 6-1:5.0: bad descriptor, ignoring hub [ 1405.911394][ T5115] hub: probe of 6-1:5.0 failed with error -5 [ 1406.115628][ T5115] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1406.785178][T15371] usb 6-1: reset high-speed USB device number 92 using dummy_hcd [ 1407.044056][T15371] usb 6-1: Using ep0 maxpacket: 8 [ 1407.206359][T15427] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1407.437259][ T5115] usb 6-1: USB disconnect, device number 92 [ 1407.451984][ T5115] usblp0: removed 17:41:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@rthdrdstopts={{0xf}}], 0x18}, 0x0) 17:41:55 executing program 4: add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)={0x0, 0x0, @c}, 0x29, 0xfffffffffffffffc) 17:41:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x14, 0x31, 0x1, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 17:41:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000001}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000300)="bf1ab2de7561d616846a1164e48602812bae5224775206fd858ce106aaed12a4fc9e8d2412cedb48e76c03867f3028c51550a9af892eaaf267d142f6ee35208fabb4ee9f3f8d77a9e89f9b1b1703ba0650f4fe13b6afdbe5b0c5b0399ad6d40012eb45d6c0e3f08c14a4364efd3f0957178891c4c761e0a9319a8e0377c4508835b64d35e86d8c8d2a4831f88109b2d15249d3ca3abf6b12fe1f590a", 0x9c}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0xc010) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x1, 0x10000000, 0x81, 0x22, 0xe7d3, 0x7, 0x8, 0x0, 0x3}, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x4}, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0xfffffe58) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x6, 0x20, 0x7ff, 0x4e, 0x8, 0x4, 0x0, 0x16dca6cf, 0x70c0155b}, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)) 17:41:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x803, 0x2) clone(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x40000}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1000004000}, 0x0, 0x0, 0x80000000000001, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@empty, 0x3506, 0x4, 0x2, 0x1}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 17:41:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX, @ANYRESDEC], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:55 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, &(0x7f0000000080)={0x7}, &(0x7f0000000100)={r0}, 0x0) 17:41:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800001, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) 17:41:55 executing program 4: openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) 17:41:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x22, 0x0, &(0x7f0000000040)) 17:41:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x8919, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @dev}}) 17:41:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x10}}], 0x40}, 0x0) [ 1408.354359][T13037] usb 6-1: new high-speed USB device number 93 using dummy_hcd 17:41:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0xe, 0x0, &(0x7f0000000040)) 17:41:56 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x800801, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) 17:41:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x8c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_BEACON_HEAD={0x6a, 0xe, {@wo_ht={{0x0, 0x2}, {}, @broadcast, @device_b, @random="4c8fde86ab4b"}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x8c}}, 0x0) [ 1408.624243][T13037] usb 6-1: Using ep0 maxpacket: 8 [ 1408.745056][T13037] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1408.753470][T13037] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1408.799245][T13037] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1408.799282][T15487] new mount options do not match the existing superblock, will be ignored [ 1408.822484][T13037] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1408.859399][T13037] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1408.900834][T13037] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 17:41:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f0000000040)) 17:41:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{}]}, 0x10) [ 1408.969141][T13037] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1409.134841][T13037] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1409.144503][T13037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1409.153097][T13037] usb 6-1: SerialNumber: syz [ 1409.185870][T15457] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1409.205145][T13037] hub 6-1:5.0: bad descriptor, ignoring hub [ 1409.211205][T13037] hub: probe of 6-1:5.0 failed with error -5 [ 1409.425440][T13037] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 93 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1410.054447][T15457] usb 6-1: reset high-speed USB device number 93 using dummy_hcd [ 1410.294222][T15457] usb 6-1: Using ep0 maxpacket: 8 [ 1410.436306][T15507] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1410.667307][ T5115] usb 6-1: USB disconnect, device number 93 [ 1410.676190][ T5115] usblp0: removed 17:41:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:41:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@local, @in=@private}, {}, {}, 0x0, 0x0, 0x0, 0x48bc44c97a5a4fef}, {{@in=@private}, 0x0, @in=@remote}}, 0xe8) 17:41:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000740), 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 17:41:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x6, &(0x7f0000000080)="ec", 0x1) 17:41:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@rthdrdstopts={{0x18, 0x29, 0x3e}}], 0x18}, 0x0) 17:41:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={0x120, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x10c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x104, 0x3, "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"}]}]}, 0x120}}, 0x0) 17:41:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) 17:41:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=[{0x10}, {0x10, 0x1}], 0x20}}], 0x1, 0x0) 17:41:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, 0x0, 0x0) 17:41:58 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x901, &(0x7f0000001580), &(0x7f00000015c0)=0x8) 17:41:58 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r0, &(0x7f0000000100)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, 0x0, 0x38}, 0x0) 17:41:58 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x30, 0x0, &(0x7f0000000040)) [ 1411.814165][T13037] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1412.024142][T13037] usb 6-1: device descriptor read/64, error 18 [ 1412.304188][T13037] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1412.504154][T13037] usb 6-1: device descriptor read/64, error 18 [ 1412.625235][T13037] usb usb6-port1: attempt power cycle [ 1413.064080][T13037] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1413.264282][T13037] usb 6-1: device descriptor read/8, error -61 [ 1413.554033][T13037] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1413.764269][T13037] usb 6-1: device descriptor read/8, error -61 [ 1413.884803][T13037] usb usb6-port1: unable to enumerate USB device 17:42:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:01 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x25, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], &(0x7f0000000040)=0x8) 17:42:01 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4a, 0x0, 0x0) 17:42:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x14, &(0x7f0000000000)={@empty}, 0xc) 17:42:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x2, &(0x7f0000000000)={@empty=0xc7}, 0xc) 17:42:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40300, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) 17:42:01 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x4, 0x0, 0x1, 0x0, 0x6}, 0x98) 17:42:01 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r1, &(0x7f00000001c0)={0x10, 0x2}, 0x10) 17:42:01 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@un=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000000200)=[{0x10}], 0x10}, 0x0) 17:42:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)) 17:42:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1}, 0x80) 17:42:02 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c) listen(r0, 0x0) [ 1414.917666][T14073] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1415.114275][T14073] usb 6-1: device descriptor read/64, error 18 [ 1415.384022][T14073] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1415.574163][T14073] usb 6-1: device descriptor read/64, error 18 [ 1415.694817][T14073] usb usb6-port1: attempt power cycle [ 1416.104153][T14073] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1416.274595][T14073] usb 6-1: device descriptor read/8, error -61 [ 1416.554431][T14073] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1416.734782][T14073] usb 6-1: device descriptor read/8, error -61 [ 1416.864574][T14073] usb usb6-port1: unable to enumerate USB device 17:42:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:04 executing program 2: r0 = socket$inet6(0x1c, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000000), 0x4) 17:42:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000)={0x4}, 0x8) 17:42:04 executing program 1: sigaltstack(&(0x7f0000e33000/0x2000)=nil, 0x0) mlock(&(0x7f0000e33000/0x1000)=nil, 0x1000) 17:42:04 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x4000000, 0x0, &(0x7f00000000c0)=@un=@file={0xa}, 0xa) 17:42:04 executing program 0: r0 = socket$inet6(0x1c, 0x2, 0x0) sendmsg(r0, &(0x7f00000013c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, 0x0, 0x68}, 0x0) 17:42:04 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 17:42:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000000), 0x88) 17:42:05 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$sock_int(r0, 0xffff, 0x1017, &(0x7f0000000000)=0x7fffffff, 0x4) 17:42:05 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 17:42:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x39, 0x0, 0x0) 17:42:05 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f00000001c0)={0x1c, 0x1c}, 0x1c) [ 1417.994281][T14073] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1418.214160][T14073] usb 6-1: device descriptor read/64, error 18 [ 1418.504320][T14073] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1418.714076][T14073] usb 6-1: device descriptor read/64, error 18 [ 1418.835037][T14073] usb usb6-port1: attempt power cycle [ 1419.264068][T14073] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1419.434101][T14073] usb 6-1: device descriptor read/8, error -61 [ 1419.704173][T14073] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1419.874200][T14073] usb 6-1: device descriptor read/8, error -61 [ 1419.994607][T14073] usb usb6-port1: unable to enumerate USB device 17:42:07 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=""/4096, 0x1000}, 0x0) 17:42:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000140), 0x8) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xfffffffffffffd91, 0x2}, 0x10) sendmsg(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000240)="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", 0x129}], 0x1, &(0x7f0000001380)=ANY=[], 0x20}, 0x0) 17:42:07 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0), &(0x7f0000000200)=0x4) 17:42:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:07 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r0, &(0x7f0000000100)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000040)="442861a5b323982c9ccd3e06000000727758ccdf4131e16ae4963ab64789da52aa8a8be0d57bafae7e5e8bc40add5bae4b19d9694b2713f520", 0x39}, {&(0x7f00000013c0)="ce8ac4082bf69c393816cbbce7822ab4f61ccadd558f176cda615ce3e82a1cf4bf9ac31c63835402d7950110b9b1ce46b1c5299422b78bba0817e30e091a0c6362a884a46503a7a64bd8a4f9d0c8357d2c23e1488e051f49063a78c7b943e27d4edf96b72f0679135b44b6e1b5fe54132adf5cda861d19d856082e0ba0bf4e00"/139, 0x8b}, {&(0x7f0000001340)="adf1b5b8f389dcb9466cfdaeb5899e579b6e7d4cd3c3d1fbd6b9053e6d4cf4c037021ca66a9854238ea1cfeaf9013843e6de5b4c65c870148d5e1bda5aa001880ae3faca7d70594bf22f636b2e467bb838753917", 0x54}], 0x3, 0x0, 0x38}, 0x0) 17:42:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x19, &(0x7f0000000000)={@empty}, 0xc) 17:42:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40300, 0x0) chown(&(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) 17:42:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0xb, &(0x7f0000000000)={@empty}, 0xc) 17:42:08 executing program 4: mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)) sigaltstack(&(0x7f0000e33000/0x2000)=nil, 0x0) sigaltstack(&(0x7f0000cf6000/0x2000)=nil, 0x0) 17:42:08 executing program 1: r0 = socket$inet6(0x1c, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x54, &(0x7f0000000040)="a97bcb80b4357bae58b856d3a931eec4e23f0aa7a18f2ef542f15aa6dd1e6e658c0d01883117dd81e8bbc9b80ec6003f2784d20b67c10b1badc32e743e2ff490907614881448e802047c411a3e28db39186a0d030f91a22086aa8f7a8e9cf6e18d20e67258e3e10ad1d08c50c83fa502d7394ab835cd62bfc2850cc81a68d22bc33a618aecc417fe48b70d1ca875d0432c6c65150dfffba60797f97db4f2e2355ce9f5c85ea1d1b0640a0f01f7e3094803043151d616e2165e5c9ebbdb74e7f4c7236071d3ab5f44abed168d96b8bb956cc909e8109cafa97a53e160dd50b7a0c0421d659a70dc6b9c080ea2e321723e171380655d3f9430810c22e58f047f92fb5ce313bb69ee02", 0x108) 17:42:08 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0x1c, 0x1c, 0x1}, 0x1c) 17:42:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getuid() 17:42:08 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 17:42:08 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x20) 17:42:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1ea720c6626b96e7e15ffa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560015000000000000fb8005128e7e4d939955f8ac396203784000400f573fbf000000000000000761f35e959f130dec95128ce7", 0xa1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 1420.954472][T13037] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1421.204180][T13037] usb 6-1: Using ep0 maxpacket: 8 [ 1421.324149][T13037] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1421.335694][T13037] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1421.347491][T13037] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1421.358370][T13037] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1421.368033][T13037] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1421.379340][T13037] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1421.389443][T13037] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1421.474186][T13037] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1421.483297][T13037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1421.497200][T13037] usb 6-1: SerialNumber: syz [ 1421.525851][T15687] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1421.545153][T13037] hub 6-1:5.0: bad descriptor, ignoring hub [ 1421.551187][T13037] hub: probe of 6-1:5.0 failed with error -5 [ 1421.765433][T13037] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 106 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1422.405178][T15687] usb 6-1: reset high-speed USB device number 106 using dummy_hcd [ 1422.644042][T15687] usb 6-1: Using ep0 maxpacket: 8 [ 1422.786020][T15728] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1422.795662][ T3239] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.802158][ T3239] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.009734][ T9536] usb 6-1: USB disconnect, device number 106 [ 1423.026574][ T9536] usblp0: removed 17:42:10 executing program 1: pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5452, &(0x7f00000001c0)={'sit0\x00', 0x0}) 17:42:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1, 0x1, 0x0) 17:42:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x48004) sendmmsg$inet6(r0, &(0x7f0000001180)=[{{&(0x7f0000000a80)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000ac0)="88", 0x1}], 0x1}}, {{&(0x7f0000000e80)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x0) 17:42:10 executing program 3: syz_open_dev$char_raw(&(0x7f0000000000), 0x1, 0x412001) 17:42:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) 17:42:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:11 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x10402, 0x0) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x8042, 0x1eb) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r1, 0x0) getitimer(0x0, &(0x7f0000000040)) r2 = socket(0x10, 0x800000000000803, 0x0) sendto(r2, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) 17:42:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1, 0x1, 0x0) 17:42:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1ea720c6626b96e7e15ffa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c", 0x6d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:42:11 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) getpgrp(0x0) 17:42:11 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f00000001c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/93, 0x5d}], 0x3, 0x0, 0x0) 17:42:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1, 0x1, 0x0) 17:42:11 executing program 1: r0 = inotify_init1(0x0) tee(r0, 0xffffffffffffffff, 0x9, 0x0) 17:42:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1ea720c6626b96e7e15ffa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560015000000000000fb8005128e7e4d939955f8ac396203784000400f573fbf000000000000000761f35e959f130dec95128ce7ec033dc0a380543bfc99320be1c1bb99bb06", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:42:11 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) 17:42:11 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getdents64(r0, 0x0, 0x0) 17:42:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1, 0x1, 0x0) [ 1423.994328][ T4852] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1424.254074][ T4852] usb 6-1: Using ep0 maxpacket: 8 [ 1424.374257][ T4852] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1424.382756][ T4852] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1424.393860][ T4852] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.405523][ T4852] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1424.415784][ T4852] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1424.427535][ T4852] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1424.438287][ T4852] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1424.449209][ T4852] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1424.534151][ T4852] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1424.543265][ T4852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1424.552656][ T4852] usb 6-1: SerialNumber: syz [ 1424.595129][ T4852] hub 6-1:5.0: bad descriptor, ignoring hub [ 1424.601465][ T4852] hub: probe of 6-1:5.0 failed with error -5 [ 1424.819685][ T4852] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 107 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1425.465729][T15759] usb 6-1: reset high-speed USB device number 107 using dummy_hcd [ 1425.734314][T15759] usb 6-1: Using ep0 maxpacket: 8 [ 1426.109679][ T4852] usb 6-1: USB disconnect, device number 107 [ 1426.132486][ T4852] usblp0: removed 17:42:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x0, 0x0) 17:42:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000240)=@get={0x1, &(0x7f0000000200)=""/8, 0x3}) 17:42:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000080)=0xffffffffffffff07) 17:42:14 executing program 0: r0 = socket(0x2, 0xa, 0x0) connect$bt_rfcomm(r0, 0x0, 0x0) 17:42:14 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) waitid(0x1, 0xffffffffffffffff, 0x0, 0x8, 0x0) 17:42:14 executing program 0: modify_ldt$read_default(0x2, &(0x7f0000000300)=""/205, 0xcd) 17:42:14 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) exit_group(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tee(r0, 0xffffffffffffffff, 0x6, 0x0) 17:42:14 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = eventfd(0x0) dup3(r0, r1, 0x0) 17:42:14 executing program 3: timer_create(0xbd9d4f016456c5ae, 0x0, 0x0) 17:42:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) write$eventfd(r2, &(0x7f0000000080), 0x8) 17:42:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) write$nbd(r1, &(0x7f0000000000), 0x10) [ 1427.054129][T13037] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1427.305812][T13037] usb 6-1: Using ep0 maxpacket: 8 [ 1427.454181][T13037] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1427.462720][T13037] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1427.472043][T13037] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.482955][T13037] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1427.492237][T13037] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1427.503056][T13037] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1427.513328][T13037] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1427.527876][T13037] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1427.624133][T13037] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1427.633315][T13037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1427.642884][T13037] usb 6-1: SerialNumber: syz [ 1427.685114][T13037] hub 6-1:5.0: bad descriptor, ignoring hub [ 1427.691148][T13037] hub: probe of 6-1:5.0 failed with error -5 [ 1427.924048][T13037] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 108 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1428.534669][T15843] usb 6-1: reset high-speed USB device number 108 using dummy_hcd [ 1428.774065][T15843] usb 6-1: Using ep0 maxpacket: 8 [ 1429.149254][T13037] usb 6-1: USB disconnect, device number 108 [ 1429.164911][T13037] usblp0: removed 17:42:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r0, r1, 0x0) 17:42:17 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r0, 0xe190a970347c6844) 17:42:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x7, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000890}, 0x800) 17:42:17 executing program 2: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) pipe(&(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$nl_generic(0x10, 0x3, 0x10) 17:42:17 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 17:42:17 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macvlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x0, 0x4}}) 17:42:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x6cb, 0x0, &(0x7f00000000c0)) 17:42:17 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockname(r0, 0x0, &(0x7f00000000c0)) 17:42:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="7d0300000000000000000b"], 0x38}}, 0x0) 17:42:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2e}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:42:17 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x5452, &(0x7f0000000140)=@buf={0x1, &(0x7f0000000280)="cf"}) [ 1430.094076][ T9536] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1430.334054][ T9536] usb 6-1: Using ep0 maxpacket: 8 [ 1430.454833][ T9536] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1430.463245][ T9536] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1430.472369][ T9536] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.482781][ T9536] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1430.492013][ T9536] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1430.502959][ T9536] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1430.512799][ T9536] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1430.522559][ T9536] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1430.614174][ T9536] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1430.623269][ T9536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1430.633172][ T9536] usb 6-1: SerialNumber: syz [ 1430.675110][ T9536] hub 6-1:5.0: bad descriptor, ignoring hub [ 1430.681152][ T9536] hub: probe of 6-1:5.0 failed with error -5 [ 1430.895650][ T9536] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 109 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1431.554624][T15907] usb 6-1: reset high-speed USB device number 109 using dummy_hcd [ 1431.804135][T15907] usb 6-1: Using ep0 maxpacket: 8 [ 1432.169568][T16216] usb 6-1: USB disconnect, device number 109 [ 1432.178111][T16216] usblp0: removed 17:42:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:20 executing program 2: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000880)={0x0, 0xffffffffffffffff, 0x7}, 0x10) 17:42:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 17:42:20 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000300)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a22961b61e3ff5f1c3ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816b3f6db1c00010000000081c7a0b204c006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x8, 0x80, 0x6, 0x9}, {0x4, 0x4, 0x3, 0x6}, {0x5, 0xfd, 0x20, 0xffffffff}, {0x80, 0x2, 0xcb, 0x5d}, {0x6, 0x1b, 0x20, 0x80000000}, {0x1, 0x0, 0x4, 0x4}]}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abaff4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf93a1a75bcbf746bec66ba", 0x88012, 0x20c49a, 0x0, 0x27) 17:42:20 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 17:42:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000005c0)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000640)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000680)=""/242, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:42:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x54}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:42:20 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000016c0)) 17:42:20 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x17, 0x8, &(0x7f0000000000)=@raw=[@exit, @func, @map, @alu, @func, @initr0], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:42:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 17:42:20 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 17:42:20 executing program 2: socket$bt_rfcomm(0x1f, 0x0, 0x3) [ 1433.089551][T16216] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1433.294146][T16216] usb 6-1: device descriptor read/64, error 18 [ 1433.564190][T16216] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1433.764023][T16216] usb 6-1: device descriptor read/64, error 18 [ 1433.884302][T16216] usb usb6-port1: attempt power cycle [ 1434.294209][T16216] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1434.464349][T16216] usb 6-1: device descriptor read/8, error -61 [ 1434.734041][T16216] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1434.904259][T16216] usb 6-1: device descriptor read/8, error -61 [ 1435.024410][T16216] usb usb6-port1: unable to enumerate USB device 17:42:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:23 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000140)='fd/4\x00') 17:42:23 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6c140, 0x0) 17:42:23 executing program 4: r0 = add_key$keyring(&(0x7f0000000cc0), &(0x7f0000000d00)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x5) 17:42:23 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netlink\x00') 17:42:23 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='setgroups\x00') 17:42:23 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 17:42:23 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{}, {0xff0c}]}) 17:42:23 executing program 2: add_key$keyring(&(0x7f0000000cc0), &(0x7f0000000d00)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000cc0), &(0x7f0000000d00)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 17:42:23 executing program 4: capset(&(0x7f0000000240)={0x19980330}, &(0x7f0000000280)) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) 17:42:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f00000001c0), 0x4) [ 1436.035707][T16006] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) 17:42:23 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) [ 1436.080622][T16012] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 1436.224184][T14074] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1436.414181][T14074] usb 6-1: device descriptor read/64, error 18 [ 1436.684139][T14074] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1436.874052][T14074] usb 6-1: device descriptor read/64, error 18 [ 1436.994302][T14074] usb usb6-port1: attempt power cycle [ 1437.414094][T14074] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1437.619015][T14074] usb 6-1: device descriptor read/8, error -61 [ 1437.894170][T14074] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1438.094316][T14074] usb 6-1: device descriptor read/8, error -61 [ 1438.225558][T14074] usb usb6-port1: unable to enumerate USB device 17:42:26 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "06a690ef53f3fd3e78ecf2d2aa3660c5a194b8866071cb366b9434094fbfbcd39fa55e8f24907877dcf6c62fd6a066c0c56ec43c2a0380e7b1018a12a5a96e54"}, 0x48, 0xfffffffffffffffb) keyctl$read(0xb, r0, 0x0, 0x0) 17:42:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) 17:42:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000080)="d21fc83822bf5c5a91d72da64349da8a00b3d76c680c88ab92f0ad1e81d2d925", 0x20) 17:42:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 17:42:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, 0x0, 0x0) 17:42:26 executing program 2: syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00') 17:42:26 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x4c085) sendmmsg$inet6(r0, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="9bc15f16d726ce8a1862866734cf7a8813bce1248d5f7b94f2724e179afaeeee4d0dc3921c566bbdb6dcb45333afc99976ee9c0815350ff299cae31ac327e01a398e26ec389bd7b49899f03f6e10a5c0ca1a8bf0", 0x54}], 0x1, &(0x7f00000000c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x20}}], 0x18}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="d7bb98309db935993397f5b5c2d0b0094a40728ab6114ebd081540cdf5968e7243b43922f2535f0f4eb1124621f6315d4a5e058f54b4a5e21e76704a36fd93f83cd45d0aadaeb682fbf266ac997c235730d62d27929d53f9ab961cd7", 0x5c}, {&(0x7f0000000740)="efe81afe059d05e6b59dfc25e64a01dd2b1731bef43682e04842b80240b41b59465186ff10011a79c0063793b5356330cbccba54acf4319b2c13e5808df7b6d788f34dc888d02098b311cbce375055d35c1567ecbc527d91bfef5dbe2f1e9af7ef26eb202d66cec7cff254014ca813fa903c2c6c887dc313fe64f8601f3e95689401b86f4dacde8a1f8164d1a44a9e161eea41915acbe9d6513c0e144eb099afd38fec5d5cf9f6fbe8c185b96d06397307d653362be43ada8df10bf2d9d60cbbf594a239ed68314e60805569c5a08e008823eabe264d5801d5f30e6cfe4e6c8fd6122a057b871e6d64eb773dde166932add4cdc4a5d8affb3d5678ed381c61f342f73e6862ec54eed07d7328c5f12863c4139738b4d392509e133217f25e27de1a462f35484ca2616c7235919076db6eb7e9cba9d02d33ce616e9f05284e8780b90bcd9111fe64324f3e82544fa5ba28994aac329830827874523bdc3fac15027f87bf101fc526b16743ce58afe3e906335e28453a8a71fe0b5a7bca3560bb1950e13e87cadd198573153c1f2ea957f8effc3687ead6c09b6c440ec34c393d116436853b804918f699e458647f0c66766427c39c26f56fe498f1d6bbc860a0045722997b17461dc800792aa7ca8e6fa5ac3402b2dead324cda506feadcf9d13d23eabac90c076415e31ddcea8ca8970d1b1f7013f7aaffd25c1e0d1f915f09c50a696dfe625e0e492ed54c2daf08cc6a3e8369c81e743a11f6e6bd401d5b7f9aa7784cb92a0832a29f4f267939e98f8429784bbf8afdf2857fe3e27fc88e0ad3aa8c47d6577fe3b5ca53d44c9ea571deb18f39f424ae515ddee65b59e22eb2a911b448b2d09d1737157078222641894019b145b447a1a56ef41f450e0dca3c3057ba5e38475503310542ed30ff999087e50b35ea7cfc7845995895c916e581dfeb3cc5be580a6e74ac38124613a10c9926cb22428dfddad8e5f7a288831a03559c4f47f103f5bc3fd7ecf22363dc5a3140838e22f9da5a1b2df9d949e55ff703a665a4505fbc3851cd3e2214357b10f028647b1594f6ddb551f2322b9b26586b9d087ccc0ceda6e894e1d87b25cad2119b5e9f99e29c389b3a3ac82504bbc3c1fee0bc563050c39b924b5083e1ac5c07be9237730783090895adbb24c7a6786597547dc746a86a5671f721c19631c1b7a87750ecaf067a210c42400c68ff98b4d5eff89ce1789c22db510e204a0b9276bca8ecfd8563eeb54b48886a804e20a48749e78e01ea0312e02ab1d685e838f41a23632f667b2365a0a548167e861a4a92b39d46e9e02ec8841bade56fd10d1a29986f5defdb82e3c6e71452f228a38c20e6dc4207b4af421bb350526b6c2037b4c494827b74f4c79a53b628831ff5ab127e0b59ff125fcd31691908f23c58e600dded8e261f57a495dc016e4d728d7426aea0fc5fadec779aaa56b137019cbc9260a4a3c27cd23ed96b9ca1dbc6ce293335d9b6df0065391464e292b3736170f601939a04639d9eec01362d7db2ea7ff2785b447b6b98ed26729847cd5fb4948407677572467bc7757f16b2209ff7cb211676b34abe4fa9f6586ff014356ad7373eb816101b8a930998922c7ccaa639ef08611705b8058d0571c1c2540fd2491cd308718bf36f82f6c3aa79658fbbe28061fabaae4a31edb874f1e7bbf065ccd9cca8c1f53a3e0caedf748f13217a1ecf724b40fa061398543f093a937c69bd3d669a23e3ac22a46261c25d1da89d78f112fddcd77ea6fa0a8883b6c114a7dbb7486887557858f826c63230ed731c4323c59b4599949303dca82315105a0bb34049f02efa3a86d26f3d32d9cb3b57380bda51a7997fbcaa2acc8e007d36f70fadc257d2913a1c9233eeaec8f2ab7708d59b51f2563cb46bdc0e166ba98da313e46e8ef03a5821eae0589e336d25ca519c01d47463182f10a84dfa3c7df3b1932ac0af584f835a8ae3bf7e73acd8f768b7f395e867d4b71cde591b73d9d8d264cb267c699a0fc19a3bc1968968cc756a9e9a9a4f1af649e17a178440ab2647645ad04ea9c1296c3d2ff9815ae654a43abbd168893a925d195ebdffbf9ba69836c7bc70d0a3e9bc5ee1dda98988b420f00724f49c0de6be02ce14384845569cb79c55416457fbe3469f529e023ddb5e3a8f548f51678441dc13d3aca201fb8e46db93228b211c785aebf0fa153db4e62c991d8bf7e2a97da186bf8f9e46ec720bfda05dcd1c8d4756fde1f4122072e10a8db81c57e5f1074dfc4cf6a1054a9177e5c2297711aee14a47dd7d64de3602c9c1846aed9d27d0bb94360ad63509e15db240a496f03657087b45eed5024c1de5c803778f59b5bc6feec55132e70d49ee6a4a8d994b0572a31e15879826c358c4dd276bf7d433fde70dd30964e81c60fa7105100c9695bdbf6090c9a5e0a2f2687ad183986710d263969fea9690502bdb7974e878a5c42566b1f0ea7b8941df873f28d37589a876c2d0a39ffe995bfd3dc410957f8f7d69b4c5798e9dd801391c189610f0af88e89cbb913959f2a2a738063715848ca590f0bb8863c0c37b1a5db926d31d9134b5cc99f42b8e92a772239234406fa3044edf03491dac46e365641efb7c344cc28751de8098b526c74e9853f63f72d03de92d142f7ce414218db53d8108c30ca5b1bef26af38ebee9ea4313b1b3642723f93ff8c710d5118d42ed3703e83d15ace082d409456b0bf95bcaa720d608c97547f05d9c8d44dd5e151f89bb3ce4d600704eb234813026cad73c336b17a550f61ddd40ac077689b26efdfb45797325c5a5650c5acd479991351c292a2ad31cc19bb5221513966f87b9e2cf0e5d504d5de004c0cd64c4545ca6abaebb916d854a43b183672c07cb0fc59cd75e60af76d95ee3cc4ab939c41f6693ed6640d1191bc618963dec20ad96dd630a6ec14f17eabeeeadbb47fe665cb2e11929f776064e9396aa437eb342b297794887d14e5662071cf43b916302e29a01b95f5fd42f300827a47c82d5918402ddede248a6f6111afd01c0d17edfa3686948600c29df85009cafec803042a41684609ea8950ea4c57fff886556c284993f8d95d104cb5c03dd63c91b65deed04e982c478bcf9d0c2433d533d928e6fd5fbe2b3334e92b84ab82c30995f66289398c19d58b5cc20b2b2144a823c806b0f203da0db6aa97cce21abfa30cf93b676fe20a1b98388d830897b7348fba3b876232d5ca8a955bf01fe1a47668b88ac2183d319b266a0823251858ccb14242c0936a1e86bf6453398be7495f09adcb688e16571ffa8e2eb7e5db880d37c71d97256d8f2e767143d5070df9837d13f46e4f10aed9f811e7d1064394941180f40ef5c89de0761cbc017cc9682d969653bffb398c9500e5d18ccc3b8ded6757839bd09150267d44c8701d686648095f9f90121901b7d9e5e95529a91da7a13d8b4c8a8b8a00e4c9a5c84c9c81d34ac3a27e9b73a0ac91dc653ade15efc7f422d2c8557dfc23648fae3fed673ba3752b41c24137cea7640f444763d231fbe5749516ca74a740280d9c560ab79242094c9c258472426def0178afea32bf0663bc9ee811e1ef7a983f8d0c98e2609b82559b9d8ffdf6a417fa9c60eb3339b778c555fe854efeabf025dbd6072fd8c0355c69229047c1b5b90bceb99a41941dd892c11d3b20b8f441b6a7da1a073cc1642042bbb4165354334c4f441103e445d8b2de5f192ad9c5a25cb622f93cc65510d27d4dcc7baea8e7d3a2aa4e31750bc9e89cbcfec19d89b692a24316301a5ff840b559dc777d6527fbe0a76af92cd63e7f1abdb1b4b889284ecf12bfcde108ebdc5702e11308aef64afa17978045a81378fd429a3179adff94dcf7b525ee1d210c7300a723a28682c5915e1ff97443817f61d866d73891456c5f4e1252aa35001fc5fd5cc46f30a10249f456034df7be2196202e6dcf52ba94d1a68626c46564429cdd803e396b3a354bb1406e2649b46952fb4bab213b9d337f47e3be4ccfbdeb5e9f7aaf148a08b23107074bc80c984c0d6b266a45886050c8a0c449f4911703fa310f353c512cdf49b071c14bbc7bafb7a4fe99e0dde99f4c5f25c57a4cfe5374f69c4ac5f03fba8fdb3b420977a7539300b7db025e0d3b0d3e8197907ea985412ad345d19807d54a982e9e3d421705d7eab75ba5f3d66bc0f7b5547c99fa22dd59de508eb09b002fc55654520299dfdb5ccb8ef37ebba25c76e0ffbdec3e6728e87c26d67a83d111a93343035564a4a84391f75a2fcb4b35aeb676417d93111f73f1788f12772eb178f72ffa5b728b5c4088e6d543fa46da8680e7d688cb50a021a3cf1a612f2fdfafcc65eeb898471ae25b8c619dead87529187c01ab75063b94230a52854ad18ad31a15aa224442f2290411ef4c87a5183bce999dd149246181ed78d82499d900b2e37350585da5fc0c22eeafd490b9ebd292e25cce02073d4792f53df8d875f027926f7cf31244420a359af6b6260b9086fb04123ed4108623588990cb69cbf4a78025a569016aa27c5b9c3a235eafaf549f5b5fa17259b19bf11abfd94025bfe1fb999a455cd881e684b826310d513319021cb962d5072d97d86a27db425e4c9aa855fb77c4cb2417ba19a08d0d361427d94d92fba629fe84bb1f5c821bbbf29097d35c7ffcbddec128a9f1a75146317146d838e627c98e4d538185cb9ef45e6216d68fe9f1b8a34a631d6d19f60c1784d5ba831fc50b47b215fe02e4638c2685229ccf831ad6de926b5b9b97f1aa2f9d35c45aba420a404eed6342804ed1a97e4f0c915bf2ef549fffbccb82c96b8f86e9a7e8b4aaea837c4a5c59ea19dc6b2c40b92c113754f278e2c430db3c47cde3d5df2f2aee60d3cca95a150f78571297d2c300aa7ad17bbc9d9e01f11c327cb8e174c6cc7d0baba1b187fd570298501125eb07db4139feb035e1f899688c74e5a775d698a8c1cf2e314aa855eb8d3c6e5b0b9450c66817d572dac825165f9cde2238d4a50d15f5f76d9ba1b86257ce32c6169faa018e04b5d0510332fddca3a7f5147d4692ca07bd21b76a9cb7710b97d598dac2b5f32659cc5700317deb6b3f61c4c2ce512aa11f613997f0eb17a55ac7d90fe7b46d5ee9a9701dce3fa92aed0b640a52a42a5ad01afa6e12c6b32316cd301fcd459e5ad925c2b74cc719582a6625855caca300f86f0a1dfaa2991b4bfcd860710bc5dcdf08abea44c28f0583a84254a11772f9257335597bacb72ae7f98001637de089e7de8896acb48092d131609459ceec63692565c29bda2ce5503c31dd24727917ce90616c8e10ee7af30372b919d27e7191a573eac11f68a417451478f8dceacbf4c937f0de617c0437626d4a68615c8b605f139621f10af71d03d7a1e61faf92418397bef06801bc6d9e25b80203c32a05c0903a5358adbeaf419f69ca2f24b08c6547e867edea8a1da48f0bafd9d39b0eb3e432429fca8603955d3c879985426b2901b6a5370f4f8e985ad4b611b2e209f90602298a2249b2c057d4071082eb838a0ca1cf58f82469fef6163796d3ebbe6abb9e5631258b7f00f61f87154fed6415cc1413f6ca2de0f67fe8258c5387f2dd0b905dc0f914281067d56f87f61564711edd4b15dc5460ac544a437dce3f775b2118e57e5e0ed1ddc2cc9739237c5315f0f89bf759a3def814f6881ef5f5621aea4b765a7c1abbac2f93f07ed4f75455d64f2718dd4c89f6644f6759b0a7755ede3779357413e6fa7307c549ed09190e6104b2647dc3d891ca942ee1bb4143d97", 0x1000}], 0x2, &(0x7f0000000200)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x6, 0x8, 0x2, 0x42, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x37}]}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="f7caff6daca28fcf54205952804d6342668c26b0c38f0063dda3ed73dae76c118400d4ae4a95940648009f2c9c8dc3acd2da8056aed1c41ac54ed33c3b460b1b66f4eadadcd0f3b9c14e5ca06679c82db3d3162fad9cff6ebd61f8c2aca7999e2d6205eef2193fe48f31190bc118fe1c897654a027deffed6786507632f693a3a1beb6d33ebab2502a5a0a76895f25debd4fe1e052f0e05600fb30e00d0bb6367fa6a99af41ebde43c54609f7d7cd47e39885fde58aebf9c84545579eccd6a1ad463e8ed10ceeef59cdf01a7eef06980979d1a5360f0fa01", 0xd8}, {0x0}], 0x2, &(0x7f0000000480)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0xab, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x2f, 0x0, '\x00', [@ra={0x5, 0x2, 0x81}]}}}], 0x70}}, {{&(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000540)="70ce9d9af34984d15991484f00fdbabc11f365fc5efa0b5c8e104fe84d065cb0b5f867c382", 0x25}, {&(0x7f0000000580)="166fa5b673e680b7ade731417d61bcdbc28f43235b22705950786c85385592b1cffd4163dd16133fa915c33ea7faf60f813b4dadbb32f4a98fcde2e84a7179bf7f6c0c7547a243af207b8eea3a11ac0542523c14d7271df8f492cdec16fa123dd230bcf2bfbc95ce9f057c", 0x6b}, {&(0x7f0000001740)="3a612530cac961814b34809593c7f4fe9b9702181fb82192f76bbbe88c8302c575eee3a17358f8b6c122db83ccc6bcddaec522a3038a626b6c30456067e1de2dacd879e891e0d8c59725eb06af4405b5855918e47d6e8cc6e39914561f8c981214102268090b540914bd8454af7b0c64e08ae2055c3183ea37d503475107e14cb3b26b1324583c7e6b749e8e23ae7034e0ec094188a3bcfca1e74334a71ad02d24c8cecb87070889abe230728c94ecd1152d9e4f984886d39cc9985c4acb82198f8409ee650eb8184a53d8051b12f0b7b4e7b855763cd22ee22a2ab0c0cd873bc0e1d1d2beca748731746f2025d4d46d9a9335fe3620df57bdde03b464c2cefbe7d156718adc13eeb485527a743a9ade44ba7fa279e1a43e17603fdad7eafa2443b1c91f5ac765d9b2adb6da821159ddc641fa4fa39ae1e99f569b714abcdd743ada5a0e1015026a14146b4ca733e87627ca55ddaa25394a7ad2faaac7c687855ed7a8f2bb6aae51093755a0dd254f0190f88c325888e4d359bc62c94f7c50a01169c034842ae0e19f528e8f55dafc3f33e6999c3d5fe4ad261f48245008519c8274082761b08b3036dfa357f6b62d80b8b2d028f66face3d2fda6fb49a2d75ffb81ea20e767e5a4f80d9736f73d1507ebe816523d660b73d55b463e017a0dfb1443f7073ec4422ede98229173436a09a6d751768931b0f43edf5ca162a33590495c237822924350b10d56703a9c1860adb6cf98d567f2272d5d9a15b91b3491edc5f6cc50341399e7a72e21c3215c74e4c21ed595a26aa988d32845c5bd2206e3099336637ac2fee194e9685d60b7efb20d0a1601d0d19739b41ae7af5e2d22d74dfb20a60ba6857efb678d72bcc5221d60f0c7abdcfca6bdc41fe124e0ebc5f0749aff8b503ea6f535402e8f0b59fe66330dc4bfe7964d11e4b2f6703307a917accf2b7c15247cd21226f76855bed6f69b598596ed776eca4a35c3e38ec94190db1ada344b78c1a0565155765506b8e9dd8747516b521c7afc55e93ed88ac8ba57fc3aaa7ae477e873e96aed71afede81d8480abfbc0e31621cccaab43708fd275a2d97d92bb5bd76f52e9354e744abee7acbbc0a865df194969a03bbdb6a8e5b7a434a68e803c7b0662b628aad3e978a61a6d082362f6c31157efee4a5d1c55b595dc9f09299c1df8f44e199a2abd991807ca5743d27fdce5494e2b2c5c9ec1087f94f315be851d8b2e8e224a3d72dd56ef74024b49bee6bdd63e786ce109d4e67f4b8e10b6ae53739fa2f27ebeb206eac43e9a6d39defd90a68aeb6d8094d8c0421ed9c251aa627d305a2958aa2f736d8a7950b65f9f4ecdbceebef0db1dae9f8d14ef453f80a51feb13e932905a3a1c0e7262191ed27e0320a0d1c6f61722aa120c71324cf16f098baac33a17bdaf54f3399a8f270a97309839733e0e3161f045e531362bf6c3ba78c381d9c42942a29d98482a758d587d6a9b8b0dae70cca9089322a64d5eedb18060de50c4a191fb09e29ab2015697c244633035a6e72c70ae59314a52418fe6a2ca33595403f4a62b1f0e4ffe687b7a9956f24e2b741abc912a5c9a93838d335583ea448c095490a154fce53cece3b7a1e8aa57dc2b37d32340a816e4306514de9960d4e1c5ccf2bc15eef8b93f827cb8655f1584a2bb9a2028b95c6b1b72e6f904eba25d32a1e3d743efab598b5e7c64e0b9577b827c6e8e3085f73cde9ab55a2faa8413f97e9f6638f1ebebfc45c50110f3d5f880ced41c99c3a1c01307be31afac2bc55c4b2f6ed2f308805ed622fffbdecbe42f6a7e7f704fbe0bfa1cbd28008f321404ccba76dbd3a8a4f541f87d5b524a1a54045d7dd1e4c1eb16e4aad2e1f091c5984d54f059ff75c3c85a429abf3969197ff88d36b45c7e2ae9c9812c31d5df228e05b1f15954f22e68625bb14e0ea3e82679967fa9b1c9abd5d8cd63cfa56799e95cc67852d3c27aadcdf7d49140a1ec71c0f9c448e27d22b7f3456ec9927d4155d152402b630b0ca842bc04cde3bdf1367a61cf5c1e1794d73776cbd2ff8ad21ebbc364776b8bdb4800bc34243047401e3b2178cb58ae3177168d0b872bf7c959d96ce2907cceb6229b70f4d39b8c8de7dffeebf548a79a3e70e568f38eb287fe6a9312b607fd7fbda4ad491d1d2cbf9e1d8d4e489445b2e2db067c285488fa579df4f7d027af5e59c7d9abe6f16a4fc3a359cf652012294a152d0b668ee2a4557112cfdfeb02946919044ba4a7e6a9e7435f60628c4b6632d1e6ed5dfa5126c9d3ecc7d0438489c11a61bba070e310837e4a96228f7fe8f122db1f3227d2cc2bc9162fc8d3275604524268eedd54d76593645a9bf82121675e4e57b3e205437d6ccadb5ffbe4d3ba7938a99efe38656dc57fab7175b54c9c8ee487372638c1e5dda680ddac1c801051d1cdbd202affecda4ceec112ff0e687c563f1f68bc5195aedd7574b0959b142fb875b6df0722002cfcac8ba660ff1b377a0955a87d5159da9c13d9ee02e61dbb294ac808125443988bbbcb127219f2a49db234c07a5e6182f4d13df4eed0105f40e7367fd00a77c62b257cc8638df80f2208566b0463ce630a92c1510b0f6f10163dff3b866273298eac9380ab169b284bb4f7cf6d42f417b131546a0caa3c54d0e2cb29de809147535c178e4f7ea67e42624ad385e8dd3ef4256aca34752ae9a037717d4227d18846e8138abf3e3aaf24245880a2ec25ba84be5910bbe97caaf90d911cfc843c0aa27e38de25cd9c3ba6697e7e20c76a1eb6d90063a31daff8403395db0f5f3a7c5d4f32a657f158ddb4a07325ba145bb3539ec1848cacdb5f50e780c0542e128e732558f1d34c8e5a9d810834205cf4526d271097b30942d83b47ed1299b4ccbba9f831f183d91e9486fb4a52da300f07fd032656eebb19aed9c2e27c01989982fac029eb2565e79e6bc8122d4929e3e3a8bca14b7e85296904f6a4e2f8eb43cc4e00db69ec4a7f547809cbb1c385cd073b44b3900068bb497269d1248f0c608265fac69a1dee8643d1f9365323361e853f2383c6eda9467f2a2953b523488c370e5a467cf37f8b57f506c553229799e45826d3161e29573ffac8cb3f298a2f841ae64aa477edba62975707e242c55828d272c2bc67e6e8fef747d9628fa445b4b5d968804c94408a17735a68a83a2951ac262359fc5c439b45a37dc8fc1fa7bf0dee96e2a5f30b29b703c98604d29adc6ad2213cc48dc6c6033c8041998d2274fedf9dc5e34f98265f736e26d47f91733c86a54d71932bef62441b7551c70b5bf5be15266556376feef82b9fcd964676f86f70be863a94a01321a71a504956e0903463024b9abca373599e213452c5dfdf27eedd500906a89f4112dd05071e59c2075626aaf20c58fba6294b82f08e5553a3efb46a2d4ec62a0779075e9afc49abbcece654e5b9688881945718f1ab97c9cfac518c628fa194f4424cb696c02790eba77e2cba51a3f3f29839821ea2e1b66f51564fb3428b446280e663d40dab84e901123b0d652a60411a5e4b6de33ada20a39df5767ee0c188f19c8f79c26f39c0b1e297370b68bf9e2320b421da2b7d66ff52cb229e0437481fc60b40dc3d5ba2b0460a61c96c3082bba10804acd94dfe4341e29247d85af54e7d850ffbefc26e2cfd3fc971df8fd569d689ad7a5efab643a1d240b687576fb980cddf25ba9c5060430b149432211c55c776449cc307a0cb160c8d72f8eb606c37d5010d6fd8111872b76e9d8ca3e993ed0e140e1b5ce95e44e1c3a1e61bdd232ae41c7388157d8e141952cbb98f3d35c231427ea5064d076b6c7d4fbd5e2c648d435cbefa97a438989c0bb708ab5fa606d2849dfc6b447ca7e7e703c30cc5162745e2a108dc7c096e45d5f713857bb6a41c81594ccf08afeebc818d9054b4f63da7d7a4f295209d971c81ce73e787dc1334285d1a960dd6cf0bef7706318bde4dabe4a6f412c70b763f8684355c3e2b628b6368aeb01d5f182df25fc0b30ae54a454db862b2b57e8fd6231d5f4bb45ef7b8ae60a816e5c729598365b7830d9e66f6316c874d9199e895de6a6d8b21f5be5268bc8f8cbd8c25d1d1db986ea25def5598b89ba2a566af66a4b4d26b598740b6677449f57d5f8a05e25dffd1bf5ee5b4197003da720fc39b183390df477df0c02b936bf7853b154fadf2dfda3657850c87220fd9694f53052821c216fd4e99e0083c9e21858289a1a2b35649be3dab0df0dd5f04c26b2699f440fe6a36109917d337f4abcb31749c939c221bfe83153e18cb0509bbef04d475ea1512e90b0f2f536e6ec1417229faac2363682ad492aaf44fee063d8b02895d936af9c9c4606c4dc55d64631e5a2a8211c998dc248e36980fed97b2309a26921dc002ce6930b729889382555374065403dee73d51ed717b1e9968c7c85f6165eb2455a62e5287d05deaee4ce3640b33e3a1b6abe700fe2fa617313d0496869a3e0b1b294365f30271059ae6e74942ae7c0ec8bad70d4fb25737b7227b9e5377c2edd53a95e8932e786aba1d14e20451a08bff99c74bd0e5e52fbb58c9472ae3e014fb30fecec9a94b2ab0a5805ce078200c238234239aed7814af3af839f73f2f5740ddab4cc01b0c3a4962074cea3bda5cdc8e60f5b58b5c4c7139e04ac6684d2b5f51c1b457bdbdd15211265b812432494276774e6bed4d0612fad90e34b1b5cec30e30a61647f1bb3382e473ea8d21a0300ff10a430d55a2da6dd2632f219596454e80411090e5def547a1ec1cb3237174f80b10085c1b1db31fed70f5d5c8ea65c3508516cf95b5a63e97d34fd96b1daf34f3d9372ec56fb1f9c223ea8f683fe0e20e726466de573591563189e65af116007489b3ac6423bb1876bd6c5f0dc8c326b190bbaf5a6d1d7f4cd422b82e45fb73a18b19ffb6c5fc5306a9c06fbf2bacf5571ab38d7572ed487d9a18057c4eb7591f53668144eed01654e600944a8c66aac3eb8b0f376d920fc4fd1c553e00169fc35f65311fe7ac5826a3651ecbb9a35a7f212048f654d2ad4f2ff8b9482861b7d6ce3c7acd973aa2642c83a3e64946900f5757a78b6f8c95837bb1e808ff8c00ba3e97f4a7f67d9ea87e672a8b8cd641a809de7a01006d0be16ef7cb43b195c863bf59db95ee9ae44b766107c9355b7f083b6477cadd5e2648e71d183830153956fb7a66be9bf232412131e24364e774945f26fd8b29d3d054eca5fc59011b0571440b73537609652c7cc4a6a65cc07f312cb23b3fe7790e8d7c126f3ef5061414230bda49c335e5dfae390edd83ec29c6285b76e9a511dfb811dda31176d793f655495aa4a6b0f1df043556119778fabe1255d887ded4b75f97957da313463eb7139ee246ef900dad1875de42133bac87568edd9cd905c13b2af405a9ca526aa54f070578b2ac9bf47912d8ce44586085a07787a47d3cbafe44a4a4b009cc7bb4aa44cfbc3ba984ce7bbae03f48dd384c7b5aa42ef05885eb93b94286681a37365e943bc6733a4d55a8d744f7a303577cbb7d17ade7ffc03fcd9a94510bacd2ce7328b17dddd738347d99d2e7fb3f45e06d426c21f11ed6a52bae52827474d87fd76d7c9f6596a633840e3b939e4f9c4681d5f15249bdab524830e7181a55cc903988cd59f307667f8352db5aa3b9569a2af2a18fef01ccb92e87a52b8cb8df02fd5720e69b9fd402a3a146e2f158e5065abb27b1da37062268eb8f482798ed8371bebafc42f74a74cbf6a3466639f8cf73c3f950636fdce2d0d1a3243d87dc37a15645a3", 0x1000}, {&(0x7f0000000600)="6bfb99b43155bfaa8458dc7c", 0xc}, {&(0x7f0000002740)="2a360d7e8f27859d78b3ec22bc76749391a1fed9ef3016b48f673fb97c3d4f4a6e82ebd0f8e156e8a197b2ad798bdb497e2850b184fb2ac2995856a78a8f9920897c4e621f6d595bda25b9354aaee88963edc37080dd979cbc29261bb32009725bb3e665a1d274fcf9847761ea629f90c7550d563adf59b51de15d526f7c0c7178142a4f52ed2967b35ba05d6adfec2d0921b350f91d749a5d07f4b152aab8194f4e9c9c8a0b6fdd0f521590b03c822243edea11cb0a12014c3f29fbe249b96bf3c1a79ffb47fef7c92a12ce0f9dba3f6482e60f91ec08a7c91935adfea2755185c7873b35984c7b4d1bda4e0cbc85484e8a1cdeae2610", 0xf7}, {&(0x7f0000000640)="eab578e51e489faa2b08e9b5ffceb281232856d92e6b649027a0805c8b09c4aa9b4a2bf228367b7d0377556ba30522006bcd5df886f7ca120c1c0270f8269049", 0x40}, {&(0x7f0000002840)="84a91d555a4e4e9467e95f5c1f3c3b3515028f263063c6b9e17a9d41dac7eaa287a89168208aa91350666ef6d8eeca8d41d76ec6a5eaafac4975de1b90dbba247b5a0e4fdda3f990eb7c759919e2b75ac620ec6f47f6f080e46ed8b70a52dfad6dd7bc48a105ca4669d12fa62f2f82f14ecde76e83864bb5be7c9481b2a25b59c76f9c3d933f7eea8124ada59a48e05f9f77d0e33399969a3d4bff03", 0x9c}], 0x7, &(0x7f0000002900)=[@rthdr={{0x68, 0x29, 0x39, {0x5c, 0xa, 0x2, 0x0, 0x0, [@loopback, @remote, @dev={0xfe, 0x80, '\x00', 0x26}, @ipv4={'\x00', '\xff\xff', @empty}, @loopback]}}}, @hoplimit_2292={{0x14}}, @rthdrdstopts={{0x110, 0x29, 0x37, {0x0, 0x1e, '\x00', [@generic={0x0, 0x1a, "fbacb8bf8d03ce4ac4c0ec9395a0bd1fd9c1e43c6f24df66fe72"}, @ra, @generic={0x0, 0xd4, "7f9d078043d187b00ef819c0c6dbd48536656b22811e4eb6013e6dcd9d59b74e5a7c4486828198373f397a9020ea33273838102ca766a7fcd25044fc2257a76b24394dcc0b924b076593e94123ff28b20341d615820bdda051caa59da42265f2dc439a31483c2539a1866f90ece3c738a2dea434338840f882453935de7fe3523222aed5c5d61cedf49bcbdf771c22a7b95874cac722d05c014af5dea86ae30c86658746fdadec9c479fdc2cb4f4adbf0cf82a6ca5a46e05b661f52b09beb8601e0140ed8edccb1c3d2b3092463ffeb8487d4b22"}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x0, 0xa, 0x0, 0x0, 0x0, [@private2, @mcast1, @private0, @private0, @mcast1]}}}], 0x1f8}}], 0x4, 0x48040) 17:42:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000), 0x4) 17:42:26 executing program 0: syz_open_procfs(0x0, &(0x7f0000001380)='statm\x00') 17:42:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x16) 17:42:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4075, 0xfeb}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/prev\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 17:42:26 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) [ 1439.364128][ T5115] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1439.584136][ T5115] usb 6-1: device descriptor read/64, error 18 [ 1439.854051][ T5115] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1440.044211][ T5115] usb 6-1: device descriptor read/64, error 18 [ 1440.164254][ T5115] usb usb6-port1: attempt power cycle [ 1440.574149][ T5115] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1440.744207][ T5115] usb 6-1: device descriptor read/8, error -61 [ 1441.014139][ T5115] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1441.184172][ T5115] usb 6-1: device descriptor read/8, error -61 [ 1441.304467][ T5115] usb usb6-port1: unable to enumerate USB device 17:42:29 executing program 2: r0 = socket$inet(0x2, 0xc003, 0x0) getsockopt$inet_opts(r0, 0x0, 0x14, 0x0, 0x0) 17:42:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:29 executing program 3: r0 = socket$inet(0x2, 0xc003, 0x0) getsockopt$inet_opts(r0, 0x0, 0x7, 0x0, 0x0) 17:42:29 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x3}, 0xfffffffffffffc26, 0x0, 0x0, &(0x7f0000000780)=[@cred, @rights], 0x30}, 0x0) 17:42:29 executing program 1: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 17:42:29 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x47}], 0x1, 0x0) 17:42:29 executing program 2: r0 = socket$inet(0x2, 0xc003, 0x0) getsockopt$inet_opts(r0, 0x0, 0x15, 0x0, 0x0) 17:42:29 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)="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", 0x801) 17:42:29 executing program 0: r0 = socket$inet(0x2, 0xc003, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1d, 0x0, 0x0) 17:42:29 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$setstatus(r1, 0x4, 0x0) 17:42:29 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 17:42:29 executing program 0: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 17:42:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1442.504025][T14074] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1442.694132][T14074] usb 6-1: device descriptor read/64, error 18 [ 1442.974114][T14074] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1443.184180][T14074] usb 6-1: device descriptor read/64, error 18 [ 1443.314442][T14074] usb usb6-port1: attempt power cycle [ 1443.724094][T14074] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1443.904360][T14074] usb 6-1: device descriptor read/8, error -61 [ 1444.174060][T14074] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1444.344289][T14074] usb 6-1: device descriptor read/8, error -61 [ 1444.464194][T14074] usb usb6-port1: unable to enumerate USB device 17:42:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x2f5530}], 0x8, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), 0x4e, &(0x7f0000000000), 0x0, 0x3f00}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1e, 0x6, 0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x9, 0x0, 0x6, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9}, 0x0, 0x10, 0xffffffffffffffff, 0x0) 17:42:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000100a00950000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xa6, &(0x7f0000000100)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) perf_event_open$cgroup(&(0x7f0000000380)={0x3, 0x80, 0x5, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0x1, 0x2}, 0x860, 0x7, 0x6, 0x2, 0x2, 0x0, 0xff, 0x0, 0x8000, 0x0, 0x10001}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x1800000000000060, 0xe, 0x0, &(0x7f00000002c0)="020e003f0004087e5bc5795e86dd", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='qdisc_dequeue\x00', r0}, 0x10) gettid() 17:42:32 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001840)) 17:42:32 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x3ff, 0x0, 0x1}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0x5, &(0x7f0000000340)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xee, &(0x7f0000000140)=""/238, 0x0, 0x10, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xe500}, 0x78) 17:42:32 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 17:42:32 executing program 0: socketpair(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1}, 0x2c) 17:42:32 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000007a00)=@bpf_lsm={0x1d, 0x3, &(0x7f0000007840)=@framed, &(0x7f0000007880)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:42:32 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xcc0, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0xfff}, 0x28) 17:42:32 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001840)) sendmsg(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000001880)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000001a40)=[{0x10}, {0x58, 0x0, 0x400, "2a7d6da21b37290cfb9a7b10c89c07f6ec1f5eb4ff1ae7ef3e1adb7583cf32ccd056fc6d2332e0402292c942295eb4c7c5d572ef73eca9b0d1c6ef0addd4d326df36efff"}, {0x10}], 0x78}, 0x0) 17:42:32 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000004080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[{0x10}, {0x28, 0x0, 0x0, "92611a59f65334b7a936da4c33b7c7c292699e112d9a17"}, {0xf0, 0x0, 0x0, "2a7d6da21b37290cfb9a7b10c89c07f6ec1f5eb4ff1ae7ef3e1adb7583cf32ccd056fc6d2332e0402292c942295eb4c7c5d572ef73eca9b0d1c6ef0addd4d326df36efffe65824d1fa769fa708fe9ca05738cfe98ff2b8bcc272426ebbe91f1f107c31d6abd45772439452275eba310abc44723b968fc9fbbc2e49d9301badac594e1b008cc1d6b6ac785a6a7bd15f1088f693b01adba4d8a79cc7b99742986c91a2dac356e3c666730f3f8c1beca245b8cd392d9df95e8050791484feb5d56d2eca2058a75e01b7b70cb8b235de251f38ade4baadf15ee7ba"}], 0x128}, 0x0) 17:42:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) [ 1445.654201][T14074] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1445.854227][T14074] usb 6-1: device descriptor read/64, error 18 [ 1446.124077][T14074] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1446.314107][T14074] usb 6-1: device descriptor read/64, error 18 [ 1446.438038][T14074] usb usb6-port1: attempt power cycle [ 1446.844160][T14074] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1447.024151][T14074] usb 6-1: device descriptor read/8, error -61 [ 1447.294219][T14074] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1447.464189][T14074] usb 6-1: device descriptor read/8, error -61 [ 1447.584467][T14074] usb usb6-port1: unable to enumerate USB device 17:42:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:35 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8971, &(0x7f0000000b40)) 17:42:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x16, 0x7, 0x0, 0x1b}, 0x40) 17:42:35 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8993, &(0x7f0000000b40)) 17:42:35 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:42:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:42:35 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 17:42:35 executing program 4: syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0xa0e40) 17:42:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x1c) 17:42:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0, 0x700}, 0x0) 17:42:35 executing program 0: syz_open_dev$vcsn(&(0x7f00000021c0), 0x0, 0xc0) 17:42:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000200)=ANY=[], 0x78) [ 1448.764192][T14073] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1448.954088][T14073] usb 6-1: device descriptor read/64, error 18 [ 1449.224117][T14073] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1449.434305][T14073] usb 6-1: device descriptor read/64, error 18 [ 1449.556450][T14073] usb usb6-port1: attempt power cycle [ 1449.974152][T14073] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1450.174890][T14073] usb 6-1: device descriptor read/8, error -61 [ 1450.444086][T14073] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1450.634862][T14073] usb 6-1: device descriptor read/8, error -61 [ 1450.755012][T14073] usb usb6-port1: unable to enumerate USB device 17:42:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e010902", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 17:42:38 executing program 4: keyctl$set_reqkey_keyring(0x4, 0xfffffff9) 17:42:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x30}, 0x0) 17:42:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000940)) 17:42:38 executing program 2: setreuid(0xffffffffffffffff, 0xee00) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 17:42:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000500)={'syztnl0\x00', 0x0}) 17:42:38 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 17:42:38 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000080)=@framed={{}, [], {0x95, 0x0, 0x0, 0x80ffffff}}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:42:38 executing program 1: unshare(0xa060300) 17:42:39 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 17:42:39 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) [ 1451.874263][T14073] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1452.134078][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1452.274288][T14073] usb 6-1: config index 0 descriptor too short (expected 30768, got 36) [ 1452.283592][T14073] usb 6-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 1452.294550][T14073] usb 6-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 1452.306251][T14073] usb 6-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 1452.394343][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1452.403455][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1452.412997][T14073] usb 6-1: SerialNumber: syz [ 1452.696635][T14073] usb 6-1: USB disconnect, device number 8 [ 1453.234079][T14073] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1453.474050][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1453.614291][T14073] usb 6-1: config index 0 descriptor too short (expected 30768, got 36) [ 1453.622714][T14073] usb 6-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 1453.633362][T14073] usb 6-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 1453.644806][T14073] usb 6-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 1453.744895][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1453.754204][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1453.762301][T14073] usb 6-1: SerialNumber: syz [ 1454.046618][T14073] usb 6-1: USB disconnect, device number 9 17:42:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e010902", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:41 executing program 1: fsopen(&(0x7f0000000480)='binfmt_misc\x00', 0x0) 17:42:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000140)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c, 0x0}, 0x810) 17:42:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFCONF(r0, 0x8954, 0x0) 17:42:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000002c0)={0x2}, 0x88) 17:42:41 executing program 3: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 17:42:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001300)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001240)=[{0x0}, {&(0x7f0000000080)='=', 0x1}], 0x2, &(0x7f00000012c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0) 17:42:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, &(0x7f00000028c0)) 17:42:42 executing program 2: prctl$PR_SET_PDEATHSIG(0x2, 0xfffffffffffffffd) 17:42:42 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}]}}, &(0x7f00000003c0)=""/227, 0x46, 0xe3, 0x1}, 0x20) 17:42:42 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x23, &(0x7f0000000300), 0x4) 17:42:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3f) connect(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000b40)=[{{&(0x7f0000000700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, 0x0}}], 0x1, 0x0) [ 1454.974119][T14073] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1455.234061][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1455.374799][T14073] usb 6-1: config index 0 descriptor too short (expected 30768, got 36) [ 1455.383187][T14073] usb 6-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 1455.393776][T14073] usb 6-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 1455.405109][T14073] usb 6-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 1455.494464][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1455.503564][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1455.512212][T14073] usb 6-1: SerialNumber: syz [ 1455.795906][T14073] usb 6-1: USB disconnect, device number 10 [ 1456.374068][T14073] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1456.614096][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1456.734350][T14073] usb 6-1: config index 0 descriptor too short (expected 30768, got 36) [ 1456.742931][T14073] usb 6-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 1456.754061][T14073] usb 6-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 1456.769746][T14073] usb 6-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 1456.854239][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1456.865962][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1456.874825][T14073] usb 6-1: SerialNumber: syz [ 1457.155873][T14073] usb 6-1: USB disconnect, device number 11 17:42:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e010902", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000000580)="0c268a927f1f6588b9674812c62125e2928ae73ed216895941ba7860fcfaf65ac618ded89748952bd67aa03059bcecc59e547e758028ab4ea6f7aeaa0500000000001000000000000000000000000000000000000000000000a835d384", 0xfffffdcf, 0x8800, 0x0, 0x0) 17:42:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:42:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x3, &(0x7f0000000000)=[{0x4}, {0xc}, {0x6}]}) 17:42:45 executing program 0: set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x800) io_uring_setup(0x527b, &(0x7f0000000040)) 17:42:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 1457.695834][ T269] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1457.705139][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1457.719780][T16255] netlink: 'syz-executor.4': attribute type 11 has an invalid length. 17:42:45 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x3, &(0x7f0000000300), 0x4) [ 1457.754599][ T269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.766936][T16255] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1457.796132][ T269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.822896][ T37] audit: type=1326 audit(1620409365.225:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16251 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f7e549 code=0x0 [ 1457.870036][ T269] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 17:42:45 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r0, 0xbc525000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='memory.events\x00', 0x0, 0x0) [ 1457.914827][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1457.948113][ T269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 17:42:45 executing program 3: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8) [ 1457.968556][ T269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:42:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:42:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1458.084394][ T9536] usb 6-1: new high-speed USB device number 12 using dummy_hcd 17:42:45 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x20, r0, 0x1, 0x0, 0x0, {{0x5f}, {@void, @val={0xc}}}}, 0x20}}, 0x0) [ 1458.160519][T16280] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1458.227522][T16280] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1458.354353][ T9536] usb 6-1: Using ep0 maxpacket: 8 [ 1458.475195][ T9536] usb 6-1: config index 0 descriptor too short (expected 30768, got 36) [ 1458.483632][ T9536] usb 6-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 1458.495191][ T9536] usb 6-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 1458.509588][ T9536] usb 6-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 1458.604468][ T9536] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1458.613567][ T9536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1458.654652][ T9536] usb 6-1: SerialNumber: syz [ 1458.941654][T16284] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1458.954377][T16284] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1458.997023][ T9536] usb 6-1: USB disconnect, device number 12 [ 1459.554730][ T9536] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1459.804143][ T9536] usb 6-1: Using ep0 maxpacket: 8 [ 1459.924208][ T9536] usb 6-1: config index 0 descriptor too short (expected 30768, got 36) [ 1459.932667][ T9536] usb 6-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 1459.943475][ T9536] usb 6-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 1459.955213][ T9536] usb 6-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 1460.044702][ T9536] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1460.053892][ T9536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1460.063491][ T9536] usb 6-1: SerialNumber: syz [ 1460.346241][ T9536] usb 6-1: USB disconnect, device number 13 17:42:48 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r0, 0xbc525000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='memory.events\x00', 0x0, 0x0) 17:42:48 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/194, 0xc2}], 0x1) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) 17:42:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) 17:42:48 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@authinfo={0x10}], 0x10}, 0x0) 17:42:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:42:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff05007498090400", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0x20) 17:42:48 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000080), &(0x7f0000000140)=0xb0) [ 1460.929062][ T246] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1460.952648][T16343] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1461.002203][ T246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.009255][T16343] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1461.014557][T16345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1461.071731][ T246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:42:48 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='?', 0x1, 0x0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) 17:42:48 executing program 0: socket$netlink(0x10, 0x3, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0xc01, 0x3, 0x210, 0x0, 0x5002004a, 0x0, 0xe8, 0x0, 0x178, 0x3c8, 0x3c8, 0x178, 0x3c8, 0x3, 0x0, {[{{@ip={@remote, @rand_addr, 0x0, 0x0, '\x00', 'bond_slave_1\x00', {}, {}, 0x0, 0x0, 0x60}, 0x60, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) 17:42:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:42:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) [ 1461.354072][T14073] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1461.618116][T14073] usb 6-1: Using ep0 maxpacket: 8 17:42:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fork() sendmsg$unix(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)='9', 0x1}], 0x2}, 0x0) 17:42:49 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r0, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 17:42:49 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000700), 0x0, &(0x7f0000000780)={0x0, 0x0, @b}, 0x48, 0xfffffffffffffffe) [ 1461.785089][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1461.811011][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 17:42:49 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, 0x0, 0x0) 17:42:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) [ 1461.905526][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1461.969200][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1461.999588][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 48: 120, using maximum allowed: 30 [ 1462.026632][ T246] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1462.053458][ T246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.053485][T14073] usb 6-1: config 5 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1462.085770][ T246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.143048][T14073] usb 6-1: config 5 interface 0 has no altsetting 0 [ 1462.234439][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1462.244173][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1462.253165][T14073] usb 6-1: SerialNumber: syz [ 1462.554786][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1462.560837][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1462.608974][T14073] usb 6-1: USB disconnect, device number 14 [ 1463.104227][T14073] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1463.384091][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1463.524202][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1463.532683][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1463.543820][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1463.555631][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1463.565890][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 48: 120, using maximum allowed: 30 [ 1463.577959][T14073] usb 6-1: config 5 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1463.591830][T14073] usb 6-1: config 5 interface 0 has no altsetting 0 [ 1463.685014][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1463.694403][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1463.702466][T14073] usb 6-1: SerialNumber: syz [ 1463.984846][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1463.990881][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1464.035223][T14073] usb 6-1: USB disconnect, device number 15 17:42:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff05007498090400", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:51 executing program 3: socket(0xa, 0x2, 0x3) 17:42:51 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 17:42:51 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:42:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 17:42:51 executing program 4: connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) [ 1464.527926][ T269] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 17:42:52 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000f40), 0x10) 17:42:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x14, 0x4, 0x4, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x40) [ 1464.579931][ T269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 17:42:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "68e563", "95362af9feae825200d0cb0256d5849ba1d08f5d6f01878570f223a979da4ecfc728770fc6fa051d8fd8aa962cd13438ea7c503df746f2f6c0ad7ee5f2e73e98db44591aabba36cdee210d5fbccd3159bb257da4a7de40c92eee8bd21bb7377534f8667c5a3d4fc1ffd3122aee8cfaf900fd6ab9a69708b6ac3eb0daea90320861fd08bed240a1269a2c3ea223fbaa764349eab8cb210dbd4060143c59f7a50b6adc80a546ac56e9242433b120cbae76032b7571771f24f3b129df0e8c7d43330a5d02db3a7527f8f6914acceff98579ff78747cd2b1a56f4e065c3bd48c94e3ca18c6b5e9aa545609cda4001d8252f999993355988cedcad69fdf522fb89191"}}, 0x110) 17:42:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) [ 1464.620468][ T269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:42:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/240) 17:42:52 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$dsp(r0, &(0x7f0000000200)=""/138, 0x8a) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000000)) [ 1464.794203][ T269] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1464.831575][ T269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.865026][ T269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.894700][T13037] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1465.134153][T13037] usb 6-1: Using ep0 maxpacket: 8 [ 1465.254249][T13037] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1465.266427][T13037] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1465.276841][T13037] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1465.288245][T13037] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1465.298343][T13037] usb 6-1: too many endpoints for config 5 interface 0 altsetting 48: 120, using maximum allowed: 30 [ 1465.310393][T13037] usb 6-1: config 5 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1465.324940][T13037] usb 6-1: config 5 interface 0 has no altsetting 0 [ 1465.404733][T13037] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1465.413879][T13037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1465.424762][T13037] usb 6-1: SerialNumber: syz [ 1465.714556][T13037] hub 6-1:5.0: bad descriptor, ignoring hub [ 1465.733447][T13037] hub: probe of 6-1:5.0 failed with error -5 [ 1465.785329][T13037] usb 6-1: USB disconnect, device number 16 [ 1466.244118][T13037] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1466.484067][T13037] usb 6-1: Using ep0 maxpacket: 8 [ 1466.609144][T13037] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1466.617610][T13037] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1466.632287][T13037] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1466.642821][T13037] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1466.657327][T13037] usb 6-1: too many endpoints for config 5 interface 0 altsetting 48: 120, using maximum allowed: 30 [ 1466.670583][T13037] usb 6-1: config 5 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1466.687804][T13037] usb 6-1: config 5 interface 0 has no altsetting 0 [ 1466.774863][T13037] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1466.812208][T13037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1466.822075][T13037] usb 6-1: SerialNumber: syz [ 1467.114517][T13037] hub 6-1:5.0: bad descriptor, ignoring hub [ 1467.120554][T13037] hub: probe of 6-1:5.0 failed with error -5 [ 1467.175971][T13037] usb 6-1: USB disconnect, device number 17 17:42:55 executing program 2: getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0xe) r0 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) write$dsp(r1, &(0x7f00000002c0)="127bf23166898afef488e4d85079791f444712e5e7878fa272b8db51dfc575092096977fb21d99029f4112ee6faeab5ce7", 0x31) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) 17:42:55 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8914, &(0x7f00000028c0)) 17:42:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:42:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000080)={'veth0_virt_wifi\x00', @ifru_ivalue}) 17:42:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff05007498090400", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:42:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc) 17:42:55 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) 17:42:55 executing program 3: pipe2(&(0x7f0000000800)={0xffffffffffffffff}, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x12, r0, 0x83000000) 17:42:55 executing program 2: add_key(&(0x7f0000000080)='rxrpc\x00', 0x0, &(0x7f0000000280)="32cc765879f29fa8298eee4dda6d675be1f273b50ac86b5c2d6c322b58", 0x1d, 0xfffffffffffffffc) [ 1467.726032][T16502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:42:55 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x1f, 0x4) 17:42:55 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0xc2a01, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f00000000c0)) 17:42:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r0, 0x0, 0x0) [ 1468.004166][ T9531] usb 6-1: new high-speed USB device number 18 using dummy_hcd 17:42:55 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000440)={0x18}, 0x18) [ 1468.254476][ T9531] usb 6-1: Using ep0 maxpacket: 8 [ 1468.374474][ T9531] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1468.383774][ T9531] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1468.392932][ T9531] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1468.403640][ T9531] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1468.413150][ T9531] usb 6-1: too many endpoints for config 5 interface 0 altsetting 48: 120, using maximum allowed: 30 [ 1468.424662][ T9531] usb 6-1: config 5 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1468.450099][ T9531] usb 6-1: config 5 interface 0 has no altsetting 0 [ 1468.459988][ T246] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 17:42:55 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010efa8c68d0058b7a34f16000000000a2000000002030100001000f787060000000000000900010001"], 0xcc}}, 0x0) 17:42:55 executing program 4: set_mempolicy(0x4, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x54000812, &(0x7f0000fff000/0x1000)=nil) 17:42:55 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x18, 0x1, &(0x7f0000002540)=@raw=[@exit], &(0x7f0000002580)='GPL\x00', 0x7, 0x97, &(0x7f00000025c0)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1468.492963][ T246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.510117][ T246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.535652][ T9531] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1468.557686][ T9531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1468.579624][ T9531] usb 6-1: SerialNumber: syz [ 1468.874538][ T9531] hub 6-1:5.0: bad descriptor, ignoring hub [ 1468.884626][ T9531] hub: probe of 6-1:5.0 failed with error -5 [ 1468.915821][ T9531] usb 6-1: USB disconnect, device number 18 [ 1469.424175][ T9531] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1469.664409][ T9531] usb 6-1: Using ep0 maxpacket: 8 [ 1469.784179][ T9531] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1469.792560][ T9531] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1469.809291][ T9531] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1469.821455][ T9531] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1469.839237][ T9531] usb 6-1: too many endpoints for config 5 interface 0 altsetting 48: 120, using maximum allowed: 30 [ 1469.852937][ T9531] usb 6-1: config 5 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1469.869772][ T9531] usb 6-1: config 5 interface 0 has no altsetting 0 [ 1469.954208][ T9531] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1469.963303][ T9531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1469.974163][ T9531] usb 6-1: SerialNumber: syz [ 1470.264926][ T9531] hub 6-1:5.0: bad descriptor, ignoring hub [ 1470.270984][ T9531] hub: probe of 6-1:5.0 failed with error -5 [ 1470.305046][ T9531] usb 6-1: USB disconnect, device number 19 17:42:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:42:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00000000001190500000600000000000a0000003c0001002c0001001400030016e8bad33edad6b8000000000000000014000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff01000000000000000000ac00000001080007"], 0xc0}}, 0x0) 17:42:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) write$binfmt_misc(r2, &(0x7f0000002480)={'syz0', "3a2dd441"}, 0x8) 17:42:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 17:42:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4010aefd, &(0x7f0000000080)) 17:42:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff050074980904000052070101", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) [ 1470.782238][ T2846] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1470.788924][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1470.805843][T16561] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1470.853088][ T2846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.896910][T16573] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1470.909331][ T2846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:42:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:42:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="c0000000000219"], 0xc0}}, 0x0) 17:42:58 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x0, 0x0, 0xffffffffffffff37) sendto$inet(r0, &(0x7f0000000100)="0e", 0x1, 0x0, 0x0, 0x0) 17:42:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x350, 0x60, 0x160, 0x160, 0x0, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x167, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@empty}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 17:42:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00000000001190500000600000000000a0000003c0001002c0001001400030016e8bad33edad6b8000000000000000014000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff01000000000000000000ac00000001080007"], 0xc0}}, 0x0) [ 1471.174827][T16596] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1471.178058][T16598] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1471.193237][T16595] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1471.207492][ T246] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 17:42:58 executing program 3: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x163941, 0x0) ftruncate(r1, 0x200000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) fallocate(r0, 0x100000010, 0x0, 0xfffb) [ 1471.213071][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:42:58 executing program 0: perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = gettid() r3 = gettid() sendmmsg$unix(r1, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x70}], 0xfd, 0x0) 17:42:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00000000001190500000600000000000a0000003c0001002c0001001400030016e8bad33edad6b8000000000000000014000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff01000000000000000000ac00000001080007"], 0xc0}}, 0x0) [ 1471.260488][ T246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.274252][ T9536] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1471.289943][ T246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:42:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1471.461407][T16608] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 17:42:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006800)={0x0, 0x0, &(0x7f00000067c0)={&(0x7f0000006a40)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 17:42:58 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r3, &(0x7f0000000280)=ANY=[], 0x3af4707d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet_sctp(0x2, 0x0, 0x84) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) [ 1471.501543][ T2846] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1471.514712][ T9536] usb 6-1: Using ep0 maxpacket: 8 [ 1471.522254][T16610] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1471.542842][ T2846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.572217][ T2846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.644885][ T9536] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1471.665626][ T9536] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1471.682626][ T9536] usb 6-1: config 5 has an invalid descriptor of length 120, skipping remainder of the config [ 1471.693630][ T9536] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1471.703309][ T9536] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1471.728678][ T9536] usb 6-1: config 5 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 1471.815465][ T9536] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1471.824706][ T9536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1471.832817][ T9536] usb 6-1: SerialNumber: syz [ 1472.124438][ T9536] hub 6-1:5.0: bad descriptor, ignoring hub [ 1472.130849][ T9536] hub: probe of 6-1:5.0 failed with error -5 [ 1472.185822][ T9536] usb 6-1: USB disconnect, device number 20 [ 1472.654106][ T9536] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1472.894134][ T9536] usb 6-1: Using ep0 maxpacket: 8 [ 1473.014206][ T9536] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1473.022771][ T9536] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1473.034618][ T9536] usb 6-1: config 5 has an invalid descriptor of length 120, skipping remainder of the config [ 1473.050320][ T9536] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1473.060409][ T9536] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1473.072468][ T9536] usb 6-1: config 5 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 1473.164266][ T9536] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1473.173442][ T9536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1473.184329][ T9536] usb 6-1: SerialNumber: syz [ 1473.464618][ T9536] hub 6-1:5.0: bad descriptor, ignoring hub [ 1473.470651][ T9536] hub: probe of 6-1:5.0 failed with error -5 [ 1473.526435][ T9536] usb 6-1: USB disconnect, device number 21 17:43:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff050074980904000052070101", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:01 executing program 4: r0 = socket$inet(0x2, 0x803, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:43:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="d4010000170a01"], 0x1d4}}, 0x0) 17:43:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00000000001190500000600000000000a0000003c0001002c0001001400030016e8bad33edad6b8000000000000000014000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff01000000000000000000ac00000001080007"], 0xc0}}, 0x0) 17:43:01 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 17:43:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) [ 1474.022511][T16664] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1474.032481][T16665] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1474.034938][T16661] netlink: 448 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1474.062026][ T269] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1474.088179][T16662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1474.091851][T16669] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. 17:43:01 executing program 3: ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) 17:43:01 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1474.129672][ T269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.157936][ T269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:43:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1474.215432][ T246] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 17:43:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) 17:43:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4db9a1a5"}, 0x0, 0x0, @fd}) [ 1474.258400][ T246] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1474.310344][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1474.344794][ T9536] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1474.365798][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1474.396778][ T246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.422120][ T246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.451537][ T246] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1474.466301][T16683] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1474.490830][ T246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.528433][ T246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.604242][ T9536] usb 6-1: Using ep0 maxpacket: 8 [ 1474.724140][ T9536] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1474.733072][ T9536] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1474.742622][ T9536] usb 6-1: config 5 has an invalid descriptor of length 120, skipping remainder of the config [ 1474.753438][ T9536] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1474.762965][ T9536] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1474.773817][ T9536] usb 6-1: config 5 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 1474.864395][ T9536] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1474.873585][ T9536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1474.883324][ T9536] usb 6-1: SerialNumber: syz [ 1475.174509][ T9536] hub 6-1:5.0: bad descriptor, ignoring hub [ 1475.180564][ T9536] hub: probe of 6-1:5.0 failed with error -5 [ 1475.226556][ T9536] usb 6-1: USB disconnect, device number 22 [ 1475.734089][ T9536] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1475.974129][ T9536] usb 6-1: Using ep0 maxpacket: 8 [ 1476.094183][ T9536] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1476.094272][ T9536] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1476.094304][ T9536] usb 6-1: config 5 has an invalid descriptor of length 120, skipping remainder of the config [ 1476.094330][ T9536] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1476.132077][ T9536] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1476.143061][ T9536] usb 6-1: config 5 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 1476.235293][ T9536] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1476.249154][ T9536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1476.257700][ T9536] usb 6-1: SerialNumber: syz [ 1476.545174][ T9536] hub 6-1:5.0: bad descriptor, ignoring hub [ 1476.551222][ T9536] hub: probe of 6-1:5.0 failed with error -5 [ 1476.585137][ T9536] usb 6-1: USB disconnect, device number 23 17:43:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff050074980904000052070101", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:04 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc0285628, &(0x7f0000000080)) 17:43:04 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 17:43:04 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040564b, &(0x7f0000000080)) 17:43:04 executing program 4: socketpair(0x21, 0x0, 0x0, &(0x7f0000000180)) 17:43:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001f00)=[{{&(0x7f0000000040)={0x2, 0x4e24, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)='k', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001580)="d0", 0x1}], 0x300}}], 0x3, 0x480c4) [ 1477.094390][ T269] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 17:43:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 17:43:04 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc038563b, &(0x7f0000000080)) 17:43:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1477.138050][T29676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.166444][T29676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:43:04 executing program 3: syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) open(&(0x7f0000000180)='./bus\x00', 0x1612c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:43:04 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {}, {0x1}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3357, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0xa}) [ 1477.337870][ T200] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1477.377298][ T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.411928][ T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.474248][T13037] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1477.744140][T13037] usb 6-1: Using ep0 maxpacket: 8 [ 1477.884879][T13037] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1477.893417][T13037] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1477.903667][T13037] usb 6-1: config 5 has an invalid descriptor of length 120, skipping remainder of the config [ 1477.915142][T13037] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1477.925293][T13037] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1477.937188][T13037] usb 6-1: config 5 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 1478.044876][T13037] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1478.054092][T13037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1478.062567][T13037] usb 6-1: SerialNumber: syz [ 1478.364685][T13037] hub 6-1:5.0: bad descriptor, ignoring hub [ 1478.371221][T13037] hub: probe of 6-1:5.0 failed with error -5 [ 1478.425064][T13037] usb 6-1: USB disconnect, device number 24 [ 1478.914255][T13037] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1479.176218][T13037] usb 6-1: Using ep0 maxpacket: 8 [ 1479.298900][T13037] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1479.307330][T13037] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1479.318017][T13037] usb 6-1: config 5 has an invalid descriptor of length 120, skipping remainder of the config [ 1479.329257][T13037] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1479.339437][T13037] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1479.351607][T13037] usb 6-1: config 5 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 1479.455330][T13037] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1479.464576][T13037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1479.472797][T13037] usb 6-1: SerialNumber: syz [ 1479.784598][T13037] hub 6-1:5.0: bad descriptor, ignoring hub [ 1479.790629][T13037] hub: probe of 6-1:5.0 failed with error -5 [ 1479.835119][T13037] usb 6-1: USB disconnect, device number 25 17:43:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff050074980904000052070101000905", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:07 executing program 0: timer_create(0x2, 0x0, &(0x7f00000000c0)) 17:43:07 executing program 4: r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff05007498090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) 17:43:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:07 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {}, {}, {0x0, 0x4}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0xcc, 0x3f, 0x0, 0x200, 0x1, 0xa}) 17:43:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 17:43:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, "ce645b5839135268"}) [ 1480.343356][ T269] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 17:43:07 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x76, 0x11, 0xd0, 0x40, 0x8ca, 0x21, 0x49d1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x46, 0x50, 0x3e, 0x0, [], [{{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800001, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 17:43:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1480.393326][ T269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 17:43:07 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) [ 1480.436236][ T269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:43:08 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc0305602, &(0x7f0000000080)) 17:43:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1480.570360][ T200] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1480.603027][ T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.604090][T27506] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1480.646186][ T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.726457][ T200] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1480.734085][T13037] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1480.752039][ T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.773626][ T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.804321][ T9536] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1480.994280][T27506] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1481.002938][T27506] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1481.013522][T27506] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.014063][T13037] usb 6-1: Using ep0 maxpacket: 8 [ 1481.026451][T27506] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1481.114214][T27506] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1481.124188][T27506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1481.133137][T27506] usb 5-1: SerialNumber: syz [ 1481.165104][T13037] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1481.173595][T13037] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1481.182679][ T9536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1481.187380][T13037] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1481.193566][T27506] hub 5-1:5.0: bad descriptor, ignoring hub [ 1481.209484][T13037] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1481.221311][T13037] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1481.224301][ T9536] usb 4-1: New USB device found, idVendor=08ca, idProduct=0021, bcdDevice=49.d1 [ 1481.236311][T13037] usb 6-1: config 5 interface 0 altsetting 0 has an invalid endpoint with address 0x30, skipping [ 1481.255221][T13037] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1481.261911][T27506] hub: probe of 5-1:5.0 failed with error -5 [ 1481.285602][ T9536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.309370][ T9536] usb 4-1: config 0 descriptor?? [ 1481.355071][T13037] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1481.366272][T13037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1481.384174][T13037] usb 6-1: SerialNumber: syz [ 1481.445321][T13037] hub 6-1:5.0: bad descriptor, ignoring hub [ 1481.451376][T13037] hub: probe of 6-1:5.0 failed with error -5 [ 1481.582564][ T9536] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 1481.592272][ T9536] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 1481.620841][ T9536] input: failed to attach handler kbd to device input22, error: -5 [ 1481.658878][ T9536] usb 4-1: USB disconnect, device number 32 [ 1482.212004][T16832] udc-core: couldn't find an available UDC or it's busy [ 1482.219175][T16832] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1482.364285][T14074] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1482.574104][T14074] usb 4-1: device descriptor read/64, error 18 [ 1482.854155][T14074] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1483.044094][T14074] usb 4-1: device descriptor read/64, error 18 [ 1483.174668][T14074] usb usb4-port1: attempt power cycle 17:43:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff050074980904000052070101000905", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:10 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000016c0)={0xffffffff}, 0x8) 17:43:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:10 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000002980), 0x41, 0x0) 17:43:10 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x95) [ 1483.414988][ T9536] usb 5-1: USB disconnect, device number 89 [ 1483.439705][ T269] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 17:43:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f0000005980)) [ 1483.472938][ T9536] usb 6-1: USB disconnect, device number 26 [ 1483.502269][ T269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 17:43:10 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 17:43:11 executing program 3: mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x0, 0x4023071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x10) 17:43:11 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1483.542180][ T269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.604232][T14074] usb 4-1: new high-speed USB device number 35 using dummy_hcd 17:43:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4d0, 0x1d8, 0xe8, 0x378, 0x270, 0xe8, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ttl={{0x28}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@udp={{0x30}}, @common=@inet=@socket2={{0x28}}]}, @inet=@TOS={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'veth0_to_team\x00', 'vxcan1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "467451abbae4e10030f7e4b63d3ed1e3a1d2c32dbc0d9f3e0478f81b66dc"}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) 17:43:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x5422, 0x0) [ 1483.737142][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:11 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1483.864182][T14074] usb 4-1: device not accepting address 35, error -71 [ 1483.895198][T27506] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1483.949854][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1483.994123][ T9536] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1484.134127][T27506] usb 6-1: Using ep0 maxpacket: 8 [ 1484.225277][ T3239] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.232415][ T3239] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.244923][ T9536] usb 3-1: Using ep0 maxpacket: 16 [ 1484.254179][T27506] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1484.262747][T27506] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1484.275188][T27506] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1484.286884][T27506] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1484.298878][T27506] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1484.311551][T27506] usb 6-1: config 5 interface 0 altsetting 0 has an invalid endpoint with address 0x30, skipping [ 1484.324254][T27506] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1484.364237][ T9536] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1484.374941][ T9536] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1484.386933][ T9536] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1484.424270][T27506] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1484.434498][T27506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1484.442582][T27506] usb 6-1: SerialNumber: syz [ 1484.495636][T27506] hub 6-1:5.0: bad descriptor, ignoring hub [ 1484.501661][T27506] hub: probe of 6-1:5.0 failed with error -5 [ 1484.644156][ T9536] usb 3-1: string descriptor 0 read error: -22 [ 1484.650731][ T9536] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1484.660012][ T9536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.913350][T14073] usb 3-1: USB disconnect, device number 66 [ 1485.256765][T16897] udc-core: couldn't find an available UDC or it's busy [ 1485.263795][T16897] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1485.694166][ T9536] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1485.934065][ T9536] usb 3-1: Using ep0 maxpacket: 16 [ 1486.054171][ T9536] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1486.064242][ T9536] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1486.076215][ T9536] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1486.324296][ T9536] usb 3-1: string descriptor 0 read error: -22 [ 1486.331878][ T9536] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1486.341721][ T9536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:43:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff050074980904000052070101000905", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:13 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0x30) write$hidraw(r0, &(0x7f0000002280)="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", 0xfd1) 17:43:13 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:13 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x40047459, 0x0) 17:43:13 executing program 4: mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x0, 0x4023071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x12) 17:43:14 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) [ 1486.521195][T16913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1486.594515][ T9531] usb 3-1: USB disconnect, device number 67 17:43:14 executing program 2: munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) pipe(&(0x7f0000000140)) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) 17:43:14 executing program 0: mmap$usbmon(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000009, 0x4023071, 0xffffffffffffffff, 0x0) 17:43:14 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8990, &(0x7f0000000000)={'tunl0\x00'}) 17:43:14 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1486.736346][T14073] usb 6-1: reset high-speed USB device number 27 using dummy_hcd 17:43:14 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000003c0)={0xfffffc01}, 0x4) 17:43:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @private}, 0x84, 0x0, 0x0, 0x0, 0x800, 0x0, 0x727, 0x0, 0x3cfe}) [ 1486.820091][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1487.024421][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1487.966212][T16945] udc-core: couldn't find an available UDC or it's busy [ 1487.973215][T16945] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:43:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff05007498090400005207010100090501", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:16 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'ip6_vti0\x00'}) 17:43:16 executing program 2: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "44f24a9a0cbccf468e40fcb24ee475dc9046163e9d6746919c290ce7bb29da33bc045f5c803e8e6e1a9d181271bcfb5df2fda3cbbf40f29ac88a75d9c904afbc"}, 0x48, 0xfffffffffffffffc) 17:43:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89a1, &(0x7f0000000000)={'veth1\x00', @ifru_hwaddr}) 17:43:16 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000080)={'\x00', @ifru_data=0x0}) 17:43:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000000)={'veth1\x00', @ifru_hwaddr}) 17:43:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFCONF(r0, 0x8919, 0x0) [ 1489.633674][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1489.645645][ T9536] usb 6-1: USB disconnect, device number 27 17:43:17 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 17:43:17 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8995, &(0x7f0000000000)={'tunl0\x00'}) 17:43:17 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000001e00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/26, 0x1a}, 0xfdd}, {{0x0, 0x0, &(0x7f0000000e80)}}], 0x2, 0x0, &(0x7f0000001e40)={0x0, r1+10000000}) syz_genetlink_get_family_id$devlink(&(0x7f0000002f00), r0) [ 1489.931086][T16975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1490.014132][T14073] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1490.254512][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1490.384329][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1490.393250][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1490.405367][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1490.416338][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1490.426326][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1490.437815][T14073] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1656, setting to 64 [ 1490.449918][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1490.564416][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1490.574308][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1490.582495][T14073] usb 6-1: SerialNumber: syz [ 1490.645480][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1490.651736][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1491.408819][T16987] udc-core: couldn't find an available UDC or it's busy [ 1491.419055][T16987] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:43:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff05007498090400005207010100090501", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ea0b0edde207801708b961b2a37bff73", 0x10}], 0x1}, 0x0) 17:43:20 executing program 4: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x21, 0x48000005, 0xffffffffffffffff, 0x0) 17:43:20 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:20 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x7, [@func, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @ptr, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @func_proto, @restrict, @ptr, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0xe7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 17:43:20 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1492.804409][ T9531] usb 6-1: USB disconnect, device number 28 17:43:20 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet6(r0, &(0x7f0000003840)={&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000100)=[{0x0}, {&(0x7f0000001200)="15", 0x1}], 0x2, &(0x7f0000003480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000080"], 0x388}, 0x0) 17:43:20 executing program 0: fork() wait4(0x0, 0x0, 0x0, 0x0) fork() 17:43:20 executing program 3: r0 = getpid() move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:43:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:20 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1493.124207][ T9531] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1493.364121][ T9531] usb 6-1: Using ep0 maxpacket: 8 [ 1493.484709][ T9531] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1493.493100][ T9531] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1493.510076][ T9531] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1493.521522][ T9531] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1493.533649][ T9531] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1493.545806][ T9531] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1656, setting to 64 [ 1493.559113][ T9531] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1493.644650][ T9531] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1493.655610][ T9531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1493.663733][ T9531] usb 6-1: SerialNumber: syz [ 1493.705727][ T9531] hub 6-1:5.0: bad descriptor, ignoring hub [ 1493.712506][ T9531] hub: probe of 6-1:5.0 failed with error -5 [ 1494.469548][T17034] udc-core: couldn't find an available UDC or it's busy [ 1494.476807][T17034] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:43:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff05007498090400005207010100090501", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) setuid(0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="ae", 0x1}], 0x1) 17:43:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:23 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0xdb4f98b5ea5602bd) 17:43:23 executing program 0: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 17:43:23 executing program 4: munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13) 17:43:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) [ 1495.884459][ T9536] usb 6-1: USB disconnect, device number 29 [ 1495.905431][T17044] sg_write: process 3651 (syz-executor.3) changed security contexts after opening file descriptor, this is not allowed. [ 1495.919578][T17046] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:23 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xa}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000080)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:23 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000000104010300000000000000000100000308000540000007ff0800034000005fba05000100020000000500010001"], 0x54}}, 0x0) 17:43:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) [ 1496.143341][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1496.240497][T17067] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1496.250145][T14074] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1496.504264][T14074] usb 6-1: Using ep0 maxpacket: 8 [ 1496.634252][T14074] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1496.642706][T14074] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1496.657598][T14074] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1496.669385][T14074] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1496.683077][T14074] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1496.701058][T14074] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1656, setting to 64 [ 1496.718615][T14074] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1496.804185][T14074] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1496.813259][T14074] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1496.827178][T14074] usb 6-1: SerialNumber: syz [ 1496.865418][T14074] hub 6-1:5.0: bad descriptor, ignoring hub [ 1496.871472][T14074] hub: probe of 6-1:5.0 failed with error -5 [ 1497.628230][T17074] udc-core: couldn't find an available UDC or it's busy [ 1497.635703][T17074] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:43:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:26 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x94, &(0x7f0000000080)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='find_free_extent\x00', r0}, 0x10) 17:43:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001d00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @remote, 0x84000001}, 0x1c, 0x0}}], 0x1, 0x0) 17:43:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x240, 0x240, 0xf8, 0xffffffff, 0xffffffff, 0x1a0, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [], [], 'veth1_virt_wifi\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast1, @empty, [], [], 'veth1_macvtap\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) [ 1498.972450][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:26 executing program 4: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000300)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a22961b61e3ff5f1c3ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816b3f6db1c00010000000081c7a0b204c006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="eb7d5ece7a9bea1c07", 0x9, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendmmsg(r1, &(0x7f0000006600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000c40)=[{0x58, 0x10a, 0x9, "1819b8831bbf8ec77170e0884fbe4a45c3658905726eab6259d41908808360edc2d5b56539ff508c09114832c88db751525b1fa211a341f9650002a48ed8dabd7630"}, {0x68, 0x0, 0x7, "4875f94679da74ef64b7c0535f8aacbedac72ff8064c10dff94381fa8e54bef35cb2c73641570ad3dab8e129c0b0de854d1eea2b199b84462edd580cd213b5f95e6a32a3a5e96608b8c74e813f2e038f0edc736421bfcc"}, {0x40, 0x113, 0xa700, "6c0f0a8f593d656799cd084813e6df4d781847bd28eccd5ebac84c8da3904f4261f63fad9465a5db39303b3436a8d2"}, {0xa8, 0x84, 0xffffffe9, "79c29c7f74ef8ffc2baee1922f099860f1c2f61e01f85121f37b5e1a93f0fc91c484c11f998dc31ad580074b07f10f37a9da857e7ae10af77911847d6c174eb58e7af04956f35ecc86d63575eefc322d9cae82c33acb9e77f259888968a54e007aed165964977b21f263de9b03dc8a55ae606fb4f6351936e770e90b7b59044d68ea85033c1d268e0e507e8b82af705bb1f2d6cf0eb9d9"}, {0x20, 0x100, 0x0, "d16d3d0b7152d103f0"}], 0x1c8}}, {{&(0x7f0000001100)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0xd9}, 0x80, &(0x7f00000037c0)=[{0x0}, {&(0x7f0000002580)="912170a1a40fce0f90be69a162fbc961aebb66698be7e643d969e9fef9063eece17ffb97bfc5db3694cb82993afa5f2ecb1dc2de3aae1715b915569a6ba034c38a550692b081dcdd3dbbbc324d46447ee5ae6403754e49c9edbc80f32feccead71b6e56b126eb0da1212113fee90c7c581f4cf165e0985a99b0858f0f12a2601d8b84fd838e42a137511dc529487c41396a1c9d76f6b0bf463e32f239771ffb65d53436b1fdbd804441937a42b4663d83e1ddce71f3092ede8fac24735805eb95e0ce855f5d6567f8de5e7d7b0eff7a564cee870d203b7ab79ebb16dad5cede59255a8f5f8fd9eeea9df2fc246234ee792a7677c5a2c0f966d18f641697c51b219eb6ff22fc1cd17b96aae1c90762c2dd2e41f26d735ad2ce89235fb00e8ef613edda9e277b3ebfc6591d76ae5ae16a0e060fee0f6b195bb9a5bdc331aa9a84339d9d4928c6e719425e6c7a414b6e05922844051c15d40baf803e3739607c9db875560b5eab88d454656620e21e180191022fd8163332be4e4e9b08d2a2dcce85cb04cebfe6b2a3a0e727dda23bc635b14ef09b6212626530c239d03fd84a858a2180fcc1a474990cc7c8d9d7764d7bd22b8e135afe29f348809177e14fe688b217e47707fcc986ea92a6a29336aba9f16ddbc431664fd67e1f26315382c09767bd85fb779eadc452c3c136e762ea00b428d8b7752a43d6abd628673e9023bddb52a480c8b98a4aea8c276a790690198a6b52be686ce2864d4bfac6008c387281252c6761a722fe558cadcc0743ebc5c1062c9bf4a533aaadad5d8e97c1ba587f7148d122afa809fcc3b56228c6d68ec499e14490446bb5b1a6abc8a416b11727a9226e460906dd07862a4456f60687896edbfeb9cd1fb66ae2f555b1460ce61980bbabd463f69bfb06782eb888a5c97051e8f879a1581e350650de87a5880eeb11a82b938fd03630fc956ea4a42028e06071b841b6410374d4d70bd89461249730724f3a35fbdb1479948060fdcc3e97ff094a67904763376021b5c545a6c935866b6f52840777278bd45f79cfd3fa01745b0ce2384df3f295b5faadf76e4fe5f85f8ab522aa88183f406b1b94dda79fb9112673c1e858ca96b09ac27ef2260a58e0a20bcdc4eb54abc975d4fff69ecf6fac39879d21da8d00938891c62234eb1b957c1bce941e38a0a971e0cca02382e5e90e73f3a90edb7c37cc09fde2082d7b890440bd25e75c5c9874c006d98e4569ab9fd1a0ebd5663ad5da52e5fc1a6553fcf369f88cd61f8869a3a092a01afc297ebb06fdcfb041b8c9b9c9531ce9671d9b01bf50ca9a6c9180a219e5bb1a273f16c441778b7fc67f23cedf1141d89e366bd063da8a9578eaf5b929f0a5f226c71898827ce43a19bf8277333dbc4209accdc9212a33f85a6f4dc3e18b7b58082611cd71b4e94849616c1437c4555e2b82711ca156c15abbbb7f8d70fb73406b640bba78ef15f318b9b731baf22d8fbf842029134d58c2fb613943c17e18e393e61d22184b9432fa7aed1cf895976e5c456b23c83561749e4e378afb8bd6d66dc3d30aa66f953fe46107d802048a7b862776b1c80e3e838af2e6a0d29a176c637029e16133336323572298f108896ab371c10d47049f415213f6dd2e3eabbd2091fff1a89da33a736d06f1656afb2f8c34faa16aaef7bc74072af270afd1d18348523b562b167c41086a24b8db0cd2c349ad6cdd485492f5e0c38ac4d5a8cb477a3525ad7390f5787e30a6ff36d6bf82e262fd0c7918ef4091de3affd9072c93e295376a7938790eab3dd579799a6669b051b55d51fb2a44dec000b857fd35bead4ab2d2e26a462f82b74821d2100a80eda345e074ca3a6cad3a182f7730c58ec8ce97c96aa090331d16fe8978374e69ff456fa62fc2cbcededa66ecdc8f98e2a7424d5c1639540a5448e57269cbbccecd4e982d40f7bd6f24dc237cdfbc1a24975dfa73a066f91a3b9da91fc4c011b5442235bf261e881efcccf788f79748da6fab58aa68df1c41f59c88a3407396d8b61e0bb04cabebdb2ceef7be158e8e1575437e9503bdd338abc324e052a80f5d0c5ca2e87c0272d8d97d2a3b9269524c7ee97f0db91dbacddbcb1670b0f01e2f446d9f1e2a49a08dd211e149af41c2e8f19d79eacc295aa80a4ba78e0cc26e3a3ef454883513a51a8f5d57cb2493b1a58084933cd8c1b19968adaf220a308b7c2a7dae9d6d87d331153bd138c7c446c1a97625b2d4bee3e9ef247d55ebb94a724c91efb1fd52faff80d1088a04c03f748bccc7249f781c3d2ae3122b423abb2b53b3f3942d60e50f79e1b9e0f5aa3720da77c77743440067266687259a6f7b9e54c06137dc73526a538f6f1738a85407d2764a8143690902fc09c58d2065e39e3583739e0bdd7d6a897098147a16d15aabc0b46b557c904ce2f4f10c388114b58c270b7cc39738c61f5c95bef7cf1b8f86fdbdd62bef35c9fb627e32c4fd1cc40d7c2083ad0a7fceb4b8e9452c6e10b01f36162cc164cd1d84d3874c44dece07d3a30828e288ad51c2fccc576fee45b69c7a5a7faea164bd74b41622d807670b42ed51eb816bc7a26cf37274dac587f5a1401b222e53004161cc3b181f874729349672aedbc3ff75c82a14565d185d3d1773fc68fa7651a63d564a72147b39ffc6411a191fb9bcfb0d3bab7a1877f958661696d5fe739077c6c2039bf1002b14c410583c317db0ada13e860e566fee446cec89cbd86ca67f714218d74e8712535d321c6a541f27d7dd52f6a21cb9489ae072ef99c76fe7d1b37ef2f1e036e59ea943ee055312ebc5290661c0c852a5ac0376aabbe3ccb17463c87c5a7f19746fa1ccbce3f4a3fe2296f2fb65da1dd77c7f66268962c94c656b4d5c39c8b336d6ce2af652d8ad4fe9fc8c819cdad2e4434b42380bd6b5c14924e7ed2eff6f3b52033f62d672118a3e3aaeefa88c2a43d5e4c1fb1b094c39937d73742374e8f4cc63306e456bced0e2635315ea59e26048c6ae714ec8366bf9b17fb82118cb528c216c0c218c9f80e0f385217f05d620ba74697df2ead1532598ac6da5aaa3f413d614b3f46dc1a4b5b3a80adb5037c1c49af9d33cfb1567afd21e8471c7a0e23ad64cae872ed36c274089cc2d978e0bae201466abd2604c52caff8e38dcc7d4ac4ed4170cfabc6f61b37d5fe89c1757b00670bb3159638a022ba02c0c3033f10a7c64ae773f362704f3c2dfa502d31156d5fc4e004cfda6fa2c6c802bdbcdac0d0ff2f43266d023d5e60351d6409a1de29782965bdf68fa22eeed88ca1def88706a56cf0b931f7bd0a5baa6d4ee1aeec25fc1158eb5a7db75a0a8d1b4a5a8ee514215459815790afe5c56c8909195991402896d2fba38ec65b5ea9f6ab917ea43ebcec753d765882ef68dc7281f6e81eef68bdbaad2e14cf59509b7f9866cd16397d6450f6ea273b0291b21387b32a9a553f136d2476e131681feb01a62a751066b0d98aef0ea8b2fd9e664e18a14ddf9aed2b598fd7079998d9b0be098c18dc1ef4a3d76659f5b598e6669a6a0c6204ac2d5aa05809b243623b70940e8c73c2bd06eacfcaf0a012b30b1be827c2e786de6f62086e3d5a5a8471c9a2e3c25367e98e256921f74d5845d130e9cd514588c8fef8cbb924eb1e744d8f5320d3638b7268597f96ebb3e132940be412cc39b8be70512a2c85483dfa9121525fe627a908f0ca50a22b3ca7278ac1ebbc28d156dc778aea85161de763bb8808143c86c674f08dc35dcfa22d8e247877a3dad5b358623daae0998bebd16d3acc6974ab0952e59525dbc5d2f7", 0xa88}, {&(0x7f0000003580)}, {0x0}, {0x0}, {&(0x7f0000003700)="ecb8987f5ff44f4f7a06a6299bf7b68935a4cdaaa73f1d6aa239bcdcde7b6e2daaa0ea9443aec88378ff09e06c5fcc6c26a75f147b5b26c747a99a36526042dbc53649bc1e498a4102aba03b907fb794f2cbe88505d728244eda8aa98175006af41208fe8576fbc02530cd499880c76dbed8f7ca6638304eb776a1b752baa795de227d73a0a14fe2df548acf08e92984ad098ad657028b", 0x97}], 0x6, &(0x7f0000003840)}}, {{&(0x7f0000003940)=@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x20}, 0x80, &(0x7f0000004f40)=[{0x0}, {&(0x7f0000003a40)}, {&(0x7f0000003b40)}, {0x0}, {0x0}, {&(0x7f0000003e40)}, {&(0x7f0000004e40)="0ed147066753956012d2e5a2bd88342080c2d5aaa7fb7a2bf56a9bf2714e1ff90dca5c8463d6dfadac3ab671ccee5939d17d20683c51e90d5b974f6bd8f070ef3a74fcf8b5a60d341ab026c53e6118fb82529265ef097d2c15c90c2296bc425821a2134fae15ef4cd6169a519c74bdb007fc8320529caf56450671ce63a82bf95659bd6f302166029e07aabaf3b2b19c111288648c8fbd27c6ca7d5b7f6579e97a18ded848be2424ba867796005eecdd19a6b97aff2cb9f00147b798d50ee76d7883661d65f9f51cddb5b5f8c1e30ee82b86f8103e8553ab4c73bd502db8d1e1a6f8128086c1f8b3bc", 0xe9}], 0x7}}, {{&(0x7f0000005100)=@pppoe={0x18, 0x0, {0x0, @random="2167a8b2d606", 'ipvlan1\x00'}}, 0x80, 0x0, 0x0, &(0x7f0000006400)=[{0x10, 0x84}, {0x10, 0x0, 0x80000000}], 0x20}}], 0x5, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="06268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abaff4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf93a0a75bca0746bec66ba", 0x88012, 0x20c49a, 0x0, 0x27) 17:43:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) [ 1499.014431][ T9536] usb 6-1: USB disconnect, device number 30 17:43:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x890c, 0x0) 17:43:26 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000080)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:26 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) [ 1499.254590][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1499.364105][T14073] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1499.664362][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1499.794407][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1499.802799][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1499.814109][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1499.825596][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1499.835661][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1499.847407][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1499.858279][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1499.964874][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1499.979882][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1499.988341][T14073] usb 6-1: SerialNumber: syz [ 1500.025765][T17090] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1500.045396][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1500.051414][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1500.264158][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1500.315728][T14073] usb 6-1: USB disconnect, device number 31 [ 1500.340363][T14073] usblp0: removed [ 1500.844242][T14073] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1501.094113][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1501.214697][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1501.223180][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1501.234224][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1501.245787][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1501.256338][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1501.267637][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1501.277764][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1501.364274][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1501.373391][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1501.381626][T14073] usb 6-1: SerialNumber: syz [ 1501.406416][T17090] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1501.425717][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1501.431762][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1501.653527][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1501.695624][T14073] usb 6-1: USB disconnect, device number 32 [ 1501.723103][T14073] usblp0: removed 17:43:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x29}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000080)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:29 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000080)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x14, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x240, 0x240, 0xf8, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [], [], 'veth1_virt_wifi\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast1, @empty, [], [], 'veth1_macvtap\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3) 17:43:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:29 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='smaps\x00') io_setup(0x1000, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) 17:43:29 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='smaps\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) [ 1502.219379][T17161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00') getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 17:43:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:29 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:29 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='smaps\x00') getdents(r0, 0x0, 0x0) 17:43:29 executing program 0: get_mempolicy(0x0, &(0x7f0000000040), 0x9, &(0x7f0000ffc000/0x1000)=nil, 0x2) 17:43:29 executing program 3: openat$random(0xffffffffffffff9c, &(0x7f0000006840), 0x402, 0x0) [ 1502.507120][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:30 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1502.574204][T14073] usb 6-1: new high-speed USB device number 33 using dummy_hcd 17:43:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0x101}, 0x14}}, 0x0) [ 1502.834110][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1502.964333][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1502.972742][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1502.982212][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1502.993007][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1503.002524][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1503.013587][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1503.023843][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1503.115312][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1503.124550][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1503.132754][T14073] usb 6-1: SerialNumber: syz [ 1503.176023][T17164] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1503.195414][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1503.201453][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1503.419149][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1503.498981][T14073] usb 6-1: USB disconnect, device number 33 [ 1503.525239][T14073] usblp0: removed [ 1504.004223][T14073] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1504.274234][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1504.424163][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1504.432697][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1504.443137][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1504.454444][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1504.463535][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1504.475853][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1504.487443][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1504.594196][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1504.603315][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1504.617513][T14073] usb 6-1: SerialNumber: syz [ 1504.656259][T17164] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1504.680322][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1504.688492][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1504.898740][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1504.955575][T14073] usb 6-1: USB disconnect, device number 34 [ 1504.969638][T14073] usblp0: removed 17:43:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 17:43:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsa(&(0x7f0000002800), 0x0, 0x0) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r2, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_rxfh={0x0, 0x0, 0x0, 0x0, 0x0, "54fd7e"}}) 17:43:32 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:32 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt(r0, 0x1, 0x0, 0x0, 0xfffffffffffffffe) 17:43:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_batadv\x00', &(0x7f0000000080)=@ethtool_regs}) 17:43:32 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:43:32 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000002800), 0x0, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r1, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 17:43:33 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) 17:43:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000080)="1b06113a023512faf06391fdda4e2b105f723ca0a3e0f10025a54d3caf9e85256339b641e8ee52b59136eb1dc5cf3639f655b8c4e6b68ff741be9535afb39d089565b8f841ffa34d6463e3e78056c23375fe678ea14823cd8b7374914626be5117c3f6b98021c1178db883e1c05c2be8866f033fb7748e48e40f4fd3791ba0604898612e1e5929dbe2430eb2f3bdac4c18559be3ea3bc0d296114b8c207e3da777a30d42e0b71c9af977623bdc8839ae077d810b93ba45bb70cdf7be88220ddef5c920b439ace1526d15f0bdf2b056b204847e2e751dfcf38c47", 0xda}, {&(0x7f0000000180)="4b93609a7b67a4fc6887b8c97d81484473a7c60d3c4bac48d550d2a6b685f6e86a8c649cb3f79c09eeb16ecf5bd2c9b77eab8f348fd47d7df419c40e7e18852458ebadba20314f341103c472f82828fc3b7ef58de1de7b9a7eb1e5ec33ca809d50fbad8f53eb46258fadf108553b173adcae64571dc336eedc9cd38bae52ea1a95a4f2d0ca2245f38ae4d9ffbd80ec27f3c20e73206e", 0x96}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="e4", 0x1}, {0x0}, {0x0}], 0x9}, 0x0) 17:43:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x3}, 0xc) [ 1505.824089][T14073] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1506.084110][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1506.226682][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1506.239802][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1506.249556][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1506.260688][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1506.270388][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1506.281694][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1506.291942][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1506.414243][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1506.424186][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1506.432801][T14073] usb 6-1: SerialNumber: syz [ 1506.475946][T17247] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1506.495482][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1506.501520][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1506.725657][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1506.775379][T14073] usb 6-1: USB disconnect, device number 35 [ 1506.785869][T14073] usblp0: removed [ 1507.304222][T14073] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1507.554092][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1507.694213][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1507.702622][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1507.717616][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1507.729553][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1507.743190][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1507.762052][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1507.772112][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1507.864971][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1507.874139][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1507.882246][T14073] usb 6-1: SerialNumber: syz [ 1507.906362][T17247] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1507.925293][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1507.931366][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1508.155443][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1508.205378][T14073] usb 6-1: USB disconnect, device number 36 [ 1508.228776][T14073] usblp0: removed 17:43:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:36 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1004, 0x0, 0x0) 17:43:36 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) 17:43:36 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 17:43:36 executing program 0: r0 = msgget(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/232) 17:43:36 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000), 0x10) 17:43:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x40b, 0x0, 0x0) 17:43:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000002c0)="d7", 0x1}], 0x1}, 0x0) 17:43:36 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) 17:43:36 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000001400)=""/149, 0x32, 0x95, 0x1}, 0x20) 17:43:36 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 17:43:36 executing program 3: mkdir(&(0x7f0000000000)='\x00', 0x0) [ 1509.164173][T27506] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1509.414130][T27506] usb 6-1: Using ep0 maxpacket: 8 [ 1509.544703][T27506] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1509.553214][T27506] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1509.564703][T27506] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1509.576105][T27506] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1509.586375][T27506] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1509.598060][T27506] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1509.609708][T27506] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1509.694235][T27506] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1509.703921][T27506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1509.714380][T27506] usb 6-1: SerialNumber: syz [ 1509.746141][T17320] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1509.775297][T27506] hub 6-1:5.0: bad descriptor, ignoring hub [ 1509.781363][T27506] hub: probe of 6-1:5.0 failed with error -5 [ 1509.995888][T27506] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1510.046472][T27506] usb 6-1: USB disconnect, device number 37 [ 1510.065531][T27506] usblp0: removed [ 1510.574308][T27506] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1510.814134][T27506] usb 6-1: Using ep0 maxpacket: 8 [ 1510.934973][T27506] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1510.943375][T27506] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1510.954369][T27506] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1510.965691][T27506] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1510.975910][T27506] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1510.988349][T27506] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1510.999254][T27506] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1511.084246][T27506] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1511.093462][T27506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1511.109672][T27506] usb 6-1: SerialNumber: syz [ 1511.137004][T17320] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1511.155489][T27506] hub 6-1:5.0: bad descriptor, ignoring hub [ 1511.161532][T27506] hub: probe of 6-1:5.0 failed with error -5 [ 1511.365747][T27506] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1511.435217][T27506] usb 6-1: USB disconnect, device number 38 [ 1511.444898][T27506] usblp0: removed 17:43:39 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:43:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:43:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:43:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:39 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 17:43:39 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000007f00)={0xd}, 0x40) 17:43:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000015d40)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(r0, &(0x7f0000017140)={0x0, 0x0, &(0x7f00000170c0)=[{&(0x7f0000015e00)="18", 0x1}], 0x1}, 0x0) 17:43:39 executing program 4: socketpair(0x25, 0x1, 0x1, &(0x7f0000000480)) 17:43:39 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 17:43:39 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:39 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000005880)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f0000000100)="f54a5208813fd7fe649aefc98f7db4bd3c371cd3b6cb1339ebc1f9d77e78c567f0a6a5fdc8cef0b317b8f85957179016b170e7a845fee6ce7b73799b04fbd56a501dd0cd79dd8bc2f5eda86b61bf17c46b8adb72b97da9ef71cf60a5d7ca708448bfd39cc6fe10bff29140c0c4a9ea0e32f2428c6d1f5b6cbc31fa8eafdc07a3ea75c1668cc1d3c3d607c077a352c03fbfeb812ba350fde134a7680207", 0x9d}, {&(0x7f00000001c0)="3c5be0651798e23605787bf0e77407c38bbd72061b0d0bc1c44c09a1f5962b8cd7ca439f7abcde14799b56a9eef2a5cb82322082548107abaed1e4d4d199cd954ed05ae54324551c1a6e1a47021ffea4cc973410", 0x54}], 0x3, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1}}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @private=0xa010102}}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14}}], 0xa8}, 0x0) 17:43:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x142) 17:43:39 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 17:43:39 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000003600), 0x0, &(0x7f0000001c00)=[{0x10}, {0x470, 0x0, 0x0, "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"}], 0x480}, 0x60004051) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x7, 0x6d, 0x7ff}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x80000001, r0}, 0x38) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x80}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000140), 0xbcc4, r0}, 0x38) [ 1512.264234][T27506] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1512.524274][T27506] usb 6-1: Using ep0 maxpacket: 8 [ 1512.664226][T27506] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1512.673336][T27506] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1512.682826][T27506] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1512.693609][T27506] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1512.702947][T27506] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1512.714068][T27506] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1512.723840][T27506] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1512.814302][T27506] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1512.823399][T27506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1512.837188][T27506] usb 6-1: SerialNumber: syz [ 1512.875701][T17386] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1512.905425][T27506] hub 6-1:5.0: bad descriptor, ignoring hub [ 1512.911455][T27506] hub: probe of 6-1:5.0 failed with error -5 [ 1513.138360][T27506] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1513.175084][T27506] usb 6-1: USB disconnect, device number 39 [ 1513.214274][T27506] usblp0: removed [ 1513.724131][T27506] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1513.964132][T27506] usb 6-1: Using ep0 maxpacket: 8 [ 1514.084216][T27506] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1514.092615][T27506] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1514.103707][T27506] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1514.115528][T27506] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1514.125776][T27506] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1514.137466][T27506] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1514.148218][T27506] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1514.234244][T27506] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1514.243520][T27506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1514.253399][T27506] usb 6-1: SerialNumber: syz [ 1514.286282][T17386] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1514.305810][T27506] hub 6-1:5.0: bad descriptor, ignoring hub [ 1514.312560][T27506] hub: probe of 6-1:5.0 failed with error -5 [ 1514.518661][T27506] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1514.565257][T27506] usb 6-1: USB disconnect, device number 40 [ 1514.579960][T27506] usblp0: removed 17:43:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:42 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f000000f640)={0x77359400}) 17:43:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x16, 0x0, 0x3, 0x7}, 0x40) 17:43:42 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 17:43:42 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=""/20, 0x14}}, 0x10) 17:43:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x46, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) 17:43:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000003540)={'gre0\x00', &(0x7f0000003440)={'tunl0\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0xeb, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@multicast2}, {@loopback}]}, @cipso={0x86, 0x15, 0x0, [{0x0, 0x2}, {0x0, 0x3, '<'}, {0x0, 0xa, "c7c4344618c17a21"}]}, @cipso={0x86, 0x1b, 0x0, [{0x0, 0x9, "adf60a0b858bae"}, {0x0, 0xc, "09ae0a5bc99df26d6fbd"}]}, @noop, @timestamp_addr={0x44, 0x54, 0x0, 0x1, 0x0, [{@empty}, {@dev}, {@private}, {@dev}, {@multicast2}, {@local}, {@local}, {@private}, {@loopback}, {@multicast2}]}, @ra={0x94, 0x4}]}}}}}) 17:43:42 executing program 0: socketpair(0x2b, 0x0, 0x0, &(0x7f0000001440)) 17:43:42 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x48}}, 0x0) 17:43:42 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x48}}, 0x0) [ 1515.434292][ T5115] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1515.674130][ T5115] usb 6-1: Using ep0 maxpacket: 8 [ 1515.794210][ T5115] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1515.802604][ T5115] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1515.813609][ T5115] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1515.825521][ T5115] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1515.835717][ T5115] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1515.848172][ T5115] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1515.859280][ T5115] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1515.944273][ T5115] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1515.953810][ T5115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1515.962568][ T5115] usb 6-1: SerialNumber: syz [ 1515.996063][T17468] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1516.015199][ T5115] hub 6-1:5.0: bad descriptor, ignoring hub [ 1516.021357][ T5115] hub: probe of 6-1:5.0 failed with error -5 [ 1516.232870][ T5115] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1516.296246][ T5115] usb 6-1: USB disconnect, device number 41 [ 1516.316749][ T5115] usblp0: removed [ 1516.784700][ T5115] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1517.024430][ T5115] usb 6-1: Using ep0 maxpacket: 8 [ 1517.144326][ T5115] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1517.152839][ T5115] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1517.161783][ T5115] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1517.172277][ T5115] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1517.182772][ T5115] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1517.193925][ T5115] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1517.203915][ T5115] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1517.294176][ T5115] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1517.303267][ T5115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1517.313195][ T5115] usb 6-1: SerialNumber: syz [ 1517.348341][T17468] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1517.365356][ T5115] hub 6-1:5.0: bad descriptor, ignoring hub [ 1517.371388][ T5115] hub: probe of 6-1:5.0 failed with error -5 [ 1517.593708][ T5115] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1517.650740][ T5115] usb 6-1: USB disconnect, device number 42 [ 1517.663784][ T5115] usblp0: removed 17:43:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:45 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000f40), 0x511502, 0x0) write$FUSE_WRITE(r0, 0x0, 0x0) 17:43:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:45 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000140)) 17:43:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = dup2(r2, 0xffffffffffffffff) fchmod(r0, 0x149) ptrace$setopts(0x4200, 0x0, 0x0, 0x8) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x8001, 0x8020001) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) 17:43:45 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x48}}, 0x0) 17:43:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:45 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) 17:43:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = dup2(r2, 0xffffffffffffffff) fchmod(r0, 0x149) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000180)="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") fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4200, r4, 0x0, 0x8) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x8001, 0x8020001) creat(&(0x7f00000002c0)='./bus\x00', 0x100) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) 17:43:45 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3], 0x48}}, 0x0) 17:43:45 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) 17:43:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) [ 1518.448539][T17551] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1518.574435][T14073] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1518.814117][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1518.934211][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1518.943458][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1518.955782][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1518.966976][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1518.977199][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1518.989024][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1518.999843][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1519.084419][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1519.093524][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1519.102860][T14073] usb 6-1: SerialNumber: syz [ 1519.125714][T17539] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1519.145238][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1519.151260][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1519.365504][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1519.415032][T14073] usb 6-1: USB disconnect, device number 43 [ 1519.423286][T14073] usblp0: removed [ 1519.964227][T14073] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1520.234275][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1520.394397][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1520.402851][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1520.411713][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1520.422373][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1520.431507][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1520.442323][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1520.452187][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1520.544425][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1520.553507][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1520.563844][T14073] usb 6-1: SerialNumber: syz [ 1520.586730][T17539] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1520.605076][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1520.621225][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1520.825515][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1520.891569][T14073] usb 6-1: USB disconnect, device number 44 [ 1520.899672][T14073] usblp0: removed 17:43:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x5450, 0xffffffffffffffff) 17:43:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x5, 0x8}, 0x40) 17:43:48 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3], 0x48}}, 0x0) 17:43:48 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) 17:43:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0x4a0, 0x4a0, 0x1f8, 0x4a0, 0x1f8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:etc_runtime_t:s0\x00'}}}, {{@ipv6={@loopback, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x21, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'bridge0\x00', 'bridge_slave_0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6fe) [ 1521.405671][T17607] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_getroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x0) 17:43:48 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3], 0x48}}, 0x0) 17:43:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r1, 0x400, 0x2) 17:43:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x10, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:49 executing program 0: io_setup(0x7, &(0x7f0000000180)) io_setup(0x9, &(0x7f00000003c0)=0x0) io_destroy(r0) io_destroy(r0) [ 1521.607717][T17620] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1521.704204][ T5115] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1521.995814][ T5115] usb 6-1: Using ep0 maxpacket: 8 [ 1522.124384][ T5115] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1522.132794][ T5115] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1522.142936][ T5115] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1522.154427][ T5115] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1522.163501][ T5115] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1522.176706][ T5115] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1522.187746][ T5115] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1522.284431][ T5115] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1522.284472][ T5115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1522.284501][ T5115] usb 6-1: SerialNumber: syz [ 1522.316327][T17611] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1522.335683][ T5115] hub 6-1:5.0: bad descriptor, ignoring hub [ 1522.341832][ T5115] hub: probe of 6-1:5.0 failed with error -5 [ 1522.555973][ T5115] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1522.615587][ T5115] usb 6-1: USB disconnect, device number 45 [ 1522.623743][ T5115] usblp0: removed [ 1523.184274][ T5115] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1523.445394][ T5115] usb 6-1: Using ep0 maxpacket: 8 [ 1523.594500][ T5115] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1523.602911][ T5115] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1523.613049][ T5115] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1523.624367][ T5115] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1523.633866][ T5115] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1523.646011][ T5115] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1523.656920][ T5115] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1523.764233][ T5115] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1523.773368][ T5115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1523.782769][ T5115] usb 6-1: SerialNumber: syz [ 1523.811925][T17611] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1523.825441][ T5115] hub 6-1:5.0: bad descriptor, ignoring hub [ 1523.831470][ T5115] hub: probe of 6-1:5.0 failed with error -5 [ 1524.065799][ T5115] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1524.105101][ T5115] usb 6-1: USB disconnect, device number 46 [ 1524.125099][ T5115] usblp0: removed 17:43:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:51 executing program 3: semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) 17:43:51 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) 17:43:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x10, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:51 executing program 4: io_setup(0x101, &(0x7f0000001c80)=0x0) pipe2(&(0x7f0000002240)={0xffffffffffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x2c6200, 0x0) io_submit(r0, 0x2, &(0x7f0000000380)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) 17:43:51 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="61b3"], 0x5a0) write$binfmt_elf64(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 17:43:52 executing program 0: keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x2}) 17:43:52 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 1524.640495][T17676] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x10, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:52 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) 17:43:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000100), 0x4) 17:43:52 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x3, &(0x7f0000001540)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1524.904986][T17692] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1525.024201][ T4852] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1525.264106][ T4852] usb 6-1: Using ep0 maxpacket: 8 [ 1525.385076][ T4852] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1525.393489][ T4852] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1525.402915][ T4852] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1525.413476][ T4852] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1525.423138][ T4852] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1525.434666][ T4852] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1525.445000][ T4852] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1525.534668][ T4852] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1525.543735][ T4852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1525.553528][ T4852] usb 6-1: SerialNumber: syz [ 1525.589574][T17680] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1525.605515][ T4852] hub 6-1:5.0: bad descriptor, ignoring hub [ 1525.611527][ T4852] hub: probe of 6-1:5.0 failed with error -5 [ 1525.835695][ T4852] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1525.885499][ T4852] usb 6-1: USB disconnect, device number 47 [ 1525.898526][ T4852] usblp0: removed [ 1526.414194][ T4852] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1526.654264][ T4852] usb 6-1: Using ep0 maxpacket: 8 [ 1526.774943][ T4852] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1526.783349][ T4852] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1526.792654][ T4852] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1526.810733][ T4852] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1526.820452][ T4852] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1526.836302][ T4852] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1526.849087][ T4852] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1526.944848][ T4852] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1526.953919][ T4852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1526.962185][ T4852] usb 6-1: SerialNumber: syz [ 1526.988061][T17680] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1527.009659][ T4852] hub 6-1:5.0: bad descriptor, ignoring hub [ 1527.020340][ T4852] hub: probe of 6-1:5.0 failed with error -5 [ 1527.225569][ T4852] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1527.285359][ T4852] usb 6-1: USB disconnect, device number 48 [ 1527.306664][ T4852] usblp0: removed 17:43:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "006d10ffd600"}) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000000)=""/79, 0x4f) dup3(r1, r0, 0x0) 17:43:55 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/12, 0x1000000, 0x1000}, 0x20) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x80052, r0, 0x0) 17:43:55 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5452, &(0x7f0000000000)) 17:43:55 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) 17:43:55 executing program 4: mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x8de7570b96b3f525, 0x0) 17:43:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/21, 0x15}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/171, 0xab}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) readv(r4, &(0x7f0000003bc0)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1) shutdown(r4, 0x0) 17:43:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) [ 1527.830274][T17747] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:55 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffff"], 0x48}}, 0x0) 17:43:55 executing program 4: r0 = socket(0x1c, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0xc4) 17:43:55 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) [ 1528.052733][T17761] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1528.174135][T14074] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1528.434125][T14074] usb 6-1: Using ep0 maxpacket: 8 [ 1528.554254][T14074] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1528.562785][T14074] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1528.573124][T14074] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1528.584717][T14074] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1528.593805][T14074] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1528.606263][T14074] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1528.617348][T14074] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1528.704820][T14074] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1528.713941][T14074] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1528.724295][T14074] usb 6-1: SerialNumber: syz [ 1528.745924][T17750] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1528.785754][T14074] hub 6-1:5.0: bad descriptor, ignoring hub [ 1528.791780][T14074] hub: probe of 6-1:5.0 failed with error -5 [ 1529.005703][T14074] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1529.469664][T17750] udc-core: couldn't find an available UDC or it's busy [ 1529.476825][T17750] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1529.490247][T27506] usb 6-1: USB disconnect, device number 49 [ 1529.498802][T27506] usblp0: removed 17:43:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000000)) 17:43:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000080)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0xb) 17:43:57 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffff"], 0x48}}, 0x0) 17:43:57 executing program 0: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 17:43:57 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 17:43:57 executing program 0: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) 17:43:57 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x813, 0xffffffffffffff9c, 0x0) 17:43:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000280)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@authinfo={0x10}], 0x10}, 0x0) [ 1530.100936][T17809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:57 executing program 2: syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) 17:43:57 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffff"], 0x48}}, 0x0) 17:43:57 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c}, 0x1c) [ 1530.321299][T17824] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1530.434279][T14073] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1530.704179][T14073] usb 6-1: Using ep0 maxpacket: 8 [ 1530.854308][T14073] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1530.862885][T14073] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1530.873348][T14073] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1530.884817][T14073] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1530.893882][T14073] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1530.906470][T14073] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1530.917627][T14073] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1531.004518][T14073] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1531.013616][T14073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1531.023263][T14073] usb 6-1: SerialNumber: syz [ 1531.066064][T17812] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1531.085367][T14073] hub 6-1:5.0: bad descriptor, ignoring hub [ 1531.091408][T14073] hub: probe of 6-1:5.0 failed with error -5 [ 1531.295595][T14073] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1531.754549][T17812] udc-core: couldn't find an available UDC or it's busy [ 1531.761740][T17812] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1531.775367][ T9531] usb 6-1: USB disconnect, device number 50 [ 1531.784572][ T9531] usblp0: removed 17:43:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) 17:43:59 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000001c0)=0x10) 17:43:59 executing program 0: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 17:43:59 executing program 2: syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) 17:43:59 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000"], 0x48}}, 0x0) 17:43:59 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0x1c, 0x1c}, 0x1c) [ 1532.398738][T17865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:59 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000001180)={@local, @random='}H%*Ul'}, 0x0) 17:43:59 executing program 0: accept4$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x0) mlock(&(0x7f0000ff6000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000) 17:43:59 executing program 2: syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) 17:43:59 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r1, &(0x7f0000000740)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 17:43:59 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000"], 0x48}}, 0x0) 17:44:00 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3005, 0x7) [ 1532.704435][ T5115] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1532.712381][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1532.954100][ T5115] usb 6-1: Using ep0 maxpacket: 8 [ 1533.074238][ T5115] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1533.082657][ T5115] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1533.091566][ T5115] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1533.102018][ T5115] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1533.111326][ T5115] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1533.122178][ T5115] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1533.132117][ T5115] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1533.224293][ T5115] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1533.233522][ T5115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1533.241865][ T5115] usb 6-1: SerialNumber: syz [ 1533.265843][T17867] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1533.285465][ T5115] hub 6-1:5.0: bad descriptor, ignoring hub [ 1533.291594][ T5115] hub: probe of 6-1:5.0 failed with error -5 [ 1533.508743][ T5115] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1533.968436][T17867] udc-core: couldn't find an available UDC or it's busy [ 1533.976127][T17867] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1533.986729][T27506] usb 6-1: USB disconnect, device number 51 [ 1534.007902][T27506] usblp0: removed 17:44:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 17:44:01 executing program 4: clock_gettime(0xebf8763ad31a50d5, 0x0) 17:44:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, 0x0) 17:44:01 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000"], 0x48}}, 0x0) 17:44:01 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) preadv(r3, &(0x7f00000013c0)=[{&(0x7f0000000180)=""/227, 0xe3}, {0x0}], 0x2, 0x0, 0x0) 17:44:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0), 0x0) 17:44:02 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x9, &(0x7f0000000340)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1534.584284][T17920] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000c00)) 17:44:02 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050"], 0x48}}, 0x0) 17:44:02 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x1ff, 0x3, 0x420}, 0x40) 17:44:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, 0x0) 17:44:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}]}}, &(0x7f0000000080)=""/159, 0x32, 0x9f, 0x1}, 0x20) [ 1534.780092][T17934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1534.837914][ T4852] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1535.104394][ T4852] usb 6-1: Using ep0 maxpacket: 8 [ 1535.234283][ T4852] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1535.242690][ T4852] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1535.252952][ T4852] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1535.264481][ T4852] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1535.273547][ T4852] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1535.286353][ T4852] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1535.297372][ T4852] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1535.395015][ T4852] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1535.404935][ T4852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1535.413160][ T4852] usb 6-1: SerialNumber: syz [ 1535.455874][T17918] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1535.475453][ T4852] hub 6-1:5.0: bad descriptor, ignoring hub [ 1535.481494][ T4852] hub: probe of 6-1:5.0 failed with error -5 [ 1535.699829][ T4852] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1536.856326][ T4852] usb 6-1: USB disconnect, device number 52 [ 1536.869500][ T4852] usblp0: removed 17:44:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 17:44:04 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)) 17:44:04 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050"], 0x48}}, 0x0) 17:44:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="b40000000000000061111c0000000000852f030002000000850000000800000095000000000000009500050000000000a6c96cdf6998a495dd91ea2bc2440b9f999bdbf6419fd3bcae05bcbdb4f2d40afd1683eb5637abaf36a91717d8d2b97feb76fd14ef5865d3c28510a5ccba38415e5b3be0434d1a468e0231afa10800000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 17:44:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, 0x0) 17:44:04 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xbc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(r0) 17:44:04 executing program 3: socket(0x0, 0x80c, 0x0) 17:44:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) [ 1537.448774][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:04 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30}, 0x30) 17:44:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0154fc60100002400c00020005", 0x1d}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe28, 0xfffffe6f, &(0x7f0000000100)="280e003f4305607e5bc5795e6558000800ffffffba0e7231ffff81", 0x0, 0x100, 0xf2ffffff, 0xffffffffffffffb4, 0x212, &(0x7f0000000940)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) 17:44:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050"], 0x48}}, 0x0) 17:44:05 executing program 3: socket$isdn(0x22, 0x3, 0x10) [ 1537.766915][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1537.854237][ T4852] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1538.124215][ T4852] usb 6-1: Using ep0 maxpacket: 8 [ 1538.244314][ T4852] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1538.252748][ T4852] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1538.263067][ T4852] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1538.274913][ T4852] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1538.284581][ T4852] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1538.295965][ T4852] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1538.306454][ T4852] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1538.404377][ T4852] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1538.413483][ T4852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1538.422928][ T4852] usb 6-1: SerialNumber: syz [ 1538.455736][T17979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1538.485332][ T4852] hub 6-1:5.0: bad descriptor, ignoring hub [ 1538.491405][ T4852] hub: probe of 6-1:5.0 failed with error -5 [ 1538.708127][ T4852] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 17:44:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000e01090224ffff0500749809040000520701010009050102", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 17:44:10 executing program 2: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 17:44:10 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 17:44:10 executing program 0: rt_sigaction(0x1b, 0x0, 0x0, 0x8, &(0x7f0000000140)) 17:44:10 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f00000027c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x300, 0x0, 0x0) 17:44:10 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff0802110000005050505050"], 0x48}}, 0x0) [ 1543.250246][T27506] usb 6-1: USB disconnect, device number 53 [ 1543.260380][T27506] usblp0: removed 17:44:10 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000840)={'filter\x00', 0x4, "36df693b"}, &(0x7f00000001c0)=0x28) 17:44:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000098000/0x4000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r2, 0xc) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x5000) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(r2, &(0x7f00008a7000/0x1000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$SHM_UNLOCK(r0, 0xc) [ 1543.379490][T18029] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000002c0)=0x10) 17:44:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000180)={0x1, 'macvlan1\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'ip6tnl0\x00', 0x1}, 0x18) 17:44:10 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff0802110000005050505050"], 0x48}}, 0x0) 17:44:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000240)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) [ 1543.575648][ T37] audit: type=1800 audit(1620409450.985:78): pid=18038 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 1543.628424][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1543.844208][T27506] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1544.084082][T27506] usb 6-1: Using ep0 maxpacket: 8 [ 1544.204309][T27506] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1544.213947][T27506] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1544.223232][T27506] usb 6-1: config 5 has an invalid descriptor of length 102, skipping remainder of the config [ 1544.234308][T27506] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1544.243387][T27506] usb 6-1: too many endpoints for config 5 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 1544.254699][T27506] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48 [ 1544.265075][T27506] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 1544.354802][T27506] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1544.363926][T27506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 1544.377816][T27506] usb 6-1: SerialNumber: syz [ 1544.405869][T18032] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1544.425329][T27506] hub 6-1:5.0: bad descriptor, ignoring hub [ 1544.431442][T27506] hub: probe of 6-1:5.0 failed with error -5 [ 1544.649189][T27506] usblp 6-1:5.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1545.665410][ T3239] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.671785][ T3239] ieee802154 phy1 wpan1: encryption failed: -22 17:44:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000002c0)=0x10) 17:44:16 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff0802110000005050505050"], 0x48}}, 0x0) 17:44:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) 17:44:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x7c, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}], 0x10) 17:44:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x19, &(0x7f0000000000)={0x0, @remote, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 1549.086794][ T4852] usb 6-1: USB disconnect, device number 54 [ 1549.107487][ T4852] usblp0: removed 17:44:16 executing program 0: r0 = socket(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8983, 0x0) [ 1549.195846][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:16 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @dev, 0x6}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) 17:44:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'lblcr\x00'}, 0x2c) 17:44:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x34) 17:44:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000e00)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "74ab924a"}, 0x0, 0x0, @fd}) 17:44:16 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:16 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), 0xffffffffffffffff) 17:44:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 17:44:16 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000005d80), 0x608000, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) 17:44:17 executing program 3: syz_open_dev$audion(&(0x7f0000000240), 0x0, 0x400000) 17:44:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x1e, 0x4, 0x0) [ 1549.564292][T18104] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010101}}}}) 17:44:17 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:17 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) 17:44:17 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 1549.750167][T18117] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1549.767841][T18120] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1549.779344][T18117] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:17 executing program 4: syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), 0xffffffffffffffff) socketpair(0x8, 0x0, 0x0, &(0x7f0000000e00)) [ 1549.880956][T18117] bridge0: port 3(veth3) entered blocking state [ 1549.898423][T18117] bridge0: port 3(veth3) entered disabled state 17:44:17 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$sock(r0, &(0x7f0000007540)=[{{&(0x7f0000002500)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) [ 1549.929560][T18117] device veth3 entered promiscuous mode 17:44:17 executing program 5: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 17:44:17 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:17 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000003e00)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x5c) [ 1550.010190][T18117] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'gre0\x00', 0x0}) [ 1550.060446][T18117] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:17 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@rand_addr=' \x01\x00', @remote, @private1, 0x0, 0x0, 0x6}) [ 1550.165196][T18140] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1550.201751][T18117] bridge0: port 4(veth5) entered blocking state [ 1550.209565][T18117] bridge0: port 4(veth5) entered disabled state [ 1550.229086][T18117] device veth5 entered promiscuous mode [ 1550.319229][T18123] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1550.345055][T18117] syz-executor.2 (18117) used greatest stack depth: 22608 bytes left [ 1550.358883][T18123] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1550.380289][T18123] bridge0: port 5(veth7) entered blocking state [ 1550.387909][T18123] bridge0: port 5(veth7) entered disabled state [ 1550.398734][T18123] device veth7 entered promiscuous mode 17:44:17 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000007780), 0x82101, 0x0) 17:44:17 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$sock(r0, &(0x7f0000009740)=[{{&(0x7f0000004940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, 0x0}}], 0x1, 0x0) 17:44:17 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:17 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@rand_addr=' \x01\x00', @remote, @private1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, r1}) 17:44:17 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@rand_addr=' \x01\x00', @remote, @private1, 0x0, 0xcf74, 0x0, 0x0, 0x0, 0x0, r1}) 17:44:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x1e, 0x4, 0x0) [ 1550.430429][T18123] bridge0: port 6(veth9) entered blocking state [ 1550.437689][T18123] bridge0: port 6(veth9) entered disabled state [ 1550.453563][T18123] device veth9 entered promiscuous mode 17:44:18 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0}}, 0x20000003) 17:44:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 17:44:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) socket(0x3, 0x0, 0x0) 17:44:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vxcan1\x00'}) 17:44:18 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) [ 1550.767049][T18171] bridge0: port 7(veth11) entered blocking state [ 1550.778902][T18171] bridge0: port 7(veth11) entered disabled state [ 1550.800681][T18171] device veth11 entered promiscuous mode 17:44:18 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 17:44:18 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 17:44:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @qipcrtr, @vsock={0x28, 0x0, 0x0, @local}, @tipc=@name}) 17:44:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a40)={'gretap0\x00', 0x0}) [ 1551.024284][T18171] bridge0: port 8(veth13) entered blocking state [ 1551.031909][T18171] bridge0: port 8(veth13) entered disabled state [ 1551.092428][T18171] device veth13 entered promiscuous mode 17:44:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x1e, 0x4, 0x0) 17:44:18 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@rand_addr=' \x01\x00', @remote, @private1, 0x0, 0xcf74, 0x6, 0x0, 0x0, 0x0, r1}) 17:44:18 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000880)) 17:44:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:18 executing program 4: setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="a024", 0x2) r0 = socket(0x11, 0x2, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) 17:44:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in=@multicast2}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 17:44:18 executing program 3: r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0), 0x8) 17:44:18 executing program 0: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000001300)={0x0, {{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:44:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:18 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') 17:44:18 executing program 4: syz_genetlink_get_family_id$l2tp(&(0x7f0000000d80), 0xffffffffffffffff) [ 1551.548461][T18219] bridge0: port 9(veth15) entered blocking state 17:44:19 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0x8000]) [ 1551.588771][T18219] bridge0: port 9(veth15) entered disabled state [ 1551.646740][T18219] device veth15 entered promiscuous mode [ 1551.776125][T18219] bridge0: port 10(veth17) entered blocking state [ 1551.782792][T18219] bridge0: port 10(veth17) entered disabled state [ 1551.800027][T18219] device veth17 entered promiscuous mode 17:44:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x1e, 0x4, 0x0) 17:44:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c000000ffff1e00ffffffff020017"], 0x60}}, 0x0) 17:44:19 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x823a4bb0241f3c46, 0x800000000009031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000008c0)={0xa79e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "030b061bd04275"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f00000008c0)={0xa79e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x0, "030b061bd04275"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000008c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r2}, {0x0, r6}], 0x0, "030b061bd04275"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000018c0)={r13, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "8bebeb894f74c3"}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x100000003) 17:44:19 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x40000000, 0x0) 17:44:19 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x803, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0xc01, 0x3, 0x210, 0x0, 0x5002004a, 0x0, 0xe8, 0x0, 0x178, 0x3c8, 0x3c8, 0x178, 0x3c8, 0x3, 0x0, {[{{@ip={@remote, @rand_addr, 0x0, 0x0, '\x00', 'bond_slave_1\x00', {}, {}, 0x0, 0x0, 0x60}, 0x60, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xfffffffe, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) [ 1551.833337][T18219] syz-executor.2 (18219) used greatest stack depth: 22592 bytes left 17:44:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'caif0\x00', 0x4}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000580)="0c268a927f1f6588b9674812c62125e2928ae73ed216895941ba7860fcfaf65ac618ded89748952bd67aa03059bcecc59e547e758028ab4ea6f7aeaa0500000000001000000000000000000000000000000000000000000000a835d384", 0xfffffdcf, 0x8800, 0x0, 0x0) shutdown(r0, 0x1) 17:44:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="e0"], 0x14) 17:44:19 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1552.090334][T18257] bridge0: port 11(veth19) entered blocking state [ 1552.110196][T18257] bridge0: port 11(veth19) entered disabled state [ 1552.167863][T18257] device veth19 entered promiscuous mode 17:44:19 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:19 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 17:44:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000000580)="0c268a927f1f6588b9674812c62125e2928ae73ed216895941ba7860fcfaf65ac618ded89748952bd67aa03059bcecc59e547e758028ab4ea6f7aeaa0500000000001000000000000000000000000000000000000000000000a835d384", 0xfffffdcf, 0x8800, 0x0, 0x0) shutdown(r0, 0x1) [ 1552.348916][T18257] bridge0: port 12(veth21) entered blocking state [ 1552.356986][T18257] bridge0: port 12(veth21) entered disabled state [ 1552.375937][T18257] device veth21 entered promiscuous mode 17:44:19 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) [ 1552.828863][T18294] bridge0: port 13(veth23) entered blocking state [ 1552.844661][T18294] bridge0: port 13(veth23) entered disabled state [ 1552.873485][T18294] device veth23 entered promiscuous mode [ 1553.009925][T18294] bridge0: port 14(veth25) entered blocking state [ 1553.028739][T18294] bridge0: port 14(veth25) entered disabled state [ 1553.052886][T18294] device veth25 entered promiscuous mode [ 1553.104810][T18294] syz-executor.2 (18294) used greatest stack depth: 22584 bytes left 17:44:20 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x823a4bb0241f3c46, 0x800000000009031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000008c0)={0xa79e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "030b061bd04275"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f00000008c0)={0xa79e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x0, "030b061bd04275"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000008c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r2}, {0x0, r6}], 0x0, "030b061bd04275"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000018c0)={r13, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "8bebeb894f74c3"}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x100000003) 17:44:20 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:20 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 17:44:20 executing program 3: io_uring_setup(0x33bf, &(0x7f0000000080)) 17:44:20 executing program 5: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) 17:44:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:20 executing program 3: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 17:44:20 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000000880)) 17:44:20 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:20 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xf9, 0x4f, 0x4e, 0x40, 0x421, 0x108, 0xa2c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0x2, 0xff, 0x0, [], [{}]}}]}}]}}, 0x0) [ 1553.567482][T18311] bridge0: port 15(veth27) entered blocking state [ 1553.592575][T18311] bridge0: port 15(veth27) entered disabled state [ 1553.628480][T18311] device veth27 entered promiscuous mode 17:44:21 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:21 executing program 4: io_uring_setup(0x4f5c, &(0x7f0000000000)) syz_io_uring_setup(0x5dac, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1553.811612][T18311] bridge0: port 16(veth29) entered blocking state [ 1553.832084][T18311] bridge0: port 16(veth29) entered disabled state [ 1553.864843][T18311] device veth29 entered promiscuous mode [ 1553.954144][T14074] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1553.956745][T18311] syz-executor.2 (18311) used greatest stack depth: 22480 bytes left 17:44:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r0) close(r1) 17:44:21 executing program 3: add_key(&(0x7f0000000140)='blacklist\x00', 0x0, &(0x7f00000001c0)="82", 0x1, 0xfffffffffffffffb) 17:44:21 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b000000", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:21 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)={[{0x2d, 'io'}, {0x2b, 'rdma'}, {0x2b, 'memory'}, {0x0, 'rdma'}, {0x2d, 'pids'}, {0x2b, 'memory'}]}, 0x26) [ 1554.373809][T18343] __nla_validate_parse: 25 callbacks suppressed [ 1554.373855][T18343] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1554.405715][T18345] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'io'}, {0x0, 'rdma'}, {0x2b, 'memory'}, {0x2b, 'rdma'}, {0x0, 'pids'}]}, 0x1e) [ 1554.425489][T14074] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1554.426464][T18343] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 1554.650185][T18343] bridge0: port 17(veth31) entered blocking state [ 1554.665051][T14074] usb 6-1: New USB device found, idVendor=0421, idProduct=0108, bcdDevice=a2.c8 [ 1554.689738][T14074] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:44:22 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'io'}, {0x0, 'rdma'}, {0x2d, 'pids'}]}, 0x10) [ 1554.702595][T18343] bridge0: port 17(veth31) entered disabled state [ 1554.720766][T14074] usb 6-1: Product: syz [ 1554.735496][T14074] usb 6-1: Manufacturer: syz [ 1554.751499][T14074] usb 6-1: SerialNumber: syz [ 1554.772334][T14074] usb 6-1: config 0 descriptor?? [ 1554.778495][T18343] device veth31 entered promiscuous mode 17:44:22 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b000000", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1554.848196][T18343] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1554.864951][T14074] usb 6-1: bad CDC descriptors [ 1554.871824][T14074] usb 6-1: bad CDC descriptors [ 1554.889954][T18343] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1554.933270][T14074] cdc_acm 6-1:0.0: Zero length descriptor references [ 1555.009359][T18343] bridge0: port 18(veth33) entered blocking state [ 1555.011185][T14074] cdc_acm: probe of 6-1:0.0 failed with error -22 [ 1555.047444][T18343] bridge0: port 18(veth33) entered disabled state [ 1555.067059][ T5115] usb 6-1: USB disconnect, device number 55 [ 1555.137639][T18343] device veth33 entered promiscuous mode [ 1555.182705][T18384] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1555.262542][T14073] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1555.644269][T14073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.655732][T14073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.665992][T14073] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1555.675398][T14073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.694198][T14073] usb 1-1: config 0 descriptor?? [ 1555.864156][ T5115] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1556.166833][T14073] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 1556.183874][T14073] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000F/input/input23 [ 1556.236145][ T5115] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1556.320057][T14073] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1556.387970][T14073] usb 1-1: USB disconnect, device number 86 [ 1556.415147][ T5115] usb 6-1: New USB device found, idVendor=0421, idProduct=0108, bcdDevice=a2.c8 [ 1556.431275][ T5115] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.468703][ T5115] usb 6-1: Product: syz [ 1556.496644][ T5115] usb 6-1: Manufacturer: syz [ 1556.518424][ T5115] usb 6-1: SerialNumber: syz [ 1556.550894][ T5115] usb 6-1: config 0 descriptor?? [ 1556.614132][ T5115] usb 6-1: bad CDC descriptors [ 1556.621304][ T5115] usb 6-1: bad CDC descriptors [ 1556.648528][ T5115] cdc_acm 6-1:0.0: Zero length descriptor references 17:44:24 executing program 5: socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001980)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='memory.events\x00'}, 0x30) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 17:44:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f00000000c0)=""/242, 0xf2, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:44:24 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b000000", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:24 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'io'}, {0x0, 'rdma'}, {0x2d, 'pids'}]}, 0x10) 17:44:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) [ 1556.670758][ T5115] cdc_acm: probe of 6-1:0.0 failed with error -22 [ 1556.752559][ T5115] usb 6-1: USB disconnect, device number 56 [ 1556.783719][T18439] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1556.794296][T18437] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1556.860051][T18439] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:24 executing program 3: clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) select(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x10000}, &(0x7f00000001c0)={0x0, r0/1000+10000}) 17:44:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x10}}], 0x30}, 0x0) [ 1557.002632][T18439] bridge0: port 19(veth35) entered blocking state [ 1557.019455][T18439] bridge0: port 19(veth35) entered disabled state [ 1557.043090][T18439] device veth35 entered promiscuous mode 17:44:24 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0}, 0x20) 17:44:24 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b0000000800", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1557.111488][T18439] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1557.204257][T14073] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1557.285505][T18439] bridge0: port 20(veth37) entered blocking state [ 1557.314499][T18439] bridge0: port 20(veth37) entered disabled state [ 1557.335092][T18439] device veth37 entered promiscuous mode [ 1557.604339][T14073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1557.615493][T14073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1557.626459][T14073] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1557.635644][T14073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.650078][T14073] usb 1-1: config 0 descriptor?? 17:44:25 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 17:44:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 17:44:25 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, 0x0) 17:44:25 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) 17:44:25 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b0000000800", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:25 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 1557.924337][T14073] usbhid 1-1:0.0: can't add hid device: -71 [ 1557.930597][T14073] usbhid: probe of 1-1:0.0 failed with error -71 17:44:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={0x0}}, 0x0) bind$netlink(r0, &(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc) 17:44:25 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b0000000800", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800086ffffffffffff080211000001505050505050000000000000000425030000002a"], 0x50}}, 0x0) [ 1558.004208][T14073] usb 1-1: USB disconnect, device number 87 17:44:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB='&\x003'], 0x48}}, 0x0) [ 1558.253824][ T246] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1558.296052][ T246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.304913][ T246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.445746][T14073] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1558.834284][T14073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1558.845260][T14073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1558.861387][T14073] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1558.870598][T14073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.885407][T14073] usb 1-1: config 0 descriptor?? [ 1559.415673][T14073] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 1559.447144][T14073] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0010/input/input24 [ 1559.547708][T14073] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1559.724767][ T5115] usb 1-1: USB disconnect, device number 88 17:44:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000180)=@proc={0x10, 0x0, 0x0, 0x400000}, 0xc) 17:44:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x7f}}}}}}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050000000000000000000000000000004008700"], 0x48}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 17:44:27 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b000000080003", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:27 executing program 5: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x7800) 17:44:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:44:27 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f000059f000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x9b0e8000) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0xfffffffffffffffa, 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x0, 0x1, 0x9, 0x9}, @alu={0x7, 0x0, 0xc, 0x0, 0x2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @generic={0x1, 0xf, 0xc, 0x9, 0x6}, @map={0x18, 0x0, 0x1, 0x0, r3}], 0x0, 0x1, 0xbd, &(0x7f00000003c0)=""/189, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x9, 0x0, 0x7}, 0x10}, 0x78) write$binfmt_script(r3, &(0x7f0000000280)=ANY=[], 0x3af4707d) r4 = socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000555000/0x2000)=nil, 0x2000, 0x3000009, 0x10, r4, 0x3c5db000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet_sctp(0x2, 0x0, 0x84) write$cgroup_int(r5, &(0x7f0000000200)=0x100000000000000, 0x4010040c000) 17:44:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) [ 1560.325903][T18555] __nla_validate_parse: 5 callbacks suppressed [ 1560.325925][T18555] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:44:27 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/time\x00') 17:44:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xffff0000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x40) 17:44:27 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b000000080003", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:28 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1}, 0x4) 17:44:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x14, 0x0, 0x914}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/141, 0x8d}}], 0x1, 0x0, 0x0) 17:44:28 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x11b, 0x2, 0x0, 0x0) [ 1560.664344][T18576] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:28 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b000000080003", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:28 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x11, 0xa, &(0x7f0000000000)={@loopback, @remote}, 0xc) 17:44:28 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000300)=""/137, 0x89}], 0x1, 0x0, 0x0) 17:44:28 executing program 0: socketpair(0x33, 0x0, 0x0, &(0x7f0000000140)) [ 1561.008825][T18592] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x4020940d, 0x0) 17:44:28 executing program 5: r0 = socket(0x18, 0x0, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, 0x0) 17:44:28 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000000240)="5e5ebd61204d163feb2070434112c4b064967dedbf5b51644dee02c39f78b287005283cb49ac5b2fdc4f3c96d2f41b6583f29ea064fb4965dba5ddacba9721613bf5262f46b408217c00f53c8d1971ae5133909d63c816037dbdcffa35e07e61ee91e469e29ccd254c68988132a2bf2c517af496c8b4bcbb79ee96667cadb70d2fc9f5fcded6a637", 0x88) 17:44:28 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:28 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000001dc0)={0xec4, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x51, 0x1, "fdcc1ce67ee6cb4a4c92b685e6b56e483d16b4e8c718407989297b9a423c38788580169f7beca2be8329e373a797a4aee12117740c2b7c265014fe6abd351198a0972832214dc96760d6f61969"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "22a0b754d92bca8a0fca07b5807fa1b02cbcbf844075df8fd1d6237130b2f5d8a86d0edf329fe6660588fa266c8caf1040e7bbb22773c1ad288d8ae1c2a2144ec5f0014de420a01f096b0181f6b8cf6a83bb9235c34c4c56e8d6dbce467bf9b52091f53bbda30b188deae8bf13b156345000777cf27e8a261b147793c316efcc41aba970d23ce60edd9e942c7047e35383a6448cb6762fecf6453b1ff53b80ab5054170be907dcc285a3eda95551a06ce8562f913e9661fdfab7fdc239d05f6efd6f9dcffc5ae816e91c9f56a0499a345cdd9b32c5a31b4053"}, @INET_DIAG_REQ_BYTECODE={0xd79, 0x1, "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"}]}, 0xec4}}, 0x0) 17:44:28 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 17:44:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000a80)={0x0, @in={0x2, 0x0, @local}, @ipx={0x4, 0x0, 0x0, "2eb03fff297b"}, @in={0x2, 0x0, @dev}}) 17:44:28 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4d2203, 0x0) 17:44:28 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f0000000080)) 17:44:28 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x80108907, 0x0) 17:44:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:29 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000002400), 0xffffffffffffffff) 17:44:29 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x29, 0x36, 0x0, 0x4) 17:44:29 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x29, 0x48, 0x0, 0x0) 17:44:29 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:29 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x5, 0x0, 0x0) 17:44:29 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {}, {0x2, 0x0, @private}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x1000000}) 17:44:29 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000002740)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/67, 0x43}, {&(0x7f0000000100)=""/47, 0x2f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f00000027c0)={0x77359400}) 17:44:29 executing program 0: r0 = socket(0xa, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x237fba910f0068de, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 17:44:29 executing program 5: perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x3, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 17:44:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000005c0)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) 17:44:29 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:29 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040), 0x10) 17:44:29 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:29 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:44:29 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @in={0x2, 0x0, @remote}, @nfc, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth1_vlan\x00'}) 17:44:29 executing program 3: add_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0, 0x0) 17:44:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) 17:44:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000008d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 17:44:30 executing program 5: add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffd) 17:44:30 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x29, 0x2, 0x0, 0x4) 17:44:30 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) [ 1562.655365][T18656] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1562.699139][T18656] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:30 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) fork() [ 1562.795009][T18656] bridge0: port 21(veth39) entered blocking state [ 1562.814249][T18656] bridge0: port 21(veth39) entered disabled state [ 1562.876613][T18656] device veth39 entered promiscuous mode [ 1562.916008][T18656] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1562.936335][T18656] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:30 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:30 executing program 3: r0 = gettid() r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, r1, 0x0, 0x0, 0x0}, 0x30) 17:44:30 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/user\x00') 17:44:30 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:30 executing program 0: keyctl$reject(0x13, 0x0, 0x0, 0x80000000, 0x0) [ 1562.994796][T18656] bridge0: port 22(veth41) entered blocking state [ 1563.003714][T18656] bridge0: port 22(veth41) entered disabled state [ 1563.013020][T18656] device veth41 entered promiscuous mode 17:44:30 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000002740)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/67, 0x43}, {0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)}], 0x5, &(0x7f00000005c0)=""/159, 0x9f}, 0xfff}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f00000027c0)={0x77359400}) 17:44:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCADDRT(r0, 0x891b, &(0x7f0000001600)={0x0, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @broadcast}, @can}) 17:44:30 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x29, 0x1a, 0x0, 0x0) 17:44:30 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:30 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, 0x0, 0x0) 17:44:30 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x12, 0x0, &(0x7f0000000080)) 17:44:30 executing program 3: r0 = socket(0xa, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:44:30 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:30 executing program 4: r0 = socket$nl_netfilter(0x2, 0x3, 0xc) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x2}, 0x2000014c, &(0x7f00000000c0)={0x0}}, 0x0) 17:44:30 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFCONF(r0, 0x8916, 0x0) 17:44:30 executing program 3: r0 = socket$nl_netfilter(0x2, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) 17:44:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 17:44:31 executing program 0: timer_create(0x9, 0x0, &(0x7f0000000080)) timer_delete(0x0) 17:44:31 executing program 3: prctl$PR_SET_PDEATHSIG(0x21, 0x0) 17:44:31 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:31 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:31 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) 17:44:31 executing program 0: prctl$PR_SET_PDEATHSIG(0x3a, 0xfffffffffffffffd) 17:44:31 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:31 executing program 4: prctl$PR_SET_PDEATHSIG(0x1c, 0xfffffffffffffffd) 17:44:31 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000200)) 17:44:31 executing program 3: prctl$PR_SET_PDEATHSIG(0x36, 0x0) 17:44:31 executing program 0: prctl$PR_SET_PDEATHSIG(0x7, 0x0) 17:44:31 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:31 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFCONF(r0, 0x8917, 0x0) 17:44:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFCONF(r0, 0x890c, 0x0) 17:44:32 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:32 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:32 executing program 0: msgrcv(0x0, 0x0, 0x0, 0x0, 0x7800) 17:44:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002240)={&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000cc0)=""/131, 0x83}, {&(0x7f0000000c00)=""/8, 0x8}, {&(0x7f0000001e00)=""/99, 0x63}, {0x0, 0x1000000000000}, {0x0}, {0x0}], 0x6}, 0x0) 17:44:32 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f000053f000/0x1000)=nil, 0x1000, 0x4, 0x226833, 0xffffffffffffffff, 0x8000000) 17:44:32 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:32 executing program 0: r0 = socket$nl_netfilter(0x2, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r0, 0x89e0, 0x0) 17:44:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b48, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:44:32 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:32 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x83, 0x0, 0x0) 17:44:32 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:44:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000c80)={0xb}, 0x40) 17:44:32 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)="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"}) 17:44:33 executing program 0: ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000080)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000000c0)) 17:44:33 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS2(r0, 0x5456, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "07f6bcd5d127e0cf431ebb737391c51151a2a5"}) 17:44:33 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xca, &(0x7f0000000080)=""/202, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:44:33 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:33 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS2(r0, 0x5419, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "07f6bcd5d127e0cf431ebb737391c51151a2a5"}) 17:44:33 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:33 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x7b, 0x0, 0x0) 17:44:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x5416, 0x0) 17:44:33 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:33 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x7) 17:44:33 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:33 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e71b0fa1f107000000364603812c66538d750f6ee1d0014e3f0500bb9fb045f2d1c190926c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8dcbf11169c111c145129d6f9f6c1f3b18d6d352507f7018b311fef2c560001000010000000fb8019128e7e4d939955f8ac296203784000400f573fbf0000fdffffffffeb95128ce7ec03ff07a380543b320be1c1bb99bb063fb60927e83569656a0bda31b0040015f033270100008cfcd61dc4a7e6a5dd57069df1cd265246e1d8292f19a49f95586b92a15b4264045df05363f23dc9ef8a0a460cad29288ac6bb83dc86104434ae3f4c961215d3a59312023175bfa865", 0xff}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 17:44:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x6e, 0x0, 0x0) 17:44:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r0) 17:44:33 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r0, @ANYBLOB="010000200000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300b0800000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 17:44:33 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:33 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x21, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:44:33 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS2(r0, 0x545d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "07f6bcd5d127e0cf431ebb737391c51151a2a5"}) 17:44:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x0, 0x9f9}) [ 1566.104914][T18815] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1566.118830][T18815] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:33 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:33 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f00000001c0)={0x0, "0ee208d1d42995bbe2301de0be76b6b6a6c521b287e9631fc5b98d4cb1e8ad1d8a7e7441e05b4abdabd563ad50c21fadc35326d4696ded6e3263641cbf55ade2"}, 0x48, r1) [ 1566.314973][T18825] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1566.337713][T18825] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:34 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS2(r0, 0x5405, 0x0) 17:44:34 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) 17:44:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 17:44:34 executing program 1: bpf$PROG_LOAD(0x3, 0x0, 0x0) 17:44:34 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x1006, &(0x7f00000012c0)=""/4102, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:44:34 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000001c0)=@abs={0x8}, 0x8, &(0x7f0000000280)=[{&(0x7f0000000200)="2b5a76892d20e46778868b05e1f483518c3e63641bf178320ee4f4f9d2101e7515d9ca213db82dde26eb09f8c8f6f9e5095474dd548380271990554de38d20724bb384dc17ea8c93269cdfaab22f901d9f509eb93ae2b13584d8592223", 0x5d}], 0x1, &(0x7f0000000600)=[@cred, @rights], 0x28}, 0x0) [ 1566.805778][T18836] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:34 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000027c0)={&(0x7f0000000080)=@file={0xa}, 0xa, &(0x7f0000000580)=[{&(0x7f00000000c0)="91446e9df89c7ad3d51f618032f47e83a674cf664e6a0d332f21b74fe7a29d38578ccaf12cdb2ba3d7f383576feb894f083a870a9073e67c0cbff7cd6c554b18366bdf6019b80f8b026cdd023b5aa9f55c4b894d9e7a82a87cff5cfb4ec3f4fb023bdf82dab9559accf0", 0x6a}, {&(0x7f00000002c0)="724235d13aac09ff74b1aefaffc4f0820b83dfc075146c219db17278144c4f0b0be8871f0377546570c0095450e4289c6d042615d2d69c4d9581927212e7c3aad3c2ea37a6c0bfc345c10a6197c611735d900c1264f3b770b2ed86a036e446b718a5c6f8ee43083cba0cce7a34cdbf2b5310b7b4e08c039c7eaf0b52de491a4047491844bc77e19d468f0daebb5d84362b7e1a3715e9ad5bf0413e0f1584c250a2516978cb5266cfb832bf03a5aa9ebee746c04d8e12679d69258267e5664710277b44e04f5d5497ef30e04a3e66fc4972", 0xd1}, {&(0x7f0000000440)="6ed80df43b5507832be634c3b07ffaca8d6e297ee570976f9527969410b247e0a87c7c8ec48b04ea1cd72ecc828cb700152ed96e00d633756b1e139d00150751b20cf777e1efb6b54062ea05772b61254172bcdb896b1f63689abd720bdc6c1b6ab281a1671b0e425ac2e40448908460d9d028ac349f171833aa0d2c9b0ac254cf02924e43059fb8e8010e211f14bfb926157a7b60e853113be3848b3114ab48fa97b7268ba56db29720ce6ead6a06d319298a5e0897e8aabe000f18ad8adb2f3c4a329bee2cf8c9945c06", 0xcb}, {&(0x7f0000000140)="90819f105358495927a7f4abf730fdddb49262a4df86131078949e1f2885c53169", 0x21}, {&(0x7f0000000680)="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", 0x5da}], 0x5}, 0x0) 17:44:34 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000040), &(0x7f0000000080)=0xc) 17:44:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x4, 0x0, 0x0) 17:44:34 executing program 5: setuid(0xffffffffffffffff) openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 1566.874712][T18836] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:34 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:34 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) 17:44:34 executing program 0: shmctl$IPC_SET(0x0, 0x3, 0x0) 17:44:34 executing program 3: openat$ptmx(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 17:44:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights, @cred], 0x2c}, 0x0) 17:44:34 executing program 5: fcntl$lock(0xffffffffffffffff, 0xb, &(0x7f0000000700)) [ 1567.140350][T18851] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1567.161086][T18851] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x200, 0x0, &(0x7f0000000040)) 17:44:34 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:34 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xfffffffb}, 0x10) 17:44:34 executing program 4: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x0, 0xffffffffffffffff}}) 17:44:34 executing program 5: faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 17:44:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) 17:44:34 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000000)="a0e1aa399540a27da9fec2bb8f93d1a1a8da4a727ad6b71aa66f46bb7c6e0d5a5e51c9226b312aabfc09827a0a253a9a595eba07e349ff6ba6846147a16d8e20214e25c0a913db0b5159db1dd590d23d3fd14191cbbc5c9eda4f7d5b4b", 0x5d, 0x0, &(0x7f0000001000)={0x1c, 0x1c, 0x2}, 0x1c) 17:44:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="f681ed60a58380b4", 0x8}], 0x1, 0x0, 0x88}, 0x0) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000001c0)=@abs={0x1}, 0x8, &(0x7f0000000280), 0x20000000000000ec, &(0x7f0000000600)=[@cred, @rights], 0x28}, 0x0) 17:44:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) listen(r0, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x12, &(0x7f00000002c0), 0x1) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="03", 0x1}], 0x1}, 0x0) [ 1567.437153][T18872] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1567.469209][T18872] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:35 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0xa}, 0xa) 17:44:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000001c0)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000000600)=[@cred], 0x18}, 0x0) 17:44:35 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:35 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x51, 0x0, 0x0) 17:44:35 executing program 5: msgget(0x1, 0x115) 17:44:35 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/61, 0x3d}], 0x1}, 0x80) 17:44:35 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) 17:44:35 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00'], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=[@sndinfo={0x1c}], 0x1c}, 0x101) 17:44:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000000), 0x84) 17:44:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000001100), 0x1c) connect$inet6(r0, &(0x7f0000000000), 0x1c) 17:44:35 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x3cad, 0x4) 17:44:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xd, &(0x7f0000001680), 0x4) 17:44:35 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00'], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:35 executing program 5: faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 17:44:35 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@abs={0x8}, 0xfffffffffffffdac, &(0x7f00000003c0)=[{&(0x7f0000000080)="528420811d8b7402d64c8f1e1aea18784e892dc98cd49752ca4df9806511023ec82d84730d8084893daac70306364ed9af087d3a1075cfdab19016c0780734b17ea1d51f70fbcd4680d72f1bbe0f6f9139c2fe4f1d9684f301cb731916a91a9fd67ff54a61145dae74d03d3dd7eb8fe16753e74c28b64d07df72e62bbfb04ec667", 0x81}, {&(0x7f0000000140)="1cc641fba86d48ca35872eb4edd573dad1ea6b9d0b42c2af1add91097416f97d4407aa17f9c03787d0a1b1fe9350f9c56a30283631414f22b1b64a94d060b6226e7ebf54f92645bdeaaeba9194111a796698aa08543a9473c7993a3cef2737b2c29461fc9f17e4ad6f3d03c6c9fb7b14ade8d8d4dd34e1c52c7c8e544fa1df4f331f5c689bbc4147a18e2a42f8c2b23367ad8844cc48aef736e212628bcfea7f1fbc3698e55a27113e9c6ad577622513de085280448f092e13a5f227aa9529df497941cbdc7844b8c87338e9d7fa5f7f4c9a265e3bd853929fac97ba8279e960dc82fff3ec9424b851dd16a8d6ccb26e344f", 0xf2}, {&(0x7f0000000240)="b43fb69f3c27b97f2f95e68d7d533c812b9ff30a61b21bbe462fe471ad1ab147c7", 0x21}, {&(0x7f0000000280)="f681ed60a58380b4329e0f1c4f48b39dfd1d8ae4c4362a88eac36034", 0x1c}, {&(0x7f00000002c0)="02751fd2bb8a0059a1473460b89291d849bb55a1ad7be5336a54e277c77a5759caec476677d6b67c5400a8415a0a8ba193a942464a3696ea982e9fe6577c3dc9c0251f86ffe2526cb411a1546f7e1ba4758706eb1ade615a30350edc8aaef7440bbf148021daedf3581d2c1e83802eda8cdc0edc99ad05cde51d947124f389bb8cef328bf1345a7974b89e19c485385e9049d3ceef4dfa3cdbed6fbe043e48a8592cf58b6df77b7c0bc09dfcabcbf76e7db825e643b042753473d5ca41e51489c9541bded65a40bfeeb8d8c4bfe9b745eced16d6c2fc6aa55c5c5805cd97eb18fb3e1330bd94669fe03ff39b8977e208e78c87bbaf5ef4a1163925a0db90", 0xfe}], 0x5, &(0x7f0000000680)=[@cred, @cred, @rights, @rights, @rights], 0x80}, 0x0) 17:44:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x41, 0x0, 0x0) [ 1568.616188][T18921] sctp: [Deprecated]: syz-executor.0 (pid 18921) Use of int in maxseg socket option. [ 1568.616188][T18921] Use struct sctp_assoc_value instead 17:44:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f00000001c0)=0x20) 17:44:36 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00'], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000001140)=""/4107, &(0x7f0000001040)=0xea) 17:44:36 executing program 5: socket$inet6(0x1c, 0x0, 0x3) 17:44:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000140), 0x90) 17:44:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:44:36 executing program 0: setitimer(0x0, &(0x7f0000000000)={{0x0, 0x9}, {0x0, 0x9}}, 0x0) 17:44:36 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d0000002500120008"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:36 executing program 3: r0 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, 0x0, 0x0) 17:44:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f0000000000), 0x80) 17:44:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) socket$inet6_tcp(0x1c, 0x1, 0x0) 17:44:36 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockname$inet6(r0, 0x0, &(0x7f0000000440)) 17:44:36 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fcntl$getown(r0, 0x5) 17:44:36 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d0000002500120008"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40043) 17:44:36 executing program 0: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 17:44:36 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000140)={@broadcast}, 0x0) 17:44:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000000)="8c", 0x1, 0x0, &(0x7f0000000080)=@abs={0x8}, 0x8) 17:44:36 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7, &(0x7f00000001c0), 0x88) 17:44:36 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d0000002500120008"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:36 executing program 1: chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 17:44:36 executing program 3: setitimer(0x1, &(0x7f0000000000)={{0xe1c}, {0x0, 0x9}}, 0x0) 17:44:36 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1c, 0x1c}, 0x1c) 17:44:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='~', 0x1, 0x40, &(0x7f00000000c0), 0x10) 17:44:37 executing program 3: mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) 17:44:37 executing program 1: fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 17:44:37 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, &(0x7f0000000140)) 17:44:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, 0x0) 17:44:37 executing program 0: syz_emit_ethernet(0x4a, &(0x7f00000012c0)={@broadcast, @local, @val, {@ipv6}}, 0x0) 17:44:37 executing program 3: pipe2(&(0x7f0000001800), 0x0) 17:44:37 executing program 1: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0xa, &(0x7f0000000540)) 17:44:37 executing program 5: r0 = socket$inet6(0x1c, 0x3, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000140)=""/251, &(0x7f0000000100)=0xfb) 17:44:37 executing program 0: mknod$loop(&(0x7f0000000000)='./file1\x00', 0x0, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2000, 0x0, &(0x7f0000000240)) 17:44:37 executing program 4: mknod$loop(&(0x7f0000000000)='./file1\x00', 0x0, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, &(0x7f0000000240)) 17:44:37 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:37 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10) 17:44:37 executing program 1: mknod$loop(&(0x7f0000000000)='./file1\x00', 0x0, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4000, 0x10, &(0x7f00000000c0)) 17:44:37 executing program 0: mknod$loop(&(0x7f0000000000)='./file1\x00', 0x0, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4000, 0x0, &(0x7f00000000c0)) 17:44:37 executing program 5: r0 = socket$inet6(0x1c, 0x5, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) 17:44:37 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='smaps\x00') getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 17:44:37 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46) 17:44:37 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:37 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='smaps\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000004480)) 17:44:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b80)) 17:44:37 executing program 4: creat(&(0x7f0000000400)='./file0\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1) 17:44:37 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='smaps\x00') setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 17:44:37 executing program 1: creat(&(0x7f0000000400)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) 17:44:37 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='smaps\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0) 17:44:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') execveat(r0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0) 17:44:38 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_WRITE(r0, 0x0, 0xfffffffffffffecf) 17:44:38 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d0000002500120008000100766574"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:38 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r0, 0xffffffffffffffff, 0x0) 17:44:38 executing program 1: creat(&(0x7f0000000400)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 17:44:38 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='smaps\x00') write$FUSE_LK(r0, 0x0, 0x0) 17:44:38 executing program 5: creat(&(0x7f0000000400)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5b) 17:44:38 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='smaps\x00') accept4$inet6(r0, 0x0, 0x0, 0x0) 17:44:38 executing program 4: capset(&(0x7f0000000140), 0x0) 17:44:38 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='smaps\x00') getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, 0x0) 17:44:38 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d0000002500120008000100766574"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:38 executing program 1: io_submit(0x0, 0x1, &(0x7f0000000340)=[0x0]) 17:44:38 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x82200, 0x0) 17:44:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 17:44:38 executing program 4: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$CHAR_RAW_BSZSET(r0, 0x40081271, 0x0) 17:44:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 17:44:38 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='smaps\x00') sendmmsg$unix(r0, 0x0, 0x0, 0x0) [ 1571.131934][T19081] __nla_validate_parse: 38 callbacks suppressed [ 1571.131961][T19081] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:38 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60}, 0xfffffffffffffc81) 17:44:38 executing program 5: shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) 17:44:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 1571.203250][T19081] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:38 executing program 4: io_setup(0x4, &(0x7f0000000180)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 17:44:38 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d0000002500120008000100766574"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:38 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 17:44:38 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) utimes(&(0x7f0000000000)='./file0/file0/../file0\x00', 0x0) 17:44:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 17:44:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) [ 1571.464740][T19105] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1571.484751][T19105] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1571.529125][T19105] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1571.541263][T19105] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:39 executing program 1: io_setup(0x3, &(0x7f0000000100)) io_setup(0x3ff, &(0x7f0000000000)) io_setup(0x4, &(0x7f0000000040)) io_setup(0x5, &(0x7f0000000080)=0x0) io_destroy(r0) 17:44:39 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000200)) 17:44:39 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) 17:44:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='veth0_to_bridge\x00') 17:44:39 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:39 executing program 4: clock_gettime(0x0, &(0x7f0000000040)) io_setup(0x10000, &(0x7f0000002280)) 17:44:39 executing program 1: setresuid(0xee01, 0xee01, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) [ 1572.080065][T19128] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:39 executing program 3: shutdown(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 17:44:39 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 17:44:39 executing program 1: openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) [ 1572.138356][T19128] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:39 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x5ef) 17:44:39 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) [ 1572.271771][ T37] audit: type=1326 audit(1620409479.675:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19134 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f90549 code=0x0 17:44:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x301, 0x0, 0x0, {}, [@typed={0x6, 0x0, 0x0, 0x0, @str='!\x00'}, @generic="73ec"]}, 0x20}}, 0x0) 17:44:39 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) 17:44:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0, 0x0) 17:44:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 17:44:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_triestat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) [ 1572.459472][T19144] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:39 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_triestat\x00') openat$zero(0xffffffffffffff9c, 0x0, 0x500, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) fgetxattr(0xffffffffffffffff, &(0x7f0000000200)=@random={'os2.', '/proc/self\x00'}, &(0x7f0000000240), 0x0) [ 1572.505345][T19147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 17:44:40 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x801, 0x0, 0x0, {}, [@typed={0x6, 0x2, 0x0, 0x0, @str='!\x00'}]}, 0x1c}}, 0x0) 17:44:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000008900)=[{{&(0x7f00000017c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001840)=""/211, 0xd3}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f0000001a80)=""/2, 0x2}], 0x3, &(0x7f0000001b00)=""/126, 0x7e}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)=""/86, 0x56}, 0x7ff}, {{&(0x7f0000006740)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000007d40)=[{&(0x7f00000067c0)=""/240, 0xf0}, {&(0x7f00000068c0)=""/78, 0x4e}, {&(0x7f0000006940)=""/60, 0x3c}, {&(0x7f0000006980)=""/201, 0xc9}, {&(0x7f0000006a80)=""/228, 0xe4}, {&(0x7f0000006b80)=""/4096, 0x1000}, {&(0x7f0000007b80)=""/237, 0xed}, {0x0}], 0x8, &(0x7f0000007dc0)=""/81, 0x51}, 0x100}], 0x3, 0x0, 0x0) exit_group(0x0) preadv(r0, &(0x7f00000017c0), 0x47, 0x0, 0x0) clone(0xc4000380, &(0x7f0000000200)="2abe7f7b9db8abd415b2c44c56184a13ba713971f3d6f82ca2e47867583b39fedc7a6b604e1b17572d3eea75189ff2a87c27255b0cb70f3e1f3056101ff40c2c90d961b18287db093979154d96f74ffbcea2079d39bb7c5cf5a3697087e74b8b61c1a7af03596a8f8024e9266e2782444e261b5a5193424dfd485b2be6f86a231d9d50e1d35b92f111d40d9614d396f3c0a66990393145ef7601763ef241dd8385e6012e71512fd8536f47926e5cefef7f6d9774851a7d9ec986f4fc6b77e713f023189d43d71cb0ffc78064a6ae44e6d6ff8b748ebad028cf1e6a2270cb66a7792606cfbc4a96f53c5ecf46650d6f03bb2776dcac5b0869eb2d20f7f2abeb80b60f844421d256c3687146f5e74ee5f35ffa1a63d5bbd7f3fefbb365b313d31843eb0134dee2956eea4c834c8d4dd960f22748a778b87ade0dd4f7addee774f86d262f52be9d72589b3a4a6e6a7bb421a64a476577e293853999ab1898d45af656fa8d04c4b9a149faa622ac893279d417a9fce8ebf4f05a5fab6eeae28742c02156d8b95a420d3e2975452cfd57867e615a8abf3c5ec2ca0e69b9c6ba8bdc69f94a58cf124e198d5ae2535adaa25163b28c25786859f69f2968c045f63ac0bde3b3c4342f34a15ac8e1db6aeddb9256ff4cbc7db05f930d5bb0feea245179211e4e807e34fb96fb244a773f68c69887c62244f2f99a20397e0ecc888c893ae1dbc67fa665d2e6ae3aa9bb4731d2b91c7ea151db5ed78cd19ba3ba5dd50b77ed878ea51959cdb1382db99be756863350764a9364739fd59f326a764c66fdd69a0a5788b19b0f94b22dc27de2f18a2f359ed52f258b06786a68f0f436367fdedfe025c6e51d23b6a838fee60230e3e715688f6c81dabce5432d730d7ae8c231564f83094b03034b1e984a20868ad530bee847b2e4716a812d6f808665210a841658c30b0d471867fc4324b650bd0a87ab0b01e8928b8eaa0e31c353da42252eb2245a3c28d1d3e976c4128f2e6c787f0fe4ff0d15c872829fa2230cc26357feb0f4502d90d84351a4e2684613bebb443ac887deb9b079ea0dfc9b886a8146491e6ec750b644287274a8c5a03be47b78ba4f733a05c0e371af352ea526bf19e6aa40973f94b27a878c991c07600c1af24ded130233d32af6805797dc0bb2bc2eac767c194fae0a9511fe02b1db59d50091c28034340ca37880e04eba6f8edc0ae544221950f7e2cae1dbaee5dc841c733ed9fa889ba1f516b4a3eb64991604fc2a0069c44a636f2bd090b1bf9bc8c123237e972a81037ee159f290f7ff6effce9de417997082e3c21d67b9eef1e0d52b2a61a02882f0db9da096ef3d4f241800dda69905ac4b2dd8a5b55370dc0cbbfa465b2142271dc22d492232fd72b5af39a165bdb86858d5b0ab14e8500a1ae9d6600a7f0f6aee9b0d600d9b2f019e9a243e852157f108c90744ef4ff6620dd2a9fcaa9340b90f3bc89bdc680a9676a5395c6d13a76a39613e399010999202516fe5f6fd14f0f44688e23c97062cb1863b109b6d91362f6a251bcbced745d24b44f4cebb6f12e9cf431320cb8a3e6594b7dc5841269907f252b32a9b95eb4248f9898795fd772783b36684950cbbe8fc0afbcc7e13e269522e436e3fd3ba204954727593cd38ea380f5d3b06fd26999e5c2d7a0648c69198300f1c6f72e88a9d346c72133d2577fb4e2a0e5cef2470bfb40c4f278646a5a684d59f7cf16e320b2d686d121adf6831700518c2ce589f3d1149c9646c462a69e0c69343b88748e66d21e817a229d2da021f2c9b4d71159e002f23168c578255975185c4ebec0c2545303f6db3e37fb3d83807432a38883c84cd56e6bb118cf9b28cad6c97770ff5b41e5c7b2970dcbc01e15c9dd3fdea01026435238eed3345ea6a4b83aac5e7f6c004977a2741b0197722b65339588b1c69b2bc1f71b33b5c43ecd9c0066fbade4e064f9246e67d78a287e2d0c2540428f23a21c62ab0f2af104d828bf619d6da49f70ecfb2e70c5fd385db4b4b86774ef6caee8fe37c437f4a0d60ede257fb99301eaeae3a55690a18105dd7df00c59583798e8b64350741dc2ad9f4387441e3fd8d06d8c2273bbb5b28c1031607722e362dd2315c7d4f940200b7d85e971ac2608fe1f4e670c50cc2d3568b432687168352398287240d95f76ad91a8c2e4741c961cf4c987c331ff62e40c2130f040c03ebc9451aff1057588d8b771f36f48282e0ee990ed8d4ba42d4beaadf4d26489619dc15e381458d6716c9aca7ede6c0620de3458d7d8840a5f8067b84485f0b344625ef6b300bb75e6771acb6472b34181445fcd881ef03f72055e4577d14f33bbc1af7fc8048bbb132987c62c4a6740ee83735b61ef67a924ce489b7a7a012eae5659f06e251317a9e54b2901dd2bb43c4865ea1cd4b87926ad8ea2b47ecb3758860d4484148bcbe42acf3c22248bf1f0b0e8b038cb8bba860c0e6b020704bdfca0c1aba2b7a69ffca6794be3651c6a1abc19f6947b65ff13e07b4fff73577f0db9529ba7808f51cdf42c974cdc4bb82f56676a7ff1f5cc005c6c83ffdedfc4d198856923e23b7f496aa3130461b327570fee3248331815d714f5ad0be7306cb4c445be03942b580d61876322833946a7e317e3fb65b48ad93b1171ebc8ce7f08523709d10d220912abcf168906ea53b74b3d9d3eae3e3f066aa9be53e83af026ffa010e657aa190a48cec5b6672c81297374367d93c499c0dd06b794dc6a9d9430cc622ea64e0e4ddcf8e4e9e9e6016825f8de1b6fbc95331f28e0b1c393b6dffe4f712dd298e736b2adf59e5253abac51ba7bbc5b9ea44a0126e48c74a3bf940d1383bf53bc8082becb60086fab943ed99bf01c78b4eefda16b31b35854791903aa51bacc6006c512be90cfb9166959e89d07f2382210679b622c9396248341181cbabaf40fc8699fafe3d80e1eb8a53f14b7dcefa7fdfb599c039a275516047a15a61741733821449aef1eb81d496ac402bcba5450488d7625b9db93eb6e7a301b9a24c4b53b286ae3e4666fd5648bfd2bcedd02fc94ed2edd0016d9d719105baced9e3423b707bddcad2dac1068ff10909dae21fbd754e4f6c3982af08e2efac1bc5ad66a45f65ba7759600e28b7bd899a43ab2a0ad8ea5954d7aeaad3a73c71cabdec6e5a31c5dea9d536515250b3fcbc7901e120aec84f825c6dd960f7d4bc182704816b1ddc1d7533ee3c582431758857316fcd15edb5a45ea098e49fa88c9fa153f906ec448da7d1edf0c90c18eedc726633596a453c5631f8ae07eff672d212c8e04064b26d794412f88153439c8557646ae95d4780aa1eadccc0b5976eac77f838f94a474a58f78a6916fd22e70ba118d3097189c948a5276271af2cd6faa3d39a62e4cba0d6286275c1ac4e1aa8b8c2a80b59784fed3b33624b6fd11565fa10882460f9031d161c9f13e28fe8df510a659fadc0d6ae8945e08c52d44ce9421c989f948dc581946c161987146debd121f51438117dd934e647feaeda2d26aa16cbbc3595dcc1e54653e6485a1544b5a0d05ec0dc61c3e858e653c24bb50a21f3a271c53bb4abe9cf36ecf82e1824f2644e1d79ed4896c3f998159c31f79872bc1254abe47b0443fc01af67fe356e569d1c4d37dfd299c30b295ec8f00f00ba9cf4a7c59525963c573368cc0a9d2e98ccb224e17720b5408f4ef2c2247cd87a922d73154afd803019670fad4f576f74024628d460fa658d7dd1fba638c702b86818405b9c73d543368df80f39fc561e25f5a1db9bed6a108baaa9d22e19c557f9bf2fa553778c6e1d1fed9f611c9333f59067daf9ba3cbf8c6eff5b83e94a53683de8b4f66ec7990b1a763992ff188e88212076f6e8633bd322febd89cd10381d74a89ae64fc340323c90be80971af7dae0198e2265dd2e83b7e4eb0229ee28f7dc40da9ea6339da95e7645cb548fed40b117bf15a7ee2d98d818dba44addd15909ae833365a1f7d1224fd225cb3a439dc6eb3f043953b2eecfa8ebd8c8f35ac5f74d121588a7cf145d7912c4ac89019bbda36f1517820416b82a3d8922c4331937d000feed54a47de8722337add40aea604260caee5c21c9fd06b83aeef8c26d08336c6107cb527d46de1395143a68ebc1838697f3a4cdf23d7dee820b0f1efe6659534814327d090dfeed6fb3702ac2e21c7626fd96393bddd5840d0e938c6ceedaaf2452b1c729a26c21428e8b622772af727e3f14effb7cc9a2108ca3ec29ea06ec16cd11c5b095cf4cd73185d3e029ce21e9d48bf7a37eac61d4e5922b7ffe4013923f7cfacd969974d4e17af98e978901b14c30797e36b14a92b496ac85e046a585963c5a44b2602d48901cfec66d41bf000d9a883fd0d02a004c76500e59fc801bc51e9906d41803011d7e942b24b72974d97000b6681fc4c7cfce7da40d82de24c001513b02b05955ad15298137b0be4995b04d3c9284a31bd01f901c3e0c27dcce315922786505eea84496dfba40123efacad67bdc0fce2395ced75d938718ab2e30fc005b0a878bb1a3dbd12347d173fe55c1cbfbcf2369482e035735f76674a72eafa14a8b24db7c8295d394c23ba98adf2e992449a4e94446f47a67cd4ce554834b7df38c029f67abc8e1cac6a1d981de9c705a68fd659d897f9210cf21987543a816901d0e7d681987bce6d83acdcfff0869cdf21d5e1f34e336764c807078e53b93f46f434aaa431ecea5573d8de8d2107d426fe9fa59c839736e07280fc34dcdc4cf8e50c11b43503028e81fe6f9f3a151ebc01a2cef4675716cfe56d0a877195f2cadeb1857bc0f2ebbcc988613ee992954de55a3337e6e322fbae423ea8c826f8c65aa6f5513bc57087d10602f801f29ca633dcde1030a8e2ccd569ae6cadf34f5eed37bac976a9400039c302d3346b42b9893aa50e4bd13a12345bec8a2d2a93e1f07d03d5218639a95c255d1c8f7ada803c512d43fef9e0600244375dd5d757737deb824ad32b6feed65408a227589fae10f0eae85aa2f3b1d0eb50cfee7a96e47d7b0d6c74c62af87f51f2faf7e86eb152a1c10f485759796fd8c7f9628abd5ee34ace9815b55e6e8cabf8568e1b85d9780d0ed966d08d4926e0a9fad82a54d8f461b802ca9634190f1fc9abaf14b713062365347c24e713c7a5e62f4c137eb5f95fba6e8d50cfb6db0a20021f54f1077409fae0441f07461522ec26d334b898127e5bf3144db73eebbf2be72cb5240b665f7e5a62216538899d67ec986f441ce645b4c752e2e465641300be6804754b9b6a34a293b7717df285d317f6e496484ee40bf7965f4c4606cdb6f15df652ee23ad7f0ce6f5770c27190862aea6f12adf16e576b1eaadf193f1e0e4c593984455b7487fb0bc63d169994708622d094816cc1b18a57cd770c910d0bcec9e37991b11fded91f815a16fc9c4dde50c91210f0a79fa6c71938d23f886bae2f4df47ad879f3defcc32232ce1e43d0e5d5456036e77cb67738ce756cefe83b1ddc0d4af4e3a4ffbeb9326328664043d181687fadcb4fda03a927ab094a5e6a5d8e2a08bdb430891f4c597bde28883bb5eabf54c2eae3cdd2e748b1ef3a01d3eb75bb737b80adf9a4b3e29cfd7e408b379ae19077813a35d74bff726f92ca201a71b45bfa54a2c1e79b2d9c27e9a72446adf53fd20e5f5958f744af653b4ccaa8c228b92721bf2dab95afa9835767f2856bcad95190ebad2577d58022a111a653b5d2507bd37261f94b7735b425e8ed814e2858c1070cf18f0cc9da46c7c7b73a4e68272cbc", &(0x7f0000000080), &(0x7f0000001200), &(0x7f0000001240)="bdcb59b0dd7807028061ef72f73dba171c6bcd65448cf8ccd823c5e68e45ce1a5c15b565c823a685d332fc272694fab088735840b85adfb6546ee56d26e6b356dd2b78edd0e58c24e5fbcbabf1626d4127825816bec9bd96939cbebfd4509b3f253789e08615337d5eb5a7358cdf0634233b639169f4138140") 17:44:40 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x13, &(0x7f0000000100)) ptrace(0x10, r0) 17:44:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0xf81) 17:44:40 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000002800), 0x0, 0x0) fstat(r0, &(0x7f0000000000)) 17:44:40 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:40 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x10000, 0x0) read$rfkill(r0, &(0x7f0000000140), 0x8) 17:44:40 executing program 0: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) [ 1572.813902][T19169] IPVS: ftp: loaded support on port[0] = 21 17:44:40 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:40 executing program 5: timer_create(0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) perf_event_open(0x0, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x3000000, '\x00', [{}, {0x801, 0x0, 0x80000001}]}) 17:44:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}}], 0x1, 0x0) 17:44:40 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001340)=[{0x0}, {&(0x7f00000014c0)="ce", 0x1}], 0x2}, 0x40040) 17:44:40 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000008900)=[{{&(0x7f00000017c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001840)=""/211, 0xd3}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f00000019c0)=""/133, 0x85}, {&(0x7f0000001a80)=""/2, 0x2}], 0x4, &(0x7f0000001b00)=""/126, 0x7e}, 0x1ff}, {{&(0x7f0000001b80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/5, 0x5}, {&(0x7f0000002c40)=""/130, 0x82}, {&(0x7f0000002d00)=""/51, 0x33}, {&(0x7f0000002d40)=""/16, 0x10}], 0x5}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000002e80)=""/243, 0xf3}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/25, 0x19}, {&(0x7f0000003fc0)=""/142, 0x8e}, {&(0x7f0000004080)=""/43, 0x2b}, {&(0x7f00000040c0)=""/39, 0x27}, {&(0x7f0000004100)=""/6, 0x6}, {&(0x7f0000004140)=""/193, 0xc1}], 0x8, &(0x7f00000042c0)=""/4096, 0x1000}}, {{&(0x7f00000052c0)=@caif=@dbg, 0x80, &(0x7f0000009e00)=[{&(0x7f0000005340)=""/165, 0xa5}, {&(0x7f0000005400)=""/76, 0x4c}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/129, 0x81}, {&(0x7f0000006540)=""/205, 0xcd}, {&(0x7f00000087c0)=""/163, 0xa3}, {&(0x7f0000008bc0)=""/31, 0x1f}, {&(0x7f0000008d80)=""/74, 0x4a}, {0x0}], 0x9}, 0x7ff}, {{&(0x7f0000006740)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000007d40)=[{&(0x7f00000067c0)=""/240, 0xf0}, {&(0x7f00000068c0)=""/78, 0x4e}, {&(0x7f0000006940)=""/60, 0x3c}, {&(0x7f0000006980)=""/201, 0xc9}, {&(0x7f0000006a80)=""/228, 0xe4}, {&(0x7f0000007c80)=""/137, 0x89}], 0x6, &(0x7f0000007dc0)=""/81, 0x51}, 0x100}, {{0x0, 0x0, &(0x7f00000081c0)=[{&(0x7f0000007e40)=""/225, 0xe1}, {&(0x7f0000007f40)=""/11, 0xb}, {&(0x7f0000007f80)=""/255, 0xff}, {&(0x7f0000008080)=""/251, 0xfb}, {&(0x7f0000008180)=""/59, 0x3b}], 0x5, &(0x7f0000008240)=""/227, 0xe3}, 0x8}], 0x6, 0x0, 0x0) exit_group(0x0) preadv(r0, &(0x7f00000017c0), 0x47, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000001380)=""/238, 0xee}, {&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000001480)=""/196, 0xc4}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/54, 0x36}, {&(0x7f0000001680)=""/179, 0xb3}], 0x6, 0x4, 0x3ff) clone(0xc4000380, &(0x7f0000000200)="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", &(0x7f0000000080), &(0x7f0000001200), 0x0) [ 1573.352059][T19220] IPVS: ftp: loaded support on port[0] = 21 17:44:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xec4, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xea1, 0x0, 0x0, 0x1, [@generic="af65cb6cae8fd7893eb431e3619238221cfb6154f7cc60872109e818537e7719f918cc131a35f9861c589d3faa7b52f83c868d7d7c68056332f2660620581f6274301f1ebe6ad79de931e9aff7d96107591723fe7e69324aa9c5982177f1795b4bec58fbd1f00be9e664cc42ea599ba07eb06410bd3a185f17f9d88b812d0c880b36f8868087d598aada712a5e5b569ba65c3f2eb7de4369f435f80ddc04e4a04e5e67d0054f26e831757a16aa87bdaecc1e3a7067a75388edf6e90569b9b4f57cbede4d9cc118e0511619374bbd", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="3bdb0d", @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="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"]}]}, 0xec4}}, 0x0) 17:44:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000140)) 17:44:41 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000002800), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 17:44:41 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000002800), 0x0, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r1, 0xffffffffffffffff) setresuid(0x0, 0x0, 0xee00) 17:44:41 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:41 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x6a, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_triestat\x00') r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1], 0x1000001bd) 17:44:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setrlimit(0xc, &(0x7f0000000200)={0x9, 0x52}) recvmmsg(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000003c40)={0x0, 0x3938700}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000300)={@multicast2, @empty, @rand_addr=0x64010102}, 0xc) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) sched_setattr(r0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0xff, 0x2, 0x9, 0x6, 0x7fff, 0x1}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x3, 0x69, 0x1, 0x0, 0x20, 0x0, 0x0, 0x7fffffff, 0x9}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000700)="f3569a6fd814a3b2f89621920f2401868734ae725a28018dea506d53ca4c8eaab16c23592c836a11370788625f4126945fe3a9061488d77a7099ddb5f169bb8ff62391dc714a5f849f692e9e3a766f7e09f7cc077c646ddaf927e7c8fcd09edd90", 0x61}, {&(0x7f0000000780)}, {&(0x7f0000000100)="b220f85b900032df2af692c88de456db470163bd82aac78da2e2aea2f20ecc54470f81a287973b4ac1fa9a898e980eb941f377d3a77d47ed59f85c652e8502", 0x3f}, {&(0x7f0000000840)="d60c08302c44aaa8bf075a6fa286ab77323228a681215116", 0x18}, {&(0x7f00000008c0)="743d17c457d19ef4c2628624d62c0188cfcf7314a275db32fa02a8241371454daa67f11e6fbacd42495db8cedb05997d94d4f2cd0a6045d8e1c3f1a98564650eed4896179431b9d1bf225deb95bc920755bf71bd42f82b847ec54a86f950a373df937fe308b6c1e3", 0x68}, {&(0x7f0000000940)="c2c38ecba1051dadf6980a034f65950e61f06ba6c4af462cab811e32bf22a8e085fdb42932a3a9b2754e6ded4f52773c2cf1c883345a7f4b75c37084aaa9f11be3c5f85bc1dfa398e67f915440f14a8d8701b7c2990711a5652cab4602f30234d643d89795721a2f278ffc2d3342", 0x6e}], 0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000ac0)={{r1}, 0x0, 0x18, @inherit={0x50, &(0x7f0000000340)=ANY=[]}, @name="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"}) clone(0x40000902, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x8000001, 0xffff, 0x1ff, 0x82, 0x0, 0x6, 0x7, 0xd3d3}, 0x0) 17:44:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=@ethtool_stats}) 17:44:41 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) 17:44:41 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0) 17:44:41 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') 17:44:41 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x5, 0xffffffffffffffff) [ 1573.947611][T19270] IPVS: ftp: loaded support on port[0] = 21 17:44:41 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:41 executing program 5: symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00') lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000100)='./file\x00', 0x0, 0x0) lchown(&(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0x0) 17:44:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) 17:44:41 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) fcntl$dupfd(r0, 0x5, 0xffffffffffffffff) 17:44:41 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000080)={@random="b1b2d09f14a2", @remote, @val, {@ipv4}}, 0x0) 17:44:41 executing program 0: syz_emit_ethernet(0x62, &(0x7f0000000140)={@random="11a28ca3d060", @random="48c60b48cd7c", @val, {@ipv6}}, 0x0) 17:44:41 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x40) 17:44:41 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebff", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:41 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000040), 0x4) 17:44:41 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@random="11a28ca3d060", @empty, @val, {@ipv6}}, 0x0) 17:44:42 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000000000), 0x4) 17:44:42 executing program 0: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000080)) 17:44:42 executing program 3: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000680)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000019c00)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f00000002c0), 0x4) 17:44:42 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x1000000}]}}, &(0x7f00000004c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 17:44:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebff", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:42 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000280)=""/140, 0x32, 0x8c, 0x1}, 0x20) 17:44:42 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x80108906, 0x0) 17:44:42 executing program 5: socketpair(0x28, 0x0, 0x0, &(0x7f0000000040)) 17:44:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebff", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:42 executing program 0: bpf$BPF_LINK_CREATE(0x17, 0x0, 0x0) 17:44:42 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 17:44:42 executing program 5: socketpair(0x2b, 0x0, 0x0, &(0x7f0000001740)) 17:44:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c600", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:42 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x10000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000018008103e00f80ecdb4cb92e0a00072c000cd307e8bd6efb1200697ba00cba82bd81c933de71da06000e", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 1575.287830][T19353] IPv6: Can't replace route, no match found [ 1575.296545][T19354] IPv6: Can't replace route, no match found 17:44:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x102}, 0x40) 17:44:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000004c0)=""/129, 0x1a, 0x81, 0x1}, 0x20) 17:44:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x7, 0x0, 0x68, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x40) 17:44:43 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 17:44:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c600", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:43 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) unlink(&(0x7f0000000740)='./file0\x00') 17:44:43 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x7e, 0x0, 0x40}]}}, &(0x7f0000000140)=""/148, 0x2a, 0x94, 0x3}, 0x20) 17:44:43 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 17:44:43 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001340)="b3", 0x1}], 0x1}, 0x0) 17:44:43 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x6, r0, 0x5) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x8) r3 = gettid() perf_event_open(0x0, r3, 0x2, 0xffffffffffffffff, 0x3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0xf8, 0x40, 0x0, 0xf8, 0x0, 0x80000000, 0xd6241, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, 0x0, 0xe8a0, 0x6, 0xbb4, 0x0, 0xa, 0xf9c, 0xffe, 0x0, @perf_config_ext={0xffffffff, 0xffffffff}, 0x0, 0x4}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x5) r6 = perf_event_open(0x0, r3, 0x5, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x80, 0x8, 0x3f, 0xc0, 0x0, 0xcd54, 0x84000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, 0x0, 0x1, 0x2, 0x8d0d, 0x6, 0x8, 0x7}, 0x0, 0xd, r6, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0xe43) r7 = gettid() bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x3, 0x5, 0x1, 0x7f, 0x0, 0x98bc, 0x201d0, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x758a, 0x8, 0x6, 0x6, 0x100, 0x0, @perf_bp, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r7, 0x0, r2, 0x1) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="1400000029000505d25a80308c63940d0424fc60100002400a000a00053582", 0x1f}, {&(0x7f0000000480)="12af9a8003d30a4214b7d38b2d2eb5ec8bffefc0910953e6e6610bc563fdf7c17819b0cfee3ff0a6adda614e073c4c1f21208787f8a9bfe1c1984c4bfad452104e503c0de057cd10f195284422e49b33e154d444ee158f0992898ab90344a702948f15898aac65ee8ffa1201d8bd5c4b9be81c8f75b42dbf126b9111b94423442873bcab5dad89f1", 0x88}, {&(0x7f0000000540)="d42bdb9d73895a7c64e9b3cca9293ad00a88875e0b68ddba000ecf0f2bdc746ede6cd23e89a9af8a9e39b0bc4e315f11fddd138fdaa81ce9a25af918ca02d9153ef4ead9aadb7ba7dd901a998ec423c6b4a3c6773cf558b6bdc819cb2a877901ec948e57e0219f5f8e344e92cb109b1741ce25292dd5066697960292a8cba1729cd9865d7b49c416a46116ecc4492ee3037038050b89ba39a6181c798562d5ab9c0a7f1b93f1412b26f6d020b8639672ea62cb9b5a3bd1ca4d2de5dcba2b8939eb98f46168e209a0a9835afd2bc148c713b24b68f9e251c68f20a541e5caef3b1d371037b9796402cf043e5dba84621d39e4fdabca340fde59c90789", 0xfc}, {&(0x7f0000000100)="ba8f47f23a400f45a2f95376f8f316d61fbb10ac94e1844971e8f2e58f", 0x1d}, {&(0x7f0000000640)="3e6234ce99cd0ae27cda9a4eb8a51aa8e01779a275ab5be54f27bcd06482078b8cf0f59df5f7171a165f1ed2d8572e14cddcb368b44f24f863b32e0b33b9a22d6d49fbed002872a07950c3be056e744ee51702377b52b5bdb4cfdedc30fb5573739b9b6ae16cfc35148db15de3a8d08d8e2b471ee5b250d1249137ebbc59acc0e50771b9804a6755d46b1f48254f0fd03aad5d6b236ce1fcf192d3d81e12c60b861d6200dff4f7ee4d5c4cee8f75d717dbf8f6eb7d74187d89a37c8d9c12e294d3f5426838f4f8d2125798738c2846d5b49e1a2fd2afd32a33f10ff4e40b95e6b02576311dccebbc97d60288e94ba91269b5649a0388904b5383512187", 0xfd}], 0x5}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:44:43 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x1, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x8000000000000, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x24000844) sendmsg(r0, &(0x7f0000000680)={0x0, 0x1300000f, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r2 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001d80)=r1, 0x4) 17:44:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c600", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:43 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 17:44:43 executing program 4: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x10}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="2e00000014008501000000000000002e0a0a00e22c000000160001808eb3d81fc77948f328995a017c7b58510600", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) 17:44:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c600004004", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:43 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 17:44:43 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x1, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x8000000000000, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x24000844) sendmsg(r0, &(0x7f0000000680)={0x0, 0x1300000f, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r2 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001d80)=r1, 0x4) 17:44:43 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='memory.events\x00'}, 0x30) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 17:44:43 executing program 4: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, 0x0, 0x0) [ 1576.526558][T19417] netlink: 'syz-executor.2': attribute type 13 has an invalid length. 17:44:44 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 1576.570464][T19417] __nla_validate_parse: 15 callbacks suppressed [ 1576.570490][T19417] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1576.688291][T19417] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 1576.743386][T19417] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) 17:44:44 executing program 3: renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x40) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x1}, 0x8) lchown(&(0x7f00000007c0)='./file0\x00', 0x0, 0x0) 17:44:44 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 17:44:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x1e, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 17:44:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0xa3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xd, 0x0, 0x9}, 0x10, 0xffffffffffffffff}, 0x78) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 17:44:44 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c600004004", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:44 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 1577.008366][T19437] netlink: 'syz-executor.2': attribute type 13 has an invalid length. 17:44:44 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0090400000151fdef0009050446"], 0x0) [ 1577.056104][T19437] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:44 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x70, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xe9, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xe289}}}}}}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x6a3, 0xcfa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x11, [{{0x9, 0x4, 0x0, 0x3f, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x2}}}]}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002c00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000005340)={0x14, 0x0, 0x0}, &(0x7f0000005580)={0x44, 0x0, &(0x7f00000053c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000005440)={0x20, 0x81, 0x1, '\n'}, 0x0, 0x0, 0x0, &(0x7f0000005540)={0x20, 0x85, 0x3, "ef2503"}}) 17:44:44 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x8243, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x11b}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 1577.109600][T19437] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 1577.117954][T19445] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability 17:44:44 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002e0, 0x22, 0x0, &(0x7f0000000280)="b95b03b700030009009e40f086dd1fffffe100000900632f77fbac141412e4000001", 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, &(0x7f00000003c0)}, 0x48) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa65, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000140)=@raw=[@alu={0x4, 0x1, 0x2, 0x8, 0xb, 0x0, 0xfffffffffffffffc}, @map={0x18, 0x5}, @alu={0x22badee4bcceb9e1, 0x0, 0xc, 0x3, 0x9, 0xfffffffffffffffe, 0xfffffffffffffff0}], &(0x7f0000000400)='syzkaller\x00', 0xa3, 0x1000, &(0x7f00000014c0)=""/4096, 0x41000, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xd, 0x2, 0x9}, 0x10, 0xffffffffffffffff}, 0x78) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 17:44:44 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 1577.218652][T19437] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:44 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c600004004", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 17:44:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x4, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) [ 1577.524320][ T4852] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1577.541400][T19471] netlink: 'syz-executor.2': attribute type 13 has an invalid length. 17:44:45 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 1577.571374][T19471] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1577.594483][ T9536] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1577.602855][ T5115] usb 5-1: new high-speed USB device number 90 using dummy_hcd 17:44:45 executing program 5: r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) [ 1577.616476][T19471] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 1577.641346][T19471] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:45 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c60000400412", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:45 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 1577.774257][ T4852] usb 4-1: Using ep0 maxpacket: 8 [ 1577.790449][T19483] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1577.818851][T19483] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1577.884421][ T5115] usb 5-1: Using ep0 maxpacket: 8 [ 1577.896069][ T4852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1577.919648][ T4852] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1577.933917][ T4852] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 1577.944804][ T4852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.957538][ T4852] usb 4-1: config 0 descriptor?? [ 1578.011698][ T4852] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1578.025058][ T9536] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1578.034834][ T5115] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.050128][ T9536] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1578.061503][ T5115] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1578.080868][ T9536] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1578.201904][T19494] usb 4-1: USB disconnect, device number 37 [ 1578.209070][T17583] usb 4-1: Failed to submit usb control message: -71 [ 1578.218487][T17583] usb 4-1: unable to send the bmi data to the device: -71 [ 1578.244420][T17583] usb 4-1: unable to get target info from device [ 1578.251240][T17583] usb 4-1: could not get target info (-71) [ 1578.272160][T17583] usb 4-1: could not probe fw (-71) [ 1578.278453][ T9536] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1578.288565][ T9536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.303001][ T9536] usb 2-1: Product: syz [ 1578.324914][ T9536] usb 2-1: Manufacturer: syz [ 1578.329618][ T9536] usb 2-1: SerialNumber: syz [ 1578.358494][ T5115] usb 5-1: string descriptor 0 read error: -22 [ 1578.369780][ T5115] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1578.380885][ T5115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.632148][T19457] udc-core: couldn't find an available UDC or it's busy [ 1578.640402][T19457] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1578.657873][T19457] udc-core: couldn't find an available UDC or it's busy [ 1578.676988][T19457] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1578.774359][ T9536] usb 2-1: 0:2 : does not exist [ 1578.784546][ T5115] usbhid 5-1:1.0: can't add hid device: -71 [ 1578.790674][ T5115] usbhid: probe of 5-1:1.0 failed with error -71 [ 1578.819636][ T9536] usb 2-1: USB disconnect, device number 50 [ 1578.832258][ T5115] usb 5-1: USB disconnect, device number 90 [ 1579.024454][T19494] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1579.274171][T19494] usb 4-1: Using ep0 maxpacket: 8 [ 1579.415114][T19494] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1579.432708][T19494] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1579.452911][T19494] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 1579.454126][T13037] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1579.468424][T19494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.469801][ T4852] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1579.506000][T19494] usb 4-1: config 0 descriptor?? [ 1579.572626][T19494] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1579.734390][T13037] usb 5-1: Using ep0 maxpacket: 8 [ 1579.773233][T19494] usb 4-1: USB disconnect, device number 38 [ 1579.780102][ T200] usb 4-1: Failed to submit usb control message: -71 [ 1579.793348][ T200] usb 4-1: unable to send the bmi data to the device: -71 17:44:47 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0/file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) [ 1579.847881][ T200] usb 4-1: unable to get target info from device [ 1579.855813][ T4852] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1579.865626][T13037] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1579.894126][ T4852] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1579.905042][T13037] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1579.915712][ T200] usb 4-1: could not get target info (-71) [ 1579.923502][ T200] usb 4-1: could not probe fw (-71) [ 1579.930609][ T4852] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1579.952868][T19556] new mount options do not match the existing superblock, will be ignored [ 1580.104393][ T4852] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1580.113508][ T4852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.124787][T19562] new mount options do not match the existing superblock, will be ignored [ 1580.141969][ T4852] usb 2-1: Product: syz [ 1580.147880][ T4852] usb 2-1: Manufacturer: syz [ 1580.152661][ T4852] usb 2-1: SerialNumber: syz [ 1580.185064][T13037] usb 5-1: string descriptor 0 read error: -22 [ 1580.191655][T13037] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1580.234271][T13037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:44:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xff, 0x7, 0x0, 0x0, 0x0, 0x49698, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x40010}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002e0, 0x22, 0x0, &(0x7f0000000280)="b95b03b700030009009e40f086dd1fffffe100000900632f77fbac141412e4000001", 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, &(0x7f00000003c0)}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="950000000000000018100000", @ANYRES32], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2}, 0x10}, 0x78) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x8, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @alu={0x4, 0x1, 0x2, 0x8, 0xb, 0x0, 0xfffffffffffffffc}, @map={0x18, 0x5, 0x1, 0x0, r3}, @alu={0x22badee4bcceb9e1, 0x0, 0xc, 0x3, 0x9, 0xfffffffffffffffe}, @map={0x18, 0x3, 0x1, 0x0, r3}], &(0x7f0000000400)='syzkaller\x00', 0xa3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xd, 0x2, 0x9}, 0x10, 0xffffffffffffffff}, 0x78) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, r1, 0x0, 0x0, 0x0}, 0x30) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4200, 0x0, 0x40, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 17:44:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)={0x2, 0x0, [0x0, 0x0]}) 17:44:47 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0/file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 17:44:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r1, 0x6, 0x22, 0x0, &(0x7f0000e5f000)) 17:44:47 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c60000400412", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:47 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 1580.344260][T13037] usb 5-1: can't set config #1, error -71 [ 1580.386675][T13037] usb 5-1: USB disconnect, device number 91 [ 1580.404465][ T4852] usb 2-1: 0:2 : does not exist [ 1580.430776][T19580] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1580.451322][T19579] new mount options do not match the existing superblock, will be ignored [ 1580.459824][ T4852] usb 2-1: USB disconnect, device number 51 17:44:48 executing program 0: socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 1580.551068][T19580] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x1, 0x0, 0x0, 0x0) 17:44:48 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) 17:44:48 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c60000400412", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x49, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 17:44:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000001340)="8a07351eff9a5c01e4e68c6f2b75038ed1d842dc2165b622ad2680734a8be019c263f4c35b58ae1dbd2cd0094e9fe548d69e17670be14a396cb904629ac122d14486338616a62903758d03e00c293c8d8e00be38cd42517d5a54bdf8360e774487d65fd293f9cd65972818b1c6d2caff8fdcf2e27b8b92c51df231ab3a30c9a452893af73099d44bb9048abbb9632cf4c37db99986d56ffbdc0c9435b56dc9fd6516c16cbf66324e22aa377d223924e02e07639aa532ce5f915ece61f0158d98334ccb96135be032387080badc3c3d54ae502bb19eecc9136d7011dec7c415b643727f4d25d086e6eb7adac12d76c0dc38f41ce56adfef056340273ecb402db6ed7d89fae877abc085f5b7ef239e67d892c0f47d7677225f2ff8e716dd6c1f2d5167d34657e25bf641e20baf540ddefc183cb4896aa9eab87c0d334d1367c93c818bbb462cd8593695703df6fa57b1f0a95d5cf817f17fef185f164d1c277244ff4d7240dae8e8945cb922a3f2eafbd83e6d008854ba9997c75200ec17bbcd5879ca397b8b886f042462ba11d08a716eab924c65a3925cea9e1193cf33f86176f1f17fe7223502fa5d1f0565d0ab9a2c693e8a5a208007c61d984715d31227c3581c72f6d17d576353a8514c9b888ad233067d397d128f6b6bfdf331ebef081969f543fe45b4ec90b536216c83237062676e8d27a471b13ca85623259287f08b3ce8c6b01b18c99caf", 0x209, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x1390, 0x11, 0x0, 0x27) 17:44:48 executing program 0: socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 17:44:48 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0)=@random="99499f0420cdff9a", 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x50, 0xffffffffffffffff, 0x74861000) r4 = getpid() ptrace(0x4207, r4) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) 17:44:48 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_DESTROY(r1, 0x0, 0x0) write$UHID_CREATE(r1, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000140)=""/2, 0x2}}, 0x120) readv(r1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) madvise(&(0x7f0000388000/0x1000)=nil, 0x1000, 0x65) writev(r0, &(0x7f0000001740)=[{0x0}, {&(0x7f0000003580)}, {&(0x7f0000004580)="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", 0x4f6}, {0x0}], 0x4) mmap(&(0x7f0000388000/0x1000)=nil, 0x1000, 0xd, 0x40010, r1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 17:44:48 executing program 0: socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 17:44:48 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x0, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:48 executing program 4: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040), &(0x7f0000000080)={'enc=', 'raw', ' hash=', {'blake2b-384\x00'}}, 0x0, 0x0) [ 1581.198311][ T9536] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1581.236689][ T9536] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 17:44:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 17:44:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) [ 1581.314836][ T9536] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 17:44:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, "542f7066c8b1f11cd95a3010a482ff18c09414"}) [ 1581.409967][ T5115] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1581.445766][ T5115] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 17:44:48 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x0, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) [ 1581.519933][ T5115] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 17:44:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9205, 0x0) 17:44:49 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e71b0fa1f107000000364603812c66538d750f6ee1d0014e3f0500bb9fb045f2d1c190926c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8dcbf11169c111c145129d6f9f6c1f3b18d6d352507f7018b311fef2c560001000010000000fb8019128e7e4d939955f8ac296203784000400f573fbf0000fdffffffffeb95128ce7ec03ff07a380543b320be1c1bb99bb063fb60927e83569656a0bda31b0040015f033270100008cfcd61dc4a7e6a5dd57069df1cd265246e1d8292f19a49f95586b92a15b4264045df05363f2", 0xdc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 17:44:49 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0)=@random="99499f0420cdff9a", 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x50, 0xffffffffffffffff, 0x74861000) r4 = getpid() ptrace(0x4207, r4) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) 17:44:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 17:44:49 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x0, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1) ioctl$BLKZEROOUT(r0, 0xc0189436, &(0x7f0000000240)) 17:44:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x1268, &(0x7f0000000240)) 17:44:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0000010c00028005000100000000000c0004800800024000000000240002801400018008000100ac1414bb08000200000100000c0002"], 0x70}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x2, 0x1, 0x40b, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 17:44:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 17:44:49 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x58739dc70d0818a1) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) 17:44:49 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x15, r0, 0x0, 0x0, 0x0) [ 1582.286273][T19700] __nla_validate_parse: 2 callbacks suppressed [ 1582.286296][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:44:49 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) [ 1582.357274][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:44:49 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e71b0fa1f107000000364603812c66538d750f6ee1d0014e3f0500bb9fb045f2d1c190926c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8dcbf1116", 0x4c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 17:44:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 1582.637463][T29676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.700826][T29676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.725647][T19714] ptrace attach of "/root/syz-executor.3"[19713] was attempted by "/root/syz-executor.3"[19714] 17:44:50 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e71b0fa1f107000000364603812c66538d750f6ee1d0014e3f0500bb9fb045f2d1c190926c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8dcbf11169c111c145129d6f9f6c1f3b18d6d352507f7018b311fef2c560001000010000000fb8019128e7e4d939955f8ac296203784000400f573fbf00", 0x85}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 17:44:50 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 17:44:50 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x15, r0, 0x0, 0x0, 0x0) 17:44:50 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) fanotify_mark(r0, 0x1, 0x8, 0xffffffffffffffff, 0x0) 17:44:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 17:44:50 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:50 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x15, r0, 0x0, 0x0, 0x0) 17:44:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 17:44:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 17:44:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100), 0x0) 17:44:50 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x5c, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1583.029682][T19729] ptrace attach of "/root/syz-executor.5"[19728] was attempted by "/root/syz-executor.5"[19729] 17:44:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 17:44:50 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x15, r0, 0x0, 0x0, 0x0) 17:44:50 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:50 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xb, r0, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) 17:44:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100), 0x0) 17:44:50 executing program 5: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 17:44:50 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 17:44:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 17:44:50 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:50 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x110}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 17:44:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100), 0x0) 17:44:51 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, 0x0, 0x0, 0x0) 17:44:51 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 17:44:51 executing program 3: clone3(&(0x7f0000000200)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1583.679849][T19775] ptrace attach of "/root/syz-executor.3"[19773] was attempted by "/root/syz-executor.3"[19775] 17:44:51 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) 17:44:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 17:44:51 executing program 1: r0 = socket(0x11, 0x3, 0x0) bind$inet(r0, 0x0, 0x0) 17:44:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 17:44:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e71b0fa1f107000000364603812c66538d750f6ee1d0014e3f0500bb9fb045f2d1c190926c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8dcbf11169c111c145129d6f9f6c1f3b18d6d352507f7018b311fef2c560001000010000000fb8019128e7e4d939955f8ac296203784000400f573fbf0000fdff", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 17:44:51 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 17:44:51 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) [ 1583.913928][T19785] IPVS: ftp: loaded support on port[0] = 21 17:44:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 17:44:51 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x11, &(0x7f0000000200)="d20e8de74af9248273a8b38ecc8543b781"}) [ 1584.063341][T19798] ptrace attach of "/root/syz-executor.5"[19797] was attempted by "/root/syz-executor.5"[19798] 17:44:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 17:44:51 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) [ 1584.256163][T19785] IPVS: ftp: loaded support on port[0] = 21 17:44:51 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x106}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 17:44:51 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 17:44:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x1262, 0x0) 17:44:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) 17:44:51 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 17:44:51 executing program 5: futimesat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0xea60}}) 17:44:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0}}) 17:44:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 17:44:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) 17:44:52 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xfffffe69) 17:44:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) 17:44:52 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) [ 1584.653413][T19862] ptrace attach of "/root/syz-executor.3"[19861] was attempted by "/root/syz-executor.3"[19862] 17:44:52 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8050) 17:44:52 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0x23, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) 17:44:52 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) 17:44:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) 17:44:52 executing program 1: socketpair(0x1d, 0x0, 0x1ff, &(0x7f00000012c0)) 17:44:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 17:44:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}}) 17:44:52 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0x21, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) 17:44:52 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) 17:44:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d", 0x24}], 0x1}, 0x0) 17:44:52 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) 17:44:52 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89e1, &(0x7f00000028c0)) 17:44:52 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000000f1401000000000000000000080001000000000009004500756d6164000000000800030007"], 0x2c}}, 0x0) 17:44:52 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001087d60b7030000000000006a0a00fe000088c6850000000d000000b70000000000000095000000000000002c3f2cc2b7954244cef7499cde2bbaf4b06d3585a09a87507ebf4e43bc0660746342e356e214b6b12e60ac1786a50b595ecb68db70282675ef467d7fbde500c10008abfb7491a203f669f83e2bbfbb3ed8d4d47ef5a2"], &(0x7f0000000340)='GPL\x00'}, 0x35) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x28, 0x10000f0, &(0x7f00000004c0)="b95b03b700080000009e40f089061fff060000000000000177fbac141423e0000001c699da153f08e0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x17, 0x6000000000000000, 0xfffffffffffffefd, 0x1d4, &(0x7f0000000000), &(0x7f0000000080)}, 0x28) 17:44:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d", 0x24}], 0x1}, 0x0) 17:44:52 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) 17:44:52 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8916, &(0x7f00000028c0)) 17:44:52 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) 17:44:52 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) 17:44:52 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r0, &(0x7f00000001c0)="f76f", 0x2, 0x80, &(0x7f00000002c0)=@in6={0xa, 0x4e20, 0x9, @private2, 0x1}, 0x80) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)) 17:44:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d", 0x24}], 0x1}, 0x0) 17:44:52 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 17:44:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x20}}, 0x0) 17:44:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000025c0)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @loopback=0x7f000002}, {0x2, 0x0, @multicast2}, 0x4}) 17:44:53 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) 17:44:53 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 17:44:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e", 0x36}], 0x1}, 0x0) [ 1585.722878][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:53 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, 0x0, 0x0) [ 1585.777850][T19935] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 17:44:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000025c0)={0x0, {0x2, 0x4e21, @broadcast=0x6}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @multicast2}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x84}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x5452, &(0x7f0000000240)={'gre0\x00', 0x0}) 17:44:53 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 17:44:53 executing program 1: syz_emit_ethernet(0xfff, &(0x7f0000000780)={@random="a190a47895b2", @remote, @val, {@ipv6}}, 0x0) 17:44:53 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@var={0x5, 0x0, 0x0, 0xe, 0x5}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000001c0)=""/199, 0x3f, 0xc7, 0x1}, 0x20) 17:44:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e", 0x36}], 0x1}, 0x0) 17:44:53 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, 0x0, 0x0) 17:44:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @local, 0x5}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000680)="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", 0xae9}], 0x1, &(0x7f0000000440)=[@dstopts_2292={{0x38, 0x29, 0x4, {0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @private0}, @ra, @ra]}}}], 0x38}, 0x0) 17:44:53 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100)}], 0x1, 0x0) 17:44:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000001c0)=""/199, 0x2f, 0xc7, 0x1}, 0x20) 17:44:54 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100)}], 0x1, 0x0) 17:44:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:44:54 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, 0x0, 0x0) 17:44:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e", 0x36}], 0x1}, 0x0) 17:44:54 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="fb62", 0x2}], 0x1}, 0x0) 17:44:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) 17:44:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501a", 0x3f}], 0x1}, 0x0) 17:44:54 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100)}], 0x1, 0x0) 17:44:54 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="fb62a3", 0x3}], 0x1}, 0x4008000) 17:44:54 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) 17:44:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8936, 0x0) 17:44:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 17:44:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501a", 0x3f}], 0x1}, 0x0) 17:44:54 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000001c0)=""/199, 0x2e, 0xc7, 0x1}, 0x20) 17:44:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f0000000240)={'gre0\x00', 0x0}) 17:44:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000440), 0x10) 17:44:54 executing program 3: socket$inet6_sctp(0x1c, 0x5, 0x84) socket$inet6_sctp(0x1c, 0x5, 0x84) 17:44:54 executing program 2: socket$nl_route(0x10, 0x3, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="b702000000400400bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000812d6405000000000025040000010000001704000009000a40b7040000000100006a0a00fe00000000850000001a000000b7000000000000009500000000000000a93e90832ff9d40a409f01f6147c8f6fd267bf410e76c540106f89ec68823ce3c4bcc4ce81e97719ea969f2a019a6137ad1efc966f1cfdd2f673efc20c07ec082bc6de68ab0a5ebf4ee60253516cc871311ab25868e1d9a014263697ca83c57fc2ead0d85a2bcc922a3aa71489fa0000c1a6ec9aa2e28000004bcff56cf5a84cefb43ea72351190a711fd2b83a3596d80729476ab7140606791e81960ea313ea74c2cde2dedd424a4596f98e3e70a6f1d8abce75f01dbb60bdf7316a4fed35f16ae8b3aa4c6dd4880c76e5837f39a161b050abc5a34588ea19114caebb799d1084e7113c77ae25a0121de52e5e8cceddf2cb4b9895c0738fda3ea38c09e75b1f39ae8af2c746fbb43e3530767d8ee296487c0e650ead9003d032008fee2e02ece680c0d3d19b2b62fc202240219f497e89548a2977f86137ecb5753dfc87f148ed2392ef113cbe241a98b4e8f3bf878f1dc0e115dd1c328f54369bc8dfd3a4ea21259ed518ae80606ef83d69b9d0d972b2211d05b2e31d61bf49ca69bdb0f57d5f16769d1605e8045c6880b425f8575f863a7e1b7174281ab87fba93555853df9dbd3da536d88168217230eabfaf7ff9b0146acffea06f3b0ba7b7357ba84c953523e92ee8cc4d8be00500000095e31139b76417432c305d59cb68bff089979504c71418bd62ec60cfae7d75ce2adc8d4b2eabae5937b47e07da3f62be170ac03c7ae91659fc79fc36c84dd1b2b8972c5c2544e3b50acd3b00000000000d62fae930c2308e2401bb761565ac4eda4ca118ebbe000000000000000000000000000000a52d598dbcfeb90dd310175435c843624027f7d55431a5756e4be9698bcd550c272c391cf24ea56d016e1f21b5999e1448f8784db6a9d4f36ec14cc67fcdd41c8ba146dc7d3fb07df9687b95efcd74ad8d0b15234dab4da83fa33391a2925b49f6040087cfaa9f83a6cdb0e031d9eb6cbff6eba616992f3ba67394a543c3210d8def880b2c07661cf7268ec32ac38db9d3062571ec8eb3290bb4a823674e89cf1716d4bc9fac0c47d854632a1d943a9dc58e6f4d0b687a055983a46fdd52f3c87506ae419c604f62b56ad1420eca5484ee0092563332124c612f4b79f2763a2288644bbe0d29c4d4cb1da9b7f9ded1c69fc42465ed5ba385d6be8843ee4f48c9c913c00f1869c7d815313aa7081597811fe82a4e044e76d8cd4c3ee7460ec713f1048c453393734b3b4f9b972c7e85dbf2fff1ef1ad15024f9439039dc0000000000008151d0ab35986dd0"], &(0x7f0000000100)='GPL\x00'}, 0x48) clone(0x0, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700)) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xb500}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@ipv4_newrule={0x1c, 0x20, 0x300, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008800) 17:44:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501a", 0x3f}], 0x1}, 0x0) 17:44:54 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) 17:44:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) preadv2(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/193, 0xc1}], 0x1, 0x0, 0x0, 0x7) 17:44:54 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = dup(r2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r5, @ANYBLOB="8203051a00"], 0x20}}, 0x0) 17:44:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703", 0x44}], 0x1}, 0x0) 17:44:55 executing program 3: openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0xa0000, 0x0) 17:44:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) [ 1587.701628][T20031] device macvlan0 entered promiscuous mode 17:44:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703", 0x44}], 0x1}, 0x0) 17:44:55 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, 0x0) 17:44:55 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x0) 17:44:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703", 0x44}], 0x1}, 0x0) 17:44:56 executing program 2: socket$nl_route(0x10, 0x3, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) clone(0x0, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700)) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xb500}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@ipv4_newrule={0x1c, 0x20, 0x300, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008800) 17:44:56 executing program 3: getresuid(&(0x7f00000012c0), 0x0, 0x0) getresgid(&(0x7f0000001500), &(0x7f0000001540), &(0x7f0000001580)) 17:44:56 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000001180)={0xec4, 0x13, 0x19, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [], [0x200]}}, [@INET_DIAG_REQ_BYTECODE={0xe75, 0x1, "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"}]}, 0xec4}}, 0x0) 17:44:56 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_vs\x00') r1 = socket$inet6(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x80000001) 17:44:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f", 0x46}], 0x1}, 0x0) 17:44:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@txtime={{0x14}}], 0x14}}], 0x2, 0x0) 17:44:56 executing program 3: socket$nl_route(0x10, 0x3, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) clone(0x0, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700)) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xb500}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@ipv4_newrule={0x1c, 0x20, 0x300, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008800) 17:44:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000200)) 17:44:56 executing program 2: socket$nl_route(0x10, 0x3, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) clone(0x0, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700)) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xb500}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@ipv4_newrule={0x1c, 0x20, 0x300, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008800) 17:44:56 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x9}, {}]}}) 17:44:56 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="4801000024001d0f000000060000000000001300", @ANYRES32, @ANYBLOB="00000000f1ffffff0000000008000100726564001c0102001400010000000000000000000000000000000004040102"], 0x148}}, 0x0) 17:44:56 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000240)={0x8, 'vlan1\x00', {'syzkaller1\x00'}}) 17:44:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f", 0x46}], 0x1}, 0x0) 17:44:56 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4) 17:44:56 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 17:44:56 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x1, &(0x7f0000000180), 0x8) 17:44:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f", 0x46}], 0x1}, 0x0) 17:44:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00000000001190500000600000000000a0000003c0001002c0001001400030016e8bad33edad6b8000000000000000014000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff01000000000000000000ac00000001080007"], 0xc0}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000540)={0x14, 0x2, 0x1, 0x201}, 0x14}}, 0x0) 17:44:57 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10}}) 17:44:57 executing program 1: rt_sigaction(0x4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000240)) 17:44:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93", 0x47}], 0x1}, 0x0) 17:44:57 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffee2, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f100fcea0000010bfdff1d000400070001000600f2ff9b000780180001808018000000010000ff00c84d000002000000100006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800000000700880000001400000000000000000000000000001b120100000900120000007a28000000000c001b400500f77b00ff80000c00148008200191edfbed879db145000806028aab86000000000800000032040036453d0900020073797a30"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x8c3713, 0x0) 17:44:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0xb, 0x0, 0x0) [ 1589.736129][T20098] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:57 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10}}) 17:44:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93", 0x47}], 0x1}, 0x0) 17:44:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x43) 17:44:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x17, 0x0, 0x0) [ 1589.932314][T20110] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:44:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93", 0x47}], 0x1}, 0x0) 17:44:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000880), 0x7f, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) [ 1590.271697][T20098] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 17:44:57 executing program 2: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{}], {}, [{}, {}, {}, {}, {}, {}]}, 0x5c, 0x0) fgetxattr(r0, &(0x7f0000000480)=@known='system.posix_acl_access\x00', &(0x7f00000004c0)=""/88, 0x58) 17:44:57 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10}}) 17:44:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x7, &(0x7f0000000000)="b0", 0x1) 17:44:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0xffffffffffffffff, 0x138) 17:44:58 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x00\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0#\xc3\xfd\x0e\"\x0f\vy(q~\x1e\x104\x1b|\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G%?`\xdd/k\t\xbe\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\xa1\xaf\xe1\x95\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T', 0x4) r1 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x00\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0#\xc3\xfd\x0e\"\x0f\vy(q~\x1e\x104\x1b|\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G%?`\xdd/k\t\xbe\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\xa1\xaf\xe1\x95\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T', 0x4) ioctl$FICLONE(r0, 0x40049409, r1) 17:44:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xa7a07, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)=""/127, 0x7f) 17:44:58 executing program 4: open$dir(&(0x7f0000000080)='./file0\x00', 0xd0540, 0x11) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 17:44:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x210, 0x0, 0xffffffff, 0xffffffff, 0xc0, 0xffffffff, 0x178, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast2, @multicast1, 0x0, 0x0, 'wlan0\x00', 'xfrm0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x10}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 17:44:58 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10}}) 17:44:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x10}}], 0x10}], 0x1, 0x0) 17:44:58 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x407a84, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 17:44:58 executing program 2: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x220, 0x308, 0x220, 0xffffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0x0, 'veth0\x00', 'geneve0\x00'}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'bond0\x00'}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 17:44:58 executing program 4: add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) 17:44:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@rights={{0x18, 0x1, 0x1, [r1, r2]}}], 0x18}, 0x20000081) 17:44:58 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x19, 0x48082, 0x0, 0x51) sendto$inet(r0, &(0x7f00000001c0)="f350cf", 0x3, 0x0, 0x0, 0x0) 17:44:58 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x00\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0#\xc3\xfd\x0e\"\x0f\vy(q~\x1e\x104\x1b|\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G%?`\xdd/k\t\xbe\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\xa1\xaf\xe1\x95\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T', 0x4) r1 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x00\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0#\xc3\xfd\x0e\"\x0f\vy(q~\x1e\x104\x1b|\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G%?`\xdd/k\t\xbe\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\xa1\xaf\xe1\x95\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T', 0x4) ioctl$FICLONE(r0, 0x40049409, r1) 17:44:58 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x83b00100, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x480, 0xffffffff, 0x2d0, 0x0, 0x140, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'macvtap0\x00', 'syz_tun\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x40}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@empty, @private1, [], [], 'dummy0\x00', 'xfrm0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@frag={{0x30}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00', @loopback}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @private0, [], [], 'veth1_to_team\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) [ 1590.990485][ T37] audit: type=1800 audit(1620409498.395:80): pid=20151 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=13920 res=0 errno=0 17:44:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000000)={'veth0_to_team\x00', @ifru_addrs=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}}) 17:44:58 executing program 5: clone(0x83b00100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) 17:44:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x2, 0x17e, [], 0x0, 0x0, &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x3, 0x0, 0x0, 'dummy0\x00', 'veth0_to_hsr\x00', 'team0\x00', 'syzkaller0\x00', @broadcast, [], @broadcast, [], 0x6e, 0x9e, 0xee, [], [@common=@STANDARD={'\x00', 0x8}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1c2) [ 1591.146237][ T37] audit: type=1800 audit(1620409498.555:81): pid=20151 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=13922 res=0 errno=0 17:44:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) getdents64(r0, &(0x7f0000000500)=""/4096, 0x1000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xa3a07, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f00000041c0), &(0x7f0000004200)="7e82f4ea1c529e3da43c34e914491d75e3fca672f6ae450c86bfff20b722b4ba031b12f6442a286c647fc1c1123fd5ce69965a55f4e87c6429a02a1738b35c2009f56a9de2ac73ccd3626cdaf08e2a123216a4598964d7a65aa99b937f667b9b70943cd413748705b2df896a9c81398ea4e6bf2c62fb9ae8dccd93d3ae7c818f14bd1aa870ffc402a8e1208f363cab556a70e45424d3b4b2ef8e751e86b1945a8fd5aaebb884eb772e156adbf7addb3dbd96d44b118abb3fa39866e1a9934ff481284620f9ad53c2d79d980ac5b64ae626d6c95c16", 0xd5, 0x1) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000004780)=ANY=[@ANYBLOB="02000c00010000002000000100000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0800000044c59c33a7923c86ce72a44038a1ff72eb83823810bd745d10b2c58621b4f24f90786ccaeb4b3671a644355b617c175a9bf5e1dcb17a88bd3caa20c878b702856d7ccae6853be208b33e82ac65b00325ba333cde21e2984cd23be3d880ef919019f1a8ba17d0e7e62c407edbea7fd7eaf6c19d4ba29df2b53eaae104ff904e1fb0364a", @ANYRES32=0x0, @ANYBLOB="0700220080", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth1_to_bond\x00', &(0x7f0000000080)=@ethtool_eeprom={0x43}}) renameat2(r0, &(0x7f0000004300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000004380)='./file0\x00', 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_generic(r1, &(0x7f0000004480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004440)={&(0x7f00000044c0)=ANY=[@ANYBLOB="6c02000810090d64000000e9ff0800"/24, @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="fe58c47b51c7ac1d6b6ef4ef076d4760ede11e5b52840a5ff7626a990028fdf94f9f24ca3cf914d908b9dd267d5948980c4c507259cb1abfdb671f97c0ffd7074a553de199b490b23d35db51f21dbb34342b0000"], 0x26c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8091) chown(&(0x7f0000000040)='./file0\x00', r4, 0x0) 17:44:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xc, 0x0, &(0x7f0000000180)) 17:44:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10) 17:44:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x14, 0x0, &(0x7f0000000540)) 17:44:58 executing program 2: capset(&(0x7f00000004c0)={0x19980330}, &(0x7f0000000680)) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) 17:44:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x15, 0x0, &(0x7f0000000000)) 17:44:58 executing program 5: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)='&\x00') 17:44:58 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 17:44:58 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 17:44:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000) 17:44:58 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x420) 17:44:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8946, &(0x7f00000001c0)={'wg2\x00', @ifru_addrs=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}}) 17:44:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x1e8604, 0x0) 17:44:59 executing program 5: capset(&(0x7f00000004c0)={0x19980330}, &(0x7f0000000680)) shmctl$SHM_UNLOCK(0x0, 0xc) 17:44:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000140), &(0x7f0000000200)=0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) r2 = open(&(0x7f0000000080)='./file0\x00', 0x49000, 0x40) sendto$inet(r2, &(0x7f0000000280)="399315876c85a2c8552e9982a838c170bff0e9818e25dd06acd716564e625a6ab9b31b1a1b4d1ff4f8b7398e0f742eff3f6cc4e3e9302e28a27094dec5d9a567fc96246c08deb7cae129ec71c93e9a15d97c15ae78da662ab4c8f0213fb548a1725e650fa9c0fc8660474addb342afeb8d49f4f0f9ebe02cb41685861e27c0dfadfc095c1514fc5592a6467ab1e770ed7626c5ae9e20cc52cb856436bda4aab3e697332c2ba647196fd4e01dcb9142b04b6eab991413c64d9cf3", 0xba, 0xc000, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="80b3b77623", @ANYRESDEC], 0x1000001bd) 17:44:59 executing program 3: perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:44:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x210, 0x0, 0xffffffff, 0xffffffff, 0xc0, 0xffffffff, 0x178, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast2, @multicast1, 0x0, 0x0, 'wlan0\x00', 'xfrm0\x00', {}, {}, 0x0, 0x3}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x6, 0x3, 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x80000000}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xa622, 0x3ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:44:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 17:44:59 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80b6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') 17:44:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1_to_bond\x00', &(0x7f0000000080)=@ethtool_stats}) 17:44:59 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0xf215f20f19fc486b, 0x4) 17:44:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880), 0x7f, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="bd1d98535954e8803e476dd37a8c76d5", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x2307) 17:44:59 executing program 2: r0 = socket$inet(0x2, 0x3, 0x5) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40010101) 17:44:59 executing program 3: open$dir(&(0x7f0000000080)='./file0\x00', 0xa8841, 0xb8) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 17:45:00 executing program 0: add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)="ca", 0x1, 0xfffffffffffffffb) 17:45:00 executing program 5: r0 = socket(0xa, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000810, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) 17:45:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x110, 0x1f8, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'vlan0\x00', 'batadv_slave_1\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x1, 0x8}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@statistic={{0x38}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 17:45:00 executing program 2: capset(&(0x7f00000004c0)={0x19980330}, &(0x7f0000000680)) shmctl$SHM_LOCK(0x0, 0xb) 17:45:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000080)) 17:45:00 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000071c0)={0x0, 0x0, &(0x7f0000007180)={&(0x7f0000007140)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 17:45:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 17:45:00 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x200, 0x0, 0x200, 0x0, 0x0, 0x2c8, 0x2e8, 0x2e8, 0x2c8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @local, [], [], 'dummy0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 17:45:00 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x318, 0xffffffff, 0xc0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'erspan0\x00', 'ip6gre0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'team0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "10e282d4f59be8a72bdab8a492cc155595e7276e93f5dcd8f39ce9153972"}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) 17:45:00 executing program 2: capset(&(0x7f00000004c0)={0x19980330}, &(0x7f0000000680)) shmctl$SHM_LOCK(0x0, 0xb) 17:45:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_team\x00', 'hsr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @loopback}}}, {{@arp={@empty, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vcan0\x00', 'veth1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @remote, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 17:45:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x3, 0x0, 0x0) 17:45:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0xa, 0xffc2}}, &(0x7f0000000180)='GPL\x00', 0x1, 0xc3, &(0x7f0000000000)=""/195}, 0x48) 17:45:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000280)={'ipvs\x00'}, &(0x7f00000002c0)=0x1e) 17:45:00 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1c, 0xd03}, 0x1c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 17:45:00 executing program 2: capset(&(0x7f00000004c0)={0x19980330}, &(0x7f0000000680)) shmctl$SHM_LOCK(0x0, 0xb) 17:45:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001a40)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="bd1d98535954e8803e476dd37a8c76d5", 0x10) 17:45:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8915, &(0x7f00000001c0)={'veth1\x00', @ifru_addrs=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}}) 17:45:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 1593.157582][T20271] bridge0: port 3(ipvlan2) entered blocking state 17:45:00 executing program 2: capset(&(0x7f00000004c0)={0x19980330}, &(0x7f0000000680)) shmctl$SHM_LOCK(0x0, 0xb) [ 1593.200730][T20271] bridge0: port 3(ipvlan2) entered disabled state 17:45:00 executing program 1: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000451fdafe5daf177c2004a011c0000001c00000002000000000000000000000100"], 0x0, 0x36}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 17:45:00 executing program 5: set_mempolicy(0x3, &(0x7f0000000040)=0x2, 0x6) 17:45:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f0000000000)="fb", 0x1) [ 1593.334872][T20287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:45:00 executing program 2: r0 = socket$inet(0x2, 0x3, 0x101) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) [ 1593.389719][T20287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1593.406032][T20287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:45:00 executing program 1: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) 17:45:00 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect(r0, &(0x7f00000004c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c) [ 1593.561037][T20271] bridge0: port 3(ipvlan2) entered blocking state [ 1593.623324][T20271] bridge0: port 3(ipvlan2) entered disabled state 17:45:01 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000540)) 17:45:01 executing program 3: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) 17:45:01 executing program 2: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000001c0)=""/4096) 17:45:01 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, 0x0) 17:45:01 executing program 1: keyctl$search(0x18, 0x0, &(0x7f0000000200)='pkcs7_test\x00', 0x0, 0x0) 17:45:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002200)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x5c}}, 0x0) 17:45:01 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000040), 0x10) 17:45:01 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="f3", 0x1}, {&(0x7f0000000100)='\r', 0x1}], 0x2, &(0x7f00000002c0)=[@ip_tos_u8={{0x11}}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_retopts={{0x10}}], 0x30}}], 0x2, 0x0) 17:45:01 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.pending_reads\x00', 0x40, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000004080)='.pending_reads\x00', 0x187001, 0x0) 17:45:01 executing program 1: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x14, 0x4, 0x200000004, 0x8003}, 0x40) 17:45:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000200), &(0x7f0000000340)=0x4) 17:45:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002200)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x5c}}, 0x0) 17:45:01 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x0, 0x2}, 0x20) 17:45:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x44, 0x31, 0x727, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 17:45:01 executing program 0: socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x1e, &(0x7f0000000200), 0x0, 0x0) 17:45:01 executing program 4: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000340)="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", 0xfc) 17:45:01 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 17:45:01 executing program 5: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1bcd, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x351}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x1512, &(0x7f0000000440)={0x0, 0xfc39}, &(0x7f00009f5000/0x2000)=nil, &(0x7f0000fbc000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) 17:45:01 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x22, &(0x7f0000001540)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:45:01 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x9c}}, 0x0) [ 1594.228992][T20343] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. 17:45:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x803, 0x101) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}}, 0x0) 17:45:01 executing program 0: socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x1e, &(0x7f0000000200), 0x0, 0x0) 17:45:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf0, {"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", 0x1000}}, 0x1b7) 17:45:01 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1594.493370][T20358] ------------[ cut here ]------------ [ 1594.499635][T20358] WARNING: CPU: 1 PID: 20358 at net/sched/sch_taprio.c:999 taprio_change+0x3119/0x3fe0 [ 1594.509491][T20358] Modules linked in: [ 1594.513424][T20358] CPU: 1 PID: 20358 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 1594.521971][T20358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1594.532189][T20358] RIP: 0010:taprio_change+0x3119/0x3fe0 [ 1594.537875][T20358] Code: 8b 44 24 18 41 bc ea ff ff ff 48 c7 00 00 07 6c 8a e8 0b 97 3e fa 48 8b 7c 24 08 e8 e1 86 d5 01 e9 10 d9 ff ff e8 f7 96 3e fa <0f> 0b 48 c7 c7 a0 06 6c 8a e8 19 a5 06 00 48 83 7c 24 18 00 74 2e [ 1594.557662][T20358] RSP: 0018:ffffc900027cf1c8 EFLAGS: 00010212 [ 1594.563783][T20358] RAX: 0000000000000b74 RBX: 0000000000000000 RCX: ffffc9000fc4c000 [ 1594.571887][T20358] RDX: 0000000000040000 RSI: ffffffff8735c719 RDI: 0000000000000003 [ 1594.579992][T20358] RBP: 167cd9db4fb19b13 R08: 0000000000000000 R09: ffffffff901b197f [ 1594.588106][T20358] R10: ffffffff8735b643 R11: 0000000000000000 R12: 0000000000000000 [ 1594.596216][T20358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1594.604325][T20358] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0063) knlGS:00000000f558ab40 [ 1594.613311][T20358] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1594.620024][T20358] CR2: 0000000031c21000 CR3: 00000000121c4000 CR4: 00000000001526e0 [ 1594.628139][T20358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1594.636236][T20358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 17:45:02 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000001c0)=@hat={'permhat '}, 0x1b) [ 1594.644337][T20358] Call Trace: [ 1594.647670][T20358] ? taprio_peek_soft+0x640/0x640 [ 1594.652727][T20358] ? fs_reclaim_release+0x9c/0xe0 [ 1594.657912][T20358] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1594.663423][T20358] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1594.669800][T20358] ? fifo_init+0x342/0x6c0 [ 1594.674436][T20358] ? fifo_create_dflt+0xe0/0xe0 [ 1594.679356][T20358] ? mutex_is_locked+0xe/0x40 [ 1594.684422][T20358] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1594.690719][T20358] ? qdisc_hash_add+0x21d/0x330 [ 1594.695789][T20358] taprio_init+0x52e/0x670 [ 1594.700282][T20358] ? taprio_change+0x3fe0/0x3fe0 [ 1594.705372][T20358] qdisc_create+0x475/0x12f0 [ 1594.710029][T20358] ? tc_get_qdisc+0xb30/0xb30 [ 1594.714809][T20358] ? __nla_parse+0x3d/0x50 [ 1594.719315][T20358] tc_modify_qdisc+0x4c8/0x1a50 [ 1594.724389][T20358] ? rtnetlink_rcv_msg+0x3f9/0xad0 [ 1594.729534][T20358] ? qdisc_create+0x12f0/0x12f0 [ 1594.734545][T20358] ? qdisc_create+0x12f0/0x12f0 [ 1594.739445][T20358] rtnetlink_rcv_msg+0x44e/0xad0 17:45:02 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x4000012, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009032, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r3, 0x1}, 0x14}}, 0x0) [ 1594.744549][T20358] ? rtnetlink_put_metrics+0x510/0x510 [ 1594.750085][T20358] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1594.755534][T20358] netlink_rcv_skb+0x153/0x420 [ 1594.760355][T20358] ? rtnetlink_put_metrics+0x510/0x510 [ 1594.765969][T20358] ? netlink_ack+0xaa0/0xaa0 [ 1594.770601][T20358] ? netlink_deliver_tap+0x227/0xb70 [ 1594.776146][T20358] netlink_unicast+0x533/0x7d0 [ 1594.780994][T20358] ? netlink_attachskb+0x870/0x870 [ 1594.786252][T20358] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 17:45:02 executing program 0: socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x1e, &(0x7f0000000200), 0x0, 0x0) [ 1594.792583][T20358] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1594.799011][T20358] ? __phys_addr_symbol+0x2c/0x70 [ 1594.804175][T20358] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1594.809951][T20358] ? __check_object_size+0x171/0x3f0 [ 1594.815347][T20358] netlink_sendmsg+0x856/0xd90 [ 1594.820187][T20358] ? netlink_unicast+0x7d0/0x7d0 [ 1594.825283][T20358] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1594.831578][T20358] ? netlink_unicast+0x7d0/0x7d0 [ 1594.836659][T20358] sock_sendmsg+0xcf/0x120 [ 1594.841127][T20358] ____sys_sendmsg+0x6e8/0x810 [ 1594.846048][T20358] ? kernel_sendmsg+0x50/0x50 [ 1594.850766][T20358] ? do_recvmmsg+0x6d0/0x6d0 [ 1594.855499][T20358] ? lock_chain_count+0x20/0x20 [ 1594.860389][T20358] ? lock_chain_count+0x20/0x20 [ 1594.865359][T20358] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1594.871393][T20358] ___sys_sendmsg+0xf3/0x170 [ 1594.876127][T20358] ? sendmsg_copy_msghdr+0x160/0x160 [ 1594.881458][T20358] ? __fget_files+0x266/0x3d0 [ 1594.886257][T20358] ? lock_downgrade+0x6e0/0x6e0 17:45:02 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x70224100, 0x0, 0x0, 0x0, 0x0) fork() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() tkill(r0, 0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000017c0)=0x0) rt_tgsigqueueinfo(r1, 0x0, 0x21, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) [ 1594.891162][T20358] ? __fget_files+0x288/0x3d0 [ 1594.895963][T20358] ? __fget_light+0xea/0x280 [ 1594.900606][T20358] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1594.906983][T20358] __sys_sendmsg+0xe5/0x1b0 [ 1594.911539][T20358] ? __sys_sendmsg_sock+0x30/0x30 [ 1594.916719][T20358] ? lock_downgrade+0x6e0/0x6e0 [ 1594.921765][T20358] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 1594.928503][T20358] __do_fast_syscall_32+0x67/0xe0 [ 1594.933586][T20358] do_fast_syscall_32+0x2f/0x70 [ 1594.938555][T20358] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1594.945009][T20358] RIP: 0023:0xf7f90549 [ 1594.949117][T20358] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1594.969172][T20358] RSP: 002b:00000000f558a5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1594.977738][T20358] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200007c0 [ 1594.985849][T20358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1594.993872][T20358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1595.001968][T20358] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1595.010074][T20358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1595.018182][T20358] Kernel panic - not syncing: panic_on_warn set ... [ 1595.024788][T20358] CPU: 1 PID: 20358 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 1595.033331][T20358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1595.043411][T20358] Call Trace: [ 1595.046708][T20358] dump_stack+0x141/0x1d7 [ 1595.051067][T20358] panic+0x306/0x73d [ 1595.055017][T20358] ? __warn_printk+0xf3/0xf3 [ 1595.059650][T20358] ? __warn.cold+0x1a/0x44 [ 1595.064107][T20358] ? taprio_change+0x3119/0x3fe0 [ 1595.069077][T20358] __warn.cold+0x35/0x44 [ 1595.073347][T20358] ? taprio_change+0x3119/0x3fe0 [ 1595.078307][T20358] report_bug+0x1bd/0x210 [ 1595.082760][T20358] handle_bug+0x3c/0x60 [ 1595.086948][T20358] exc_invalid_op+0x14/0x40 [ 1595.091482][T20358] asm_exc_invalid_op+0x12/0x20 [ 1595.096365][T20358] RIP: 0010:taprio_change+0x3119/0x3fe0 [ 1595.101938][T20358] Code: 8b 44 24 18 41 bc ea ff ff ff 48 c7 00 00 07 6c 8a e8 0b 97 3e fa 48 8b 7c 24 08 e8 e1 86 d5 01 e9 10 d9 ff ff e8 f7 96 3e fa <0f> 0b 48 c7 c7 a0 06 6c 8a e8 19 a5 06 00 48 83 7c 24 18 00 74 2e [ 1595.121586][T20358] RSP: 0018:ffffc900027cf1c8 EFLAGS: 00010212 [ 1595.127686][T20358] RAX: 0000000000000b74 RBX: 0000000000000000 RCX: ffffc9000fc4c000 [ 1595.135681][T20358] RDX: 0000000000040000 RSI: ffffffff8735c719 RDI: 0000000000000003 [ 1595.143679][T20358] RBP: 167cd9db4fb19b13 R08: 0000000000000000 R09: ffffffff901b197f [ 1595.151675][T20358] R10: ffffffff8735b643 R11: 0000000000000000 R12: 0000000000000000 [ 1595.159670][T20358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1595.167687][T20358] ? taprio_change+0x2043/0x3fe0 [ 1595.172656][T20358] ? taprio_change+0x3119/0x3fe0 [ 1595.177626][T20358] ? taprio_change+0x3119/0x3fe0 [ 1595.182621][T20358] ? taprio_peek_soft+0x640/0x640 [ 1595.187782][T20358] ? fs_reclaim_release+0x9c/0xe0 [ 1595.192866][T20358] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1595.198362][T20358] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1595.204656][T20358] ? fifo_init+0x342/0x6c0 [ 1595.209105][T20358] ? fifo_create_dflt+0xe0/0xe0 [ 1595.213997][T20358] ? mutex_is_locked+0xe/0x40 [ 1595.218718][T20358] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1595.224983][T20358] ? qdisc_hash_add+0x21d/0x330 [ 1595.229862][T20358] taprio_init+0x52e/0x670 [ 1595.234310][T20358] ? taprio_change+0x3fe0/0x3fe0 [ 1595.239281][T20358] qdisc_create+0x475/0x12f0 [ 1595.243910][T20358] ? tc_get_qdisc+0xb30/0xb30 [ 1595.248615][T20358] ? __nla_parse+0x3d/0x50 [ 1595.253058][T20358] tc_modify_qdisc+0x4c8/0x1a50 [ 1595.257943][T20358] ? rtnetlink_rcv_msg+0x3f9/0xad0 [ 1595.263102][T20358] ? qdisc_create+0x12f0/0x12f0 [ 1595.268011][T20358] ? qdisc_create+0x12f0/0x12f0 [ 1595.272903][T20358] rtnetlink_rcv_msg+0x44e/0xad0 [ 1595.277877][T20358] ? rtnetlink_put_metrics+0x510/0x510 [ 1595.283387][T20358] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1595.288740][T20358] netlink_rcv_skb+0x153/0x420 [ 1595.293550][T20358] ? rtnetlink_put_metrics+0x510/0x510 [ 1595.299057][T20358] ? netlink_ack+0xaa0/0xaa0 [ 1595.303682][T20358] ? netlink_deliver_tap+0x227/0xb70 [ 1595.309651][T20358] netlink_unicast+0x533/0x7d0 [ 1595.314455][T20358] ? netlink_attachskb+0x870/0x870 [ 1595.319615][T20358] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1595.325890][T20358] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1595.332168][T20358] ? __phys_addr_symbol+0x2c/0x70 [ 1595.337234][T20358] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1595.342981][T20358] ? __check_object_size+0x171/0x3f0 [ 1595.348311][T20358] netlink_sendmsg+0x856/0xd90 [ 1595.353117][T20358] ? netlink_unicast+0x7d0/0x7d0 [ 1595.358107][T20358] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1595.364378][T20358] ? netlink_unicast+0x7d0/0x7d0 [ 1595.369338][T20358] sock_sendmsg+0xcf/0x120 [ 1595.373774][T20358] ____sys_sendmsg+0x6e8/0x810 [ 1595.378562][T20358] ? kernel_sendmsg+0x50/0x50 [ 1595.383254][T20358] ? do_recvmmsg+0x6d0/0x6d0 [ 1595.387862][T20358] ? lock_chain_count+0x20/0x20 [ 1595.392749][T20358] ? lock_chain_count+0x20/0x20 [ 1595.397628][T20358] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1595.403663][T20358] ___sys_sendmsg+0xf3/0x170 [ 1595.408283][T20358] ? sendmsg_copy_msghdr+0x160/0x160 [ 1595.413614][T20358] ? __fget_files+0x266/0x3d0 [ 1595.418319][T20358] ? lock_downgrade+0x6e0/0x6e0 [ 1595.423205][T20358] ? __fget_files+0x288/0x3d0 [ 1595.427906][T20358] ? __fget_light+0xea/0x280 [ 1595.432513][T20358] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1595.438790][T20358] __sys_sendmsg+0xe5/0x1b0 [ 1595.443314][T20358] ? __sys_sendmsg_sock+0x30/0x30 [ 1595.448352][T20358] ? lock_downgrade+0x6e0/0x6e0 [ 1595.454801][T20358] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 1595.461440][T20358] __do_fast_syscall_32+0x67/0xe0 [ 1595.466500][T20358] do_fast_syscall_32+0x2f/0x70 [ 1595.471403][T20358] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1595.477944][T20358] RIP: 0023:0xf7f90549 [ 1595.482032][T20358] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1595.501673][T20358] RSP: 002b:00000000f558a5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1595.510121][T20358] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200007c0 [ 1595.518120][T20358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1595.526114][T20358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1595.534109][T20358] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1595.542110][T20358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1595.551000][T20358] Kernel Offset: disabled [ 1595.555590][T20358] Rebooting in 86400 seconds..