000000040), 0x0, 0xa21c0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) 06:56:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/52) r1 = syz_open_dev$evdev(&(0x7f00000019c0), 0x6, 0x403) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001a80)={0x1, 0x6f, &(0x7f0000001a00)="6046268b724a63f505578b487a6a915a6744b8102e286b5de12cad329c17ef3059214bc59fbbd03dbd6ee2e27f312ef22a0637f41cae08b45ae4ee35b8b9fc488657e5c8ebcdc66f163a0f46384ea3bd702ecfbc8eaef6b046d5c1203b30775a278267c53bc000c49b88edc231811e"}) syz_usb_connect(0x0, 0x2af, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x0) r2 = syz_open_dev$evdev(&(0x7f00000035c0), 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000003600)) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x8000, 0x8441) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000200)=""/180) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000008c0)=""/94) 06:56:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000035c0), 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000180)=""/44) [ 177.657374][ T8507] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 177.926814][ T8507] usb 5-1: Using ep0 maxpacket: 16 [ 178.069007][ T6236] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 178.078499][ T8507] usb 5-1: config 0 has no interfaces? [ 178.251376][ T8507] usb 5-1: New USB device found, idVendor=1e2d, idProduct=0084, bcdDevice=b2.21 [ 178.264932][ T8507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.275657][ T8507] usb 5-1: Product: syz [ 178.284429][ T8507] usb 5-1: Manufacturer: syz [ 178.307373][ T6236] usb 2-1: Using ep0 maxpacket: 16 [ 178.312633][ T8507] usb 5-1: SerialNumber: syz [ 178.325407][ T8507] usb 5-1: config 0 descriptor?? [ 178.457369][ T6236] usb 2-1: config 255 has an invalid interface number: 196 but max is 1 [ 178.465756][ T6236] usb 2-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 178.476575][ T6236] usb 2-1: config 255 has an invalid descriptor of length 215, skipping remainder of the config [ 178.489389][ T6236] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 178.499315][ T6236] usb 2-1: config 255 has no interface number 0 [ 178.505610][ T6236] usb 2-1: config 255 interface 196 altsetting 1 has an invalid endpoint with address 0x80, skipping [ 178.518253][ T6236] usb 2-1: config 255 interface 196 altsetting 1 has an invalid endpoint with address 0x80, skipping [ 178.530876][ T6236] usb 2-1: config 255 interface 196 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 178.542690][ T6236] usb 2-1: config 255 interface 196 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 178.561813][ T6236] usb 2-1: config 255 interface 196 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 178.597425][ T6236] usb 2-1: config 255 interface 196 altsetting 1 endpoint 0xC has invalid maxpacket 560, setting to 64 [ 178.617956][ T6236] usb 2-1: config 255 interface 196 altsetting 1 has an invalid endpoint with address 0xDC, skipping [ 178.631220][ T6236] usb 2-1: config 255 interface 196 altsetting 1 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 178.644348][ T6236] usb 2-1: config 255 interface 196 has no altsetting 0 [ 178.659556][ T25] usb 5-1: USB disconnect, device number 2 [ 178.807918][ T6236] usb 2-1: New USB device found, idVendor=1e2d, idProduct=0084, bcdDevice=b2.21 [ 178.817311][ T6236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.825443][ T6236] usb 2-1: Product: syz [ 178.836645][ T6236] usb 2-1: Manufacturer: syz [ 178.842340][ T6236] usb 2-1: SerialNumber: syz [ 179.230062][ T6236] option 2-1:255.196: GSM modem (1-port) converter detected [ 179.287236][ T6236] usb 2-1: USB disconnect, device number 2 [ 179.305767][ T6236] option 2-1:255.196: device disconnected [ 179.517164][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 179.797127][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 179.927046][ T1052] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 179.931302][ T25] usb 5-1: config 0 has no interfaces? [ 180.117062][ T25] usb 5-1: New USB device found, idVendor=1e2d, idProduct=0084, bcdDevice=b2.21 [ 180.126158][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.156906][ T25] usb 5-1: Product: syz [ 180.161851][ T25] usb 5-1: Manufacturer: syz [ 180.166460][ T25] usb 5-1: SerialNumber: syz [ 180.179603][ T1052] usb 2-1: Using ep0 maxpacket: 16 [ 180.180031][ T25] usb 5-1: config 0 descriptor?? 06:56:19 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x0) rename(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00') prlimit64(0x0, 0x0, &(0x7f0000000080), 0x0) 06:56:19 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() waitid(0x1, r0, 0x0, 0x2, 0x0) r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f00000002c0)) ptrace(0x10, r0) getpid() 06:56:19 executing program 0: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') prlimit64(0x0, 0x0, &(0x7f0000000180), 0x0) 06:56:19 executing program 5: clone(0x4100, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETALL(r0, 0x0, 0xd, 0x0) clone(0x844640, &(0x7f0000000040), 0x0, 0x0, 0x0) clone(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) 06:56:19 executing program 2: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x8001]) clone(0x844640, &(0x7f0000000040), 0x0, 0x0, 0x0) [ 180.287098][ T25] usb 5-1: can't set config #0, error -71 [ 180.294529][ T25] usb 5-1: USB disconnect, device number 3 [ 180.297652][ T1052] usb 2-1: config 255 has an invalid interface number: 196 but max is 1 [ 180.333582][ T1052] usb 2-1: config 255 contains an unexpected descriptor of type 0x2, skipping 06:56:19 executing program 3: clone(0x49104100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, &(0x7f0000000100)=0xfce4) rt_sigreturn() [ 180.378704][ T1052] usb 2-1: config 255 has an invalid descriptor of length 215, skipping remainder of the config 06:56:19 executing program 0: clone(0x2200e300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000100)) rt_sigqueueinfo(r0, 0x3a, &(0x7f0000000000)) 06:56:19 executing program 2: clone(0x30045100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigreturn() mkdir(&(0x7f0000000080)='./file0\x00', 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0) exit_group(0x0) [ 180.426771][ T1052] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 2 06:56:19 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(&(0x7f0000000040)={0x20071026, 0xffffffffffffffff}, 0x0) r0 = getpid() tkill(r0, 0x40) 06:56:19 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000080)) [ 180.501819][ T1052] usb 2-1: config 255 has no interface number 0 [ 180.553388][ T1052] usb 2-1: config 255 interface 196 altsetting 1 has an invalid endpoint with address 0x80, skipping [ 180.625134][ T1052] usb 2-1: config 255 interface 196 altsetting 1 has an invalid endpoint with address 0x80, skipping [ 180.668409][ T1052] usb 2-1: config 255 interface 196 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 180.732964][ T9777] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 180.751073][ T1052] usb 2-1: config 255 interface 196 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 180.794823][ T1052] usb 2-1: config 255 interface 196 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 180.826647][ T1052] usb 2-1: config 255 interface 196 altsetting 1 endpoint 0xC has invalid maxpacket 560, setting to 64 [ 180.876986][ T1052] usb 2-1: config 255 interface 196 altsetting 1 has an invalid endpoint with address 0xDC, skipping [ 180.906354][ T1052] usb 2-1: config 255 interface 196 altsetting 1 endpoint 0xB has invalid maxpacket 512, setting to 64 06:56:20 executing program 1: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000280)={'ipvs\x00'}, &(0x7f00000002c0)=0x1e) clone(0x844640, &(0x7f0000000100), 0x0, 0x0, 0x0) 06:56:20 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r0 = getpid() tkill(r0, 0x4) 06:56:20 executing program 2: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000001180), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = dup3(r0, r1, 0x0) mkdirat(r2, &(0x7f0000000540)='./file0\x00', 0x0) r3 = getpid() tkill(r3, 0x40) 06:56:20 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x0) r1 = getpid() tkill(r1, 0x40) 06:56:20 executing program 3: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000001180), 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) exit_group(0x0) [ 180.926914][ T1052] usb 2-1: config 255 interface 196 has no altsetting 0 [ 180.986980][ T1052] usb 2-1: string descriptor 0 read error: -71 [ 180.993304][ T1052] usb 2-1: New USB device found, idVendor=1e2d, idProduct=0084, bcdDevice=b2.21 06:56:20 executing program 5: r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x1) 06:56:20 executing program 2: clone(0x8004100, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') sendfile(r0, r0, &(0x7f0000000040), 0xfffffffffffffff8) rt_sigreturn() 06:56:20 executing program 3: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000000c0)='./file3\x00', r0, &(0x7f0000000000)='./file2\x00', 0x0) setrlimit(0x0, &(0x7f0000000080)) [ 181.059365][ T1052] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 06:56:20 executing program 0: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) listxattr(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180), 0x0) 06:56:20 executing program 4: syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x133300) [ 181.137768][ T1052] usb 2-1: can't set config #255, error -71 [ 181.152510][ T1052] usb 2-1: USB disconnect, device number 3 06:56:20 executing program 5: clone(0x80945100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) writev(r0, 0x0, 0x0) rt_sigreturn() 06:56:20 executing program 3: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) exit(0x0) 06:56:20 executing program 1: semget$private(0x0, 0x2951f0b0d6eabb8e, 0x0) 06:56:20 executing program 2: clone(0x4100, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) rt_sigreturn() 06:56:20 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt(r0, 0x1, 0x7, 0x0, 0x0) r1 = getpid() tkill(r1, 0x40) 06:56:20 executing program 0: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe8d846be6e3098e4ee32fb6e7e17", 0x11}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = getpid() tkill(r1, 0x40) 06:56:20 executing program 4: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000001180), 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) exit_group(0x0) 06:56:20 executing program 3: clone(0x14244100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) tkill(r1, 0x18) 06:56:20 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x8}) clone(0x4126300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setrlimit(0x0, &(0x7f0000000080)) exit_group(0x0) 06:56:20 executing program 2: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) rt_sigreturn() 06:56:20 executing program 0: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = getpid() getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) tkill(r2, 0x40) 06:56:20 executing program 1: clone(0x14944100, 0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) exit_group(0x0) 06:56:20 executing program 4: clone(0x80945100, 0x0, 0x0, 0x0, 0x0) r0 = getpid() tkill(r0, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt(r1, 0x0, 0x0, 0x0, 0x0) 06:56:21 executing program 3: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002f40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r1) r2 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r2, 0x0, 0xe, 0x0) r3 = dup(r0) fchown(r3, 0x0, 0x0) exit(0x0) 06:56:21 executing program 2: clone(0x14004100, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = socket(0x11, 0x2, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) rt_sigqueueinfo(r0, 0x39, &(0x7f0000002200)) 06:56:21 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) truncate(&(0x7f0000000440)='./file0\x00', 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x2b, &(0x7f0000000100)) 06:56:21 executing program 0: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x891d, &(0x7f0000000300)={'lo\x00', 0x0}) r1 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4141c2, 0x0) tkill(r1, 0x40) 06:56:21 executing program 4: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f0000000180)) rt_sigreturn() 06:56:21 executing program 1: r0 = socket(0x2, 0x803, 0xff) r1 = dup(r0) clone(0x4100, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000004f80)={0x2020}, 0x2020) rt_sigreturn() 06:56:21 executing program 5: clone(0xa912d700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000080)='.\x00', 0x40240, 0x0) rt_sigreturn() 06:56:21 executing program 3: clone(0xcb00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) rt_sigreturn() 06:56:21 executing program 4: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r2, r3, r5) exit(0x0) 06:56:21 executing program 2: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() r2 = fork() ptrace(0x10, r2) ptrace$peeksig(0x4204, r2, 0x0, 0x0) tgkill(r0, r1, 0x8) 06:56:21 executing program 1: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000001180), 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x8840, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) exit_group(0x0) 06:56:21 executing program 0: clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) clone(0x4100, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() rt_sigreturn() 06:56:21 executing program 3: clone(0xc300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') renameat2(r0, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') renameat2(r2, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000200)='./file0/file0\x00', 0x0) rt_sigreturn() 06:56:21 executing program 1: clone(0x14944100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005180)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)="a907ab1416beed4fdfd4d4e5088f14bdbe694a53f89e81dfef341200d131ad79900a8790c84417ea91b66e914854653ad9e7fbe97ff53fa0f400000000", 0x3d}, {&(0x7f0000000180)="c7", 0xffba}, {&(0x7f0000000300)="221f3e", 0x3}], 0x3}}, {{0x0, 0x16, 0x0}}], 0x2, 0x0) rt_sigreturn() 06:56:21 executing program 2: clone(0xa912d700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_elf64(r0, 0x0, 0xfffffffffffffc74) clone(0x4100, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() clone(0x80844240, &(0x7f0000000040), 0x0, 0x0, 0x0) 06:56:21 executing program 5: clone(0x204100, 0x0, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x2800) exit(0x0) 06:56:21 executing program 0: clone(0xa912d700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) removexattr(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = gettid() tkill(r0, 0x1b) 06:56:21 executing program 4: clone(0xa912d700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x78) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x33a) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) clone(0x4100, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() clone(0x80844240, &(0x7f0000000040), 0x0, 0x0, 0x0) 06:56:21 executing program 3: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000002680)='./file0\x00', 0x108) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46020101"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) r1 = getpid() tkill(r1, 0x40) clone(0x844640, &(0x7f0000000040), 0x0, 0x0, 0x0) 06:56:21 executing program 2: clone(0xc300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) linkat(r1, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x0) rt_sigreturn() 06:56:21 executing program 1: clone(0xa912d700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x78) clone(0x0, &(0x7f0000000040)="84", 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x33a) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) clone(0x4100, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() clone(0x80844240, &(0x7f0000000040), 0x0, 0x0, 0x0) 06:56:21 executing program 0: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = getpid() tkill(r1, 0x40) 06:56:21 executing program 3: clone(0x2200e300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffdd3) sched_setaffinity(r2, 0x0, 0x0) rt_sigqueueinfo(r0, 0x18, &(0x7f0000000000)) 06:56:21 executing program 4: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = epoll_create(0x81) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)) rt_sigreturn() 06:56:21 executing program 5: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000001180), 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) r1 = getpid() tkill(r1, 0x40) 06:56:22 executing program 2: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() r2 = fork() r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setregid(r4, 0x0) ptrace(0x10, r2) tgkill(r0, r1, 0x8) 06:56:22 executing program 1: clone(0x30005100, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ftruncate(r0, 0x0) exit_group(0x0) 06:56:22 executing program 4: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000001180), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) flock(r0, 0x0) r1 = getpid() tkill(r1, 0x40) 06:56:22 executing program 3: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$notify(r0, 0x402, 0x0) rt_sigreturn() 06:56:22 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 06:56:22 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() fchmod(0xffffffffffffffff, 0x0) tkill(r0, 0x40) 06:56:22 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180), 0x0) 06:56:22 executing program 2: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000340)='\x00\xc2\xea\x99\xbb\x1c\xf8jw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0Y\xe5\xbcJ6\xfc\x00\x04\x00\x00\x00\x00\x00\x00`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4t\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xef\x90k\x05\x1e\x15\x13\xf3\x95\xccv\xee\x14x\x9e?7C\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xe2\x7f\x11\x95\xbd\x19v\xe4x\x86\xc2\xa3\t\xf27\xb6XA]\xdc\xad\xbb!1\x85\x96P\x1b\x92\x01\xe6\xae\xb1\xecB)\xe5\xaa7\xfe\xdd,R\x96X\x1ae', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) io_setup(0x0, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000001540)=[0x0]) r1 = getpid() rt_sigqueueinfo(r1, 0x39, &(0x7f0000000000)) 06:56:22 executing program 0: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) exit(0x0) 06:56:22 executing program 1: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000001180), 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() tkill(r0, 0x40) 06:56:22 executing program 3: clone(0x4100, 0x0, 0x0, 0x0, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) semget$private(0x0, 0x0, 0x0) clone(0x844640, &(0x7f0000000040), 0x0, 0x0, 0x0) 06:56:22 executing program 4: clone(0x1006100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x4100, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwrite64(r0, &(0x7f0000000080)="9c", 0xfdf6, 0xfffffffefff) 06:56:22 executing program 5: clone(0x80945100, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x800) read$FUSE(r0, 0x0, 0x0) rt_sigreturn() 06:56:22 executing program 2: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28041, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4) rt_sigreturn() 06:56:22 executing program 1: clone(0xc300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) rt_sigreturn() 06:56:22 executing program 3: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setresuid(0x0, 0xee00, 0x0) mlockall(0x5) r0 = getpid() tkill(r0, 0x40) 06:56:22 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) shmget(0x1, 0x6000, 0x489, &(0x7f0000ff7000/0x6000)=nil) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)) mlock(&(0x7f0000fed000/0x13000)=nil, 0x13000) 06:56:22 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair(0x10, 0x0, 0x0, 0x0) tkill(r0, 0x4) 06:56:22 executing program 0: clone(0x14944100, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fchdir(r0) rt_sigreturn() 06:56:22 executing program 5: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r1) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) exit(0x0) 06:56:22 executing program 1: clone(0x1006300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r1 = socket(0x11, 0x802, 0x0) listen(r1, 0x0) ftruncate(r0, 0x7fffffff) 06:56:22 executing program 3: clone(0x14944100, 0x0, 0x0, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='.\x00') rt_sigreturn() 06:56:22 executing program 4: clone(0xa912d700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigreturn() r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 06:56:22 executing program 2: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r0 = getpid() tkill(r0, 0x40) clone(0x0, 0x0, 0x0, 0x0, 0x0) 06:56:23 executing program 0: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40c40, 0x0) inotify_add_watch(r0, 0x0, 0x1000502) rt_sigreturn() 06:56:23 executing program 1: clone(0x1006300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r1 = socket(0x10, 0x802, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r2, 0x107, 0x0, 0x0, &(0x7f0000000600)) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x7fffffff) 06:56:23 executing program 3: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) exit(0x0) 06:56:23 executing program 5: clone(0xc300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sync_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) rt_sigreturn() 06:56:23 executing program 4: clone(0xc300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) rt_sigreturn() 06:56:23 executing program 2: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) exit(0x0) 06:56:23 executing program 1: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = getpid() tkill(r1, 0x40) 06:56:23 executing program 5: clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x4100, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd000, 0x3, &(0x7f0000ff1000/0xd000)=nil) rt_sigreturn() rt_sigreturn() 06:56:23 executing program 0: clone(0x4100, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0xfffffffffffffcbc) 06:56:23 executing program 1: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000001180), 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x113441, 0x0) r0 = getpid() tkill(r0, 0x40) 06:56:23 executing program 3: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000140)={0x10, 0xfffffffffffffff5}, 0x10) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r1, 0x0) r2 = gettid() r3 = gettid() tgkill(r2, r3, 0x8) 06:56:23 executing program 2: clone(0x14944100, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r0, 0x0, 0x0, 0xfffffffffffffff8) rt_sigreturn() 06:56:23 executing program 4: clone(0xd00c300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000000)={0xdf8}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180), 0x0) 06:56:23 executing program 0: clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x10, &(0x7f0000000040)) 06:56:23 executing program 3: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000002680)='./file0\x00', 0x108) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4602"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) r1 = getpid() tkill(r1, 0x40) clone(0x844640, &(0x7f0000000040), 0x0, 0x0, 0x0) 06:56:23 executing program 5: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000001180), 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = getpid() mknodat$loop(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) tkill(r1, 0x40) 06:56:23 executing program 1: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000001180), 0x0) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x82}, {0x6}]}) tkill(r0, 0x3a) 06:56:23 executing program 0: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) flistxattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@dev}, 0x14) r2 = getpid() tkill(r2, 0x40) 06:56:23 executing program 2: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) statfs(0x0, 0x0) r0 = getpid() tkill(r0, 0x40) clone(0x844640, &(0x7f0000000040), 0x0, 0x0, 0x0) 06:56:23 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x8100041a) setrlimit(0x0, &(0x7f0000000080)) 06:56:23 executing program 1: clone(0x14244100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x18) 06:56:23 executing program 5: clone(0x20c300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)=0x28) rt_sigreturn() 06:56:23 executing program 0: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0x0) setrlimit(0x0, &(0x7f0000000080)) 06:56:23 executing program 3: clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000001700)='./file0\x00', 0x108) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460201010000000080000000fd02003e0000000000200000e1ff2000004000000000000000e482d30ec9a9eed2040000200000380001000000000000e2030000000000000000000000000000000040ffffffffec00000000000000128958b4"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) r1 = getpid() tkill(r1, 0x40) 06:56:23 executing program 2: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) umount2(&(0x7f0000000040)='./file0\x00', 0x0) r0 = getpid() tkill(r0, 0x40) 06:56:23 executing program 4: clone(0x4100, 0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0xee00}}) semget(0x0, 0x4, 0x0) clone(0x844640, &(0x7f0000000040), 0x0, 0x0, 0x0) 06:56:23 executing program 1: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') openat(r0, &(0x7f0000000780)='./file0\x00', 0x230280, 0x0) setrlimit(0x0, &(0x7f0000000080)) 06:56:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') 06:56:23 executing program 5: clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) write(r0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x10, &(0x7f0000000040)) 06:56:24 executing program 3: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) flistxattr(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() tkill(r0, 0x40) 06:56:24 executing program 2: clone(0x80945100, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) openat$cgroup_ro(r0, &(0x7f0000001140)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) rt_sigreturn() 06:56:24 executing program 4: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000001440), 0x8) futimesat(r0, &(0x7f0000001480)='./file0\x00', 0x0) rt_sigreturn() 06:56:24 executing program 5: clone(0x4100, 0x0, 0x0, 0x0, 0x0) semget(0x1, 0x0, 0x0) r0 = semget$private(0x0, 0x5, 0x0) semctl$GETPID(r0, 0x0, 0xb, 0x0) rt_sigreturn() 06:56:24 executing program 1: clone(0xc300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000003c0)={'security\x00'}, &(0x7f0000000440)=0x54) rt_sigreturn() 06:56:24 executing program 4: r0 = socket(0x2, 0x803, 0xff) r1 = dup(r0) clone(0x4100, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x5, 0x0) rt_sigreturn() 06:56:24 executing program 3: r0 = socket(0x2, 0x803, 0xff) r1 = dup(r0) clone(0x4100, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x6}) rt_sigreturn() 06:56:24 executing program 2: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000002680)='./file0\x00', 0x108) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) r1 = getpid() tkill(r1, 0x40) 06:56:24 executing program 3: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffa]}, 0x0, 0x8) r0 = creat(&(0x7f0000002680)='./file0\x00', 0x108) r1 = gettid() r2 = gettid() tgkill(r1, r2, 0x24) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4602010100000000800000000003003e0000000000000000000000000040000000000000000000000000000000000000200000380001000000000000000100000000000000000000a9f06c9d9051cbebee600000009fe6900edf29f0593304036acb67939032075e16ca7bb2"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8) 06:56:24 executing program 4: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) exit(0x0) 06:56:24 executing program 0: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000180)) rt_sigreturn() 06:56:24 executing program 5: clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000001700)='./file0\x00', 0x108) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460201010000000080000000fd02003e00ee76d5d21c0b2c3eff2000004000000000000000e482d30ec9a9eed2040000200000380001000000000000e20300000000030000000000000000000040ffffffffec00000000000000128958b4"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) r1 = getpid() tkill(r1, 0x40) 06:56:24 executing program 2: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = gettid() tkill(r1, 0x18) 06:56:24 executing program 1: fork() r0 = fork() ptrace(0x10, r0) ptrace(0x8, r0) wait4(0x0, 0x0, 0x2, &(0x7f0000000080)) 06:56:24 executing program 0: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x4000c300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigreturn() msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) exit(0x0) 06:56:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000080)=""/169) 06:56:24 executing program 5: clone(0x80945100, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_getaffinity(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x40) 06:56:24 executing program 3: clone(0xc300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) fallocate(r0, 0x0, 0x0, 0x0) rt_sigreturn() 06:56:24 executing program 0: clone(0x80945100, 0x0, 0x0, 0x0, 0x0) r0 = getpid() capset(&(0x7f00000006c0)={0x20080522}, 0x0) tkill(r0, 0x40) 06:56:24 executing program 4: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r0, &(0x7f0000e80000/0x2000)=nil, 0x0) clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x844640, &(0x7f0000000040), 0x0, 0x0, 0x0) 06:56:24 executing program 2: clone(0x16944100, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x0, 0x0) exit(0x0) 06:56:24 executing program 3: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() r2 = msgget$private(0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002f40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r4) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{0x1, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8fa}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x288040, 0x0) fcntl$getown(r5, 0x9) tgkill(r0, r1, 0x8) 06:56:24 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000080)) 06:56:25 executing program 1: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(0x0, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x2b, &(0x7f0000000100)) 06:56:25 executing program 3: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f00009b3000)) capset(&(0x7f0000000240)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x7}) r0 = getpid() tkill(r0, 0x40) 06:56:25 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000a40)="86", 0x1, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x40009, 0x0) 06:56:25 executing program 1: clone(0x80945100, 0x0, 0x0, 0x0, 0x0) r0 = getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, 0x0, 0x40040) tkill(r0, 0x40) 06:56:25 executing program 4: r0 = socket(0x2, 0x803, 0xff) r1 = dup(r0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) clone(0x4100, 0x0, 0x0, 0x0, 0x0) setuid(0x0) rt_sigreturn() 06:56:25 executing program 5: clone(0x14244100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = gettid() tkill(r0, 0x18) sched_getscheduler(0x0) 06:56:25 executing program 1: r0 = socket(0x2, 0x803, 0xff) r1 = dup(r0) clone(0x4100, 0x0, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000000080)) rt_sigreturn() 06:56:25 executing program 3: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5) setrlimit(0x0, &(0x7f0000000080)) [ 186.014934][T10389] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) 06:56:25 executing program 4: clone(0x14944100, 0x0, 0x0, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rt_sigreturn() 06:56:25 executing program 5: clone(0x16944100, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x400b012, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000180), 0x4) rt_sigreturn() 06:56:26 executing program 1: clone(0x14244100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readahead(r1, 0x0, 0x0) tkill(r0, 0x18) 06:56:26 executing program 2: clone(0x4100, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f00000000c0), 0x0, 0x0) exit(0x0) 06:56:26 executing program 3: clone(0xc300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) fallocate(r0, 0x0, 0x0, 0x0) rt_sigreturn() 06:56:26 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xf}, {0x6}]}) exit(0x0) 06:56:26 executing program 4: clone(0x1006300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000013c0)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) ftruncate(r0, 0x7fffffff) 06:56:26 executing program 0: clone(0x1006300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000013c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) ftruncate(r0, 0x7fffffff) 06:56:26 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x981, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') pwrite64(r0, 0x0, 0x0, 0x100100000001) 06:56:26 executing program 3: clone(0xc300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) rt_sigreturn() 06:56:26 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) clone(0x14244100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmsg$unix(r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x18) 06:56:26 executing program 5: clone(0x4100, 0x0, 0x0, 0x0, 0x0) semctl$GETNCNT(0xffffffffffffffff, 0x0, 0xe, 0x0) clone(0x844640, &(0x7f0000000040), 0x0, 0x0, 0x0) 06:56:26 executing program 1: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() tkill(r0, 0x40) ptrace(0x10, r0) 06:56:26 executing program 3: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(&(0x7f0000a31000)={0x19980330, 0xffffffffffffffff}, 0x0) r0 = getpid() tkill(r0, 0x40) 06:56:26 executing program 4: clone(0x80945100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f00000003c0)) rt_sigreturn() 06:56:27 executing program 2: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000001180), 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c) exit_group(0x0) 06:56:27 executing program 1: clone(0x16944100, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x400b012, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setregid(0x0, 0x0) rt_sigreturn() 06:56:27 executing program 0: setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getgid() setgid(0x0) clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x8046b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='cgroup\x00', 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000080)) clone(0x1008000, 0x0, &(0x7f0000000040), &(0x7f0000000240), 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x1) rt_sigreturn() clone(0x844640, &(0x7f0000000040), 0x0, 0x0, 0x0) 06:56:27 executing program 5: clone(0x1006300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) exit(0x0) 06:56:27 executing program 3: clone(0xc300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000440)) rt_sigreturn() 06:56:27 executing program 4: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, 0x0, 0x0) exit(0x0) 06:56:27 executing program 4: clone(0x4100, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000702000/0x3000)=nil, 0x3000, 0x16) clone(0x844640, &(0x7f0000000040), 0x0, 0x0, 0x0) 06:56:27 executing program 2: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() syz_open_procfs$userns(r0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) 06:56:27 executing program 3: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000200), 0x4) exit(0x0) 06:56:27 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x3, 0xb, 0x0) tkill(r0, 0x4) 06:56:27 executing program 0: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002f40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r1) r2 = semget$private(0x0, 0x4, 0x0) semctl$GETVAL(r2, 0x0, 0xc, 0x0) exit(0x0) 06:56:27 executing program 1: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() tkill(r0, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ppoll(&(0x7f0000000440)=[{}], 0x1, 0x0, 0x0, 0x0) clone(0x844640, &(0x7f0000000040), 0x0, 0x0, 0x0) 06:56:27 executing program 2: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r1) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) exit(0x0) 06:56:27 executing program 4: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) exit(0x0) 06:56:27 executing program 3: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x18) 06:56:27 executing program 5: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000001180), 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0xa) exit_group(0x0) 06:56:27 executing program 1: clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x8046b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setrlimit(0x0, &(0x7f0000000080)) sched_setscheduler(0xffffffffffffffff, 0x0, 0x0) rt_sigreturn() clone(0x844640, &(0x7f0000000040), 0x0, 0x0, 0x0) 06:56:27 executing program 0: clone(0x30045100, 0x0, 0x0, 0x0, 0x0) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigreturn() chroot(0x0) exit_group(0x0) 06:56:27 executing program 3: clone(0xcb00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_robust_list(&(0x7f00000003c0)={&(0x7f0000000380)}, 0x18) rt_sigreturn() 06:56:27 executing program 4: rt_sigprocmask(0x0, &(0x7f00000003c0)={[0xfffffffe]}, 0x0, 0x8) clone(0x4100, 0x0, 0x0, 0x0, 0x0) clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) exit(0x0) 06:56:27 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() r2 = fork() ptrace(0x10, r2) ptrace(0x10, r2) tgkill(r0, r1, 0x8) 06:56:27 executing program 0: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x11, r1, 0x0) utimes(0x0, 0x0) r2 = gettid() tgkill(r0, r2, 0x8) 06:56:27 executing program 1: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@private, @loopback, r2}, 0xc) rt_sigreturn() 06:56:27 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f0000000280)='-\x00') prlimit64(0x0, 0x0, &(0x7f0000000180), 0x0) 06:56:28 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='affs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0x2000000000000074, 0x4) pipe2(0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x9, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), 0x0) sendto$inet(r0, &(0x7f00000012c0)="11268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9281a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 06:56:28 executing program 1: clone(0x4100, 0x0, 0x0, 0x0, 0x0) getrandom(0x0, 0xfffffd94, 0x0) rt_sigreturn() 06:56:28 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) setrlimit(0x0, &(0x7f0000000080)) 06:56:28 executing program 3: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002) r0 = gettid() tkill(r0, 0x25) 06:56:28 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001280)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) 06:56:28 executing program 5: clone(0x14904900, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwrite64(r0, &(0x7f0000000080)="9c", 0xfdf6, 0xfffffffefff) 06:56:28 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc) 06:56:28 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000300), 0xc) 06:56:28 executing program 1: timer_create(0x7, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 06:56:28 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8979690be314d58f, 0x0) 06:56:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc) 06:56:28 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000300), 0xc) 06:56:29 executing program 1: clone(0x3106000ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 06:56:29 executing program 4: add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff8) 06:56:29 executing program 0: timer_create(0x7, 0x0, &(0x7f00000000c0)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) timer_delete(0x0) 06:56:29 executing program 2: timer_settime(0x0, 0x0, 0xffffffffffffffff, 0x0) 06:56:29 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000300), 0xc) 06:56:29 executing program 5: timer_create(0x3, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f0000000300)) 06:56:29 executing program 1: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone(0x3106000ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) [ 189.892507][ C0] hrtimer: interrupt took 35832 ns 06:56:29 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000300), 0xc) 06:56:29 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) 06:56:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 06:56:29 executing program 0: socketpair(0xa, 0x801, 0x0, &(0x7f0000000140)) 06:56:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x13, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:56:29 executing program 1: socket(0x1, 0x0, 0xff) 06:56:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) 06:56:29 executing program 3: socketpair(0x10, 0x2, 0x2, &(0x7f0000000080)) 06:56:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev, 0x1}}) 06:56:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@local}}, {{@in6=@private2}, 0x0, @in6=@private2}}, &(0x7f0000000180)=0xfffffd08) 06:56:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ax25={0x3, @default}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, @ax25={0x3, @null, 0x8}}) 06:56:29 executing program 3: bpf$MAP_CREATE(0x15, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:56:29 executing program 4: clock_gettime(0x0, &(0x7f0000001900)) 06:56:29 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 06:56:29 executing program 5: bpf$PROG_BIND_MAP(0x22, 0x0, 0x0) 06:56:29 executing program 2: bpf$MAP_CREATE(0x3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:56:29 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) 06:56:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x0, 0x1149, 0x1}, 0x40) 06:56:29 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x24}}, 0x0) 06:56:30 executing program 5: bpf$PROG_BIND_MAP(0x14, 0x0, 0x0) 06:56:30 executing program 1: bpf$PROG_LOAD(0x1c, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:56:30 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:56:30 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 06:56:30 executing program 4: bpf$PROG_LOAD(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:56:30 executing program 3: setgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) 06:56:30 executing program 1: bpf$PROG_BIND_MAP(0x21, 0x0, 0x0) 06:56:30 executing program 1: ioprio_set$uid(0x0, 0xffffffffffffffff, 0x6004) 06:56:30 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='.\x00'}, 0x10) 06:56:30 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x24}}, 0x0) 06:56:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x40) 06:56:30 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) 06:56:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x40) 06:56:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x0, 0x200}, 0x40) 06:56:30 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) connect$caif(r0, 0x0, 0x0) 06:56:30 executing program 0: ioprio_set$uid(0x0, 0xee00, 0x2007) 06:56:30 executing program 5: bpf$MAP_CREATE(0x8, 0x0, 0x0) 06:56:30 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$alg(r0, &(0x7f0000000080)=""/77, 0x4d) 06:56:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x709}, 0x20}}, 0x0) 06:56:30 executing program 3: socketpair(0xa, 0x2, 0x88, &(0x7f0000000140)) 06:56:30 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x8915, 0x0) 06:56:30 executing program 0: bpf$PROG_BIND_MAP(0x1b, 0x0, 0x0) 06:56:30 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc280, 0x103) 06:56:30 executing program 2: socketpair(0xa, 0x3, 0x3a, &(0x7f0000000140)) 06:56:30 executing program 1: r0 = io_uring_setup(0x4d56, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x10000000) 06:56:31 executing program 3: r0 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 06:56:31 executing program 2: clone(0xa912d700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x10801, 0x0) rt_sigreturn() 06:56:31 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 06:56:31 executing program 0: socket$caif_stream(0x25, 0x1, 0x4) 06:56:31 executing program 5: socketpair(0x2, 0xa, 0x0, &(0x7f0000001240)) 06:56:31 executing program 1: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9338}, 0x0, &(0x7f0000000140)={0x0, r0/1000+60000}) 06:56:31 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)="39000000130009006900000000000000ab1e8000200000004600010707000014190001001000d35fce82ae4906d130b81e0008000000682300", 0x39}], 0x1) 06:56:31 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) 06:56:31 executing program 1: r0 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 06:56:31 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x5411, 0x0) 06:56:31 executing program 4: ioprio_set$uid(0x3, 0xee00, 0x2007) 06:56:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003cc0)={0x18, 0x1, &(0x7f0000000080)=@raw=[@alu={0x7}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x8d, &(0x7f0000000100)=""/141, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:56:31 executing program 1: bpf$MAP_CREATE(0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:56:31 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x894c, 0x0) 06:56:31 executing program 4: bpf$PROG_LOAD(0x1d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:56:31 executing program 1: bpf$MAP_CREATE(0xa, 0x0, 0x0) 06:56:31 executing program 2: rt_sigqueueinfo(0x0, 0x1e, &(0x7f0000000040)={0x0, 0x0, 0x4}) 06:56:31 executing program 5: bpf$MAP_CREATE(0x8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:56:32 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) 06:56:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xfe76) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000004097c992000040", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) r7 = openat$procfs(0xffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'sit0\x00', r3, 0x4, 0x1, 0x2, 0x20, 0x8, @mcast2, @private0, 0xc0, 0x8, 0x40, 0x6}}) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000002380)=@newchain={0x2300, 0x64, 0x4, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x3, 0x8}, {0xf, 0xe}, {0xc, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @filter_kind_options=@f_cgroup={{0xb}, {0x22c0, 0x2, [@TCA_CGROUP_POLICE={0x854, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x947, 0x8001, 0x8, 0xffffffff, 0x401, 0x6, 0x1, 0x81, 0x8001, 0x7, 0x3, 0x8, 0x81, 0x20, 0x2, 0x0, 0x3, 0x291c, 0x103, 0xc6843fa8, 0x4, 0x11, 0x6, 0x7fff, 0x10000, 0x81, 0x2400, 0x3, 0xffffffff, 0x1000, 0xffffff8c, 0xd6, 0x5, 0x80, 0x3, 0x7fff, 0x5, 0xbf, 0x6, 0x1, 0xff, 0x1, 0x9, 0x1, 0x180, 0x8, 0x80000001, 0xda, 0x2, 0x7e, 0x2, 0x9, 0x9, 0x3, 0x1, 0x4, 0x2d38, 0x0, 0x81, 0xfffffffe, 0x400, 0x6, 0x3, 0x401, 0x1, 0x2, 0xfffeffff, 0x401, 0xe2b, 0x8001, 0x0, 0xba7, 0x5, 0xfff00000, 0x6, 0x5, 0x8, 0x2, 0x2, 0xf60, 0x101, 0x1, 0x0, 0x0, 0xa0, 0x10000, 0x4, 0x8001, 0x3, 0x1, 0x3fffc, 0x81, 0x0, 0x4, 0x3, 0xb0, 0xaf1a, 0x3, 0x1, 0x4848, 0x80, 0x3ff, 0x3, 0x7fffffff, 0x9e, 0x5, 0xfffffffb, 0xbc68, 0x7, 0x7f, 0x80000001, 0x20, 0x7b, 0xfffffffb, 0x6, 0x401, 0x2, 0x9, 0x1, 0x0, 0x78238000, 0x2, 0x0, 0x6, 0x401, 0x4, 0xa73, 0x200, 0x20, 0x8, 0x8, 0x8000, 0xdce9, 0x200, 0x80, 0x3f, 0x0, 0x5, 0x6, 0x101, 0xf40c, 0x3, 0x2, 0x150b, 0x9, 0xb50d, 0x1, 0x3, 0xaa73, 0x1, 0x10000, 0x80, 0x0, 0x80000001, 0x40, 0x6, 0x1317, 0xff, 0x4, 0xfffff097, 0x8, 0x3, 0x7fffffff, 0xedfc, 0x8000, 0x3, 0x7ff, 0x8, 0x0, 0x0, 0x5, 0x3, 0x1, 0x0, 0xa58, 0xe0, 0x98, 0x5, 0xffffff00, 0x5, 0x1000, 0x9, 0x0, 0x7fff, 0x2df, 0x4, 0x9, 0x1, 0x633, 0xffffffff, 0x3, 0x101, 0x2, 0x0, 0x7, 0x9, 0x4, 0x8461328e, 0x1, 0xffffffc0, 0x3, 0x6, 0x1, 0x7fff, 0x0, 0x3, 0xf8000000, 0xfffffc01, 0xf09, 0x9, 0x8, 0x2, 0x5, 0x1, 0x1000, 0x1f, 0x4, 0x9, 0x0, 0xfff, 0x8001, 0x4e0f, 0x5, 0x0, 0x7f, 0x3, 0x5, 0x1, 0x1, 0x8001, 0x0, 0x4, 0x8001, 0x6, 0xf0e, 0x7b, 0xad9, 0x800, 0x3, 0x7fffffff, 0x9, 0x8, 0x4, 0x8001, 0x81, 0x8, 0x1, 0x100, 0x1, 0x3, 0x40, 0x8001, 0xff, 0x7fff, 0xd7, 0x10001]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x93}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9c}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x663f, 0x10001, 0x5, 0x0, 0x9, 0x1, 0x4, 0x1, 0x9, 0x1, 0x88, 0x8000, 0x3f, 0x1, 0xc19, 0x10001, 0x4, 0x9c, 0xffffe505, 0x800, 0x0, 0x2fbb9e27, 0x8, 0x4, 0x7, 0xfffff007, 0x5, 0x10001, 0x0, 0x96, 0x1, 0x4, 0x9, 0x1, 0x10, 0x3ff, 0x28f8, 0xfffffff8, 0xf69, 0x4, 0x4, 0x2, 0x6, 0x8000, 0x1000, 0x3, 0x7ff, 0x0, 0x1, 0x6, 0x203, 0x8, 0x4, 0xffffff7f, 0x4, 0x5, 0x6, 0x3, 0x6, 0x10000, 0x4, 0x2, 0x27ecfb86, 0x7, 0x101, 0x9, 0x5, 0x0, 0x200, 0x4, 0x6, 0x3fde, 0x9, 0x400, 0x6, 0xd9d, 0x1, 0x800, 0x7, 0x1, 0x3, 0x1, 0x80, 0x9a, 0x1, 0xff, 0x5, 0x8d, 0x101, 0x2, 0x5, 0x10001, 0x5, 0x3c, 0x1, 0x3, 0x200, 0x9, 0x0, 0x5, 0xf5b, 0x101, 0xfffffff7, 0x8, 0x800, 0xd93, 0x80, 0x4, 0x60, 0x9, 0x7, 0x3ff, 0xfffffffd, 0x3, 0x800, 0x4, 0x401, 0x1, 0x7, 0x6, 0xead, 0xffffff30, 0xd7bb58ae, 0x7, 0x81, 0x3ff, 0x1, 0x6b25, 0x80000000, 0x8, 0x6, 0xfff, 0x1, 0x4, 0x200, 0x5, 0x8, 0x6, 0x0, 0x9, 0x1, 0x4, 0x9, 0xa2, 0x5, 0x3ff, 0xa, 0x2, 0x3022, 0x7, 0x4, 0x7ff, 0x2, 0x834, 0x0, 0xf6, 0xb4bd, 0x8, 0x5, 0x8, 0xe76e, 0x10000, 0x3f, 0x562, 0x1, 0x1, 0x9, 0x8, 0x39a2, 0x7fffffff, 0x4, 0x800, 0x16f, 0xd00, 0xfffffff9, 0x100, 0xd1, 0x6, 0x9a55, 0x41df, 0x1, 0xff, 0x81, 0x40, 0x1003, 0x2, 0x1, 0x101, 0x5, 0xfff, 0x4, 0x7fffffff, 0x2, 0x3, 0xffff0001, 0x7, 0x6, 0xb5f, 0x2, 0x4cc3, 0x6, 0x80000000, 0x8, 0x5, 0x80, 0x9, 0x0, 0x7, 0x8, 0x7, 0x1, 0x9, 0x1ff, 0x8f8a, 0x8, 0x2, 0x3f, 0xdd, 0x666, 0x1, 0xffff, 0x160, 0x2, 0x1, 0x7, 0x0, 0xb3f4, 0x0, 0x5, 0x20, 0x5, 0x7fffffff, 0x1ff, 0x2, 0x3, 0x7, 0x4, 0x80000000, 0x2, 0x6, 0xffffffff, 0x6, 0x81, 0x3, 0xb75, 0x8, 0xdee, 0x6, 0x1000, 0x100, 0x3, 0x3, 0x80000000, 0xff, 0x5a02]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfa01}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5204}]}, @TCA_CGROUP_EMATCHES={0x390, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0x3}, {0x5, 0x0, 0x81, 0x2, 0x7, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3ff, 0x2, 0x2}, {0x0, 0x2, 0x1, "ea6a"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9a, 0x7, 0xddf}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPT={0x128, 0x1, 0x0, 0x0, {{0x8000, 0x9, 0x9475}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfb}, @TCA_EM_IPT_MATCH_DATA={0xeb, 0x5, "2d7842c1179aaad85bae489693416b3b6b2224c2434b91320c4e615ac3ea83e6280f613527d89ff9134fdc1d22d2df2b82554ed13445649681d18576c7804d974ed60cc0ea43d07656580cbfc8e261900c6c011164285054099c80aeea842751fec59089cbac4d51a4eddd300f35a99dd285b312a31f237d16a694fd8031375066c4b885c318db06aa113aa968f1403dbdbba7d1bff003771e5637479da2f8113a69361d32bce86114a1f9941f8aa235458d173d43fb4b68aa34ec13487c05ade30440a5db7991d8eacb143349a0137892076258371650ad742e784e8257628179bf4a8b1a74b7"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x9d13, 0x2, 0xffff}, {0x186, 0x4, 0x3, "83a5c5dd"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x534b, 0x7, 0x7fff}, {{0x3, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x54, 0x7, 0x40}, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x1cc, 0x2, 0x0, 0x1, [@TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0x80, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x28, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="f98d8e697a", @TCF_META_TYPE_VAR="a26abd", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="ab97d8b0", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="fbc0012583ab60aabb93", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x81, 0x2}, {0x4, 0xcd, 0x1}}}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="5d9b", @TCF_META_TYPE_VAR="ff1e4773544532"]}]}}, @TCF_EM_META={0xdc, 0x2, 0x0, 0x0, {{0xe081, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_VAR="dae5f02c2c", @TCF_META_TYPE_VAR="22c859fcbe5a002b91c8", @TCF_META_TYPE_VAR="07022dc8", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="55b19504cb49fffc1ad6", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="7ccf7ecf21152a", @TCF_META_TYPE_VAR="581dcb934843b6e0", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="501212d783160f5d", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="130ffd4588e1"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1ff, 0x4}, {0x5, 0x6, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1ff, 0x7f}, {0x1, 0x80}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffff, 0xdc, 0x2}, {0x0, 0x1, 0x1}}}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_VAR="1ec6d5ec29ca64dbd5", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="36828da89d", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="ec56", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR='k']}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="c871f22477ebe4", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="885ececa10005d96"]}]}}, @TCF_EM_META={0x4c, 0x3, 0x0, 0x0, {{0x7fff, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x32, 0x1}, {0x7f, 0x7}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x5, 0x2}, {0x1, 0x2}}}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_VAR="2e039b", @TCF_META_TYPE_VAR="8b644695a137a2", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="c5be"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR="a7", @TCF_META_TYPE_VAR="68e1", @TCF_META_TYPE_VAR="afeef1"]}]}}, @TCF_EM_META={0x3c, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_VAR="c30b3b92de6550a6", @TCF_META_TYPE_VAR="ca7901", @TCF_META_TYPE_VAR="632c6f802ca6e10fb4f5", @TCF_META_TYPE_VAR="77ebbae6", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8]}]}}]}]}, @TCA_CGROUP_ACT={0x10e0, 0x1, [@m_tunnel_key={0x1088, 0x10, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x42}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x54, 0xc, 0x0, 0x0, {{0xb}, {0x4}, {0x28, 0x6, "50cdca2360efa5f89e36b92af175f11899d3c7ef7616cb276742457930600a1eed8ddebe"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x5f8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x9}, {0x3, 0x1, 0x20, 0x4, 0x5, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x81}, {{0x4, 0x0, 0x1, 0x1}, {0x3}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x400}, {0x401, 0x3, 0x4, 0x0, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0xa707}, {{0x2, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xe4, 0x3, 0x0, 0x0, {{0x4d, 0x0, 0x5}, "96d02624c66c6d75bc062ab5e01c4b3c9440e259346a17b5bc4ad8d6b5e6b609d085b6fbe4e3eaaf41b257e3b9dc3ec1e4650d8b20848c7ecda7d3e1303ca0ca9a7088cf9fcd0abaa6c166942599dbc2325c3f9b288898b7746a87a209463e961c3cbbe6e25b6f62d2f5fcb8da47a07acd5575278d3c66f8571468c7f99ca07eac3ba0ef9be931bbe752942036f691a2efcc359c3a52c88b8c5d106eb43d2011266967164621d73e99ded8bfc80f41538f8e8949441f4f686f696307f88fe33ec3623cb829e03ef0033ec099b1c09fe187424017bdc8c5e9"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x76ca}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x13c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xf8, 0x3, 0x0, 0x0, {{0x9, 0x0, 0x1}, "41a42f5f2bcc4580090887752e9e79eabd3a3fe066195ad8bb82f5be31574a4d04eb7cabc0eea2dc4df84f49b6170502d0778d00ed1367b5677d717378a51a51e9ab71cbb220836458ec31625a6cd9ebc7caaaa33748edbb06a342fcb2ee181c5436a5ae7241e9124ba7d877ccdfa8ee473c06325f7b229720dd14db0bc7374b4467afda5f28ddd4399d1bb308e7bc6260ae9ff0219a009c9cedb5ab73af1b02c68adaa799582c7d42d75b659657d629c3885a6a524293eaa51d190d1ca4af0eef2a1e52efa4a1ff92b48c5fb483dad6a709e4d1c22212db7d569a792018a8a10c7bf0495e56818947"}}, @TCF_EM_META={0x40, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x1ff}, [@TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="05a8", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x8, 0x1}, {0x20, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="5786", @TCF_META_TYPE_VAR="84d0"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x364, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7ff, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_IPT={0xd0, 0xb2b, 0x0, 0x0, {{0x40, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_DATA={0x46, 0x5, "7d3fef2c4f506d0c918e5c79f1f819a47d6d23cf155a6a712d98d800b71293a19a6dee22b00be7b8fedda80c4d8997b68fd80f0108864ce489cd78d6e7860ce8e658"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x50, 0x5, "f0c36730a42235c34fffb9962761b5eba88ae045f89c32ac169ed507600fc9b0354484611534a075b097e90e370b0423cbced195338aa1653ac465ebf6000c9681a06437eeb3ef20bced5915"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_IPT={0x34, 0x2, 0x0, 0x0, {{0x10, 0x9, 0xfffd}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xc6}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_IPT={0x168, 0x2, 0x0, 0x0, {{0x916, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_DATA={0x102, 0x5, "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"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x39, 0x5, "ab415847fa4ee1733dd3a9e62ca6b8943b0fa71f687a88869f9d72b7a0e35cba08cc0719f162019fe00a683e0b7d6dd2d0c7e00dc5"}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x40, 0x2, 0x7}, {0x8, 0x5, 0x2, "ffd45fa490"}}}, @TCF_EM_META={0x38, 0x1, 0x0, 0x0, {{0x8, 0x4, 0xc3f}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x20, 0x6, 0x1}, {0x8, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="04be", @TCF_META_TYPE_VAR="63c6", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8e, 0x1, 0x9}, {0x0, 0x98b8, 0x5, 0x8, 0x6}}}, @TCF_EM_CONTAINER={0x78, 0x1, 0x0, 0x0, {{0xb341, 0x0, 0x80}, "26d915d8b046391cd687ce9b824e2e3951bbca04df8d9f06f051684c9728800aea7ba61d4d2d385466e7dfff699fe1c5d81bc747ea372d4a8a44c11fd65ce8662a652467533d8f659d80d9b9f4397e0b98eb04c28dec33e088f27f6091438a11a89bfb45a4f9c33709"}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xb9f}]}, 0x2300}, 0x1, 0x0, 0x0, 0x24000040}, 0xc080) getsockname$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) 06:56:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 06:56:32 executing program 1: getpriority(0xcdc2b903cf8c5d46, 0x0) 06:56:32 executing program 5: memfd_create(&(0x7f00000002c0)='{&\x00', 0x2) [ 192.896360][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 06:56:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x7}, 0x0) 06:56:32 executing program 1: socketpair(0x2, 0x2, 0x0, &(0x7f0000000140)) 06:56:32 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000008c0)) 06:56:32 executing program 2: bpf$MAP_CREATE(0x16, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:56:32 executing program 1: r0 = epoll_create(0x9) r1 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) [ 193.211534][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 06:56:32 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x541b, 0x0) 06:56:32 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x10000000) 06:56:32 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x8914, 0x0) 06:56:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000047c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000016c0)=""/46, 0x2e}}], 0x1, 0x40000120, &(0x7f0000004900)={0x0, 0x989680}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 06:56:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x815, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 06:56:32 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 06:56:32 executing program 5: getgroups(0x2, &(0x7f0000000080)=[0x0, 0xee01]) setgroups(0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, r0, 0x0]) 06:56:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000250000000e04000000000000007673696d000000785f79695a2806bf657604696d"], 0x3c}}, 0x0) getpgrp(0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 06:56:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0xf0, 0x320, 0xffffffff, 0x320, 0x320, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key}}}, {{@ipv6={@private0, @loopback, [], [], 'veth0_to_bridge\x00', 'ip6erspan0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 06:56:33 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003b7aaf474391685413e2df14fba2aa230f8c778351f6aefd1b4ba75a7ff765f1fbc4f100758c1ca16a6e8fc138bab78f"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000004980)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000093c0)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x1b, 0x5, 0x518, 0xf0, 0x320, 0xffffffff, 0x320, 0x320, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7, 0x1, 0x2, 0x8, 0xae2, 0x89d5, 0x1, 0xa11c, 0x1]}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {'\x00c'}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xff, 0xffffff], 'veth0_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x3b, 0x89, 0x2}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x9, 0x4, 0x2710, 0xf75e, 0x5, 0x1, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv4=@loopback, @ipv4=@rand_addr=0x64010102, @gre_key=0x2, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) 06:56:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:56:33 executing program 5: setfsuid(0xee01) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 06:56:33 executing program 2: setgroups(0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0]) 06:56:33 executing program 1: bpf$PROG_BIND_MAP(0xe, 0x0, 0x0) [ 193.997472][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.003836][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 06:56:33 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 06:56:33 executing program 0: syz_open_dev$vcsn(&(0x7f0000000200), 0x1f, 0x4040) 06:56:33 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xd8, 0x59, &(0x7f0000000300)="f258b4b23585f2659002cd5e4fdac08e00ed3b292d4b91ace19dfd33ffa976feb91e191f7871d80b151f380a32bd7ba635da6a5c8e2512575391658a1bd5546f4bdf49912f84a02c8f25baec6cb0ebd2236fcac49f2dd29ee360f360a75b745b128e7fd33c6b11369b1c6d5b6dcafaf28c03527f9687f3e5cbed4b6b991787469e40d3a6aba3972c022e6b3e195b6306eb6871b1e6e11749543b265d10c2a6c760302c91802d03cd6afc3db915d5b4f026e261a50ac36aa0591c60e95661a37c4b0537344ce279fe3b450d98a1d5939f74c2eb010ee84ca1", &(0x7f00000001c0)=""/89, 0x0, 0x0, 0x79, 0x85, &(0x7f0000000480)="8233ba6d5e1e1f6d4ab1131ef1b7ca63fed2552ac5346a534ff350a4670be86847ceb7317f1890ae0be8a359b1e390f8b113ae66676961364ef3fb0279815419acd6a0cb0d91f3a1583ccf717e40916411b9672662a70acf074a952f1808b2b0add7f899a2db8949f8ae2372d398063a1ab81e431765e67cf8", &(0x7f0000000500)="5d8ecbccb2879c3eb20e1fac2d29a3634462fbd0ebd19bd792f7ff85913bcc5fec2554cf616d476a7743aaa53bed283a87981092374d72e50bf03d7b7efeea0698e05d66d75a7e3d34130eb2603ef2230ed1b44043473cea31c1ade8fcc77df7eed4b336ff18f2ccdebcb3745e9d6c0602053a32592ad6ec5c3c778f78b6c49e0bb9e2cd2d", 0x1, 0x8}, 0x91) 06:56:33 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/slabinfo\x00', 0x0, 0x0) 06:56:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x815}, 0x24}}, 0x0) 06:56:33 executing program 4: socket(0x0, 0x8cce351d205b904e, 0x0) 06:56:33 executing program 0: bpf$MAP_CREATE(0xd, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:56:33 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 06:56:33 executing program 2: bpf$PROG_BIND_MAP(0x23, 0x0, 0x10) 06:56:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty}}) 06:56:33 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x8982, 0x0) 06:56:33 executing program 0: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x3e0773e3f046abf9) 06:56:34 executing program 5: bpf$PROG_BIND_MAP(0x13, 0x0, 0x0) 06:56:34 executing program 1: bpf$MAP_CREATE(0x1e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:56:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x1, &(0x7f0000000180)=@raw=[@func], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:56:34 executing program 4: bpf$MAP_CREATE(0x18, 0x0, 0x0) 06:56:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000240)=@raw=[@exit], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:56:34 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 06:56:34 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x2fa000, 0x0) 06:56:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000180)={0xe6, 0x273a}) 06:56:34 executing program 2: r0 = fork() ptrace(0x8, r0) 06:56:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x1b, 0x5, 0x518, 0xf0, 0x320, 0xffffffff, 0x320, 0x320, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {'\x00c'}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key}}}, {{@ipv6={@private0, @loopback, [], [], 'veth0_to_bridge\x00', 'ip6erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) 06:56:34 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$alg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 06:56:34 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x8981, 0x0) 06:56:34 executing program 1: socket$inet(0x2, 0x2, 0x8) 06:56:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'veth1_to_team\x00', @multicast}) 06:56:34 executing program 0: bpf$PROG_BIND_MAP(0x1d, 0x0, 0x0) 06:56:34 executing program 5: bpf$MAP_CREATE(0x21, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:56:34 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fork() r2 = fork() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000080)={r0}) 06:56:34 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x8953, 0x0) 06:56:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x40) 06:56:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000003100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x21, 0x0) 06:56:35 executing program 1: io_uring_setup(0x40022a2, &(0x7f0000000040)) 06:56:35 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) 06:56:35 executing program 2: bpf$PROG_BIND_MAP(0x12, 0x0, 0x0) 06:56:35 executing program 5: bpf$PROG_LOAD(0x16, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:56:35 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x8904, 0x0) 06:56:35 executing program 4: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0xffff2777}, 0x8) 06:56:35 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0x10) 06:56:35 executing program 2: bpf$MAP_CREATE(0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:56:35 executing program 5: socketpair(0xa, 0x2, 0x0, &(0x7f0000000140)) 06:56:35 executing program 4: bpf$MAP_CREATE(0x1d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:56:35 executing program 1: clock_gettime(0x0, &(0x7f0000004dc0)) 06:56:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000cc0)={0xec8, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_MODES_OURS={0xe6c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe59, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0x4}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}]}, 0xec8}}, 0x0) 06:56:35 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') 06:56:35 executing program 5: timer_create(0x2c8478a8f688b300, 0x0, &(0x7f0000000040)) 06:56:35 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 06:56:35 executing program 2: futex(&(0x7f0000000040)=0x1, 0x8b, 0x1, &(0x7f0000000180), 0x0, 0x0) 06:56:35 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{}, 'port0\x00'}) 06:56:35 executing program 0: ustat(0x6, &(0x7f0000000100)) 06:56:35 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read$alg(r0, 0x0, 0x0) 06:56:35 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0) 06:56:36 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000008380)={0x2020}, 0x2000a3a0) syz_fuse_handle_req(r0, &(0x7f000000e400)="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", 0x2000, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:56:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x40012000, 0x0, 0x0) 06:56:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x74}, {}]}) 06:56:36 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x90640, 0x0) 06:56:36 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, 0x0) mq_notify(r0, 0x0) 06:56:36 executing program 1: r0 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000000)) 06:56:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000005f80)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000005bc0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 06:56:36 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000079c0)={0x0, 0x1, 0x6, @remote}, 0x10) 06:56:36 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') ioctl$KDSETLED(r0, 0x4b32, 0x0) 06:56:36 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000640), 0x157940, 0x0) 06:56:36 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xd0, 0xd0, 0xd0, 0xd0, 0xd0, 0x2c0, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth0_macvtap\x00', 'ipvlan0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0xd, 0x0, 0x40000000, 0x0, 0x0, 0x7ae, 0x20}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 'wlan1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @local}, 0x1c) 06:56:36 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000001380)=@abs, 0x6e) 06:56:37 executing program 2: socketpair(0x0, 0x101f554d099de07d, 0x0, 0x0) 06:56:37 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f000000bf00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) getresuid(&(0x7f000000c140), &(0x7f000000c180), &(0x7f000000c1c0)) 06:56:37 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r1, @ANYBLOB="08001b"], 0x30}}, 0x0) 06:56:37 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 06:56:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)=@req={0x28, &(0x7f00000000c0)={'vlan0\x00', @ifru_data=0x0}}) 06:56:37 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000300)={@local}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback=0x7f007d00}, 0x79, r6}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a940)={0x5, [{0x0, r3}, {0x0, r3}, {0x0, r3}, {r1, r3}, {r1}, {}, {r1, r3}, {}, {r2, r3}, {0x0, r3}, {r1}, {0x0, r3}, {}, {r2, r3}, {0x0, r3}, {r2}, {r2}, {r2, r3}, {r1}, {}, {r2}, {r2}, {0x0, r3}, {r1}, {r1}, {r2, r3}, {}, {r1, r3}, {r1, r3}, {r2, r3}, {}, {0x0, r3}, {}, {0x0, r3}, {}, {}, {0x0, r3}, {r2}, {r2, r3}, {}, {0x0, r3}, {r1, r3}, {r1}, {r1}, {0x0, r3}, {r2}, {}, {0x0, r3}, {}, {0x0, r3}, {}, {0x0, r3}, {r1, r3}, {r1}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {0x0, r3}, {r1, r3}, {0x0, r3}, {}, {r1}, {0x0, r3}, {r1}, {}, {r1}, {0x0, r3}, {}, {r2, r3}, {r1}, {r2, r3}, {0x0, r3}, {r2, r3}, {r1, r3}, {}, {}, {r2, r3}, {r1, r3}, {0x0, r3}, {0x0, r3}, {r1, r3}, {}, {}, {}, {r2, r3}, {}, {0x0, r3}, {r1}, {r2}, {r2}, {r2, r3}, {r1}, {r2}, {}, {r2}, {r2, r3}, {r1}, {r2}, {r1}, {r2}, {r2}, {0x0, r3}, {r2}, {}, {0x0, r3}, {r2}, {r2, r3}, {r1}, {}, {}, {r2}, {}, {r2, r3}, {r2, r3}, {}, {0x0, r3}, {0x0, r3}, {r2, r3}, {0x0, r3}, {}, {0x0, r3}, {r2}, {0x0, r3}, {0x0, r3}, {}, {r1}, {r1}, {}, {r1, r3}, {}, {0x0, r3}, {r2, r3}, {r1, r3}, {r1, r3}, {}, {}, {r2}, {r2, r3}, {r2, r3}, {r1}, {0x0, r3}, {r2}, {}, {r2}, {}, {0x0, r3}, {r2}, {}, {r2}, {0x0, r3}, {r1}, {r2}, {r1}, {0x0, r3}, {r1}, {0x0, r3}, {}, {}, {}, {}, {r2, r3}, {}, {}, {}, {0x0, r3}, {0x0, r3}, {r1, r3}, {r1, r3}, {r2, r3}, {r1, r3}, {r2, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {r2, r3}, {}, {}, {0x0, r3}, {r2, r3}, {}, {0x0, r3}, {r1}, {r2}, {}, {r2}, {0x0, r3}, {}, {r2, r3}, {0x0, r3}, {r1, r3}, {0x0, r3}, {r2}, {}, {r2, r3}, {r2}, {r1}, {0x0, r3}, {}, {0x0, r3}, {r1, r3}, {0x0, r3}, {r2, r3}, {r1, r3}, {0x0, r3}, {0x0, r3}, {r1}, {0x0, r3}, {r1}, {0x0, r3}, {r2}, {r2, r3}, {r2, r3}, {}, {0x0, r3}, {}, {0x0, r3}, {r2, r3}, {0x0, r3}, {r2, r3}, {}, {0x0, r3}, {}, {r2}, {r1, r3}, {r2, r3}, {0x0, r3}, {r1}, {r2}, {0x0, r3}, {r2}, {0x0, r3}, {r2}, {}, {r1}, {}, {r2, r3}, {}, {r1}, {r1, r3}, {r2, r3}, {}, {r1, r3}, {0x0, r3}, {r1}, {r2}, {r1, r3}, {}, {r2}, {0x0, r3}, {0x0, r3}, {r1}, {0x0, r3}], 0x4, "304131c9601bfa"}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="0200000000000000d80000000000000000000000000000000000030000000000000000000000020000000500000006000000060000000000000006000000000000000000000000000000fcffffffffffffff2800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000670b81e82e5fc19393e44aef1a956241198cf0161fea14feffffff2a71dbb41294db2eb3e99d2bbbf8f4f9d9fb88becfb8f86912"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000056940)={0x303f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "acd9eea37de416"}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0xa00, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="6c9b2663a9eb24a9dcbcb70d2303545e1a34b75e20a6c7af74c1ac1b36a4724f4e76d1d722580e69cb21adcaa022861b4b9ed94e26d74e957973bc045548067358ce516e152e913d84eb7f6294e5fbbde7787a7f7e95a7d65bccf63f2e02e99bf954d8b69f430b8b2e462cedfcf2403c752ada7ba73a53e7e84e7a78ac1213", 0x7f, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x1, @mcast2, 0x7}, 0x1c) 06:56:37 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_devices(r0, 0x0, 0xfffffffffffffe9a) 06:56:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 06:56:37 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RWALK(r0, &(0x7f0000000040)={0x9}, 0x9) write$P9_RCREATE(r0, &(0x7f0000000080)={0x18}, 0x18) [ 197.982905][T11059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:56:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) [ 198.072860][T11059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.120544][T11059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:56:37 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, 0x0) 06:56:37 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, 0x0) 06:56:37 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') setns(r0, 0x58000080) [ 198.361344][T11078] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:56:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x0, 0x0, 0xff}}, 0x28}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) [ 198.414479][T11078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.451006][T11078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:56:37 executing program 1: r0 = fork() sched_rr_get_interval(r0, &(0x7f0000000040)) 06:56:37 executing program 2: socketpair(0x0, 0xe, 0x0, 0x0) 06:56:37 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_type(r0, &(0x7f0000000040), 0x9) 06:56:37 executing program 3: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000000a280)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000004480)={&(0x7f0000003380)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003400)=""/37, 0x25}], 0x1, &(0x7f0000003480)=""/4096, 0x1000}, 0x2000) semget(0x1, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000003200), r0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/160) 06:56:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8934, &(0x7f0000000300)={'bridge_slave_1\x00', @ifru_addrs=@phonet}) 06:56:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) 06:56:38 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) 06:56:38 executing program 2: openat$hwrng(0xffffffffffffff9c, 0x0, 0x410180, 0x0) 06:56:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffcdc}}, 0x0) 06:56:38 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 06:56:38 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') 06:56:38 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x383400, 0x0) 06:56:38 executing program 1: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) 06:56:38 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) 06:56:38 executing program 5: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0xe40, 0x0) 06:56:38 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00', 0x220, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce540b259808000000000000023493b87aafaffffffffffffff230a2472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907cbaa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0) 06:56:38 executing program 0: getrandom(&(0x7f0000000000)=""/4096, 0x1000, 0x0) 06:56:38 executing program 2: openat$bsg(0xffffffffffffff9c, 0x0, 0x450dc1, 0x0) 06:56:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 06:56:38 executing program 5: r0 = getpgrp(0xffffffffffffffff) ptrace$getregset(0x4204, r0, 0x0, 0x0) 06:56:38 executing program 3: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040), &(0x7f0000000080)) 06:56:38 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000024000705000000000000100000001f00", @ANYRES32=r2, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004240)=@delchain={0x64, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_sample={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) 06:56:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, 0x0) 06:56:38 executing program 2: r0 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000000)) 06:56:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000004480)={0x0, 0x0, 0x0}, 0x2000) syz_genetlink_get_family_id$batadv(&(0x7f0000003200), r0) 06:56:38 executing program 1: io_submit(0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000001bc0)=""/4091, 0xffb}], 0x10000000000000e6}}], 0x3fffffffffffccd, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) io_setup(0xa8a3, &(0x7f0000000000)) 06:56:39 executing program 3: ustat(0x8, &(0x7f0000000140)) 06:56:39 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x142, 0x0) 06:56:39 executing program 4: r0 = timerfd_create(0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 06:56:39 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) 06:56:39 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWALK(r0, &(0x7f0000000040)={0x9}, 0x9) write$P9_RCREATE(r0, &(0x7f0000000080)={0x18}, 0x18) 06:56:39 executing program 5: semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000000c0)=""/95) 06:56:39 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "26d1b187ee65493a1c94e6b51612b10da78729"}) 06:56:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x0, 0x9}, 0x1c) 06:56:39 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) 06:56:39 executing program 1: r0 = semget$private(0x0, 0x3, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, 0x0) 06:56:39 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b40)='ns/pid\x00') 06:56:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x0, 0x0, 0x0, 0x9}, 0x1c) 06:56:39 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xd0a01, 0x0) 06:56:39 executing program 0: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:56:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x213a06, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) chdir(&(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x8) creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x6609, 0x0) 06:56:39 executing program 4: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000080)=""/241) 06:56:39 executing program 5: add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)={0x0, 0x0, @b}, 0x48, 0xfffffffffffffff9) 06:56:39 executing program 1: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1461}) 06:56:39 executing program 0: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0x0, 0x5}) 06:56:39 executing program 3: socketpair(0x2, 0x0, 0xfffffffc, 0x0) 06:56:40 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/time\x00') 06:56:40 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write$cgroup_devices(r0, 0x0, 0x0) 06:56:40 executing program 3: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) prctl$PR_CAPBSET_DROP(0x18, 0x0) 06:56:40 executing program 0: openat$bsg(0xffffffffffffff9c, 0x0, 0x610480, 0x0) 06:56:40 executing program 4: socketpair(0x10, 0x3, 0xfffffffc, 0x0) 06:56:40 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl(0x40000080000101, 0x0, 0x0, 0x0) 06:56:40 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) 06:56:40 executing program 2: bpf$ITER_CREATE(0x21, 0xffffffffffffffff, 0x0) 06:56:40 executing program 4: socketpair(0xb17f24fab7a1cfdd, 0x0, 0x0, 0x0) 06:56:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 06:56:40 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:56:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc) 06:56:40 executing program 1: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/27) 06:56:40 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_devices(r0, 0x0, 0xa) 06:56:40 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) 06:56:40 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x38e00, 0x0) 06:56:40 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) 06:56:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0}}, 0x1) 06:56:40 executing program 1: socketpair(0xa, 0x1, 0x3, 0x0) 06:56:40 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2c02, 0x0) 06:56:40 executing program 4: socketpair(0x1, 0x0, 0xfffffffc, 0x0) 06:56:40 executing program 0: migrate_pages(0x0, 0x1, 0x0, 0x0) 06:56:40 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read$alg(r0, &(0x7f0000000040)=""/145, 0x91) 06:56:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)) 06:56:41 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 06:56:41 executing program 2: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) 06:56:41 executing program 0: perf_event_open(&(0x7f00000036c0)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) 06:56:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/98, 0x62}], 0x1, 0x1000, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 06:56:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_SOCK={0xdc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NODE={0xda0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd99, 0x3, "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"}]}]}, 0xec4}}, 0x0) 06:56:41 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) 06:56:41 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) 06:56:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/173, &(0x7f00000000c0)=0xad) 06:56:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 06:56:41 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, &(0x7f00000001c0)) 06:56:41 executing program 3: capset(&(0x7f00000014c0)={0x19980330}, &(0x7f0000001500)) 06:56:41 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x191580, 0x0) 06:56:41 executing program 1: getrandom(&(0x7f0000000080)=""/133, 0x85, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) write$cgroup_devices(r0, 0x0, 0x0) 06:56:41 executing program 5: mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) getresuid(&(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) 06:56:41 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000280)=""/111) 06:56:41 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8c000, 0x0) 06:56:42 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 06:56:42 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000780)={'stack ', ',#@*$B\x00'}, 0xd) 06:56:42 executing program 2: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000000)={{0x1, 0xffffffffffffffff, 0xee01}}) 06:56:42 executing program 1: getrandom(&(0x7f0000000080)=""/133, 0x85, 0x3) 06:56:42 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 06:56:42 executing program 3: socketpair(0xa, 0x0, 0xfffffffb, 0x0) [ 202.931134][ T26] audit: type=1400 audit(1632812202.219:2): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=",#@*$B" pid=11298 comm="syz-executor.5" 06:56:42 executing program 2: ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) 06:56:42 executing program 4: syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x3a100) 06:56:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000006700)='/sys/module/virtio_net', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) 06:56:42 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) 06:56:42 executing program 5: openat$fuse(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) 06:56:42 executing program 1: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000001240)=[0x100, 0xb72, 0x7]) 06:56:42 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0xfff}) 06:56:42 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000006700)='/sys/module/virtio_net', 0x40000, 0x0) 06:56:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) 06:56:42 executing program 1: stat(&(0x7f00000044c0)='./file0\x00', 0x0) 06:56:42 executing program 5: symlinkat(&(0x7f0000002480)='./file0\x00', 0xffffffffffffffff, &(0x7f0000002500)='./file0\x00') 06:56:42 executing program 3: syz_open_dev$usbmon(0x0, 0x0, 0x0) 06:56:42 executing program 4: syz_open_dev$loop(&(0x7f00000000c0), 0xfffffffffffffffc, 0x3a100) 06:56:42 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f00000024c0)='/sys/class/xt_idletimer', 0x210080, 0x0) 06:56:42 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[], 0xe1) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 06:56:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000006800), 0x0, 0x0) close(r0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 06:56:42 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x501) 06:56:42 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x40003, 0x0) 06:56:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 06:56:43 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000006700)='/sys/module/virtio_net', 0x0, 0x0) 06:56:43 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) 06:56:43 executing program 5: read$usbmon(0xffffffffffffffff, 0x0, 0x0) 06:56:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0xfff}) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 06:56:43 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 06:56:43 executing program 2: syz_open_dev$loop(&(0x7f00000023c0), 0x0, 0x1) 06:56:43 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) 06:56:43 executing program 0: unlinkat(0xffffffffffffffff, &(0x7f0000002a80)='./file0\x00', 0x0) 06:56:43 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000002540)='/sys/block/loop0', 0x80800, 0x0) 06:56:43 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100)) write$cgroup_type(r0, &(0x7f0000000000), 0x20b000) 06:56:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) read$usbmon(r0, 0x0, 0x0) 06:56:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1}, 0x40) 06:56:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x0, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0}}], 0x2, 0x0) 06:56:43 executing program 1: sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') preadv(r0, &(0x7f00000017c0), 0x194, 0xf0ff7f, 0x0) 06:56:43 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x398) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) wait4(0x0, 0x0, 0x0, 0x0) 06:56:43 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002540)='/sys/block/loop0', 0x0, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 06:56:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x4}, {0x16}]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 06:56:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "070902", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) [ 204.660885][ T26] audit: type=1326 audit(1632812203.949:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11398 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ee5549 code=0x0 06:56:44 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/ipc\x00') 06:56:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 06:56:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "070902", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 06:56:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_hsr\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 06:56:44 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="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", 0x11f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 06:56:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "070902", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 06:56:44 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000001c0)=""/54, 0x36}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000017c0), 0x69, 0x0, 0x0) 06:56:44 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000002540)='/sys/block/loop0', 0x0, 0x0) 06:56:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "070902", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 06:56:46 executing program 0: syz_io_uring_setup(0x684c, &(0x7f0000000200), &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) 06:56:46 executing program 2: keyctl$search(0xb, 0x0, 0x0, 0x0, 0x0) 06:56:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x401c5820, &(0x7f0000000000)) 06:56:46 executing program 4: mremap(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000feb000/0x2000)=nil, &(0x7f0000fee000/0x1000)=nil], 0x0, &(0x7f0000000080), 0x0) 06:56:46 executing program 1: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="df52adbee58fff42b5616b1b72535badebdd9d9078e285ff4e61179235c7c62e12aab772cc3101d2bdf453e43806b9402b879e1034d4d34c68012e75e75df9ab01d9159c05d2f9f5848badaf494752fe3d817caf7ddc1f1a08f32e887d92106517cbb69a3f47bcbfb98a", 0x6a, r0) keyctl$search(0x3, r1, 0x0, 0x0, 0xfffffffffffffff9) 06:56:46 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0xe, 0x4, @tid=r0}, &(0x7f00000000c0)) 06:56:46 executing program 4: mremap(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) io_setup(0x2, &(0x7f0000000000)) 06:56:46 executing program 1: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="df52adbee58fff42b5616b1b72535badebdd9d9078e285ff4e61179235c7c62e12aab772cc3101d2bdf453e43806b9402b879e1034d4d34c68012e75e75df9ab01d9159c05d2f9f5848badaf494752fe3d817caf7ddc1f1a08f32e887d92106517cbb69a3f47bcbfb98a", 0x6a, r0) keyctl$search(0x3, r1, 0x0, 0x0, 0xfffffffffffffff9) 06:56:46 executing program 5: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="df52adbee58fff42b5616b1b72535badebdd9d9078e285ff4e61179235c7c62e12aab772cc3101d2bdf453e43806b9402b879e1034d4d34c68012e75e75df9ab01d9159c05d2f9f5848badaf494752fe3d817caf7ddc1f1a08f32e887d92106517cbb69a3f47bcbfb98a", 0x6a, r0) keyctl$search(0x3, r1, 0x0, 0x0, 0xfffffffffffffff9) 06:56:46 executing program 3: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xb, r0, 0x0, 0x0, 0x0) 06:56:47 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 06:56:47 executing program 3: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) 06:56:47 executing program 2: io_setup(0x8001, &(0x7f0000000000)) 06:56:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0x4, 0x0, &(0x7f0000000180)) 06:56:47 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) 06:56:47 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 06:56:47 executing program 0: clone3(&(0x7f0000001700)={0x10a040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:56:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0x19, 0x0, &(0x7f0000000180)) 06:56:47 executing program 4: r0 = syz_io_uring_setup(0x44a8, &(0x7f0000000880), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) r1 = syz_io_uring_setup(0x6397, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x4, 0x0, r2) 06:56:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0x5, 0x0, &(0x7f0000000180)) 06:56:47 executing program 5: r0 = syz_io_uring_setup(0x44aa, &(0x7f0000000880), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x2) 06:56:47 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xffc, 0x101041) write$binfmt_elf64(r0, 0x0, 0x0) 06:56:47 executing program 2: timer_create(0x7, 0x0, &(0x7f0000002b00)) timer_settime(0x0, 0x0, &(0x7f0000002b80)={{}, {0x0, 0x989680}}, 0x0) 06:56:47 executing program 3: r0 = shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock(&(0x7f0000fee000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) syz_io_uring_setup(0x5c0b, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 06:56:47 executing program 1: timer_create(0x1, &(0x7f0000000340)={0x0, 0x0, 0x1}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x3938700}}, 0x0) 06:56:47 executing program 0: r0 = syz_io_uring_setup(0x44aa, &(0x7f0000000880), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) r1 = syz_io_uring_setup(0x6397, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x3, 0x0, r2) 06:56:47 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x280220) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 06:56:47 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 06:56:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x61}]}) 06:56:47 executing program 3: r0 = shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock(&(0x7f0000fee000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) syz_io_uring_setup(0x5c0b, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 06:56:47 executing program 1: r0 = shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock(&(0x7f0000fee000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) syz_io_uring_setup(0x5c0b, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 06:56:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x32, 0x0, &(0x7f0000000280)) 06:56:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x64}]}) 06:56:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x22, 0x0, &(0x7f0000000280)) 06:56:48 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x321901, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 06:56:48 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 06:56:48 executing program 3: clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000400), {0x3a}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x0], 0x1}, 0x58) clone3(&(0x7f00000006c0)={0x100, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 06:56:48 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 06:56:48 executing program 0: socketpair(0x11, 0x3, 0x0, &(0x7f00000000c0)) 06:56:48 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x6) keyctl$revoke(0x3, r0) 06:56:48 executing program 5: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x7, r0, 0x0, 0x0, 0x0) 06:56:48 executing program 1: keyctl$reject(0x13, 0x0, 0x0, 0x202, 0xfffffffffffffffe) 06:56:48 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x5}]}) 06:56:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x5, r1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r1) 06:56:48 executing program 1: add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 06:56:48 executing program 2: socketpair(0x10, 0x0, 0xffffffff, &(0x7f0000000000)) 06:56:48 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x4000000) 06:56:48 executing program 5: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x6, r0) 06:56:48 executing program 3: r0 = syz_io_uring_setup(0x684c, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x5, 0x0, 0x0) 06:56:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0xd, 0x0, &(0x7f0000000180)) 06:56:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, "2b21ef46dd23aff052fee4fb624a10b871be8a5a8024d94a65d441f050256d466ed594ca60c3f4ac27decc74ff50d9cdacf1f22139d82b3e2d3f1bd278733fd652258b5b2fd6061ad5bd93ed00454d1f"}, 0xd8) 06:56:48 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/block/loop4', 0x20000, 0x0) 06:56:48 executing program 2: r0 = syz_io_uring_setup(0x44aa, &(0x7f0000000880), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) r1 = syz_io_uring_setup(0x6397, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x12, 0x0, r2) 06:56:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) 06:56:48 executing program 5: timer_create(0x2204545a4177a7f, 0x0, &(0x7f0000000040)) 06:56:48 executing program 1: timer_create(0x8, 0x0, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) 06:56:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="88", 0x1, r0) keyctl$link(0x8, r1, r0) 06:56:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x4020940d, &(0x7f0000000000)) 06:56:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x280220) fcntl$setflags(r0, 0x4, 0x0) 06:56:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000000440), 0x4000000000002ac, 0x140, 0x0) 06:56:49 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r3) 06:56:49 executing program 1: socketpair(0xa, 0x2, 0x2, &(0x7f00000000c0)) 06:56:49 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) 06:56:49 executing program 0: r0 = syz_io_uring_setup(0x684c, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x2, 0x0, 0x0) 06:56:49 executing program 5: ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, &(0x7f00000009c0)="dc", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)="903c0e200c9e95c8dd2e09380d5506a1114dd6794356e2f5080feb16d652a14a51c53d8f00c6786e6e13242d94638ef52b2a6e0ff6ced5700d56351cc194c8d68a031c2a9e59ee4520154121c7c8f1efa15deab1a5913d37e7bcfb27987a99824a2f6cfb4edab12e1bcbd3106b2d535107e3bbd0f62d97c3e801ce64e43a11156a7e490ba6d5fda4874a2e19dd1d90919c4e1305481c28f4f838b686092d02c7303943aca13da4861383edaf7958843c8e0bac3d3692c6", 0xb7, r0) keyctl$search(0x5, r1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r1) 06:56:49 executing program 4: timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}}, 0x0) 06:56:49 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0xc02) write$binfmt_elf64(r0, 0x0, 0x0) 06:56:49 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r0, 0xfffffffffffffffc) 06:56:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x2, 0x0, &(0x7f0000000080)={0x0, 0x0}) 06:56:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x287ee3) syz_io_uring_setup(0x684c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 06:56:49 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="903c0e200c9e95c8dd2e09380d5506a1114dd6794356e2f5080feb16d652a14a51c53d8f02c6786e6ef4242d94638ef52b2a6e0ff6ced5700d56351cc194c8d68a031c2a9e59ee4520154121c7c8f1824a2f6cfb4edab12e1bcbd3106b2d535107e3bbd0f6fbffe409c4f52d97c3e801ce64e43a11156a7e490ba6d5fca4874a2e19dd1d90919c4e1305481c28f4f838b686092d02c7303943aca13da4861383edaf7958843c8e0bac3d3692c600", 0xae, r0) 06:56:49 executing program 4: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xb, r0, &(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0) 06:56:49 executing program 3: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x11, r1, 0x0, 0x0) 06:56:49 executing program 0: r0 = syz_io_uring_setup(0x684c, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x10, 0x0, 0x0) 06:56:49 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) signalfd(r0, &(0x7f0000000080), 0x8) 06:56:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x280220) fcntl$setflags(r0, 0x2, 0x0) 06:56:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0x9, 0x0, &(0x7f0000000180)=0x23) 06:56:49 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 06:56:49 executing program 3: r0 = shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) syz_io_uring_setup(0x7267, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000feb000/0x4000)=nil, 0x0, 0x0) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:56:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80100000d0101"], 0x1d8}}, 0x0) 06:56:50 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000800)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0xec1) 06:56:50 executing program 1: add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 06:56:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x16, 0x0, &(0x7f0000000180)=0x4) 06:56:50 executing program 4: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x3, r0, 0x0, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000700)='asymmetric\x00', &(0x7f0000000740)={'syz', 0x3}, 0x0) 06:56:50 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x101041) write$binfmt_elf64(r0, 0x0, 0x0) 06:56:50 executing program 3: r0 = syz_io_uring_setup(0x684c, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xb, 0x0, 0x0) 06:56:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x5, 0xb, 'callforwarding\x00'}]}, 0x28}}, 0x0) 06:56:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 06:56:50 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/kexec_crash_loaded', 0x145040, 0x0) 06:56:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x88, 0x64, &(0x7f0000000000), 0x4) 06:56:50 executing program 1: keyctl$search(0xd, 0x0, 0x0, 0x0, 0x0) 06:56:50 executing program 3: keyctl$search(0x10, 0x0, 0x0, 0x0, 0x0) 06:56:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x4d}, {}]}) 06:56:50 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x287ee3) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:56:50 executing program 4: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) clock_adjtime(0x0, &(0x7f0000000380)={0x3f, 0x6, 0x1, 0x2, 0xff, 0x5, 0x8, 0x100000001, 0x30000000000000, 0x3, 0x0, 0x3, 0x80000001, 0x1ff, 0x2, 0x8001, 0x8000, 0x4, 0x9, 0x1, 0xfffffffffffffffd, 0x5, 0x1, 0x3ff, 0x401, 0x7}) 06:56:50 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000540)="903c0e200c9e95c8dd2e09380d5506a1114dd6794356e2f5080feb16d652a14a51c53d8f02c6786e6ef4242d94638ef52b2a6e0ff6ced5700d56351cc194c8d68a031c2a9e59ee4520154121c7c8f1824a2f6cfb4edab12e1bcbd3106b2d535107e3bbd0f6fbffe409c4f52d97c3e801ce64e43a11156a7e490ba6d5fca4874a2e19dd1d90919c4e1305481c28f4f838b686092d02c7303943aca13da4861383edaf7958843c8e0bac3d3692c600", 0xae, r0) 06:56:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x30, 0x0, 0x0) 06:56:50 executing program 3: keyctl$search(0x7, 0x0, 0x0, 0x0, 0x0) 06:56:50 executing program 2: r0 = io_uring_setup(0x4633, &(0x7f0000004a80)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x0, 0x12, r0, 0x8000000) 06:56:50 executing program 0: r0 = syz_io_uring_setup(0x684c, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x2, 0x0) 06:56:50 executing program 4: r0 = syz_io_uring_setup(0x684c, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xe, 0x0, 0x0) 06:56:50 executing program 1: timer_create(0x8, &(0x7f0000000240)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000100)) 06:56:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4001) write$binfmt_elf32(r0, 0x0, 0x0) 06:56:50 executing program 3: keyctl$search(0x14, 0x0, &(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0) 06:56:50 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000600)='\x00', 0x1, r0) 06:56:50 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r0, 0x0, 0x0) 06:56:50 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0) 06:56:50 executing program 3: r0 = shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:56:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) 06:56:51 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) ioctl$FICLONE(r0, 0x40086602, 0xffffffffffffffff) 06:56:51 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x0, r0+60000000}}, &(0x7f0000000300)) 06:56:51 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000001640), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 06:56:51 executing program 3: r0 = shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:56:51 executing program 1: timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 06:56:51 executing program 2: syz_open_dev$vcsu(&(0x7f0000000080), 0x4, 0x46000) 06:56:51 executing program 4: add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000140)="60af", 0x2, 0xfffffffffffffffd) 06:56:51 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x684c, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) ioctl$FICLONE(r0, 0x541b, 0xffffffffffffffff) 06:56:51 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r1) 06:56:51 executing program 3: r0 = shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:56:51 executing program 4: pidfd_open(0x0, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x280000000000000, 0x0) 06:56:51 executing program 5: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r0) add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="c8", 0x1, r1) 06:56:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10000000100001"], 0x64}}, 0x0) 06:56:51 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:56:51 executing program 3: r0 = shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:56:51 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r1) 06:56:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0x13, 0x0, &(0x7f0000000180)) 06:56:52 executing program 2: clock_gettime(0xf3547823c5b0264d, 0x0) 06:56:52 executing program 3: r0 = shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:56:52 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r1) 06:56:52 executing program 4: r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='z', 0x1, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0) 06:56:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 06:56:52 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x14) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 06:56:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0x12, 0x0, &(0x7f0000000180)) 06:56:52 executing program 3: r0 = shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:56:52 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r1) 06:56:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) [ 213.053239][T11778] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:56:52 executing program 0: r0 = syz_io_uring_setup(0x684c, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 06:56:52 executing program 2: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) syz_io_uring_setup(0x5c0b, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 06:56:52 executing program 3: r0 = shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:56:52 executing program 5: keyctl$search(0x9, 0x0, 0x0, 0x0, 0x0) 06:56:52 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) 06:56:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x29, 0x0, &(0x7f0000000280)) 06:56:52 executing program 0: add_key$user(&(0x7f0000000100), 0xffffffffffffffff, 0x0, 0x0, 0x0) 06:56:52 executing program 3: shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:56:52 executing program 5: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000000)='\x00', &(0x7f0000000040)) keyctl$setperm(0x5, r0, 0x0) keyctl$unlink(0x7, r0, 0xfffffffffffffffd) 06:56:52 executing program 2: shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) 06:56:52 executing program 1: add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x15, 0x0, 0x0, 0x0, 0x0) 06:56:52 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/16, 0x10}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) 06:56:52 executing program 0: r0 = syz_io_uring_setup(0x44aa, &(0x7f0000000880), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x13, 0x0, 0x0) 06:56:53 executing program 3: shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:56:53 executing program 2: add_key(0x0, 0x0, &(0x7f00000002c0)="87c433d5211047", 0x7, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000240), 0x64, 0x0) 06:56:53 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 06:56:53 executing program 1: add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x15, 0x0, 0x0, 0x0, 0x0) 06:56:53 executing program 4: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000fee000/0x3000)=nil) 06:56:53 executing program 3: shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:56:53 executing program 0: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xb, r0, 0x0, 0x0, 0x0) 06:56:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}}, 0x0) 06:56:53 executing program 1: add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x15, 0x0, 0x0, 0x0, 0x0) 06:56:53 executing program 4: add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x2, 0x0) 06:56:53 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x94}]}) 06:56:53 executing program 3: shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:56:53 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/111, 0x6f}], 0x1, 0x0, 0x0, 0x0) 06:56:53 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) 06:56:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0x8, 0x0, &(0x7f0000000180)) 06:56:53 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0x15, r0, 0x0, 0x0, 0x0) 06:56:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r0, 0x0, 0x0) 06:56:53 executing program 3: shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:56:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x6, 0x0, &(0x7f0000000280)) 06:56:53 executing program 3: shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:56:53 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0x15, r0, 0x0, 0x0, 0x0) 06:56:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x29, 0x0, "2b21ef46dd23aff052fee4fb624a10b871be8a5a8024d94a65d441f050256d466ed594ca60c3f4ac27decc74ff50d9cdacf1f22139d82b3e2d3f1bd278733fd652258b5b2fd6061ad5bd93ed00454d1f"}, 0xd8) 06:56:53 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x8000000) 06:56:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xb, 0x0, &(0x7f0000000280)) 06:56:53 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x40101288, 0x0) 06:56:54 executing program 3: shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:56:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x60}]}) 06:56:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0x24, 0x0, &(0x7f0000000180)) 06:56:54 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0x15, r0, 0x0, 0x0, 0x0) 06:56:54 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2, &(0x7f0000000000)) 06:56:54 executing program 0: mremap(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x7fffdf016000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 06:56:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0xb, 0x0, &(0x7f0000000180)) 06:56:54 executing program 1: r0 = add_key$keyring(0x0, &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) 06:56:54 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000040)) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {r0, r1+60000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}}, &(0x7f0000000180)) timer_delete(0x0) 06:56:54 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000003800), &(0x7f0000003700)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000003500), &(0x7f0000003540)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000003640), &(0x7f0000003680)={'syz', 0x3}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000035c0), &(0x7f0000003600)={'syz', 0x3}, 0x0, 0x0, r3) 06:56:54 executing program 0: timer_create(0x8, &(0x7f0000000240)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000280)) 06:56:54 executing program 5: fsopen(&(0x7f0000000ac0)='cgroup\x00', 0x0) 06:56:54 executing program 1: r0 = add_key$keyring(0x0, &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) 06:56:54 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) fsync(r0) 06:56:54 executing program 3: setuid(0xee00) io_uring_setup(0x544e, &(0x7f0000000000)={0x0, 0xed9e}) 06:56:54 executing program 0: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x3, r0, 0x0, 0x0, 0x0) 06:56:54 executing program 2: add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) 06:56:54 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x1263, &(0x7f0000000000)) 06:56:54 executing program 1: r0 = add_key$keyring(0x0, &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) 06:56:54 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) fsync(r0) 06:56:54 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x1, 0x0) 06:56:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x4001) write$binfmt_elf32(r0, 0x0, 0x0) 06:56:54 executing program 3: r0 = syz_io_uring_setup(0x44aa, &(0x7f0000000880), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) r1 = syz_io_uring_setup(0x6397, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x12, 0x0, r2) 06:56:54 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x410b02, 0x0) 06:56:54 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) fsync(r0) 06:56:54 executing program 0: r0 = syz_io_uring_setup(0x44a8, &(0x7f0000000880), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x6de5, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 06:56:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x145001) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 06:56:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0x1e, 0x0, &(0x7f0000000180)) 06:56:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) fsync(r0) 06:56:55 executing program 0: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) 06:56:55 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f0000001f40)) 06:56:55 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) 06:56:55 executing program 3: r0 = syz_io_uring_setup(0x684c, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x4, 0x0, 0x0) 06:56:55 executing program 0: keyctl$search(0x3, 0x0, 0x0, 0x0, 0x0) 06:56:55 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) 06:56:55 executing program 5: add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000180), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 06:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0) 06:56:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(0xffffffffffffffff) 06:56:55 executing program 3: add_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="9926c2c51f76abf4d9f8de626c6c5e49f0246be9d61334b29cd05820c61aad49e191ee708b2e36", 0xfffffeea, 0x0) 06:56:55 executing program 0: r0 = memfd_create(&(0x7f0000000080)='}.{*:^\x00', 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 06:56:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000008a8501"], 0x28}}, 0x0) 06:56:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0x3, 0x0, &(0x7f0000000180)) 06:56:55 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) 06:56:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(0xffffffffffffffff) 06:56:55 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x25}, {}]}) 06:56:55 executing program 0: socketpair(0x11, 0x2, 0x49, &(0x7f0000000000)) 06:56:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 06:56:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(0xffffffffffffffff) 06:56:55 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x64}, {}]}) 06:56:55 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) 06:56:55 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x30000000) 06:56:56 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000280)={0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {r0}}, 0x0) 06:56:56 executing program 5: bpf$MAP_CREATE(0xf, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:56:56 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) 06:56:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) fsync(r0) 06:56:56 executing program 0: bpf$MAP_CREATE(0x1b, 0x0, 0x0) 06:56:56 executing program 3: bpf$MAP_CREATE(0x13, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:56:56 executing program 3: keyctl$revoke(0x3, 0x0) init_module(&(0x7f0000000100)='w@}/)\r,%^\\.\xd1l4$:&]*@(/&\x00\xffu\xc3&Ql\v\xc9\xd0\xcd\xa0\x92\xff\xc8\xbd\x1e\xee\x1a\xe1\xa6YW\xec\xc1\xb6\x04\x9f\xb1\x94\xc8HI\xec\x9d\xe8\xf2|\xa9{\x13\x90r(-\xa3\xac\x8d\x0e\xa1ox\xfb\xa4\xe0nm\xedz\xda\xe3\xfa\xc7\x15\xdbY\xef.\f\x1a\x19&\x11\xd3\xcc?L9\xe7\xfd\xa5\x8f\xb3\xf9\xeb\xc9=\xc5H\x8a&Q.\x19\x11kQ\x94\x10S\xb1nv\xed\x91X\xd3\xb0\x91\x0f\x01\x16\xd6\xe0\xfc\xdb\xbf\xb8\xa9;\xe8\xab([\t\x16\x9bC*t\x8bc\xdcnF\xb7\xe5\xd9\x9cqV\x8f\xd5\xdc\x8d\xac\xa2\x92\xa0(\xc8]\x81S\b\xfcey=\xd3\\\x17\xe6n\x1b', 0xbc, 0x0) 06:56:56 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r0+10000000}}, 0x0) timer_delete(0x0) 06:56:56 executing program 2: socket(0xa, 0x5, 0x0) 06:56:56 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) 06:56:56 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x4281) 06:56:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) fsync(r0) 06:56:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0) 06:56:56 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x280220) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 06:56:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{}, {0x4}, {0x6}]}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) 06:56:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) fsync(r0) 06:56:56 executing program 0: keyctl$search(0x6, 0x0, 0x0, 0x0, 0x0) 06:56:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x4, 0xb, 'callforwarding\x00'}]}, 0x28}}, 0x0) 06:56:56 executing program 2: r0 = syz_io_uring_setup(0x44aa, &(0x7f0000000880), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) r1 = syz_io_uring_setup(0x6397, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x5, 0x0, r2) 06:56:56 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) fsync(r0) 06:56:56 executing program 0: r0 = syz_io_uring_setup(0x684c, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x6, 0x0, 0x0) [ 217.492066][ T26] audit: type=1326 audit(1632812216.779:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12032 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ed4549 code=0x0 06:56:56 executing program 3: add_key$keyring(&(0x7f0000000ac0), 0x0, 0x0, 0x0, 0xffffffffffffffff) clone3(&(0x7f00000002c0)={0x18200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:56:56 executing program 5: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x2c700) 06:56:57 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) fsync(r0) 06:56:57 executing program 0: keyctl$search(0x14, 0x0, 0x0, 0x0, 0x0) 06:56:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x19, 0x0, &(0x7f0000000280)) 06:56:57 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x280220) fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x0, 0x0) 06:56:57 executing program 5: r0 = syz_io_uring_setup(0x684c, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, 0x0) 06:56:57 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000ac0), 0x0, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) 06:56:57 executing program 0: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 06:56:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0) 06:56:57 executing program 0: r0 = syz_io_uring_setup(0x44aa, &(0x7f0000000880), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x11, 0x0, 0x0) 06:56:57 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) 06:56:57 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) fsync(r0) 06:56:57 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000ac0), 0x0, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) 06:56:57 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:56:57 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000ac0), 0x0, 0x0, 0x0, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) 06:56:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x3, 0x4) 06:56:57 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(0x0, 0x0, 0x0) fsync(r0) 06:56:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x11, r0, &(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0) 06:56:57 executing program 3: r0 = syz_io_uring_setup(0x44aa, &(0x7f0000000880), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) r1 = syz_io_uring_setup(0x6397, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x6, 0x0, r2) 06:56:57 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r0+10000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000100)) 06:56:57 executing program 1: add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0x15, r0, 0x0, 0x0, 0x0) 06:56:57 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x206582, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 06:56:57 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(0x0, 0x0, 0x0) fsync(r0) 06:56:57 executing program 2: keyctl$reject(0x13, 0x0, 0x0, 0x200, 0xfffffffffffffffe) 06:56:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0x1a, 0x0, &(0x7f0000000180)) 06:56:57 executing program 3: r0 = syz_io_uring_setup(0x44aa, &(0x7f0000000880), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x12, 0x0, 0x0) 06:56:58 executing program 0: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x7, r0, 0x0, &(0x7f0000000280)={'syz', 0x3}, 0x0) 06:56:58 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(0x0, 0x0, 0x0) fsync(r0) 06:56:58 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) ioctl$FICLONE(r0, 0x801c581f, 0xffffffffffffffff) 06:56:58 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)) 06:56:58 executing program 3: timer_create(0x2, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r0+10000000}}, 0x0) 06:56:58 executing program 2: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = shmget$private(0x0, 0x10000, 0x0, &(0x7f0000fee000/0x10000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) 06:56:58 executing program 0: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xf, r0, 0x0, 0x0, 0x0) 06:56:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x29, 0x0, 0x0) 06:56:58 executing program 1: add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0x15, r0, 0x0, 0x0, 0x0) 06:56:58 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) fsync(0xffffffffffffffff) 06:56:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x29, 0x0, 0x0) 06:56:58 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) ioctl$FICLONE(r0, 0x541b, 0xffffffffffffffff) 06:56:58 executing program 1: add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0x15, r0, 0x0, 0x0, 0x0) 06:56:58 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000180)="02", 0x1, r0) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, r1) 06:56:58 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) fsync(0xffffffffffffffff) 06:56:58 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x25}]}) 06:56:58 executing program 2: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) syz_io_uring_setup(0x4284, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), 0x0) syz_io_uring_setup(0x5c0b, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 06:56:58 executing program 0: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 06:56:58 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) fsync(0xffffffffffffffff) 06:56:58 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x10000000) 06:56:58 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) write$binfmt_elf64(r0, 0x0, 0x0) 06:56:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, 0x0, 0x0, 0x0, 0x0) 06:56:59 executing program 0: r0 = io_uring_setup(0x4633, &(0x7f0000004a80)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 06:56:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x14, 0x0, &(0x7f0000000280)) 06:56:59 executing program 4: syz_io_uring_setup(0x5c0b, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 06:56:59 executing program 3: syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x2c700) 06:56:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}}, 0x0) 06:56:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, 0x0, 0x0, 0x0, 0x0) 06:56:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)) 06:56:59 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r1, &(0x7f0000000040)=""/64, 0x40) 06:56:59 executing program 4: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x15, r0, 0x0, 0x0, 0x0) 06:56:59 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) ioctl$FICLONE(r0, 0x80086601, 0xffffffffffffffff) 06:56:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x80081270, &(0x7f0000000000)) 06:56:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0x15, 0x0, 0x0, 0x0, 0x0) 06:56:59 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setflags(r0, 0x2, 0x0) 06:56:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x17, 0x0, &(0x7f0000000280)) 06:56:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0x1d, 0x0, &(0x7f0000000180)) 06:56:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x1, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 06:56:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) 06:56:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0x6, 0x0, &(0x7f0000000180)) 06:56:59 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r0+10000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) 06:57:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x3, 0x0, &(0x7f0000000280)) 06:57:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x541a, &(0x7f00000002c0)) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) 06:57:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x1269, &(0x7f0000000000)) 06:57:00 executing program 1: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/134) 06:57:00 executing program 5: syz_io_uring_setup(0x684c, &(0x7f0000000200), &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a2f, &(0x7f0000000080), &(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 06:57:00 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONE(r1, 0x40049409, r0) 06:57:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 06:57:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(r0) 06:57:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="f2", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:57:00 executing program 4: r0 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 06:57:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000080)=0xbf16, 0x4) 06:57:00 executing program 2: io_setup(0x6, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) io_pgetevents(r0, 0x1, 0x1, &(0x7f0000000240)=[{}], &(0x7f0000000180)={0x0, r1+10000000}, 0x0) 06:57:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 06:57:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0x1c, 0x0, &(0x7f0000000180)) 06:57:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:57:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) 06:57:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f00000002c0)) 06:57:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001280)={&(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001780)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}, 0x0) 06:57:01 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001280)={&(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001700)=[{&(0x7f00000001c0)="f2daaf70c0a522ce0fc85df48ec5186dc563f119afb2c2fc610e73bc54a51e2d6c434d97b27e0053de58a9a4eda913007eae324cf4b83ca119f452129ce22674095456a34ee13e3cf2fcf69affc5f9", 0x4f}, {&(0x7f0000001400)="d4ea14d2f10f409a2a3322da91ddd8aa8595d1d7d5c717295126f911af6b47c6ec4bc7f861891516785fbe9c6ac22039b7", 0x31}, {&(0x7f00000014c0)="09527b66acdfecd5b7041795b18188f59ee931e664f38f87fd30159f3d1bb80d17c28fef41da6e0d043d17a3c710d029e4968e0c8408a01b935f264663fe54d5c91a93278b6a3af4a6fd6a57bb31e4409c08f4158bfd02039a59a09fbd668e46758fb7a0b4f2e0e6ae4a313416c5c75320c75b970682a8c97a53c82db635d99de2985984c688b8f8f39f9020257fe72b436f3fc235a5a0b4b03dd26c6c8fd7f297b813eaad", 0xa5}, {&(0x7f0000001580)="fde651da28a8312737635323a1a7f0ab30fd3959086d5b85b0c1e9113a62884316187fac00ac7e303a1b0a04ca00c71b6e754265d0cbe7ce2787935e7ea403675e44857c1f971dfddc2ab574b3ed2a7c0e3be2dce859f026e6142f7ef165818af5ef7d6aabb1f03eff", 0x69}], 0x4, &(0x7f0000001780)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x58}, 0x0) 06:57:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETIFF(r0, 0x800454d2, 0x0) 06:57:03 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8937, &(0x7f0000000540)={'sit0\x00', 0x0}) 06:57:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005980)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) 06:57:03 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x41, 0x0, 0x0) 06:57:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x401c5820, 0x0) 06:57:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x5421, 0x0) 06:57:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8922, &(0x7f0000000540)={'sit0\x00', 0x0}) 06:57:03 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0), &(0x7f00000001c0)=0x8) [ 224.478851][T12301] sit0: mtu less than device minimum 06:57:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8923, &(0x7f0000000540)={'sit0\x00', 0x0}) 06:57:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast2}}) 06:57:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast1}}) 06:57:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x40049409, 0x0) 06:57:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 06:57:03 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001340)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) 06:57:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8914, &(0x7f0000000540)={'sit0\x00', 0x0}) 06:57:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x30}, 0xc) 06:57:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8910, &(0x7f0000000540)={'sit0\x00', 0x0}) 06:57:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x541b, &(0x7f0000000540)={'sit0\x00', 0x0}) 06:57:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}}}}) 06:57:04 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2}}) 06:57:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8932, &(0x7f0000000540)={'sit0\x00', 0x0}) 06:57:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8946, &(0x7f0000000540)={'sit0\x00', 0x0}) 06:57:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local}}) 06:57:07 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x5452, 0x0) 06:57:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 06:57:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 06:57:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8993, &(0x7f0000000540)={'sit0\x00', 0x0}) 06:57:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x5450, 0x0) 06:57:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty, 0x1}}) 06:57:07 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8927, &(0x7f0000000540)={'sit0\x00', 0x0}) 06:57:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty, 0x1}}) 06:57:07 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0x10, 0x0, @empty}, 0x10, 0x0}}], 0x300, 0x0) 06:57:07 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xd8, 0xdf, 0xeb, 0x40, 0x1934, 0x706, 0x277f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc4, 0x88, 0x33}}]}}]}}, 0x0) 06:57:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 06:57:07 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r1, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800980, 0x20) openat(r3, &(0x7f00000001c0)='./bus\x00', 0x800, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x745000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x4000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r4 = open(&(0x7f0000000100)='./bus\x00', 0x6e842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x300000}], 0x1, 0x4200, 0x0, 0x3) 06:57:07 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0) 06:57:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty, 0x1}}) 06:57:07 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x100) 06:57:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x100) 06:57:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty, 0x1}}) [ 228.503873][ T8539] usb 6-1: new high-speed USB device number 2 using dummy_hcd 06:57:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0xee01, @ANYBLOB="4f8ff14d", @ANYRES16, @ANYBLOB="040004000000", @ANYBLOB="08000200", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB="100014000000000020000400010000006ca7a82a24f9be0eea5fb45e128c3ce0bc762a"], 0x54, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x7, 0x32, 0xe6, 0x5, 0x0, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x77e6, 0xf6df, 0x1, &(0x7f0000000040), 0x8) 06:57:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup(0xffffffffffffffff) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004880)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30050, 0x33d049041f16bfb2}}}}}}]}, 0x48}}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 06:57:07 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty, 0x1}}) 06:57:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz'}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3cusgrVe-:De', 0x0) [ 229.124800][ T8539] usb 6-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=27.7f [ 229.147266][ T8539] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.197419][ T8539] usb 6-1: Product: syz [ 229.221485][ T8539] usb 6-1: Manufacturer: syz [ 229.247375][ T8539] usb 6-1: SerialNumber: syz [ 229.284036][ T8539] usb 6-1: config 0 descriptor?? [ 229.335322][ T8539] f81232 6-1:0.0: f81232 converter detected [ 229.357523][ T8539] usb 6-1: f81232 converter now attached to ttyUSB0 [ 229.561699][ T25] usb 6-1: USB disconnect, device number 2 [ 229.616009][ T25] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 229.655976][ T25] f81232 6-1:0.0: device disconnected [ 230.343640][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 230.863483][ T25] usb 6-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=27.7f [ 230.873057][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.881481][ T25] usb 6-1: Product: syz [ 230.885889][ T25] usb 6-1: Manufacturer: syz [ 230.890594][ T25] usb 6-1: SerialNumber: syz [ 230.897685][ T25] usb 6-1: config 0 descriptor?? [ 230.935243][ T25] f81232 6-1:0.0: f81232 converter detected [ 230.942888][ T25] usb 6-1: f81232 converter now attached to ttyUSB0 06:57:10 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty, 0x1}}) 06:57:10 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000001d80)=""/225, 0xffffffffffffff3c, 0x0, 0x1, 0x2}}, 0x48) 06:57:10 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4611, &(0x7f00000004c0)) 06:57:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1263, r1) 06:57:10 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xd8, 0xdf, 0xeb, 0x40, 0x1934, 0x706, 0x277f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc4, 0x88, 0x33}}]}}]}}, 0x0) 06:57:10 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 231.151882][ T6235] usb 6-1: USB disconnect, device number 3 [ 231.182506][ T6235] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 231.249881][ T6235] f81232 6-1:0.0: device disconnected 06:57:10 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty, 0x1}}) 06:57:10 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1000001bd) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) fork() r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f00000000c0)) getdents64(0xffffffffffffffff, 0x0, 0x19) syz_io_uring_setup(0x7107, &(0x7f0000000200), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(0xffffffffffffffff, 0x0, 0x9a70, 0x2, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x0, 0x0) 06:57:10 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xffffffe8) write$binfmt_misc(r0, 0x0, 0xcc) 06:57:10 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:57:10 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7cb, 0x0) 06:57:10 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty, 0x1}}) 06:57:10 executing program 3: set_mempolicy(0x1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = fanotify_init(0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fanotify_mark(r0, 0x21, 0x1, r1, 0x0) 06:57:10 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:57:11 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty, 0x1}}) 06:57:11 executing program 3: syz_usb_connect(0x2, 0x34, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x13, 0xa1, 0x6e, 0x40, 0xf11, 0x1035, 0x95ff, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x49, 0x28, 0x48, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "89cf510d17"}]}}]}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 231.793679][ T6235] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 232.203329][ T5] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 232.347503][ T6235] usb 6-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=27.7f [ 232.365859][ T6235] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.395935][ T6235] usb 6-1: Product: syz [ 232.410944][ T6235] usb 6-1: Manufacturer: syz [ 232.421598][ T6235] usb 6-1: SerialNumber: syz [ 232.441599][ T6235] usb 6-1: config 0 descriptor?? [ 232.505224][ T6235] f81232 6-1:0.0: f81232 converter detected [ 232.527018][ T6235] usb 6-1: f81232 converter now attached to ttyUSB0 [ 232.563869][ T5] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 232.599674][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 1361, setting to 64 [ 232.631286][ T5] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.659090][ T5] usb 4-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 232.678436][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.701972][ T5] usb 4-1: config 0 descriptor?? [ 232.763273][T12544] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 232.794843][ T5] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 232.854368][ T5] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 232.876589][ T1052] usb 6-1: USB disconnect, device number 4 [ 232.900429][ T1052] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 232.919990][ T1052] f81232 6-1:0.0: device disconnected [ 233.009815][ T6235] usb 4-1: USB disconnect, device number 2 [ 233.033523][ T6235] ldusb 4-1:0.0: LD USB Device #0 now disconnected 06:57:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) setrlimit(0xb, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 06:57:12 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:57:12 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty, 0x1}}) 06:57:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000040601"], 0x50}}, 0x0) [ 233.456532][T12597] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 233.823072][ T6235] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 234.213807][ T6235] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 234.234539][ T6235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 1361, setting to 64 [ 234.291928][ T6235] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.335698][ T6235] usb 4-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 234.362520][ T6235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.390413][ T6235] usb 4-1: config 0 descriptor?? [ 234.426051][T12544] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 234.464486][ T6235] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 234.513047][ T6235] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 234.684194][ T6235] usb 4-1: USB disconnect, device number 3 [ 234.723835][ T6235] ldusb 4-1:0.0: LD USB Device #0 now disconnected 06:57:16 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)) 06:57:16 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000005) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x20, 0x8}, 0x0) 06:57:16 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) close(r1) 06:57:16 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 06:57:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x4}) 06:57:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xd9f, 0x80000) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x80, 0x28) sendfile(r4, r5, 0x0, 0x80001d00c0d0) fallocate(r3, 0x11, 0x6, 0x280407) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x7, &(0x7f0000000180)=@raw=[@generic={0x40, 0x6, 0x1, 0x8, 0x417}, @map_val={0x18, 0x0, 0x2, 0x0, r5}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400}, @jmp={0x5, 0x0, 0x0, 0x41868283a14281e, 0x3, 0x80, 0x4}, @alu={0x7, 0x1, 0x8, 0x2, 0x0, 0x30, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x400, 0x5b, &(0x7f00000002c0)=""/91, 0x41000, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xc, 0x1, 0x6ef1}, 0x10, 0xffffffffffffffff}, 0x78) 06:57:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) ioctl$BLKIOOPT(r0, 0x80081280, &(0x7f0000000040)) 06:57:16 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) close(r1) 06:57:16 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 06:57:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup2(r2, r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 237.619096][ T26] audit: type=1326 audit(1632812236.913:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12650 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ee5549 code=0x0 [ 237.630187][T12665] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 06:57:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 06:57:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}]}, 0x1c}}, 0x0) 06:57:17 executing program 2: set_mempolicy(0x1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:57:17 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) close(r1) 06:57:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 06:57:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x600, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010003b253cff39c6c6be208b00000000", @ANYRES32=0x0, @ANYBLOB="4518000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 06:57:17 executing program 2: unshare(0x22020000) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000380)={0x0, 0x3b, 0x1}, &(0x7f00000003c0)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') close(0xffffffffffffffff) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000340)) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(0x0, 0x608c42, 0x0) 06:57:18 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:57:18 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:57:18 executing program 4: perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 06:57:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 06:57:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7) 06:57:18 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:57:18 executing program 4: sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 06:57:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000640)={"06000000dd245c848b040000c9c8dc1964325fa96fa42b76400101c02bec0ba41f010a003a40c8a4840000403b00041f01ffff80003c5ca2c2000000ee377abaece6b88378e3d63a03000040361d264ffa8b46485f02baee010100c04252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a7e8c499a573577736800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe65449b404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df1e7c9c71bc08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235ea5a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af706f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8fdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 06:57:19 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 239.782604][ T6235] usb 6-1: new high-speed USB device number 5 using dummy_hcd 06:57:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xb80}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) ftruncate(0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffff0004}}], 0x400000000000132, 0x4000000) [ 240.032162][ T6235] usb 6-1: Using ep0 maxpacket: 8 [ 240.273061][ T6235] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 240.296331][ T6235] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 240.338113][ T6235] usb 6-1: Product: syz [ 240.355007][ T6235] usb 6-1: Manufacturer: syz [ 240.376940][ T6235] usb 6-1: config 0 descriptor?? [ 241.092150][ T6235] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 06:57:20 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x41, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x0, 0x400}) 06:57:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0xfffffe58) [ 241.372170][ T6235] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 241.412502][ T6235] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 241.464810][ T6235] CoreChips: probe of 6-1:0.0 failed with error -71 [ 241.507261][ T6235] usb 6-1: USB disconnect, device number 5 [ 242.132101][ T6235] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 242.391791][ T6235] usb 6-1: Using ep0 maxpacket: 8 [ 242.632061][ T6235] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 242.641155][ T6235] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 242.651517][ T6235] usb 6-1: Product: syz [ 242.656394][ T6235] usb 6-1: Manufacturer: syz [ 242.666492][ T6235] usb 6-1: config 0 descriptor?? 06:57:22 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:57:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 06:57:22 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$packet(r1, &(0x7f00000000c0), 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:57:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x40000000000035c, 0xf) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) 06:57:22 executing program 3: ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) 06:57:22 executing program 2: syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000140)={0x0, 0xfffffffffffffffe, 0x8f, 0x20, @buffer={0x0, 0xad, &(0x7f0000000200)=""/173}, &(0x7f00000002c0)="f1d207bbad74482739b9dc53c54a362582a072d30b17e98b07f8547a8f6d24a65248d79f7b7387ea7709b5f6a73d41d9adfe6be7bba8f0e619cebd35f84e0ee863fb7d8edb217244118ec737e4f7d9e8e18c37561191c695ed76a38cab73d7bd4def061f0c5f93e839a28a356d2f7ef1572a2b6bbad353e24ab78241ce4a96430b5ab38bb1f4f7bcc5a571df2973e4", 0x0, 0xfffffffb, 0x0, 0x3, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c92", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005d940)={0x0, [], 0xfb, "ef060a34d7f4ba"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 242.801807][ T6235] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 242.840727][ T6235] CoreChips: probe of 6-1:0.0 failed with error -71 [ 242.900122][ T6235] usb 6-1: USB disconnect, device number 6 06:57:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty}}) 06:57:22 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$packet(r1, &(0x7f00000000c0), 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:57:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0/file2\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 06:57:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) 06:57:22 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$packet(r1, &(0x7f00000000c0), 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 243.392352][ T6235] usb 6-1: new high-speed USB device number 7 using dummy_hcd 06:57:22 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 243.661734][ T6235] usb 6-1: Using ep0 maxpacket: 8 [ 243.922776][ T6235] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 243.922814][ T6235] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 243.922841][ T6235] usb 6-1: Product: syz [ 243.922860][ T6235] usb 6-1: Manufacturer: syz [ 243.925111][ T6235] usb 6-1: config 0 descriptor?? [ 244.741699][ T6235] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 244.991628][ T6235] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 245.019125][ T6235] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 245.052651][ T6235] CoreChips: probe of 6-1:0.0 failed with error -71 [ 245.086930][ T6235] usb 6-1: USB disconnect, device number 7 06:57:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffe24, &(0x7f0000000380)={&(0x7f0000000000)={0x20, r3, 0x301, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc}]}, 0x20}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 06:57:24 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:57:24 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001780)={0x0, 0x0, "9054780ef7addb7d8bf7463b4f5091dbad7a388ecc5c26e589b72c8d42335ca18af330c80ca9608652d6fd701aaeae7980657580e8891cdab4e8aade40208dbcbaf39abedc1a6c44416d2cdde609245532ef65e2e66f9b1daefbaf5e897f54be2ab64a244395713326a58b6a7b15a213789630cf91b9db33de9006f429156107e7346e22b24c77113bb0058a64ff4cce1cfa4f63e0c15b8df29d16a616f523b767fe82f45043350577b5a210fe9291a5b4197cd2138be0d86ccc0b76521ccd01507baaaf0f6ea9cbfaee9c793e2d446bffa0be216d56a84bf05f74b8f3e073dbdf6dc6e2cd9a0e68678591a8a7d8096ab933723016854be0660f661b1ae07706", "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"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x10, 0xffffffffffffffff, 0xfc7e000) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) 06:57:24 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:57:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) 06:57:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058340)={0x0, [], 0x6, "30673dc447b580"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={0x0, 0x9996}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) 06:57:25 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:57:25 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x102, 0x102, 0x3, [@datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], "f9"}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}, @volatile, @ptr, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], '\x00'}, @const, @volatile, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x0]}}, 0x0, 0x11f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x38) 06:57:25 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 246.012281][ T6235] usb 6-1: new high-speed USB device number 8 using dummy_hcd 06:57:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 246.281380][ T6235] usb 6-1: Using ep0 maxpacket: 8 06:57:25 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 246.591348][ T6235] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 246.591382][ T6235] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 06:57:26 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 246.591404][ T6235] usb 6-1: Product: syz [ 246.591463][ T6235] usb 6-1: Manufacturer: syz [ 246.593584][ T6235] usb 6-1: config 0 descriptor?? 06:57:26 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(0xffffffffffffffff) 06:57:26 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(0xffffffffffffffff) [ 247.421261][ T6235] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 06:57:26 executing program 4: io_setup(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$inet(0xa, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'xfrm0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'veth0_to_bridge\x00'}, 0x18) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x128) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'tunl0\x00'}, 0x18) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1b7) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890c, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 247.691267][ T6235] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 247.723509][ T6235] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 247.781210][T12927] IPVS: sync thread started: state = BACKUP, mcast_ifn = xfrm0, syncid = 0, id = 0 [ 247.787593][ T6235] CoreChips: probe of 6-1:0.0 failed with error -71 [ 247.798653][T12926] IPVS: stopping backup sync thread 12927 ... [ 247.842046][ T6235] usb 6-1: USB disconnect, device number 8 06:57:27 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:57:27 executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) 06:57:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = getpgrp(0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 06:57:28 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(0xffffffffffffffff) 06:57:28 executing program 4: io_setup(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$inet(0xa, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'xfrm0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'veth0_to_bridge\x00'}, 0x18) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x128) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'tunl0\x00'}, 0x18) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1b7) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890c, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) socketpair$unix(0x1, 0x0, 0x0, 0x0) 06:57:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x4, 0x0, 0x0, 0x8, 0x1, 0x0, 0x1002]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)) [ 248.721597][ T6235] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 248.811271][T12951] IPVS: stopping backup sync thread 12955 ... [ 248.818674][T12955] IPVS: sync thread started: state = BACKUP, mcast_ifn = xfrm0, syncid = 0, id = 0 06:57:28 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x80045432, &(0x7f0000000000)) 06:57:28 executing program 0: io_uring_setup(0x4456, &(0x7f0000000440)) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r0) 06:57:28 executing program 4: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="24000000260007031dfffd866fa283002020020000000000000000010c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000700)=""/159, 0x9f}, {&(0x7f0000001680)=""/246, 0xf6}, {&(0x7f0000006cc0)=""/4109, 0x100d}], 0x4}}], 0x1, 0x0, 0x0) [ 248.991124][ T6235] usb 6-1: Using ep0 maxpacket: 8 [ 249.004418][T12962] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 06:57:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'vlan1\x00', {}, 0x9}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000000c0)=ANY=[], 0x20001290}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0ee394d3ec6b71b987c440894d75dc951362f76cb410f4cacfa3fc895d09717b48378d8d2f83d67ff517adde2c04f475b60b24a538d40306008b4e6a03a22d0858b4b429bf09297d56aea1a2e81d23efbcaecbed51039450e0786d590000e503733c9e0d5aa505195253065ffedb77acd68109791dc412eb66e0f9ad5a733202554db6375efb71f794b224012acfe0405c7fbadd3a91df115a3f9de7ee34c0765279f6830e7f45a1f45f6ab97a16425b83d80467b082aedaac4cf7071564198cf2"], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 249.251189][ T6235] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 249.271231][ T6235] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 06:57:28 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfd, 0x2e, 0xd6, 0x8, 0x50d, 0xf4f5, 0x6fc9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x98, 0x0, 0x0, 0xff, 0x1, 0x1}}]}}]}}, 0x0) [ 249.324584][ T6235] usb 6-1: Product: syz [ 249.356783][ T6235] usb 6-1: Manufacturer: syz [ 249.384348][ T6235] usb 6-1: config 0 descriptor?? [ 250.190870][ T6235] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 250.491009][ T6235] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 250.521712][ T6235] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 250.614484][ T6235] CoreChips: probe of 6-1:0.0 failed with error -71 [ 250.661032][ T6235] usb 6-1: USB disconnect, device number 9 06:57:30 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 06:57:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfff}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) setrlimit(0xd, &(0x7f0000000040)={0x40, 0xc}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f00000001c0)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) 06:57:31 executing program 0: io_uring_setup(0x4456, &(0x7f0000000440)) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r0) [ 252.030702][ T6235] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 252.143969][ T6236] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 252.263553][T12966] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 252.263624][T12962] syz-executor.1 (12962) used greatest stack depth: 22896 bytes left [ 252.300692][ T6235] usb 3-1: Using ep0 maxpacket: 8 06:57:31 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x1, 0x4e00, "dd"}, {}]}) 06:57:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 06:57:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000001}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0xfffffe58) link(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file2\x00') link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') unlink(&(0x7f0000000140)='./file1\x00') [ 252.420762][ T6236] usb 6-1: Using ep0 maxpacket: 8 06:57:31 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) [ 252.462641][T13031] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 252.533789][ T6235] usb 3-1: unable to read config index 0 descriptor/all [ 252.550659][ T6235] usb 3-1: can't read configurations, error -71 06:57:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000001}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0xfffffe58) read$FUSE(r1, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000200)="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", 0x2000, &(0x7f0000005640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 252.731616][ T6236] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 252.760549][ T1052] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 252.763161][ T6236] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 06:57:32 executing program 0: io_uring_setup(0x4456, &(0x7f0000000440)) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r0) [ 252.788657][ T6236] usb 6-1: Product: syz [ 252.804203][ T6236] usb 6-1: Manufacturer: syz [ 252.833052][ T6236] usb 6-1: config 0 descriptor?? [ 253.281196][ T1052] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 253.290679][ T1052] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.331794][ T1052] usb 2-1: Product: syz [ 253.351982][ T1052] usb 2-1: Manufacturer: syz 06:57:32 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="66130700ae897094e700267f97eaa769be36b2fb7be6a16d05c41b0d4e677d9959d7b76597a774e67307492bb3fa424e2770", 0x32}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 06:57:32 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000180), 0x2) sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffa) [ 253.372459][ T1052] usb 2-1: SerialNumber: syz [ 253.452511][ T1052] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 06:57:32 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000001c0)) [ 253.561367][ T6236] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 253.610648][ T6236] CoreChips: probe of 6-1:0.0 failed with error -71 [ 253.634877][ T6236] usb 6-1: USB disconnect, device number 10 06:57:33 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 06:57:33 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000001c0)) 06:57:33 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r0) [ 254.110546][ T1052] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 254.500433][ T6235] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 254.539346][ T5] usb 2-1: USB disconnect, device number 4 [ 254.780414][ T6235] usb 6-1: Using ep0 maxpacket: 8 [ 255.040372][ T6235] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 255.071459][ T6235] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 255.107848][ T6235] usb 6-1: Product: syz [ 255.127644][ T6235] usb 6-1: Manufacturer: syz [ 255.146002][ T6235] usb 6-1: config 0 descriptor?? [ 255.190378][ T1052] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 255.199469][ T1052] ath9k_htc: Failed to initialize the device [ 255.262223][ T5] usb 2-1: ath9k_htc: USB layer deinitialized [ 255.431142][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.437715][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 06:57:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x4, 0xffffffff}, {0x6}]}, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{r4}, 0x0, 0x7f, 0x2}) r5 = getpid() ptrace(0x10, r5) sched_setattr(r5, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x4, 0x7f, 0x97, 0x80000000, 0x3, 0x8, 0x1f}, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180), &(0x7f0000000340)=0xc) 06:57:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_open_dev$vcsn(&(0x7f0000000440), 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 06:57:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3) 06:57:34 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r0) 06:57:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 255.620207][ T5] usb 2-1: new high-speed USB device number 5 using dummy_hcd 06:57:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="3e660fc775a7b8a6000f00d00f320f79fd66b9ab03000066b80060000066ba000000000f30f3e10e0f0ffaae65660f2d0d0f01c266b8010000000f01c1", 0x3d}], 0x1, 0x3d, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400000004c8], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 255.863923][ T6235] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 06:57:35 executing program 2: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047458, 0x0) [ 255.943298][ T6235] CoreChips: probe of 6-1:0.0 failed with error -71 [ 256.001379][ T6235] usb 6-1: USB disconnect, device number 11 06:57:35 executing program 4: set_mempolicy(0x2, &(0x7f0000000040)=0x10001, 0x7e) fsopen(&(0x7f0000000000)='squashfs\x00', 0x0) 06:57:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0xc4f3, 0x0) 06:57:35 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 06:57:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x6, 0xe, 0x1f}) 06:57:35 executing program 4: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=""/52, 0x34}], 0x1, 0x0, 0x0) close(r0) [ 256.980189][ T1052] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 257.230237][ T1052] usb 6-1: Using ep0 maxpacket: 8 [ 257.470251][ T1052] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 257.486756][ T1052] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 257.546977][ T1052] usb 6-1: Product: syz [ 257.568791][ T1052] usb 6-1: Manufacturer: syz [ 257.626475][ T1052] usb 6-1: config 0 descriptor?? 06:57:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r0, 0x4b45, 0x0) 06:57:37 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r0) 06:57:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x6, 0xe, 0x1f}) 06:57:37 executing program 2: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047458, 0x0) 06:57:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x6, 0xe, 0x1f}) 06:57:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x40000000000035c, 0xf) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@gettfilter={0x44, 0x2e, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf, 0x10}, {0x3, 0xffff}, {0xfff1, 0x3}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0xfffffffb}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) 06:57:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x6, 0xe, 0x1f}) 06:57:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp}) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x0) socket$netlink(0x10, 0x3, 0xc) [ 258.350937][ T1052] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 258.397143][ T1052] CoreChips: probe of 6-1:0.0 failed with error -71 06:57:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r1, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) getpid() statx(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x80, 0x80, &(0x7f00000002c0)) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0xec99, 0x4) [ 258.440479][ T1052] usb 6-1: USB disconnect, device number 12 [ 258.749255][T13331] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:57:38 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:57:38 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 259.441673][ T6235] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 259.719858][ T6235] usb 6-1: Using ep0 maxpacket: 8 [ 259.980503][ T6235] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 260.005622][ T6235] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 260.050385][ T6235] usb 6-1: Product: syz [ 260.073771][ T6235] usb 6-1: Manufacturer: syz [ 260.107373][ T6235] usb 6-1: config 0 descriptor?? [ 260.869799][ T6235] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 260.929744][ T6235] CoreChips: probe of 6-1:0.0 failed with error -71 [ 261.030120][ T6235] usb 6-1: USB disconnect, device number 13 06:57:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x8}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa0}}, 0x0) 06:57:42 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 06:57:42 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:57:42 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:42 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:57:42 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:57:42 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:42 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800005, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x12, 0x0, &(0x7f0000002540)=0xc) 06:57:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x8}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa0}}, 0x0) 06:57:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000000000", @ANYRES32=0xee01, @ANYBLOB="4f8ff14d", @ANYRES16=r3, @ANYBLOB="040004000000000008000300", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="f6ff2700", @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB="100014000000000020000400010000006ca7a82a24f9be0eea5fb45e128c3ce0bc762a3ff6b0d8f954b922aa0e35"], 0x54, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x7, 0x32, 0xe6, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x5, 0x5, 0x6, 0x6, 0x6}, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) io_uring_enter(r4, 0x77e6, 0xf6df, 0x1, &(0x7f0000000040), 0x8) chdir(0x0) symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') dup2(r4, r5) [ 263.828838][ T8539] usb 6-1: new high-speed USB device number 14 using dummy_hcd 06:57:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x8}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa0}}, 0x0) 06:57:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x8}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa0}}, 0x0) [ 264.079248][ T8539] usb 6-1: Using ep0 maxpacket: 8 [ 264.320179][ T8539] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 264.350627][ T8539] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 06:57:43 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:57:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) [ 264.407299][ T6566] Bluetooth: hci7: sending frame failed (-49) [ 264.409404][ T8539] usb 6-1: Product: syz [ 264.434476][ T8539] usb 6-1: Manufacturer: syz [ 264.467857][ T8539] usb 6-1: config 0 descriptor?? [ 265.179349][ T8539] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 265.229391][ T8539] CoreChips: probe of 6-1:0.0 failed with error -71 [ 265.254888][ T8539] usb 6-1: USB disconnect, device number 14 06:57:45 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 265.758088][ T6236] Bluetooth: hci6: command 0xfc11 tx timeout [ 265.759177][ T6564] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 266.149368][ T5] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 266.419020][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 266.469417][ T149] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 266.478568][ T25] Bluetooth: hci7: command tx timeout 06:57:45 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:57:45 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x8}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa0}}, 0x0) 06:57:45 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:45 executing program 0: r0 = io_uring_setup(0x4456, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:57:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f00000001c0), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/193, 0xc1}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000001680)=""/201, 0xc9}, {&(0x7f0000001780)=""/195, 0xc3}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000140)=""/53, 0x35}], 0x7, &(0x7f0000002880)=[@cred={{0x1c}}], 0x20}, 0x12140) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)={0x0, 0xff19, "e49057dd12e1874d4eec1dc5f5b7a856789dc036e49558fd2f99ef4159b969a02c1082697eb15c49402c30c321ff13d52ec0e856042e1a4d43650d92b2b021c20804c6fb86e9a9dbaf04fbf9b6d682d2f9532c602065e31700dcbe1ce65b78f8030e58f7e9be88f6a28284d5154666bb4e22ed853ad1fbdcb32617ec4740336b4c98c56a46e5639537e3223bf33653278730b9426cc38a6123490dc09586eb958614d17581a3d5a79215c626db0934456be1b8e89d1bb2a3430cec4864a59a00a9699dc821538096dc5ee3b905d1d71092786bd35bc17504"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 06:57:45 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:46 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x8}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa0}}, 0x0) 06:57:46 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) [ 266.699970][ T5] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 266.724078][ T5] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 266.773822][ T5] usb 6-1: Product: syz [ 266.795179][ T5] usb 6-1: Manufacturer: syz [ 266.821760][ T5] usb 6-1: config 0 descriptor?? 06:57:46 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:46 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x8}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa0}}, 0x0) [ 266.952907][ T8] Bluetooth: hci7: Frame reassembly failed (-84) 06:57:46 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x8}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa0}}, 0x0) [ 267.539237][ T5] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 267.579176][ T5] CoreChips: probe of 6-1:0.0 failed with error -71 [ 267.595017][ T5] usb 6-1: USB disconnect, device number 15 [ 267.755251][ T6236] Bluetooth: hci0: command 0x0406 tx timeout 06:57:47 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) [ 268.788995][ T149] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 268.789093][ T5] Bluetooth: hci6: command 0xfc11 tx timeout 06:57:48 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:57:48 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x8}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa0}}, 0x0) 06:57:48 executing program 0: r0 = io_uring_setup(0x4456, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:57:48 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:57:48 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:48 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:48 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x8}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa0}}, 0x0) [ 269.010494][ T8] Bluetooth: hci6: Frame reassembly failed (-84) [ 269.028839][ T6236] Bluetooth: hci7: command 0xfc11 tx timeout [ 269.039284][ T6564] Bluetooth: hci7: Entering manufacturer mode failed (-110) 06:57:48 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) [ 269.158989][ T8507] usb 6-1: new high-speed USB device number 16 using dummy_hcd 06:57:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 06:57:48 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 269.375206][ T8] Bluetooth: hci7: Frame reassembly failed (-84) [ 269.398709][ T8507] usb 6-1: Using ep0 maxpacket: 8 06:57:48 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) [ 269.639627][ T8507] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 269.664055][ T8507] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 269.691570][ T8507] usb 6-1: Product: syz [ 269.703275][ T8507] usb 6-1: Manufacturer: syz [ 269.735861][ T8507] usb 6-1: config 0 descriptor?? [ 270.218830][ T8507] CoreChips: probe of 6-1:0.0 failed with error -32 [ 271.028663][ T149] Bluetooth: hci6: Entering manufacturer mode failed (-110) 06:57:50 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:57:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 06:57:50 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) [ 271.288769][ T10] Bluetooth: hci6: Frame reassembly failed (-84) [ 271.428543][ T6235] Bluetooth: hci7: command 0xfc11 tx timeout [ 271.439596][ T6564] Bluetooth: hci7: Entering manufacturer mode failed (-110) 06:57:51 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:57:51 executing program 0: r0 = io_uring_setup(0x4456, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:57:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 06:57:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:51 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) [ 271.904453][ T25] usb 6-1: USB disconnect, device number 16 06:57:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 272.085453][ T10] Bluetooth: hci7: Frame reassembly failed (-84) [ 272.117464][ T10] Bluetooth: hci7: Frame reassembly failed (-84) 06:57:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 06:57:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) [ 272.508480][ T25] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 272.758547][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 272.868651][ T6236] Bluetooth: hci2: command 0x0406 tx timeout [ 272.880143][ T6236] Bluetooth: hci3: command 0x0406 tx timeout [ 272.895530][ T6236] Bluetooth: hci1: command 0x0406 tx timeout [ 272.903587][ T6236] Bluetooth: hci4: command 0x0406 tx timeout [ 272.911395][ T6236] Bluetooth: hci5: command 0x0406 tx timeout [ 272.999400][ T25] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 273.009111][ T25] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 273.017469][ T25] usb 6-1: Product: syz [ 273.023560][ T25] usb 6-1: Manufacturer: syz [ 273.036382][ T25] usb 6-1: config 0 descriptor?? 06:57:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:57:52 executing program 0: io_uring_setup(0x4456, &(0x7f0000000440)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r0) 06:57:52 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) [ 273.348413][ T149] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 273.518481][ T25] CoreChips: probe of 6-1:0.0 failed with error -32 [ 274.148325][ T25] Bluetooth: hci7: command 0xfc11 tx timeout [ 274.158325][ T6564] Bluetooth: hci7: Entering manufacturer mode failed (-110) 06:57:54 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:57:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:57:54 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:57:54 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 06:57:54 executing program 0: io_uring_setup(0x4456, &(0x7f0000000440)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r0) [ 275.075266][ T6236] usb 6-1: USB disconnect, device number 17 06:57:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:57:54 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:57:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xa0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x8}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa0}}, 0x0) 06:57:54 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) [ 275.668323][ T6236] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 275.958228][ T6236] usb 6-1: Using ep0 maxpacket: 8 [ 276.208136][ T6236] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 276.217657][ T6236] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 276.253326][ T6236] usb 6-1: Product: syz [ 276.257545][ T6236] usb 6-1: Manufacturer: syz [ 276.298796][ T6236] usb 6-1: config 0 descriptor?? [ 276.758276][ T6236] CoreChips: probe of 6-1:0.0 failed with error -32 [ 277.268021][ T6236] Bluetooth: hci6: command 0xfc11 tx timeout [ 277.268218][ T6564] Bluetooth: hci6: Entering manufacturer mode failed (-110) 06:57:57 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:57:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xa0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x8}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa0}}, 0x0) 06:57:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:57 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:57:57 executing program 0: io_uring_setup(0x4456, &(0x7f0000000440)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r0) 06:57:57 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 278.241433][ T6236] usb 6-1: USB disconnect, device number 18 06:57:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:57:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xa0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x8}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa0}}, 0x0) 06:57:57 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 06:57:57 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:57:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}]}, 0x98}}, 0x0) 06:57:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) [ 278.807949][ T6236] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 279.087810][ T6236] usb 6-1: Using ep0 maxpacket: 8 [ 279.337859][ T6236] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 279.347021][ T6236] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 279.361303][ T6236] usb 6-1: Product: syz [ 279.365492][ T6236] usb 6-1: Manufacturer: syz [ 279.373569][ T6236] usb 6-1: config 0 descriptor?? [ 279.868983][ T6236] CoreChips: probe of 6-1:0.0 failed with error -32 06:58:00 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:58:00 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 06:58:00 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) 06:58:00 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:58:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}]}, 0x98}}, 0x0) 06:58:00 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x0, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 281.402397][ T6236] usb 6-1: USB disconnect, device number 19 06:58:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}]}, 0x98}}, 0x0) 06:58:00 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x0, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:00 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@hopopts={{0x18}}], 0x18}, 0x0) 06:58:00 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) 06:58:00 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 06:58:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) [ 282.007610][ T6236] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 282.298322][ T6236] usb 6-1: Using ep0 maxpacket: 8 [ 282.597662][ T6236] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 282.606762][ T6236] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 282.616698][ T6236] usb 6-1: Product: syz [ 282.621898][ T6236] usb 6-1: Manufacturer: syz [ 282.637223][ T6236] usb 6-1: config 0 descriptor?? [ 283.127710][ T6236] CoreChips: probe of 6-1:0.0 failed with error -32 06:58:03 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:58:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, 0x0, 0x0) 06:58:03 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) 06:58:03 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x0, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:03 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 06:58:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) [ 284.515412][ T6236] usb 6-1: USB disconnect, device number 20 06:58:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) 06:58:04 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 06:58:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, 0x0, 0x0) 06:58:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:04 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, 0x0, 0x0) [ 285.107423][ T6236] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 285.367293][ T6236] usb 6-1: Using ep0 maxpacket: 8 [ 285.628164][ T6236] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 285.637611][ T6236] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 285.645895][ T6236] usb 6-1: Product: syz [ 285.651698][ T6236] usb 6-1: Manufacturer: syz [ 285.658536][ T6236] usb 6-1: config 0 descriptor?? [ 286.137392][ T6236] CoreChips: probe of 6-1:0.0 failed with error -32 [ 286.957310][ T5] Bluetooth: hci6: command 0xfc11 tx timeout [ 286.963508][ T6564] Bluetooth: hci6: Entering manufacturer mode failed (-110) 06:58:07 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x30}}, 0x0) 06:58:07 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 06:58:07 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 06:58:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 06:58:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) [ 287.675067][ T8539] usb 6-1: USB disconnect, device number 21 06:58:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x30}}, 0x0) 06:58:07 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 287.835174][ T9684] Bluetooth: hci6: Frame reassembly failed (-84) 06:58:07 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 06:58:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x30}}, 0x0) 06:58:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:07 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 06:58:07 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 288.301612][T13914] can: request_module (can-proto-0) failed. 06:58:07 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 06:58:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x90}}, 0x0) [ 289.906978][ T8539] Bluetooth: hci6: command 0xfc11 tx timeout [ 289.913273][ T6564] Bluetooth: hci6: Entering manufacturer mode failed (-110) 06:58:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 06:58:09 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)}, 0x0) 06:58:09 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x90}}, 0x0) 06:58:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:09 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 06:58:09 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)}, 0x0) 06:58:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x90}}, 0x0) [ 290.075616][T13945] can: request_module (can-proto-0) failed. 06:58:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:09 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 06:58:09 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)}, 0x0) 06:58:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) 06:58:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) [ 290.329925][T13957] can: request_module (can-proto-0) failed. 06:58:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 06:58:09 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:09 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x100}, 0x1c) 06:58:09 executing program 5: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:58:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) 06:58:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 06:58:10 executing program 1: syz_usb_connect(0x1, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100005ceb4408070a64006eee010203010902240001000000000904000002ca74340009050303000000000009058402"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)='^', 0x1) 06:58:10 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) 06:58:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 06:58:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x90}}, 0x0) 06:58:10 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 291.136688][ T6236] usb 2-1: new low-speed USB device number 6 using dummy_hcd 06:58:10 executing program 5: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:58:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:10 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x90}}, 0x0) [ 291.507658][ T6236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 291.526786][ T6236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 291.544799][ T6236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 291.555284][ T6236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 291.798209][ T6236] usb 2-1: string descriptor 0 read error: -22 [ 291.833946][ T6236] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=ee.6e [ 291.845588][ T6236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.856861][ T6236] usb 2-1: config 0 descriptor?? [ 291.900704][ T6236] adutux 2-1:0.0: ADU100 now attached to /dev/usb/adutux0 [ 292.110448][ T1052] usb 2-1: USB disconnect, device number 6 [ 292.896586][ T6235] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 293.268213][ T6235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 293.279366][ T6235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 293.289708][ T6235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 293.300862][ T6235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 293.547397][ T6235] usb 2-1: string descriptor 0 read error: -22 [ 293.553772][ T6235] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=ee.6e [ 293.568790][ T6235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.581440][ T6235] usb 2-1: config 0 descriptor?? [ 293.630305][ T6235] adutux 2-1:0.0: ADU100 now attached to /dev/usb/adutux0 06:58:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000180), r1, 0x0, 0x2, 0x4}}, 0x20) 06:58:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x90}}, 0x0) 06:58:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 06:58:13 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:13 executing program 5: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 293.819195][ T5] usb 2-1: USB disconnect, device number 7 06:58:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) 06:58:13 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 06:58:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="4788e548b819cdfeb8000000000f23d80f21f835800000a00f23f8c402fd338302000000123e3664450f01c33cc33c430f795835c74424002d010000c4c27d1d6cd1ce44d8c70f08c744240011000000c744240200000000ff2c2466baf80cb8ba7e6983ef66bafc0caa66b87f008ed8", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:58:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) 06:58:13 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 06:58:13 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) 06:58:13 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:58:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2203, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:58:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 06:58:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x6c}}, 0x0) 06:58:13 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2203, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:58:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 06:58:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x6c}}, 0x0) 06:58:14 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$packet(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 294.906541][ T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd 06:58:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 295.106710][ T25] usb 6-1: device descriptor read/64, error 18 [ 295.376391][ T25] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 295.566488][ T25] usb 6-1: device descriptor read/64, error 18 [ 295.696477][ T25] usb usb6-port1: attempt power cycle [ 296.116490][ T25] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 296.287306][ T25] usb 6-1: device descriptor read/8, error -61 [ 296.576357][ T25] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 296.756352][ T25] usb 6-1: device descriptor read/8, error -61 [ 296.877400][ T25] usb usb6-port1: unable to enumerate USB device [ 297.186347][ T6564] Bluetooth: hci6: Entering manufacturer mode failed (-110) 06:58:16 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:58:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 06:58:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x6c}}, 0x0) 06:58:16 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$packet(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 06:58:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) [ 297.742291][ T1125] Bluetooth: hci6: Frame reassembly failed (-84) [ 297.749456][ T154] Bluetooth: hci7: Frame reassembly failed (-84) 06:58:17 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$packet(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 06:58:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) 06:58:17 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 298.076002][ T6236] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 298.266315][ T6236] usb 6-1: device descriptor read/64, error 18 [ 298.536180][ T6236] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 298.745156][ T6236] usb 6-1: device descriptor read/64, error 18 [ 298.877479][ T6236] usb usb6-port1: attempt power cycle [ 299.296091][ T6236] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 299.467789][ T6236] usb 6-1: device descriptor read/8, error -61 [ 299.736063][ T6236] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 299.746692][ T25] Bluetooth: hci6: command 0x1003 tx timeout [ 299.753012][T13410] Bluetooth: hci6: sending frame failed (-49) [ 299.753016][T13564] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 299.759611][ T8539] Bluetooth: hci7: command 0xfc11 tx timeout 06:58:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 299.897564][ T1224] Bluetooth: hci7: Frame reassembly failed (-84) [ 299.916806][ T6236] usb 6-1: device descriptor read/8, error -61 [ 300.058548][ T6236] usb usb6-port1: unable to enumerate USB device 06:58:20 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 301.285955][ T8507] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 301.475983][ T8507] usb 6-1: device descriptor read/64, error 18 [ 301.746100][ T8507] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 301.825982][ T1052] Bluetooth: hci6: command 0x1001 tx timeout [ 301.833158][T13410] Bluetooth: hci6: sending frame failed (-49) [ 301.906023][ T1052] Bluetooth: hci7: command 0xfc11 tx timeout [ 301.906105][T13564] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 301.956035][ T8507] usb 6-1: device descriptor read/64, error 18 [ 302.076152][ T8507] usb usb6-port1: attempt power cycle [ 302.495859][ T8507] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 302.706005][ T8507] usb 6-1: device descriptor read/8, error -61 [ 302.995893][ T8507] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 303.185929][ T8507] usb 6-1: device descriptor read/8, error -61 [ 303.305912][ T8507] usb usb6-port1: unable to enumerate USB device [ 303.905907][ T1052] Bluetooth: hci6: command 0x1009 tx timeout 06:58:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) 06:58:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 06:58:27 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:58:27 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:58:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) [ 308.093250][ T10] Bluetooth: hci6: Frame reassembly failed (-84) 06:58:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) 06:58:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 06:58:27 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) [ 308.355426][ T25] usb 6-1: new high-speed USB device number 34 using dummy_hcd 06:58:27 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 308.575347][ T25] usb 6-1: device descriptor read/64, error 18 [ 308.845352][ T25] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 309.059108][ T25] usb 6-1: device descriptor read/64, error 18 [ 309.196314][ T25] usb usb6-port1: attempt power cycle [ 309.615318][ T25] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 309.796075][ T25] usb 6-1: device descriptor read/8, error -61 [ 310.085301][ T25] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 310.146211][ T6564] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 310.225502][ T8539] Bluetooth: hci7: command 0x1003 tx timeout [ 310.231826][ T6564] Bluetooth: hci7: sending frame failed (-49) [ 310.285375][ T25] usb 6-1: device descriptor read/8, error -61 [ 310.395376][ T6235] Bluetooth: hci8: command 0x1003 tx timeout [ 310.403884][ T6564] Bluetooth: hci8: sending frame failed (-49) [ 310.415506][ T25] usb usb6-port1: unable to enumerate USB device [ 312.305240][ T1052] Bluetooth: hci7: command 0x1001 tx timeout [ 312.311967][ T6564] Bluetooth: hci7: sending frame failed (-49) [ 312.465223][ T1052] Bluetooth: hci8: command 0x1001 tx timeout [ 312.472000][ T6564] Bluetooth: hci8: sending frame failed (-49) [ 314.385088][ T1052] Bluetooth: hci7: command 0x1009 tx timeout [ 314.544988][ T1052] Bluetooth: hci8: command 0x1009 tx timeout [ 316.876104][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.882390][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 06:58:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) 06:58:38 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:58:38 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:58:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 318.965121][ T1125] Bluetooth: hci6: Frame reassembly failed (-84) [ 318.974022][ T1125] Bluetooth: hci6: Frame reassembly failed (-84) 06:58:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) 06:58:38 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 319.100122][ T9684] Bluetooth: hci8: Frame reassembly failed (-84) 06:58:38 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, 0x0, &(0x7f0000000000)) bind$packet(r1, &(0x7f00000000c0), 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 319.194724][ T1052] usb 6-1: new high-speed USB device number 38 using dummy_hcd 06:58:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) 06:58:38 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, 0x0, &(0x7f0000000000)) bind$packet(r1, &(0x7f00000000c0), 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) [ 319.404864][ T1052] usb 6-1: device descriptor read/64, error 18 [ 319.674624][ T1052] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 319.874684][ T1052] usb 6-1: device descriptor read/64, error 18 [ 320.004708][ T1052] usb usb6-port1: attempt power cycle [ 320.424571][ T1052] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 320.605275][ T1052] usb 6-1: device descriptor read/8, error -61 [ 320.874546][ T1052] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 321.024641][T13410] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 321.033523][ T6236] Bluetooth: hci6: command tx timeout [ 321.047658][ T1052] usb 6-1: device descriptor read/8, error -61 [ 321.114733][ T6236] Bluetooth: hci8: command 0x1003 tx timeout [ 321.121396][T13410] Bluetooth: hci8: sending frame failed (-49) [ 321.128022][ T6236] Bluetooth: hci7: command 0x1003 tx timeout [ 321.134236][T13410] Bluetooth: hci7: sending frame failed (-49) [ 321.175772][ T1052] usb usb6-port1: unable to enumerate USB device [ 323.187426][ T8507] Bluetooth: hci7: command 0x1001 tx timeout [ 323.193877][T13410] Bluetooth: hci7: sending frame failed (-49) [ 323.200616][ T8507] Bluetooth: hci8: command 0x1001 tx timeout [ 323.207033][T13410] Bluetooth: hci8: sending frame failed (-49) [ 325.264190][ T8507] Bluetooth: hci8: command 0x1009 tx timeout [ 325.270265][ T8507] Bluetooth: hci7: command 0x1009 tx timeout 06:58:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) 06:58:49 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, 0x0, &(0x7f0000000000)) bind$packet(r1, &(0x7f00000000c0), 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) 06:58:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:49 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:58:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 06:58:49 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) [ 329.950966][ T6564] Bluetooth: hci7: sending frame failed (-49) 06:58:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) 06:58:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) 06:58:49 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 330.134073][ T8539] usb 6-1: new high-speed USB device number 42 using dummy_hcd 06:58:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) [ 330.333869][ T8539] usb 6-1: device descriptor read/64, error 18 [ 330.624183][ T8539] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 330.813942][ T8539] usb 6-1: device descriptor read/64, error 18 [ 330.934982][ T8539] usb usb6-port1: attempt power cycle [ 331.354038][ T8539] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 331.564073][ T8539] usb 6-1: device descriptor read/8, error -61 [ 331.863930][ T8539] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 331.903895][ T25] Bluetooth: hci6: command 0xfc11 tx timeout [ 331.904119][T13564] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 331.984043][ T25] Bluetooth: hci7: command 0x1003 tx timeout [ 331.990174][T13564] Bluetooth: hci7: sending frame failed (-49) [ 332.064070][ T6564] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 332.073039][ T25] Bluetooth: hci8: command tx timeout [ 332.073919][ T8539] usb 6-1: device descriptor read/8, error -61 06:58:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) 06:58:51 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:51 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x79, 0x8, 0x2b, 0x40, 0x46d, 0x892, 0xafb9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x60, 0xa1, 0x74}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="240c1c0000e3e6d8693844dda011ce25a9a9d590672b1248ec4c0822cfb2085cf2a0"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4f}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x132}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x20}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000440)={0x40, 0xb, 0x2, "28f7"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, &(0x7f0000000500)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000540)={0x40, 0x19, 0x2, "8468"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0xe674}, &(0x7f00000005c0)={0x40, 0x1c, 0x1}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x82}}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x1, 'H'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:58:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) [ 332.213977][ T8539] usb usb6-port1: unable to enumerate USB device [ 332.300669][ T149] Bluetooth: hci8: sending frame failed (-49) [ 332.441722][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd 06:58:52 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 332.825279][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=af.b9 [ 332.834745][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.850973][ T25] usb 5-1: config 0 descriptor?? [ 332.896102][ T25] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 333.303731][ T8439] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 333.560457][ T25] gspca_vc032x: reg_r err -71 [ 333.565403][ T25] vc032x: probe of 5-1:0.0 failed with error -71 [ 333.573392][ T25] usb 5-1: USB disconnect, device number 4 [ 333.584135][ T8439] usb 6-1: Using ep0 maxpacket: 8 [ 333.634679][ T8439] usb 6-1: no configurations [ 333.639318][ T8439] usb 6-1: can't read configurations, error -22 [ 333.793685][ T8439] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 334.053707][ T8439] usb 6-1: Using ep0 maxpacket: 8 [ 334.064818][ T8507] Bluetooth: hci7: command 0x1001 tx timeout [ 334.075732][ T149] Bluetooth: hci7: sending frame failed (-49) [ 334.094675][ T8439] usb 6-1: no configurations [ 334.099307][ T8439] usb 6-1: can't read configurations, error -22 [ 334.107614][ T8439] usb usb6-port1: attempt power cycle [ 334.303818][T13564] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 334.312656][ T8507] Bluetooth: hci6: command 0xfc11 tx timeout [ 334.318887][ T6564] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 334.327810][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 334.543653][ T8439] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 334.654495][ T8439] usb 6-1: Using ep0 maxpacket: 8 [ 334.693809][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=af.b9 [ 334.693848][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.712233][ T25] usb 5-1: config 0 descriptor?? [ 334.712480][ T8439] usb 6-1: no configurations [ 334.712498][ T8439] usb 6-1: can't read configurations, error -22 [ 334.745865][ T25] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 334.863700][ T8439] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 334.955592][ T8439] usb 6-1: Using ep0 maxpacket: 8 [ 334.994276][ T8439] usb 6-1: no configurations [ 334.999654][ T8439] usb 6-1: can't read configurations, error -22 [ 335.007413][ T8439] usb usb6-port1: unable to enumerate USB device [ 335.164950][ T25] gspca_vc032x: reg_r err -71 [ 335.169720][ T25] vc032x: probe of 5-1:0.0 failed with error -71 [ 335.195107][ T25] usb 5-1: USB disconnect, device number 5 [ 336.153715][ T8507] Bluetooth: hci7: command 0x1009 tx timeout 06:58:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) 06:58:59 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:58:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 06:58:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)) 06:58:59 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:58:59 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)={0x2c, r1, 0x7, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x500}, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000002400)={{0x0, 0x0, 0x80}, "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", "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"}) [ 340.734850][ T10] Bluetooth: hci6: Frame reassembly failed (-84) 06:59:00 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:59:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000380000020000000000000000a60000005000000095a6c0a00ca37e"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00'}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="097ee3bed103dea53533ddadc017c4fb59d6c0fc9145e3905b80ef68e78d820f57d669406cb1d152555e58ca8de9e5414229"], 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000980)={"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"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r1, 0xc080aebe, &(0x7f0000000000)=ANY=[]) dup2(r2, r1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)=0x6) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x40, 0x9, 0x15, 0xc0, 0x0, 0x3c38706d, 0x800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1ff}, 0x8000, 0x61685da1, 0x7fffffff, 0x3, 0x8, 0x3, 0x3, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0xa, r2, 0x1) io_setup(0x1, &(0x7f0000000240)=0x0) socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) [ 341.004296][ T8439] usb 6-1: new high-speed USB device number 50 using dummy_hcd 06:59:00 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:59:00 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:59:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000001}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0xfffffe58) link(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file1\x00') fsetxattr$security_capability(r1, &(0x7f0000000140), 0x0, 0x0, 0x0) [ 341.293244][ T8439] usb 6-1: Using ep0 maxpacket: 8 [ 341.344402][ T8439] usb 6-1: no configurations [ 341.351452][ T8439] usb 6-1: can't read configurations, error -22 06:59:00 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 341.543724][ T8439] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 341.825441][ T8439] usb 6-1: Using ep0 maxpacket: 8 [ 341.879354][ T8439] usb 6-1: no configurations [ 341.884332][ T8439] usb 6-1: can't read configurations, error -22 [ 341.896714][ T8439] usb usb6-port1: attempt power cycle [ 342.333110][ T8439] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 342.433214][ T8439] usb 6-1: Using ep0 maxpacket: 8 [ 342.474040][ T8439] usb 6-1: no configurations [ 342.478677][ T8439] usb 6-1: can't read configurations, error -22 [ 342.633156][ T8439] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 342.723344][ T8439] usb 6-1: Using ep0 maxpacket: 8 [ 342.763735][ T8439] usb 6-1: no configurations [ 342.768480][ T8439] usb 6-1: can't read configurations, error -22 [ 342.775486][ T8439] usb usb6-port1: unable to enumerate USB device [ 342.783477][ T6235] Bluetooth: hci6: command 0xfc11 tx timeout [ 342.789590][ T6564] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 342.793239][T13410] Bluetooth: hci6: Entering manufacturer mode failed (-110) 06:59:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, 0x0) 06:59:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000380)) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x596, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 06:59:02 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:59:02 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002400)='/sys/kernel/kexec_crash_size', 0x40001, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x38) [ 342.992067][ T1125] Bluetooth: hci6: Frame reassembly failed (-84) 06:59:03 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:59:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:03 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0), 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:59:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = getpgrp(0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000540)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004542010025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 06:59:03 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0), 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 343.875419][T14581] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 344.153167][ T8507] usb 6-1: new high-speed USB device number 54 using dummy_hcd 06:59:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 344.443246][ T8507] usb 6-1: Using ep0 maxpacket: 8 [ 344.486967][ T8507] usb 6-1: no configurations [ 344.491851][ T8507] usb 6-1: can't read configurations, error -22 [ 344.683020][ T8507] usb 6-1: new high-speed USB device number 55 using dummy_hcd 06:59:04 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x32, 0x22, 0x84, 0x40, 0x424, 0x9d00, 0xfc2a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5b, 0x77, 0x69}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 344.973077][ T8507] usb 6-1: Using ep0 maxpacket: 8 [ 345.013909][ T8507] usb 6-1: no configurations [ 345.018547][ T8507] usb 6-1: can't read configurations, error -22 [ 345.023064][T13410] Bluetooth: hci6: Entering manufacturer mode failed (-110) 06:59:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 345.062804][ T8507] usb usb6-port1: attempt power cycle 06:59:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 345.297257][ T1224] Bluetooth: hci6: Frame reassembly failed (-84) [ 345.512906][ T8507] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 345.632719][ T8507] usb 6-1: Using ep0 maxpacket: 8 06:59:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 345.673122][ T8507] usb 6-1: no configurations [ 345.684546][ T8507] usb 6-1: can't read configurations, error -22 [ 345.863141][ T8507] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 345.973047][ T8507] usb 6-1: Using ep0 maxpacket: 8 06:59:05 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0), 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 346.014028][ T8507] usb 6-1: no configurations [ 346.018654][ T8507] usb 6-1: can't read configurations, error -22 [ 346.046888][ T8507] usb usb6-port1: unable to enumerate USB device 06:59:05 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) [ 346.282883][ T8439] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 346.643688][ T8439] usb 3-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=fc.2a [ 346.660113][ T8439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.689792][ T8439] usb 3-1: config 0 descriptor?? [ 346.779667][T14586] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 346.792538][T14598] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 06:59:06 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f000109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:59:06 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:59:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 347.342923][T13410] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 347.343085][ T25] Bluetooth: hci6: command 0xfc11 tx timeout [ 347.606826][ T1052] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 347.857434][ T1052] usb 6-1: Using ep0 maxpacket: 8 06:59:07 executing program 4: syslog(0x4, &(0x7f0000000040)=""/4096, 0x3c) 06:59:07 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r1) 06:59:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 347.979973][ T1052] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.000816][ T1052] usb 6-1: config 0 has no interfaces? [ 348.151187][ T1052] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 348.172034][ T1052] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 348.192405][ T1052] usb 6-1: Product: syz [ 348.201595][ T1052] usb 6-1: Manufacturer: syz [ 348.215771][ T1052] usb 6-1: config 0 descriptor?? [ 348.922954][ T8439] smscufx: Failed to read register index 0x0000700c [ 348.930863][ T8439] smscufx: ufx_reg_clear_and_set_bits error reading 0x700c [ 348.931010][ T8439] smscufx: error clearing output gate in 0x700C [ 348.940830][ T8439] smscufx: error -71 configuring system clock [ 348.948785][ T8439] smscufx: probe of 3-1:0.0 failed with error -71 [ 348.967246][ T8439] usb 3-1: USB disconnect, device number 4 [ 349.692803][ T5] usb 3-1: new high-speed USB device number 5 using dummy_hcd 06:59:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 06:59:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:09 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, 0x0, 0x0, 0x0) close(r1) 06:59:09 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) unshare(0x40000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff00989837f082138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRESHEX], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x3000000) 06:59:09 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f000109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 350.005160][ T8439] usb 6-1: USB disconnect, device number 58 [ 350.051392][T14697] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.061217][T14697] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.070040][T14697] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.072910][T13410] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 350.078798][T14697] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 06:59:09 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, 0x0, 0x0, 0x0) close(r1) 06:59:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000220070f900edffffff", @ANYRES32, @ANYBLOB="139b0000800000001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 350.142782][ T5] usb 3-1: device not accepting address 5, error -71 06:59:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r7 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(r7, &(0x7f0000000100)={0x38, 0x5, 0x40, 0x2, 0x5, 0x0, 0x200, 0x2, 0x7f, 0x4}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004880)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1845, 0x10004}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30050, 0x33d049041f16bfb2}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 350.242790][T14697] device vxlan0 entered promiscuous mode [ 350.262999][T14697] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.272023][T14697] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.281056][T14697] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.290082][T14697] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 06:59:09 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, 0x0, 0x0, 0x0) close(r1) 06:59:09 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:09 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0), 0x0, 0x0) close(r1) [ 350.622719][ T8439] usb 6-1: new high-speed USB device number 59 using dummy_hcd 06:59:10 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0), 0x0, 0x0) close(r1) [ 350.895077][ T8439] usb 6-1: Using ep0 maxpacket: 8 06:59:10 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0), 0x0, 0x0) close(r1) [ 351.013674][ T8439] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.044948][ T8439] usb 6-1: config 0 has no interfaces? 06:59:10 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r1) [ 351.193075][ T8439] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 351.228390][ T8439] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 06:59:10 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 351.260177][ T8439] usb 6-1: Product: syz [ 351.273871][ T8439] usb 6-1: Manufacturer: syz [ 351.305021][ T8439] usb 6-1: config 0 descriptor?? [ 352.201166][T14716] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 352.257149][T14734] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.265994][T14734] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.275180][T14734] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.283954][T14734] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.354119][T14734] device vxlan0 entered promiscuous mode [ 352.363220][T14734] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.372189][T14734] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.382012][T14734] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.391233][T14734] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.210026][ T8439] usb 6-1: USB disconnect, device number 59 06:59:15 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:15 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r1) 06:59:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x187, 0x187, 0x3, [@datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "b3"}, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], "f9"}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}, @volatile, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @ptr, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], '\x00'}, @const, @volatile, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x0]}}, 0x0, 0x1a3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x38) 06:59:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) exit_group(0x0) 06:59:15 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f000109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:59:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac396203784000400f573fbf000000000000000761f35e959f130dec95128ce7ec033dc0a380543bfc99320be1c1bb99bb063fb66f2d696569eada31b09fbd15f0332701d9d14a3f3109d666578cc0266bce7860eaaf305a0ee2af0f82dfefd5e00d421b000000000000000000000000000000730428fde6136b8e", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 06:59:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x0, 0xffff, 0x3, 0x49d7d66c, 0x0, "cf9d44565f6cd34881acd9bd6dd18d269a7268", 0xfffffffb}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x11) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x4b4a, 0x0) 06:59:15 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r1) 06:59:15 executing program 4: syz_io_uring_setup(0x64bb, &(0x7f00000000c0), &(0x7f000064d000/0x3000)=nil, &(0x7f0000559000/0x3000)=nil, 0x0, 0x0) mlockall(0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a8a000/0x4000)=nil, 0x4000, 0x2, 0x60030, 0xffffffffffffffff, 0x8000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 06:59:15 executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) dup3(r0, r1, 0x0) 06:59:15 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x0) close(r1) [ 356.303416][ T8539] usb 6-1: new high-speed USB device number 60 using dummy_hcd 06:59:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) getpgrp(r1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x45, 0x6be, 0x4, 0x5, 0x5, 0x6f5, 0xb9b8, 0x3c}, 0x0) sched_setattr(r1, 0x0, 0x0) r2 = getpid() sched_setattr(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = getpgid(0x0) sched_setattr(r5, &(0x7f0000000180)={0x38, 0x0, 0x10000040, 0x81, 0x3, 0x0, 0x1f, 0x6, 0x80000001}, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) 06:59:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:15 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) 06:59:15 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='U', 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, 0xfffffffffffffffd, 0x0) 06:59:15 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x0) close(r1) [ 356.582495][ T8539] usb 6-1: Using ep0 maxpacket: 8 [ 356.703269][ T8539] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.739903][ T8539] usb 6-1: config 0 has no interfaces? [ 356.923122][ T8539] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 356.942104][ T8539] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 356.978487][ T8539] usb 6-1: Product: syz [ 356.997203][ T8539] usb 6-1: Manufacturer: syz [ 357.025412][ T8539] usb 6-1: config 0 descriptor?? 06:59:18 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:59:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x2ff81d3e, 0x8}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tkill(0x0, 0x40) ptrace$setregs(0x2, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40, &(0x7f0000000100)={0x0, 0x989680}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) prlimit64(r0, 0x6, &(0x7f0000000040)={0x8000, 0x3}, &(0x7f00000000c0)) socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x20) ftruncate(r3, 0x200004) sendfile(r3, r3, 0x0, 0x80001d00c0d0) 06:59:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7f) 06:59:18 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x0) close(r1) 06:59:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000200)="02aea3e2c1c0ffceb94200f4c1d7d00997d1891741af5eaec48b890365da3910cf7d8c8925950ff677e1399eece85a0bd53eead435096edf6bccecb5f91971535a16ef138da406ec7c018cc3b4e90d0ab9dfa34b91ff57ea7fb1396cfce39d74d96197bc266d73398cf2f6797567664ae033d675bd72c725c8868e721b0ad8fd19b09f8a516c29") ptrace$cont(0x7, r0, 0x0, 0x0) [ 359.011123][ T8507] usb 6-1: USB disconnect, device number 60 06:59:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0x197, 0x48010, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d) recvmsg(r0, &(0x7f0000001500)={0x0, 0x1300, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010000, 0x2700}, 0x100) 06:59:18 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}}], 0x1, 0x0) close(r1) 06:59:18 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getrlimit(0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 06:59:18 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}}], 0x1, 0x0) close(r1) [ 359.532203][ T8507] usb 6-1: new high-speed USB device number 61 using dummy_hcd 06:59:18 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}}], 0x1, 0x0) close(r1) 06:59:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 359.822466][ T8507] usb 6-1: Using ep0 maxpacket: 8 [ 359.953006][ T8507] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.979992][ T8507] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 360.143069][ T8507] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 360.160516][ T8507] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 360.185444][ T8507] usb 6-1: Product: syz [ 360.199674][ T8507] usb 6-1: Manufacturer: syz [ 360.220209][ T8507] usb 6-1: config 0 descriptor?? 06:59:21 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:59:21 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0x0) close(r1) 06:59:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:21 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0xfffffe58) chown(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0) 06:59:21 executing program 4: sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0xf5ffffff00000000) 06:59:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_getparam(0x0, &(0x7f0000000040)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0xfd14) fallocate(r3, 0x1, 0x1008, 0x28120001) connect$inet(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000001640)=""/4095, 0xfff}], 0x1, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x121a02, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x10000, 0x12) sendmmsg$unix(r4, &(0x7f0000000080), 0x0, 0x4000001) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @remote}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000148, 0x4000000, 0x0) [ 362.115806][ T7] usb 6-1: USB disconnect, device number 61 06:59:21 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0x0) close(r1) 06:59:21 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0x0) close(r1) [ 362.722022][ T7] usb 6-1: new high-speed USB device number 62 using dummy_hcd 06:59:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:22 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a814", 0x4}], 0x1}}], 0x1, 0x0) close(r1) [ 363.002061][ T7] usb 6-1: Using ep0 maxpacket: 8 06:59:22 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a814", 0x4}], 0x1}}], 0x1, 0x0) close(r1) 06:59:22 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) fsopen(0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)=0x447) [ 363.152729][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.179155][ T7] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 363.362870][ T7] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 363.398486][ T7] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 363.423605][ T7] usb 6-1: Product: syz [ 363.427812][ T7] usb 6-1: Manufacturer: syz [ 363.451470][ T7] usb 6-1: config 0 descriptor?? 06:59:24 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:59:24 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a814", 0x4}], 0x1}}], 0x1, 0x0) close(r1) 06:59:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xef85) open(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0)=ANY=[], 0x8c, 0x0) 06:59:24 executing program 2: r0 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x2, 0x0}, 0x8001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x6372, 0x0, 0x0, 0x0, 0x0) 06:59:24 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mlockall(0x7) syz_open_dev$sg(0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlockall() [ 365.241693][ T8539] usb 6-1: USB disconnect, device number 62 06:59:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8a}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setattr(r0, 0x0, 0x0) fork() perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001d00)={{{@in, @in6=@private0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 06:59:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) 06:59:24 executing program 2: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000149000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in={0x2, 0x0, @broadcast}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 06:59:24 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1b", 0x6}], 0x1}}], 0x1, 0x0) close(r1) 06:59:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8) getsockopt(0xffffffffffffffff, 0x6af8, 0x80000000, &(0x7f0000000400)=""/99, &(0x7f0000000180)=0x63) socket$inet_mptcp(0x2, 0x1, 0x106) openat$autofs(0xffffffffffffff9c, &(0x7f00000087c0), 0x101602, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfda6) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@local, @private1, @remote, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, r3}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 06:59:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r3, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) [ 365.791855][ T8539] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 366.041984][ T8539] usb 6-1: Using ep0 maxpacket: 8 [ 366.162639][ T8539] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.178640][ T8539] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 366.328319][ T8539] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 366.344532][ T8539] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 366.371765][ T8539] usb 6-1: Product: syz [ 366.380596][ T8539] usb 6-1: Manufacturer: syz [ 366.399502][ T8539] usb 6-1: config 0 descriptor?? 06:59:27 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:59:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x10000, 0x0) write$binfmt_aout(r4, &(0x7f00000005c0)=ANY=[], 0x5d7) read(r3, &(0x7f0000000000)=""/23, 0x1001) dup2(r1, r2) 06:59:27 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1b", 0x6}], 0x1}}], 0x1, 0x0) close(r1) 06:59:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfffffea3) socket$nl_audit(0x10, 0x3, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x700}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) pipe(&(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 06:59:27 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 368.378706][ T7] usb 6-1: USB disconnect, device number 63 06:59:27 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1b", 0x6}], 0x1}}], 0x1, 0x0) close(r1) 06:59:28 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfb", 0x7}], 0x1}}], 0x1, 0x0) close(r1) 06:59:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016000100000000000000000020010000000000000000000000000001ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000ffff7ff3df01dfffffff6c"], 0xf8}}, 0x0) sendfile(r2, r1, 0x0, 0x10000701e) 06:59:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r1, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000000), 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff7c, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x2c, 0xfff, 0x7, 0x1800000000, 0x4c, 0x10001, 0x8, 0x81}, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) clock_gettime(0x0, &(0x7f00000080c0)) [ 368.752147][ T8539] usb 5-1: new high-speed USB device number 6 using dummy_hcd 06:59:28 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfb", 0x7}], 0x1}}], 0x1, 0x0) close(r1) [ 368.901670][ T7] usb 6-1: new high-speed USB device number 64 using dummy_hcd 06:59:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x30d000, 0x0) ftruncate(r1, 0x13da08e9) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) copy_file_range(r0, &(0x7f0000000240), r0, &(0x7f0000000280)=0x1f8, 0x5c21, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x145) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) chroot(&(0x7f0000000040)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x2, {0x4, 0x4, 0x1}}, 0x14) sendfile(r4, r3, 0x0, 0x100000002) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r5, 0xc01064c1, &(0x7f0000000140)={0x0, 0x1}) [ 369.182018][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 369.191979][ T8539] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 369.200695][ T8539] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.242869][ T8539] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.261765][ T8539] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 369.284054][ T8539] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.305635][ T8539] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 369.319328][ T7] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 369.470340][ T7] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 369.496740][ T7] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 369.515849][ T7] usb 6-1: Product: syz [ 369.526008][ T7] usb 6-1: Manufacturer: syz [ 369.544038][ T7] usb 6-1: config 0 descriptor?? [ 369.552007][ T8539] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 369.577237][ T8539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.601817][ T8539] usb 5-1: Product: syz [ 369.609759][ T8539] usb 5-1: Manufacturer: syz [ 369.615156][ T8539] usb 5-1: SerialNumber: syz [ 369.623648][ T8539] usb 5-1: config 0 descriptor?? [ 369.891813][ T8539] qcserial 5-1:0.0: Qualcomm USB modem converter detected [ 370.104864][ T7] usb 5-1: USB disconnect, device number 6 [ 370.120031][ T7] qcserial 5-1:0.0: device disconnected [ 370.881606][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 371.251657][ T7] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 371.260447][ T7] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.270749][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.281085][ T7] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 371.290533][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.303947][ T7] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 06:59:30 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:59:30 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfb", 0x7}], 0x1}}], 0x1, 0x0) close(r1) 06:59:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:30 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) 06:59:30 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x88}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000024001deeffffff3314fa2182d60fdc00", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000800010061746d"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@delchain={0x3c, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8}]}}]}, 0x3c}}, 0x0) 06:59:30 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 371.494289][ T8539] usb 6-1: USB disconnect, device number 64 [ 371.532491][ T7] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 371.549736][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.578202][T15216] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 371.589223][ T7] usb 5-1: Product: syz [ 371.610615][ T7] usb 5-1: config 0 descriptor?? 06:59:30 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(0xffffffffffffffff) 06:59:31 executing program 2: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0, 0x12100}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) fstat(0xffffffffffffffff, &(0x7f0000001500)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x9, 0x3f, 0x3f, 0xe5, 0x0, 0x9, 0x200, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f00000000c0), 0x6}, 0x0, 0x3, 0x8, 0x4, 0x3f, 0x807, 0x4d, 0x0, 0x5, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x3) r4 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x80, 0x9c, 0x3, 0x8, 0x0, 0x0, 0x1900, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5}, 0xd80, 0x4, 0x20, 0x7, 0x7, 0x2, 0x6, 0x0, 0x7fffffff, 0x0, 0x8168}, 0x0, 0x1, r4, 0x11) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB='tunl', @ANYBLOB="78000040000000020401000040d7004000660000c629907864010102e0"]}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 371.671591][ T7] usb 5-1: can't set config #0, error -71 [ 371.708235][ T7] usb 5-1: USB disconnect, device number 7 [ 371.746563][T15216] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 06:59:31 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "39af2a", 0x4, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0]}}}}}}}, 0x0) 06:59:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000380000020000000000000000a60000005000000095a6c0a00ca37ed2af846cea"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00'}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000980)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975e99d51b1cec6ddaa76e184300"}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r1, 0xc080aebe, &(0x7f0000000000)=ANY=[]) dup2(r2, r1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)=0x6) io_setup(0x1, &(0x7f0000000240)=0x0) socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) 06:59:31 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f00000019c0)=""/245, 0xf5}, {&(0x7f00000002c0)=""/153, 0x99}, {0x0}, {0x0}], 0x4, &(0x7f0000001ec0)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r2, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) [ 372.043372][ T8539] usb 6-1: new high-speed USB device number 65 using dummy_hcd 06:59:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 372.133343][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 372.301600][ T8539] usb 6-1: Using ep0 maxpacket: 8 [ 372.421645][ T8539] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 372.511927][ T7] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 372.520662][ T7] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.542437][ T8539] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 372.558321][ T8539] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 372.567040][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.577884][ T8539] usb 6-1: Product: syz [ 372.582406][ T8539] usb 6-1: Manufacturer: syz [ 372.588134][ T7] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 372.599628][ T8539] usb 6-1: config 0 descriptor?? [ 372.605015][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.618216][ T7] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 372.791993][ T7] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 372.801078][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.820975][ T7] usb 5-1: Product: syz [ 372.825721][ T7] usb 5-1: Manufacturer: syz [ 372.830593][ T7] usb 5-1: SerialNumber: syz [ 372.883641][ T7] usb 5-1: config 0 descriptor?? [ 373.231703][ T7] qcserial 5-1:0.0: Qualcomm USB modem converter detected [ 373.461311][ T8439] usb 5-1: USB disconnect, device number 8 [ 373.485075][ T8439] qcserial 5-1:0.0: device disconnected 06:59:33 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:59:33 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)=ANY=[], 0xfffffd6d) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) 06:59:33 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) 06:59:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:33 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(0xffffffffffffffff) 06:59:33 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 374.627390][ T8507] usb 6-1: USB disconnect, device number 65 [ 374.971498][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd 06:59:34 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01060000000094000e0001800900ceff00e660c61e00", @ANYRES32, @ANYBLOB="c4000a"], 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x13, 0x0, 0x0, 0xfffffffffffffc5d) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='#', 0xad2a, 0x7802, 0x0, 0x4b6ae4f95a5de309) [ 375.127917][ T8507] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 375.173296][T15328] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 375.187522][T15328] netlink: 41863 bytes leftover after parsing attributes in process `syz-executor.3'. 06:59:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 375.228165][T15328] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 375.351711][ T25] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 375.360499][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 375.371535][ T8507] usb 6-1: Using ep0 maxpacket: 8 [ 375.391902][T15328] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 375.401020][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.408709][T15328] netlink: 41863 bytes leftover after parsing attributes in process `syz-executor.3'. [ 375.429878][ T25] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 375.449345][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.475594][ T25] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 06:59:34 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) [ 375.492244][T15328] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 375.502167][ T8507] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 06:59:34 executing program 3: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 375.632086][ T8507] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 375.646364][ T8507] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 375.671700][ T8507] usb 6-1: Product: syz [ 375.680632][ T8507] usb 6-1: Manufacturer: syz [ 375.687243][ T25] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 375.700986][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.716038][ T8507] usb 6-1: config 0 descriptor?? [ 375.738543][ T25] usb 5-1: Product: syz [ 375.751075][ T25] usb 5-1: Manufacturer: syz [ 375.769937][ T25] usb 5-1: SerialNumber: syz [ 375.807673][ T25] usb 5-1: config 0 descriptor?? 06:59:35 executing program 0: r0 = io_uring_setup(0x4456, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg$sock(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(0xffffffffffffffff) 06:59:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 376.111452][ T25] qcserial 5-1:0.0: Qualcomm USB modem converter detected [ 376.367198][ T8539] usb 5-1: USB disconnect, device number 9 [ 376.375805][ T8539] qcserial 5-1:0.0: device disconnected 06:59:37 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:59:37 executing program 3: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 06:59:37 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) 06:59:37 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 06:59:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:37 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 377.763014][ T8539] usb 6-1: USB disconnect, device number 66 [ 378.111520][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd 06:59:37 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 06:59:37 executing program 3: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 378.303839][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.310289][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.421306][ T8539] usb 6-1: new high-speed USB device number 67 using dummy_hcd 06:59:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 378.491904][ T25] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 378.500632][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 378.575991][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.640012][ T25] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 378.711352][ T8539] usb 6-1: Using ep0 maxpacket: 8 [ 378.717775][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.770304][ T25] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 06:59:38 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 06:59:38 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) 06:59:38 executing program 3: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 378.981545][ T25] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 378.990632][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.991841][ T8539] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 379.049922][ T25] usb 5-1: Product: syz [ 379.063946][ T8539] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 379.070133][ T25] usb 5-1: Manufacturer: syz [ 379.088038][ T25] usb 5-1: SerialNumber: syz [ 379.103089][ T8539] usb 6-1: Product: syz [ 379.120104][ T25] usb 5-1: config 0 descriptor?? [ 379.125233][ T8539] usb 6-1: Manufacturer: syz [ 379.129517][ T8539] usb 6-1: config 0 descriptor?? [ 379.461231][ T25] qcserial 5-1:0.0: Qualcomm USB modem converter detected [ 379.651809][ T8539] CoreChips: probe of 6-1:0.0 failed with error -32 [ 379.724122][ T8539] usb 5-1: USB disconnect, device number 10 [ 379.743520][ T8539] qcserial 5-1:0.0: device disconnected 06:59:40 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:59:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x3, 0xe, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) 06:59:40 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) dup(r1) 06:59:40 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) fcntl$addseals(r0, 0x409, 0xc) 06:59:40 executing program 4: syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) [ 380.910075][ T8518] usb 6-1: USB disconnect, device number 67 06:59:40 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) fcntl$addseals(r0, 0x409, 0xc) 06:59:40 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)) 06:59:40 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) fcntl$addseals(r0, 0x409, 0xc) 06:59:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000507", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) 06:59:40 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) dup(r1) [ 381.311214][ T8439] usb 5-1: new high-speed USB device number 11 using dummy_hcd 06:59:40 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) [ 381.431930][ T8518] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 381.579873][T15680] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 381.701163][ T8518] usb 6-1: Using ep0 maxpacket: 8 [ 381.751652][ T8439] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 381.760386][ T8439] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 381.794329][ T8439] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.837715][ T8439] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 381.896600][ T8439] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.951762][ T8518] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 381.954427][ T8439] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 381.978907][ T8518] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 382.011776][ T8518] usb 6-1: Product: syz [ 382.026206][ T8518] usb 6-1: Manufacturer: syz [ 382.053544][ T8518] usb 6-1: config 0 descriptor?? [ 382.211473][ T8439] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 382.228075][ T8439] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.262877][ T8439] usb 5-1: Product: syz [ 382.283385][ T8439] usb 5-1: Manufacturer: syz [ 382.303740][ T8439] usb 5-1: SerialNumber: syz [ 382.331109][ T8439] usb 5-1: config 0 descriptor?? [ 382.348256][T15680] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 382.552046][ T8518] CoreChips: probe of 6-1:0.0 failed with error -32 [ 382.631733][ T8439] usb 5-1: Could not set interface, error -71 [ 382.679369][ T8439] usb 5-1: USB disconnect, device number 11 06:59:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:43 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) 06:59:43 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:59:43 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) dup(r1) 06:59:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000507", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) 06:59:43 executing program 4: syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) [ 384.103934][ T8439] usb 6-1: USB disconnect, device number 68 06:59:43 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) [ 384.406676][T15799] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 384.491847][ T1052] usb 5-1: new high-speed USB device number 12 using dummy_hcd 06:59:43 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) write$nbd(0xffffffffffffffff, 0x0, 0x0) [ 384.680888][ T8439] usb 6-1: new high-speed USB device number 69 using dummy_hcd 06:59:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 384.891182][ T1052] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 384.914013][ T1052] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 06:59:44 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) [ 384.950966][ T8439] usb 6-1: Using ep0 maxpacket: 8 [ 384.997527][ T1052] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 06:59:44 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) write$nbd(0xffffffffffffffff, 0x0, 0x0) [ 385.051657][ T1052] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 385.078717][ T1224] Bluetooth: hci6: Frame reassembly failed (-84) [ 385.152658][ T1052] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.211680][ T8439] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 385.237135][ T8439] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 385.270182][ T1052] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 385.305400][ T8439] usb 6-1: Product: syz [ 385.337327][ T8439] usb 6-1: Manufacturer: syz [ 385.377400][ T8439] usb 6-1: config 0 descriptor?? [ 385.541301][ T1052] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 385.564711][ T1052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.616364][ T1052] usb 5-1: Product: syz 06:59:44 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) write$nbd(0xffffffffffffffff, 0x0, 0x0) [ 385.638934][ T1052] usb 5-1: Manufacturer: syz [ 385.683085][ T1052] usb 5-1: SerialNumber: syz [ 385.712375][ T1052] usb 5-1: config 0 descriptor?? [ 385.870941][ T8439] CoreChips: probe of 6-1:0.0 failed with error -32 [ 385.990833][ T1052] usb 5-1: Could not set interface, error -71 [ 386.023840][ T1052] usb 5-1: USB disconnect, device number 12 06:59:45 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 06:59:45 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) 06:59:45 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 387.100864][ T25] Bluetooth: hci6: command 0x1003 tx timeout [ 387.114908][ T6564] Bluetooth: hci6: sending frame failed (-49) 06:59:46 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:59:46 executing program 4: syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) 06:59:46 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800005, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x21, 0x0, &(0x7f0000002540)=0xc) 06:59:46 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 387.308673][ T8439] usb 6-1: USB disconnect, device number 69 06:59:46 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) [ 387.650871][ T1052] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 387.850780][ T8439] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 388.110809][ T1052] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 388.129320][ T1052] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 388.150767][ T8439] usb 6-1: Using ep0 maxpacket: 8 [ 388.164201][ T1052] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.198636][ T1052] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 388.219755][ T1052] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.260395][ T1052] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 388.461634][ T8439] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 388.485992][ T8439] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 388.516646][ T8439] usb 6-1: Product: syz [ 388.522131][ T1052] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 388.541264][ T1052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.553608][ T8439] usb 6-1: Manufacturer: syz [ 388.569292][ T1052] usb 5-1: Product: syz [ 388.589493][ T1052] usb 5-1: Manufacturer: syz [ 388.604367][ T1052] usb 5-1: SerialNumber: syz [ 388.610918][ T8439] usb 6-1: config 0 descriptor?? [ 388.681581][ T1052] usb 5-1: config 0 descriptor?? [ 388.950813][ T1052] usb 5-1: Could not set interface, error -71 [ 388.986940][ T1052] usb 5-1: USB disconnect, device number 13 [ 389.099433][ T8439] CoreChips: probe of 6-1:0.0 failed with error -32 [ 389.180881][ T25] Bluetooth: hci6: command 0x1001 tx timeout [ 389.186988][ T6564] Bluetooth: hci6: sending frame failed (-49) [ 390.439354][ T25] usb 6-1: USB disconnect, device number 70 [ 391.262823][ T8507] Bluetooth: hci6: command 0x1009 tx timeout 06:59:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 06:59:55 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 06:59:55 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x1) r1 = dup(0xffffffffffffffff) write$nbd(r1, 0x0, 0x0) 06:59:55 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) 06:59:55 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 06:59:55 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:59:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0xd502, 0x0, 0x0) [ 396.060444][ T8507] usb 6-1: new high-speed USB device number 71 using dummy_hcd 06:59:55 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x1) r1 = dup(0xffffffffffffffff) write$nbd(r1, 0x0, 0x0) 06:59:55 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 396.360313][ T8507] usb 6-1: Using ep0 maxpacket: 8 06:59:55 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x1) r1 = dup(0xffffffffffffffff) write$nbd(r1, 0x0, 0x0) [ 396.610942][ T8507] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 396.640287][ T8507] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 396.730343][ T8507] usb 6-1: Product: syz [ 396.734554][ T8507] usb 6-1: Manufacturer: syz [ 396.769497][ T8507] usb 6-1: config 0 descriptor?? 06:59:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 06:59:56 executing program 2: r0 = memfd_create(0x0, 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) [ 397.287406][ T8507] CoreChips: probe of 6-1:0.0 failed with error -32 [ 397.980340][ T8518] Bluetooth: hci6: command 0x1003 tx timeout [ 397.987488][ T6564] Bluetooth: hci6: sending frame failed (-49) [ 398.727456][ T8518] usb 6-1: USB disconnect, device number 71 [ 400.060406][ T8518] Bluetooth: hci6: command 0x1001 tx timeout [ 400.067491][ T6564] Bluetooth: hci6: sending frame failed (-49) [ 402.140223][ T8518] Bluetooth: hci6: command 0x1009 tx timeout 07:00:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 07:00:05 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 07:00:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000380)) perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, @perf_config_ext={0x401, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 07:00:05 executing program 2: r0 = memfd_create(0x0, 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) 07:00:05 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:05 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:00:05 executing program 2: r0 = memfd_create(0x0, 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) [ 406.664403][T16219] hub 9-0:1.0: USB hub found [ 406.691005][T16219] hub 9-0:1.0: 8 ports detected [ 406.755351][ T10] Bluetooth: hci6: Frame reassembly failed (-84) 07:00:06 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) 07:00:06 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 406.899884][T16070] usb 6-1: new high-speed USB device number 72 using dummy_hcd 07:00:06 executing program 4: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 407.149817][T16070] usb 6-1: Using ep0 maxpacket: 8 07:00:06 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 407.420634][T16070] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 407.439999][T16070] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 407.474416][T16070] usb 6-1: Product: syz [ 407.505789][T16070] usb 6-1: Manufacturer: syz [ 407.548705][T16070] usb 6-1: config 0 descriptor?? 07:00:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000380)) perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, @perf_config_ext={0x401, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 407.859387][T16313] hub 9-0:1.0: USB hub found [ 407.870401][T16313] hub 9-0:1.0: 8 ports detected [ 408.049881][T16070] CoreChips: probe of 6-1:0.0 failed with error -32 [ 408.779842][ T6235] Bluetooth: hci6: command 0x1003 tx timeout [ 408.793238][ T6564] Bluetooth: hci6: sending frame failed (-49) [ 409.586679][T16072] usb 6-1: USB disconnect, device number 72 [ 410.859672][ T8518] Bluetooth: hci6: command 0x1001 tx timeout [ 410.866259][ T6564] Bluetooth: hci6: sending frame failed (-49) [ 412.939472][ T25] Bluetooth: hci6: command 0x1009 tx timeout 07:00:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 07:00:16 executing program 0: unshare(0x48040200) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x1) r1 = dup(r0) write$nbd(r1, 0x0, 0x0) 07:00:16 executing program 4: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:00:16 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) 07:00:16 executing program 3: sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0xfffffffffffffffb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) wait4(0x0, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000118000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) 07:00:16 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:00:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_RELEASE_PORT(r0, 0xc00c5512, &(0x7f0000000000)) [ 417.610625][ T158] Bluetooth: hci6: Frame reassembly failed (-84) 07:00:17 executing program 0: unshare(0x48040200) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x1) r1 = dup(r0) write$nbd(r1, 0x0, 0x0) [ 417.799293][T16070] usb 6-1: new high-speed USB device number 73 using dummy_hcd 07:00:17 executing program 3: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x18, 0x0, 0x7f}) 07:00:17 executing program 4: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 418.059402][T16070] usb 6-1: Using ep0 maxpacket: 8 07:00:17 executing program 0: unshare(0x48040200) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x1) r1 = dup(r0) write$nbd(r1, 0x0, 0x0) [ 418.339353][T16070] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 418.363490][T16070] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 418.426827][T16070] usb 6-1: Product: syz [ 418.455068][T16070] usb 6-1: Manufacturer: syz [ 418.508824][T16070] usb 6-1: config 0 descriptor?? [ 419.049352][T16070] CoreChips: probe of 6-1:0.0 failed with error -32 07:00:19 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) [ 419.659366][T13410] Bluetooth: hci6: Entering manufacturer mode failed (-110) 07:00:19 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x0, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:00:19 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 07:00:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="66130700ae897094e700267f97eaa769be36b2fb7be6a16d", 0x18}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:00:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x800, 0xffffffff, 0x101, 0x6, 0x4}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) creat(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x4, 0x6, 0x7ff, 0x9, 0x81, 0x0, 0xb2cc, 0x3}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) lseek(r3, 0xfffffffffffff1f9, 0x3) [ 420.390527][ T154] Bluetooth: hci6: Frame reassembly failed (-84) 07:00:19 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 420.499358][ T8507] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 420.515130][ T8518] usb 6-1: USB disconnect, device number 73 07:00:19 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:19 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) [ 420.689177][ T8507] usb 5-1: device descriptor read/64, error 18 07:00:20 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:20 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) [ 420.959119][ T8507] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 421.049137][ T8518] usb 6-1: new high-speed USB device number 74 using dummy_hcd 07:00:20 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) [ 421.159291][ T8507] usb 5-1: device descriptor read/64, error 18 [ 421.279448][ T8507] usb usb5-port1: attempt power cycle [ 421.299307][ T8518] usb 6-1: Using ep0 maxpacket: 8 07:00:20 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, 0x0, 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) [ 421.549174][ T8518] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 421.558250][ T8518] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 421.629602][ T8518] usb 6-1: Product: syz [ 421.633809][ T8518] usb 6-1: Manufacturer: syz [ 421.668686][ T8518] usb 6-1: config 0 descriptor?? [ 421.689011][ T8507] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 421.789818][ T8507] usb 5-1: Invalid ep0 maxpacket: 0 [ 421.939053][ T8507] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 422.039430][ T8507] usb 5-1: Invalid ep0 maxpacket: 0 [ 422.044991][ T8507] usb usb5-port1: unable to enumerate USB device [ 422.199327][ T8518] CoreChips: probe of 6-1:0.0 failed with error -32 [ 422.459353][ T8518] Bluetooth: hci6: command 0xfc11 tx timeout [ 422.465527][T13410] Bluetooth: hci6: Entering manufacturer mode failed (-110) 07:00:22 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x0, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:00:22 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:22 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, 0x0, 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) 07:00:22 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f00000009c0)={0x4, 0x1, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), &(0x7f0000000940), 0x0}) 07:00:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 07:00:23 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:00:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000200904000001020d0000052406000102240000"], 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x4004550d, 0x0) 07:00:23 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, 0x0, 0x2239e03c) fcntl$addseals(r0, 0x409, 0xc) 07:00:23 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 423.674761][T16072] usb 6-1: USB disconnect, device number 74 [ 423.729131][ T6235] usb 5-1: new high-speed USB device number 18 using dummy_hcd 07:00:23 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) [ 423.919106][ T6235] usb 5-1: device descriptor read/64, error 18 07:00:23 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 424.189023][ T6235] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 424.230788][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 424.239079][T16072] usb 6-1: new high-speed USB device number 75 using dummy_hcd 07:00:23 executing program 0: unshare(0x48040200) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x1) r1 = dup(r0) write$nbd(r1, 0x0, 0x0) [ 424.389045][ T6235] usb 5-1: device descriptor read/64, error 18 [ 424.479056][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 424.509289][ T6235] usb usb5-port1: attempt power cycle [ 424.529485][T16072] usb 6-1: Using ep0 maxpacket: 8 [ 424.599964][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.629688][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 424.669410][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 424.801306][T16072] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 424.814002][T16072] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 424.822660][T16072] usb 6-1: Product: syz [ 424.826989][T16072] usb 6-1: Manufacturer: syz [ 424.833814][T16072] usb 6-1: config 0 descriptor?? [ 424.860275][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.877261][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.906717][ T25] usb 4-1: Product: syz [ 424.919023][ T6235] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 424.927898][ T25] usb 4-1: Manufacturer: syz [ 424.935453][ T25] usb 4-1: SerialNumber: syz [ 424.996061][ T25] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 425.003435][ T25] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 425.019347][ T6235] usb 5-1: Invalid ep0 maxpacket: 0 [ 425.033417][ T25] cdc_ncm 4-1:1.0: bind() failure [ 425.178884][ T6235] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 425.215481][ T8507] usb 4-1: USB disconnect, device number 4 [ 425.279381][ T6235] usb 5-1: Invalid ep0 maxpacket: 0 [ 425.285744][ T6235] usb usb5-port1: unable to enumerate USB device [ 425.319279][T16072] CoreChips: probe of 6-1:0.0 failed with error -32 [ 425.419015][T16072] Bluetooth: hci6: command 0xfc11 tx timeout [ 425.419115][T13410] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 426.008896][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 426.288799][ T7] usb 4-1: Using ep0 maxpacket: 8 07:00:25 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x0, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:00:25 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) 07:00:25 executing program 0: unshare(0x48040200) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x1) r1 = dup(r0) write$nbd(r1, 0x0, 0x0) 07:00:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 426.438946][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.473674][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 426.530116][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 07:00:26 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) ftruncate(r0, 0x7fa) syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f00000001c0)={0xe5, 0x0, 0x2023, 0x0, 0x210, {0x5, 0x7fffffff}, 0x1}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000540)={0x0, 0xfffffffffffffffd, 0x0, 0x0, @scatter={0x2, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000440)=""/242, 0xf2}]}, 0x0, &(0x7f0000000700)=""/4096, 0x0, 0x10000, 0x0, &(0x7f00000000c0)}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000006c0)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x88001) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 07:00:26 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 426.799091][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.830268][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.882166][ T7] usb 4-1: Product: syz 07:00:26 executing program 0: unshare(0x48040200) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x1) r1 = dup(r0) write$nbd(r1, 0x0, 0x0) [ 426.903282][ T7] usb 4-1: Manufacturer: syz [ 426.929105][T16067] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 426.953430][T16072] usb 6-1: USB disconnect, device number 75 [ 426.985683][ T7] usb 4-1: can't set config #1, error -71 [ 427.016708][ T7] usb 4-1: USB disconnect, device number 5 [ 427.139133][T16067] usb 5-1: device descriptor read/64, error 18 07:00:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fchown(r0, 0x0, 0xee00) 07:00:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 427.418965][T16067] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 427.426681][T16072] usb 6-1: new high-speed USB device number 76 using dummy_hcd 07:00:26 executing program 3: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200), 0x175d900f) lseek(r0, 0x0, 0x4) write$binfmt_script(r0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) 07:00:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 427.659119][T16067] usb 5-1: device descriptor read/64, error 18 07:00:27 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) [ 427.708880][T16072] usb 6-1: Using ep0 maxpacket: 8 [ 427.790350][T16067] usb usb5-port1: attempt power cycle [ 427.999549][T16072] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 428.017899][T16072] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 428.045668][T16072] usb 6-1: Product: syz [ 428.063784][T16072] usb 6-1: Manufacturer: syz [ 428.084100][T16072] usb 6-1: config 0 descriptor?? [ 428.229647][T16067] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 428.358767][T16067] usb 5-1: Invalid ep0 maxpacket: 0 [ 428.508830][T16067] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 428.539250][T13410] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 428.599390][T16072] CoreChips: probe of 6-1:0.0 failed with error -32 [ 428.619331][T16067] usb 5-1: Invalid ep0 maxpacket: 0 [ 428.624795][T16067] usb usb5-port1: unable to enumerate USB device 07:00:28 executing program 4: r0 = syz_usb_connect(0x0, 0x46, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:00:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="5dc418b5251f83d983a16ee9938de84285f9704477d98588fa65405c4a9cd744637f139abd05", @ANYRESOCT], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="26003300b0800000080211000001080211000000505050505050"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x80000000) 07:00:28 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0x0) 07:00:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 429.687909][ T9684] Bluetooth: hci6: Frame reassembly failed (-84) 07:00:29 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:00:29 executing program 0: unshare(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sched_setattr(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0xffffffff, 0x0, 0x9, 0x2, 0xfffffffffffffffc, 0x0, 0xfffffffd}, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) tkill(0x0, 0x2) [ 430.035254][ T25] usb 6-1: USB disconnect, device number 76 [ 430.069965][T16067] usb 5-1: new high-speed USB device number 26 using dummy_hcd 07:00:29 executing program 0: unshare(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:29 executing program 0: unshare(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 430.458932][T16067] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 430.493845][T16067] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 430.558841][ T25] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 430.559549][T16067] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 07:00:30 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0x0) 07:00:30 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 430.808704][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 430.820203][T16067] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 430.849622][T16067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.888617][T16067] usb 5-1: Product: syz [ 430.912451][T16067] usb 5-1: Manufacturer: syz [ 430.939318][T16067] usb 5-1: SerialNumber: syz [ 431.003736][T16067] usb 5-1: config 0 descriptor?? [ 431.049822][ T25] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 431.088376][ T25] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 431.130818][ T25] usb 6-1: Product: syz [ 431.149559][ T25] usb 6-1: Manufacturer: syz [ 431.180437][ T25] usb 6-1: config 0 descriptor?? [ 431.678723][ T25] CoreChips: probe of 6-1:0.0 failed with error -32 [ 431.738638][T13410] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 431.749363][T16067] Bluetooth: hci6: command tx timeout 07:00:32 executing program 4: r0 = syz_usb_connect(0x0, 0x46, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:00:32 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:32 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00th1\x00\xcf\x84\x94\xc6\xcd,\xdc\xeb\xd2\xdaZo\xf0\xe3\x89\xc0\x9a2\x1a\xdb0\xb8s\xb8\xda=\xf3\x90mA\xea\xc2\xec\xc7*o\vX\xfdC\xe3\x1651\x90oe\xc2\xa5', 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x2239e03c) fcntl$addseals(r0, 0x409, 0x0) 07:00:32 executing program 3: r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000000140)=""/41, 0x29) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xd232, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x9}) 07:00:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 432.755941][ T7] usb 5-1: USB disconnect, device number 26 07:00:32 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:32 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 433.199164][T16072] usb 6-1: USB disconnect, device number 77 [ 433.328924][ T7] usb 5-1: new high-speed USB device number 27 using dummy_hcd 07:00:32 executing program 0: unshare(0x48040200) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x1) r1 = dup(r0) write$nbd(r1, 0x0, 0x0) 07:00:33 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a504bd40eb030200ffba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 433.698626][T16072] usb 6-1: new high-speed USB device number 78 using dummy_hcd 07:00:33 executing program 0: unshare(0x48040200) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x1) r1 = dup(r0) write$nbd(r1, 0x0, 0x0) [ 433.789014][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 433.816461][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 433.858978][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 07:00:33 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x3e, 0x80, 0xc2, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x6, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) [ 433.998725][T16072] usb 6-1: Using ep0 maxpacket: 8 [ 434.059635][ T7] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 434.093387][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 07:00:33 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x9, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) write(r3, &(0x7f0000000000)="05", 0xe7b78) [ 434.143264][ T7] usb 5-1: Product: syz [ 434.161616][ T7] usb 5-1: Manufacturer: syz [ 434.168634][ T8507] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 434.187235][ T7] usb 5-1: SerialNumber: syz [ 434.213343][ T7] usb 5-1: config 0 descriptor?? [ 434.289580][T16072] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 434.317308][T16072] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 434.359453][T16072] usb 6-1: Product: syz [ 434.374625][T16072] usb 6-1: Manufacturer: syz [ 434.394970][T16072] usb 6-1: config 0 descriptor?? [ 434.529364][ T8507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.550956][ T8507] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff [ 434.584902][ T8507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.623557][ T8507] usb 4-1: config 0 descriptor?? [ 434.798558][ T8507] rc_core: IR keymap rc-hauppauge not found [ 434.804701][ T8507] Registered IR keymap rc-empty [ 434.832904][ T8507] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 434.874995][ T8507] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 434.888720][T16072] CoreChips: probe of 6-1:0.0 failed with error -32 [ 434.938646][T13410] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 434.938696][T16072] Bluetooth: hci6: command 0xfc11 tx timeout [ 435.239725][T17090] rc rc0: two consecutive events of type space [ 435.450331][ T25] usb 4-1: USB disconnect, device number 6 07:00:35 executing program 4: r0 = syz_usb_connect(0x0, 0x46, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:00:35 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x30, 0x1b, 0x8, 0x110a, 0x1653, 0x6f72, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc1, 0xf1, 0x4a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000004c0)={0x0, 0x0, 0x4, '\x002q\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:00:35 executing program 2: set_mempolicy(0x1, 0x0, 0x0) fsopen(&(0x7f0000000000)='erofs\x00', 0x0) [ 435.904215][ T25] usb 5-1: USB disconnect, device number 27 07:00:35 executing program 0: unshare(0x48040200) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x1) r1 = dup(r0) write$nbd(r1, 0x0, 0x0) 07:00:35 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0x9, &(0x7f0000000040), 0x8) 07:00:35 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 436.248511][ T6235] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 436.288393][ T8507] usb 2-1: new high-speed USB device number 8 using dummy_hcd 07:00:35 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:00:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5429, 0x0) [ 436.366104][ T8518] usb 6-1: USB disconnect, device number 78 [ 436.478469][ T25] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 436.539771][ T8507] usb 2-1: Using ep0 maxpacket: 8 [ 436.619662][ T6235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.650394][ T6235] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff [ 436.669069][ T8507] usb 2-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=6f.72 [ 436.684050][ T8507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.734389][ T6235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.774502][ T8507] usb 2-1: config 0 descriptor?? [ 436.795595][ T6235] usb 4-1: config 0 descriptor?? [ 436.848665][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 436.898384][ T8518] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 436.906857][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 07:00:36 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:36 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a504bd40eb030200ffba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:00:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000012c0)}, {&(0x7f0000000280)}, {0x0}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000380)=0x1) [ 436.960628][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 436.978352][ T6235] rc_core: IR keymap rc-hauppauge not found [ 436.984459][ T6235] Registered IR keymap rc-empty [ 437.010425][ T6235] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 437.085927][ T6235] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 437.138383][ T8518] usb 6-1: Using ep0 maxpacket: 8 [ 437.188817][ T25] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 437.215931][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.228248][ T6235] usb 4-1: USB disconnect, device number 7 [ 437.242656][T17210] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 437.314437][T17210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 437.314812][ T25] usb 5-1: Product: syz [ 437.360127][T17210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 437.374767][ T25] usb 5-1: Manufacturer: syz [ 437.387657][ T8518] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 437.416159][ T8518] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 437.431087][ T25] usb 5-1: SerialNumber: syz [ 437.467693][ T25] usb 5-1: config 0 descriptor?? [ 437.478609][ T8518] usb 6-1: Product: syz [ 437.521908][ T8518] usb 6-1: Manufacturer: syz [ 437.556335][ T8518] usb 6-1: config 0 descriptor?? 07:00:37 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 437.938499][ T8507] mxuport 2-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 437.958302][ T6235] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 437.998562][ T8507] mxuport 2-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 437.999662][T17223] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 438.014821][ T8507] mxuport: probe of 2-1:0.0 failed with error -71 [ 438.032422][ T8507] usb 2-1: USB disconnect, device number 8 [ 438.092527][T17223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 438.121239][T17223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.288756][ T8518] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 438.318445][ T6235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.348320][ T6235] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff [ 438.388629][ T8518] CoreChips: probe of 6-1:0.0 failed with error -71 [ 438.397311][ T6235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.421361][ T8518] usb 6-1: USB disconnect, device number 79 [ 438.459940][ T6235] usb 4-1: config 0 descriptor?? [ 438.608480][ T6235] rc_core: IR keymap rc-hauppauge not found [ 438.614757][ T6235] Registered IR keymap rc-empty [ 438.631070][ T6235] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 438.667713][ T6235] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 438.848338][ T8507] usb 2-1: new high-speed USB device number 9 using dummy_hcd 07:00:38 executing program 4: r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 439.088298][ T8507] usb 2-1: Using ep0 maxpacket: 8 [ 439.096815][ T6235] usb 5-1: USB disconnect, device number 28 [ 439.209274][ T8507] usb 2-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=6f.72 [ 439.229173][ T8507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.270668][ T8507] usb 2-1: config 0 descriptor?? 07:00:38 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 07:00:38 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:38 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 439.408367][ T8507] mxuport 2-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 439.469402][ T8507] mxuport 2-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) 07:00:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x100d}, 0x28) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) [ 439.512612][ T8507] mxuport: probe of 2-1:0.0 failed with error -71 [ 439.568697][ T8507] usb 2-1: USB disconnect, device number 9 [ 439.623034][ T6235] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 439.635980][ T25] usb 4-1: USB disconnect, device number 8 07:00:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)) unlink(0x0) [ 439.742342][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.748739][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 07:00:39 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x18, 0x0, 0x7f}) [ 439.908543][ T6236] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 440.009563][ T6235] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 440.035545][ T6235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 07:00:39 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a504bd40eb030200ffba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 440.105388][ T6235] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.168375][ T6236] usb 6-1: Using ep0 maxpacket: 8 07:00:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)) unlink(0x0) 07:00:39 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 440.349545][ T6235] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 440.366045][ T6235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.389744][ T6235] usb 5-1: Product: syz [ 440.394238][ T6235] usb 5-1: Manufacturer: syz [ 440.407329][ T6235] usb 5-1: SerialNumber: syz [ 440.413831][ T6236] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 440.435167][ T6236] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 440.454773][ T6235] usb 5-1: config 0 descriptor?? [ 440.486558][ T6236] usb 6-1: Product: syz [ 440.504179][ T6236] usb 6-1: Manufacturer: syz [ 440.538539][ T6236] usb 6-1: config 0 descriptor?? 07:00:40 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 440.708202][ T6235] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 441.089065][ T6235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.104834][ T6235] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff [ 441.121482][ T6235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.142833][ T6235] usb 4-1: config 0 descriptor?? [ 441.258233][ T6236] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 441.278126][ T6235] rc_core: IR keymap rc-hauppauge not found [ 441.284300][ T6235] Registered IR keymap rc-empty [ 441.306536][ T6235] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 441.325812][ T6236] CoreChips: probe of 6-1:0.0 failed with error -71 [ 441.336894][ T6236] usb 6-1: USB disconnect, device number 80 [ 441.354303][ T6235] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 441.954745][ T6236] usb 4-1: USB disconnect, device number 9 07:00:41 executing program 4: r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:00:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2a, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x0, 0x130, 0x278, 0x130, 0x0, 0x340, 0x340, 0x340, 0x340, 0x340, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'netpci0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@loopback, @loopback, 0x0, 0x0, 'wg0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'macvlan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 07:00:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x802, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000002cc0), 0x1a3, 0x0) 07:00:41 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:41 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 442.211703][ T6236] usb 5-1: USB disconnect, device number 29 07:00:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0) sched_setattr(r1, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000000), 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff7c, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x6, 0x2c, 0xfff, 0x7, 0x1800000000, 0x4c, 0x10001, 0x8, 0x81}, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) clock_gettime(0x0, &(0x7f00000080c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 07:00:41 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a504bd40eb030200ffba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 442.578232][ T5] usb 6-1: new high-speed USB device number 81 using dummy_hcd 07:00:42 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 442.661308][T17526] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 442.778099][ T6236] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 442.848177][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 443.029161][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 443.118881][ T5] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 443.138507][ T6236] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 443.162928][ T6236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.168408][ T5] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 07:00:42 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 443.225387][ T5] usb 6-1: Product: syz [ 443.242174][ T6236] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.248093][ T5] usb 6-1: Manufacturer: syz [ 443.311871][ T5] usb 6-1: config 0 descriptor?? [ 443.419740][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 07:00:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000880)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000fc02000000000010009d000000000000fe8000000000000000000000000000bb0000000023000000000000000000e600", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000005000000000048000200656362286369706865725f6e756c6c29"], 0x140}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 443.460524][ T7] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff [ 443.478206][ T6236] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 443.522873][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.523559][ T6236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.599164][ T7] usb 4-1: config 0 descriptor?? [ 443.624965][ T6236] usb 5-1: Product: syz [ 443.655522][ T6236] usb 5-1: Manufacturer: syz [ 443.687087][ T6236] usb 5-1: SerialNumber: syz [ 443.729532][ T6236] usb 5-1: config 0 descriptor?? [ 443.788445][ T7] rc_core: IR keymap rc-hauppauge not found [ 443.798059][ T7] Registered IR keymap rc-empty 07:00:43 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 443.839143][ T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 443.955228][ T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 07:00:43 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x5, [@restrict, @var, @typedef, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @enum={0x0, 0x3, 0x0, 0x6, 0x4, [{}, {}, {}]}, @func]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0xd5}, 0x20) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 444.049654][ T5] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 444.118565][ T5] CoreChips: probe of 6-1:0.0 failed with error -71 [ 444.152108][ T5] usb 6-1: USB disconnect, device number 81 [ 444.673895][ T6235] usb 4-1: USB disconnect, device number 10 07:00:44 executing program 4: r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:00:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) sched_setattr(r3, &(0x7f0000000000)={0x38, 0x5, 0x40, 0xfff, 0x4, 0x0, 0x9, 0x7c, 0x3, 0x200}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x600, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010003b253cff39c6c6be208b00000000", @ANYRES32=0x0, @ANYBLOB="4518000000000000000000000008010062726964676500000300028008000a00", @ANYRES32], 0x3c}}, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000000c0)=0x20) ftruncate(r5, 0x0) r6 = getpid() perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(r6, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x800007fffff8}, 0x0) 07:00:44 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 07:00:44 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:44 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a504bd40eb030200ffba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 07:00:44 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x103200, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x4, 0x5}, &(0x7f00000001c0)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r1, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000036c0)='ipvlan1\x00', 0x10) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x0, 0x74, 0x0, 0x400, 0x0, 0x5, 0x0, 0x6, 0x1}, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x80, 0x28) preadv(r3, &(0x7f0000003640)=[{&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000340)=""/201, 0xc9}, {&(0x7f0000000440)=""/130, 0x82}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/107, 0x6b}], 0x8, 0x6, 0x4fb) sendfile(r4, r5, 0x0, 0x80001d00c0d0) [ 445.397678][ T6235] usb 5-1: USB disconnect, device number 30 [ 445.639239][T17678] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 445.762615][ T6236] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 445.798212][T16067] usb 4-1: new high-speed USB device number 11 using dummy_hcd 07:00:45 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 445.948117][ T6235] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 446.038845][ T6236] usb 6-1: Using ep0 maxpacket: 8 [ 446.219753][T16067] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.282922][ T6236] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 446.308365][ T6235] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 446.310773][T16067] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff [ 446.317086][ T6235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.317132][ T6235] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.320905][ T6236] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 446.455121][T16067] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.488448][ T6235] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a 07:00:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000940)=0x8) [ 446.500054][ T6235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.513482][ T6236] usb 6-1: Product: syz [ 446.518443][T16067] usb 4-1: config 0 descriptor?? [ 446.531989][ T6235] usb 5-1: Product: syz [ 446.536790][ T6236] usb 6-1: Manufacturer: syz [ 446.543589][ T6235] usb 5-1: Manufacturer: syz 07:00:45 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 446.551909][ T6236] usb 6-1: config 0 descriptor?? [ 446.573180][ T6235] usb 5-1: SerialNumber: syz [ 446.584778][ T6235] usb 5-1: config 0 descriptor?? [ 446.718080][T16067] rc_core: IR keymap rc-hauppauge not found [ 446.724029][T16067] Registered IR keymap rc-empty [ 446.754136][T16067] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 446.855631][T16067] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 07:00:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000001280)=""/4090, &(0x7f0000000000)=0xffa) 07:00:46 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:46 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000020"]}) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0xcf4) getpgid(0x0) read$FUSE(r1, &(0x7f0000003680)={0x2020}, 0x2020) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/153) [ 447.204938][ T6235] usb 4-1: USB disconnect, device number 11 [ 447.278024][ T6236] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 447.358011][ T6236] CoreChips: probe of 6-1:0.0 failed with error -71 [ 447.390271][ T6236] usb 6-1: USB disconnect, device number 82 07:00:47 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:00:47 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000020"]}) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0xcf4) getpgid(0x0) read$FUSE(r1, &(0x7f0000003680)={0x2020}, 0x2020) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/153) 07:00:47 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000000)="0f0135660f3880ba394e66b8ef6dffff0f23c00f21f86635000002000f23f8f70d04009a0001e300deff66b8008000000f23c80f21f86635000060000f23f83ef236cebaf80c66b8d03b258366efbafc0c66ed0f32", 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:00:47 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a504bd40eb030200ffba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 07:00:47 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) [ 448.563170][T17692] usb 5-1: USB disconnect, device number 31 07:00:48 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) pread64(r1, &(0x7f0000000100)=""/182, 0xb6, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r3}) [ 448.908051][ T6235] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 448.939032][T17716] usb 6-1: new high-speed USB device number 83 using dummy_hcd 07:00:48 executing program 2: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@cf_end_cf_ack={{}, {}, @broadcast}, 0x10) [ 449.137824][T17692] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 449.150157][T17879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:00:48 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 449.199069][T17716] usb 6-1: Using ep0 maxpacket: 8 [ 449.278939][ T6235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.299157][ T6235] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff [ 449.311088][ T6235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.323590][ T6235] usb 4-1: config 0 descriptor?? 07:00:48 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) pread64(r1, &(0x7f0000000100)=""/182, 0xb6, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r3}) [ 449.468170][T17879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.478888][T17716] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 449.488257][ T6235] rc_core: IR keymap rc-hauppauge not found [ 449.494161][ T6235] Registered IR keymap rc-empty [ 449.504272][T17716] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 449.518350][T17692] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 449.518457][ T6235] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 449.527097][T17692] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.527145][T17692] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.527179][T17692] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 449.585567][T17716] usb 6-1: Product: syz [ 449.595859][T17716] usb 6-1: Manufacturer: syz [ 449.626473][T17716] usb 6-1: config 0 descriptor?? [ 449.634724][ T6235] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 07:00:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r4 = dup(r3) sendfile(r4, r2, 0x0, 0x4000000000000081) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) 07:00:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000400)={0x28, r1, 0x203, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x20, r3, 0x4c4a997a53e05625, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) [ 449.708008][T17692] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 449.731518][T17692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.771340][T17692] usb 5-1: Product: syz [ 449.788230][T17692] usb 5-1: Manufacturer: syz [ 449.811348][T17692] usb 5-1: SerialNumber: syz [ 449.842574][T17692] usb 5-1: config 0 descriptor?? [ 449.915600][T17692] usb 4-1: USB disconnect, device number 12 [ 450.328001][T17716] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 450.378110][T17716] CoreChips: probe of 6-1:0.0 failed with error -71 [ 450.416820][T17716] usb 6-1: USB disconnect, device number 83 07:00:51 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:00:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000000c0)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0x6, 0x8100) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x800, 0x60c, 0x0, 0x0, 0xffffffffffffffff}) 07:00:51 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a504bd40eb030200ffba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 07:00:51 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19fd1f00010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xfffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x58, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 07:00:51 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 451.741907][T17693] usb 5-1: USB disconnect, device number 32 07:00:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) ftruncate(r0, 0x2007fff) r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff) [ 452.107924][T17692] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 452.147758][T17716] usb 4-1: new high-speed USB device number 13 using dummy_hcd 07:00:51 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 452.357775][T17693] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 452.389566][T17692] usb 6-1: Using ep0 maxpacket: 8 [ 452.529113][T17716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.579600][T17716] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff [ 452.642769][T17716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.678831][T17692] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 452.699276][T17692] usb 6-1: New USB device strings: Mfr=253, Product=31, SerialNumber=0 [ 452.705070][T17716] usb 4-1: config 0 descriptor?? [ 452.737269][T17692] usb 6-1: Product: syz [ 452.754868][T17692] usb 6-1: Manufacturer: syz 07:00:52 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 452.778218][T17693] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 452.799972][T17693] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.815389][T17692] usb 6-1: config 0 descriptor?? [ 452.852898][T17693] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.889015][T17693] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 452.907594][T17716] rc_core: IR keymap rc-hauppauge not found [ 452.915032][T17716] Registered IR keymap rc-empty [ 452.944353][T17716] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 07:00:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = getpgrp(0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x1000001a, 0x0, 0x26fe, 0xfffffffffffffffb, 0xe2f, 0x6, 0x0, 0x3}, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="c735a1b26e2625c4415ba53f87ec26f3848eef11b0f183f62d8cdb50315be470ef45", 0x22}, {&(0x7f0000000080)="39cf5689bbc0712511693947054f6768e34b7ed403ce4b014a2a7c67a24ed9e5ed4b41e36ea843440bc19f2653c90fd102672e27368bcb9263d3b9f0f5b6a5a95e750f373c94166c3bfad9bd4f91911cb42978e7bbb3587c2db7d43eb87c711f08cd534b2a01a7a876140b103132887c10fd82b4883b1195a5e68e2878a76d5213c4c10c4757df1a0952175c7e", 0x8d}, {&(0x7f0000000300)="e931235d6e5942c0d6310054c818ce0aec9e2f7e2253d570224fc84e7562dcaaec7b1c014514b70c2a05ae96b3f77fbbc1713393f56eea35c8090b1115f132dbe5dadf53cd6cb2298384d869b385c4634605842d2642f889fce91643ac4b5d8279ebc6955bf854460b26e40cdd8a4f5a3fac8b009833d4cd574bb533532c0380216d544cf621", 0x86}, {&(0x7f00000001c0)}], 0x4, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) [ 453.047678][T17716] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 453.088390][T17693] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 453.097449][T17693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.160426][T17693] usb 5-1: Product: syz [ 453.178401][T17693] usb 5-1: Manufacturer: syz [ 453.189212][T17693] usb 5-1: SerialNumber: syz 07:00:52 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x5) 07:00:52 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 453.219599][T17693] usb 5-1: config 0 descriptor?? [ 453.331994][T18077] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 453.361491][T17716] usb 4-1: USB disconnect, device number 13 [ 453.557668][T17692] CoreChips 6-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 453.627850][T17692] CoreChips: probe of 6-1:0.0 failed with error -71 [ 453.675238][T17692] usb 6-1: USB disconnect, device number 84 07:00:53 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a504bd40eb030200ffba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:00:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[], 0xffffffe3) write$P9_RLCREATE(r1, 0x0, 0x0) 07:00:54 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:00:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x6, 0x4) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x180}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01093260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 07:00:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e00}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) fork() perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0xf1, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x2000067f}], 0x2}, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00') fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) [ 455.855130][ T8426] usb 5-1: USB disconnect, device number 33 07:00:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tkill(0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @log={{0x8}, @void}}]}], {0x14, 0x10}}, 0x90}}, 0x0) [ 456.137773][T16067] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 456.267485][ T8426] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 456.548440][T16067] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.563854][T16067] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff [ 456.595701][T16067] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.625183][T16067] usb 4-1: config 0 descriptor?? [ 456.680088][ T8426] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 456.696290][ T8426] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.755295][ T8426] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.797582][ T8426] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 456.808300][T16067] rc_core: IR keymap rc-hauppauge not found [ 456.814222][T16067] Registered IR keymap rc-empty [ 456.837744][T16067] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 456.880532][T16067] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 07:00:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000000640)={"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"}) [ 457.037897][ T8426] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 457.046982][ T8426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.117403][ T8426] usb 5-1: Product: syz [ 457.121609][ T8426] usb 5-1: Manufacturer: syz [ 457.126210][ T8426] usb 5-1: SerialNumber: syz [ 457.160891][ T8426] usb 5-1: config 0 descriptor?? [ 457.178435][T16067] usb 4-1: USB disconnect, device number 14 07:00:56 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0xc0045003, &(0x7f0000000080)) [ 457.439466][T18080] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 457.505749][T18100] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:00:57 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a504bd40eb030200ffba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 458.458759][T17716] usb 5-1: USB disconnect, device number 34 [ 458.477414][ T6235] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 458.757565][T18101] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:00:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect) 07:00:58 executing program 5: set_mempolicy(0x4005, &(0x7f0000000080)=0x5, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) [ 458.838240][ T6235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.855013][ T6235] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff [ 458.886770][ T6235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.925108][ T6235] usb 4-1: config 0 descriptor?? [ 459.083431][ T6235] rc_core: IR keymap rc-hauppauge not found [ 459.093466][ T6235] Registered IR keymap rc-empty [ 459.111377][ T6235] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 459.154729][ T6235] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 459.464331][T17693] usb 4-1: USB disconnect, device number 15 07:01:01 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:01:01 executing program 2: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 07:01:01 executing program 4: r0 = syz_usb_connect(0x0, 0x73, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:01:01 executing program 1: getrusage(0x1, &(0x7f0000001a40)) 07:01:01 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 07:01:01 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a504bd40eb030200ffba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:01:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x8c982) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000440)='\xfaIh\x05\x00K\x99F\x16\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_{T\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfbK\'\x06\r\xf8\x96\"\xe3\xd5\xc2\x818\x1f\xbf\x8c&`A-T\xbb)\x12\xbf\xfa\xc6\xefe\tM\xe6\xe5\xe9l^i\xda\x1cxo-\x89I\xd3\x04$\x7f\xbe[\xdd\x90J\x18\xaa\x91$\x02\xf8\xcb\xa3\xfatw\xb9\x00\xdfA\xa5\x9d\tk\x16\x16T\x8c\x18\xb4\xb0\x7f\x8a:\xbb\x97M+\xbc5\f\xf8\xc0>\x9e\x11', 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) mmap(&(0x7f00001de000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r2, 0x4aaf000) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="e9", 0x1}], 0x1, 0x4081002, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fallocate(r0, 0x11, 0x0, 0x100007e00) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0xcc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) 07:01:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xbb7, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x5}}, 0x1c) 07:01:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x2, 0x6}, [@NDA_LLADDR={0xa, 0x2, @random="ff4ea4d5178b"}]}, 0x28}}, 0x0) [ 462.115210][T18286] loop0: detected capacity change from 0 to 132104 [ 462.157487][ T6236] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 462.177608][ T6235] usb 4-1: new high-speed USB device number 16 using dummy_hcd 07:01:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x8c982) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000440)='\xfaIh\x05\x00K\x99F\x16\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_{T\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfbK\'\x06\r\xf8\x96\"\xe3\xd5\xc2\x818\x1f\xbf\x8c&`A-T\xbb)\x12\xbf\xfa\xc6\xefe\tM\xe6\xe5\xe9l^i\xda\x1cxo-\x89I\xd3\x04$\x7f\xbe[\xdd\x90J\x18\xaa\x91$\x02\xf8\xcb\xa3\xfatw\xb9\x00\xdfA\xa5\x9d\tk\x16\x16T\x8c\x18\xb4\xb0\x7f\x8a:\xbb\x97M+\xbc5\f\xf8\xc0>\x9e\x11', 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) mmap(&(0x7f00001de000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r2, 0x4aaf000) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="e9", 0x1}], 0x1, 0x4081002, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fallocate(r0, 0x11, 0x0, 0x100007e00) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0xcc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) [ 462.275132][T18312] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT 07:01:01 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:01:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r2, &(0x7f000000e980)={0x2020}, 0x2020) [ 462.492164][T18320] loop0: detected capacity change from 0 to 132104 [ 462.522167][ T6236] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 462.538036][ T6235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.555972][ T6236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.581027][ T6235] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff 07:01:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x10d) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r4, r3) [ 462.625832][ T6236] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 462.643254][ T6235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.692463][ T6235] usb 4-1: config 0 descriptor?? 07:01:02 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 462.857790][ T6236] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 462.867331][ T6235] rc_core: IR keymap rc-hauppauge not found [ 462.873251][ T6235] Registered IR keymap rc-empty [ 462.888364][ T6236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.901264][ T6235] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 462.937364][ T6236] usb 5-1: Product: syz [ 462.949257][ T6236] usb 5-1: Manufacturer: syz [ 462.955239][ T6235] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 462.979589][ T6236] usb 5-1: SerialNumber: syz [ 463.012897][ T6236] usb 5-1: config 0 descriptor?? [ 463.281409][ T6235] usb 4-1: USB disconnect, device number 16 07:01:04 executing program 4: r0 = syz_usb_connect(0x0, 0x73, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:01:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x2ff81d3e, 0x8}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) tkill(0x0, 0x40) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)) sched_setattr(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) recvmmsg(r1, 0x0, 0x0, 0x40, &(0x7f0000000100)={0x0, 0x989680}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) prlimit64(r0, 0x6, &(0x7f0000000040)={0x8000, 0x3}, &(0x7f00000000c0)) socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x20) ftruncate(r2, 0x200004) sendfile(r2, r2, 0x0, 0x80001d00c0d0) 07:01:04 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0285628, &(0x7f00000001c0)) 07:01:04 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:01:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 07:01:04 executing program 3: syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 464.905265][T17716] usb 5-1: USB disconnect, device number 35 07:01:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="770080000000000000121a0800000700210062620000080022"], 0x24}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) 07:01:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) 07:01:04 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:01:04 executing program 2: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) stat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000200), &(0x7f00000001c0)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/file0\x00', 0x0, &(0x7f0000000400)={0x0, 0xfb, 0x15, 0x5, 0x0, "0000000000ec001000"}, 0x15, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) [ 465.457162][T17716] usb 5-1: new high-speed USB device number 36 using dummy_hcd 07:01:04 executing program 3: syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:01:05 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 465.827378][T17716] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 465.827412][T17716] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.827449][T17716] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.987352][T17716] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 465.987388][T17716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.987413][T17716] usb 5-1: Product: syz [ 465.987433][T17716] usb 5-1: Manufacturer: syz [ 465.987450][T17716] usb 5-1: SerialNumber: syz [ 465.989710][T17716] usb 5-1: config 0 descriptor?? 07:01:07 executing program 4: r0 = syz_usb_connect(0x0, 0x73, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:01:07 executing program 3: syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:01:07 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xbe, 0xca, 0x5c, 0x20, 0x5d8, 0x810c, 0x9cb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0x56, 0x37}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, "b3f725b5ee57a42807fac71fe2bbc4b6da3ba4819068747f57bffe0f7c615428"}) 07:01:07 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:01:07 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf0, 0xc1, 0x44, 0x8, 0x7ca, 0xa867, 0x66c4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe9, 0xdf, 0x67}}]}}]}}, 0x0) 07:01:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x74000000) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000400)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000004c0), 0x10) gettid() clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x80000) [ 468.042388][T17693] usb 5-1: USB disconnect, device number 36 07:01:07 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 468.407026][ T6236] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 468.410553][T16067] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 468.607035][T17693] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 468.657166][ T6236] usb 6-1: Using ep0 maxpacket: 32 07:01:08 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 468.697014][T16067] usb 3-1: Using ep0 maxpacket: 8 07:01:08 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 468.827914][T16067] usb 3-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=66.c4 [ 468.841643][T16067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.867993][T16067] usb 3-1: config 0 descriptor?? [ 468.930131][T16067] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 468.941785][ T6236] usb 6-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice= 9.cb [ 468.949706][T16067] dvb_usb_af9035: probe of 3-1:0.0 failed with error -22 [ 468.967002][ T6236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.000935][ T6236] usb 6-1: Product: syz [ 469.020440][ T6236] usb 6-1: Manufacturer: syz [ 469.028060][T17693] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 469.036774][T17693] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.040557][ T6236] usb 6-1: SerialNumber: syz [ 469.075465][T17693] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.085270][ T6236] usb 6-1: config 0 descriptor?? [ 469.149845][ T6236] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 469.179852][ T6236] dvb-usb: bulk message failed: -22 (3/0) 07:01:08 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 469.229002][T17716] usb 3-1: USB disconnect, device number 7 [ 469.236420][ T6236] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 469.297967][ T6236] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 469.306195][ T6236] usb 6-1: media controller created [ 469.317672][T17693] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 469.339614][T17693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 07:01:08 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 469.356697][ T6236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 469.377897][T17693] usb 5-1: Product: syz [ 469.416087][T17693] usb 5-1: Manufacturer: syz [ 469.447874][T17693] usb 5-1: SerialNumber: syz [ 469.448835][ T6236] dvb-usb: bulk message failed: -22 (6/0) [ 469.485649][T17693] usb 5-1: config 0 descriptor?? [ 469.498158][ T6236] dvb-usb: bulk message failed: -22 (6/0) [ 469.503990][ T6236] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' 07:01:08 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) [ 469.597873][ T6236] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 469.631889][ T6236] dvb-usb: schedule remote query interval to 150 msecs. [ 469.660786][ T6236] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 469.705870][ T6236] usb 6-1: USB disconnect, device number 85 [ 469.849842][ T6236] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 470.047726][T17716] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 470.236900][ T6236] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 470.316896][T17716] usb 3-1: Using ep0 maxpacket: 8 [ 470.447753][T17716] usb 3-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=66.c4 [ 470.468383][T17716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.492598][ T6236] usb 6-1: Using ep0 maxpacket: 32 [ 470.506273][T17716] usb 3-1: config 0 descriptor?? [ 470.579881][T17716] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 470.595166][T17716] dvb_usb_af9035: probe of 3-1:0.0 failed with error -22 [ 470.778811][ T6236] usb 6-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice= 9.cb [ 470.816804][ T6236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.824841][ T6236] usb 6-1: Product: syz [ 470.846864][ T6236] usb 6-1: Manufacturer: syz [ 470.851515][ T6236] usb 6-1: SerialNumber: syz [ 470.888183][ T6236] usb 6-1: config 0 descriptor?? [ 470.901515][ T6235] usb 3-1: USB disconnect, device number 8 [ 470.928827][ T6236] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 470.936266][ T6236] dvb-usb: bulk message failed: -22 (3/0) [ 470.957865][ T6236] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 471.009840][ T6236] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 471.022592][ T6236] usb 6-1: media controller created [ 471.106243][ T6236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. 07:01:10 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:01:10 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)) r2 = dup(r1) write$nbd(r2, 0x0, 0x0) 07:01:10 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "39af2a", 0x48, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0]}}}}}}}, 0x0) 07:01:10 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:01:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x74000000) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000400)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000004c0), 0x10) gettid() clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x80000) 07:01:10 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cec0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "fc3dbd54c06145"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001780)={{0x0, 0x7fffffff, 0x9, 0x8001, 0x2, 0xea2f, 0x8, 0x0, 0x8, 0x7694, 0x3f, 0xf97, 0x3, 0x8000, 0x80000000}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a900)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x0, "d4c90300"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a900)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {0x0, r0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0xfd, "d4c90300"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005de00)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x20, "5807d01c3fef3a"}) socket$inet6(0xa, 0x1, 0x10000) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = fanotify_init(0x0, 0x0) dup2(r9, r8) dup3(r7, r9, 0x80000) r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r10, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) [ 471.175629][ T6236] dvb-usb: bulk message failed: -22 (6/0) [ 471.198622][ T6236] dvb-usb: bulk message failed: -22 (6/0) [ 471.205999][T16067] usb 5-1: USB disconnect, device number 37 [ 471.246984][ T6236] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 471.282923][T18772] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 471.310674][ T6236] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 471.340493][T18776] hub 9-0:1.0: USB hub found [ 471.350249][T18776] hub 9-0:1.0: 8 ports detected [ 471.383819][T18772] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 471.413254][ T6236] dvb-usb: schedule remote query interval to 150 msecs. [ 471.451824][ T6236] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. 07:01:10 executing program 5: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xde, 0x5d, 0x73, 0x10, 0x2b73, 0xe, 0xc8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8d, 0x0, 0x0, 0xff, 0x27, 0x1a, 0x4, [@hid_hid={0x9}]}}, {{0x9, 0x4, 0xdd, 0x0, 0x2, 0xff, 0xff, 0xff, 0x65, [], [{}, {}]}}]}}]}}, 0x0) [ 471.535252][ T6236] usb 6-1: USB disconnect, device number 86 07:01:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x235) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000e80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 471.689119][ T6236] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. 07:01:11 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(0xffffffffffffffff) write$nbd(r2, 0x0, 0x0) [ 471.747427][T18824] input: syz1 as /devices/virtual/input/input18 07:01:11 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 471.841845][T18824] input: syz1 as /devices/virtual/input/input19 07:01:11 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) [ 471.886810][T16067] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 472.087109][ T6236] usb 6-1: new high-speed USB device number 87 using dummy_hcd 07:01:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x20, 0x8b}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x3, 0x0, 0x748, 0x7fffffff, 0x2, 0x3, 0x1, 0x101}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0xa, &(0x7f00000000c0)={0x0, 0x5}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x4}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0xa081, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) [ 472.267245][ T8426] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 472.288404][T16067] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 472.303949][T16067] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.337838][ T6236] usb 6-1: Using ep0 maxpacket: 16 [ 472.342027][T16067] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.467664][ T6236] usb 6-1: config 0 has an invalid interface number: 141 but max is 1 [ 472.477206][ T8426] usb 4-1: device descriptor read/64, error 18 [ 472.483883][ T6236] usb 6-1: config 0 has an invalid interface number: 221 but max is 1 [ 472.515654][ T6236] usb 6-1: config 0 has no interface number 0 [ 472.538722][ T6236] usb 6-1: config 0 has no interface number 1 [ 472.559748][ T6236] usb 6-1: config 0 interface 221 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 472.596189][ T6236] usb 6-1: config 0 interface 221 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 472.617710][T16067] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 472.638689][T16067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.674562][T16067] usb 5-1: Product: syz [ 472.693837][T16067] usb 5-1: Manufacturer: syz [ 472.718591][T16067] usb 5-1: SerialNumber: syz [ 472.748959][T16067] usb 5-1: config 0 descriptor?? [ 472.777096][ T8426] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 472.787695][ T6236] usb 6-1: New USB device found, idVendor=2b73, idProduct=000e, bcdDevice= c.8f [ 472.803687][ T6236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.826244][ T6236] usb 6-1: Product: syz [ 472.837094][ T6236] usb 6-1: Manufacturer: syz [ 472.849174][ T6236] usb 6-1: SerialNumber: syz [ 472.866434][ T6236] usb 6-1: config 0 descriptor?? [ 472.996680][ T8426] usb 4-1: device descriptor read/64, error 18 [ 473.136920][ T8426] usb usb4-port1: attempt power cycle [ 473.328190][ T6236] usb 6-1: USB disconnect, device number 87 [ 473.566817][ T8426] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 473.757509][ T8426] usb 4-1: device descriptor read/8, error -61 [ 474.056661][ T8426] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 474.306829][ T8426] usb 4-1: device descriptor read/8, error -61 07:01:13 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(0xffffffffffffffff) write$nbd(r2, 0x0, 0x0) 07:01:13 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 07:01:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000080), 0x1) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="95f115fb8ce783b8efe6cff183456f25c921e000dc6711cde4d48739b795a828c83aaeb058dec468fad910aea2c81965ec6ab803016bb07a7c197f64cbfb3e01e129d13785a84b22ee63fe4c56e9c33220dde16e1edbca177a3ab36dfd595c905bf763875304a527056391b69169c5cd9d27a0f11be0926d4643492a8544b53238d1efc68d", 0x85}, {&(0x7f00000004c0)="06434bd7c118da1354ded1e3d8faba8b5079bf86729db60d10b0c87cc9edb2abe4e3cb2a3fe640f3001c38a99a4ada5e778dd14a82c66b838f6d2ddae16dcbd4f20709e66ad4378a428b5b0b96ca28f0c397664ba4f30c5ecebe80e0eaea28589f5595853434170f422b3545cca8999b96689968f855b621579cefa9c1fcb07192c51321d078eea9f173fd2762c866cf85bc10939fe303eebcee8268fab8d9a83090f42be8dff6089cb6fc08f956455cf992b1494c8da98c8b6a81c3b72580b45983466b360c4230ea4d475489cb2dbd983f01d992", 0xd5}, {&(0x7f00000005c0)="f11c5b49d42476ee9480d1cded4a51bd146d5da346cb65b6d3bb6278680e529701cf1145de0b3de3bef0422a0e63ceb4aa13a687ef22421360389ae34b40cf154277d432c8715a4d625293930a78fcdded0e126a204f3995835edbf4c9706df1218821ad702f9da88158c407889be6003397b610ec8ad5d08681c31a17aea97b00b52f1c", 0x84}, {&(0x7f0000001300)="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", 0x3a7}], 0x4}, 0x0) 07:01:13 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r0, &(0x7f00000005c0)=ANY=[], 0xbf) sendfile(r0, r0, &(0x7f0000000240), 0x7ffb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) fanotify_mark(r1, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./bus\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f000005a700)) 07:01:13 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 474.404620][T16067] usb 5-1: USB disconnect, device number 38 [ 474.432436][ T8426] usb usb4-port1: unable to enumerate USB device [ 474.566237][T18929] hub 9-0:1.0: USB hub found 07:01:13 executing program 1: ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000600)) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x100000000011, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e0500000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ae340b7677a0e5bf5ff1b0816f3f6db1c000100000000000000495f0000001c00000006ad8e5e00000089da8d0f00"}, 0x80) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRESHEX], 0xbf) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7ffb) [ 474.598157][T18929] hub 9-0:1.0: 8 ports detected 07:01:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2f606557d6089e49, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) 07:01:14 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) r2 = dup(0xffffffffffffffff) write$nbd(r2, 0x0, 0x0) [ 474.967037][T16067] usb 5-1: new high-speed USB device number 39 using dummy_hcd 07:01:14 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:01:14 executing program 1: socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 475.162880][T18989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 475.197476][T18989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 475.224811][T18989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 475.259556][T18989] device bridge_slave_0 left promiscuous mode [ 475.279674][T18989] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.340059][T18989] device bridge_slave_1 left promiscuous mode [ 475.377762][T18989] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.387629][T16067] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 475.413604][T16067] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 07:01:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 475.447779][T16067] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.486393][T17693] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 475.516107][T18989] bond0: (slave bond_slave_0): Releasing backup interface [ 475.676431][T16067] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 475.695324][T16067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.705007][T17693] usb 4-1: device descriptor read/64, error 18 [ 475.731553][T16067] usb 5-1: Product: syz [ 475.744677][T16067] usb 5-1: Manufacturer: syz [ 475.759589][T16067] usb 5-1: SerialNumber: syz [ 475.783661][T16067] usb 5-1: config 0 descriptor?? [ 476.006352][T17693] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 476.226555][T17693] usb 4-1: device descriptor read/64, error 18 [ 476.346537][T17693] usb usb4-port1: attempt power cycle [ 476.786207][T17693] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 476.905895][T18989] bond0: (slave bond_slave_1): Releasing backup interface [ 477.006248][T17693] usb 4-1: device descriptor read/8, error -61 [ 477.286083][T17693] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 477.508751][T17693] usb 4-1: device descriptor read/8, error -61 07:01:16 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:01:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0x10, 0x200, 0x0, 0x0, 0x0, 0x1000, 0xfffffeff}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0xc, 0xfffffffa, 0x0, 0x2, 0x8000, 0xb7f9, 0x1d901661, 0x4}, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x4, 0x1000, 0x1, 0x1ff, 0x7, 0x400, 0x0, 0xffff}, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x400000, 0x22) fallocate(r3, 0x1, 0x0, 0x28120001) 07:01:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 477.558230][ T6236] usb 5-1: USB disconnect, device number 39 [ 477.647061][T17693] usb usb4-port1: unable to enumerate USB device 07:01:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 478.085990][ T6236] usb 5-1: new high-speed USB device number 40 using dummy_hcd 07:01:17 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 478.456478][ T6236] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 478.483698][ T6236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.483749][ T6236] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 07:01:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 478.625946][T17716] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 478.636297][ T6236] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 478.645366][ T6236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.713008][ T6236] usb 5-1: Product: syz [ 478.740475][ T6236] usb 5-1: Manufacturer: syz [ 478.766028][ T6236] usb 5-1: SerialNumber: syz [ 478.799923][ T6236] usb 5-1: config 0 descriptor?? [ 478.849933][T17716] usb 4-1: device descriptor read/64, error 18 07:01:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 479.135773][T17716] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 479.335796][T17716] usb 4-1: device descriptor read/64, error 18 [ 479.455859][T17716] usb usb4-port1: attempt power cycle [ 479.865782][T17716] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 480.050198][T17716] usb 4-1: device descriptor read/8, error -61 [ 480.325688][T17716] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 480.505687][T17716] usb 4-1: device descriptor read/8, error -61 [ 480.628107][T17716] usb usb4-port1: unable to enumerate USB device [ 480.654092][T18989] team0: Port device team_slave_0 removed [ 480.727184][T17716] usb 5-1: USB disconnect, device number 40 [ 482.106048][T18989] team0: Port device team_slave_1 removed [ 482.112631][T18989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.123411][T18989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.134328][T18989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.142852][T18989] batman_adv: batadv0: Removing interface: batadv_slave_1 07:01:23 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) dup(r1) write$nbd(0xffffffffffffffff, 0x0, 0x0) 07:01:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0xe7a9a3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a006) 07:01:23 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:01:23 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:01:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB='&\x003\x00\b'], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x80000000) 07:01:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0x0) readv(r0, &(0x7f0000001500)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) ioctl$EVIOCGABS0(r0, 0x40044591, 0x0) getpid() 07:01:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB='&\x003\x00\b'], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x80000000) [ 484.634983][T19137] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 484.645197][T17692] usb 4-1: new high-speed USB device number 29 using dummy_hcd 07:01:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 484.855375][T17692] usb 4-1: device descriptor read/64, error 18 [ 485.005636][T19137] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 485.017873][T19137] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.074671][T19137] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.135128][T17692] usb 4-1: new high-speed USB device number 30 using dummy_hcd 07:01:24 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) dup(r1) write$nbd(0xffffffffffffffff, 0x0, 0x0) 07:01:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x40, 0x31, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000003080000e7ffffff000000000000000000000000002000"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x401, 0xfffff800, 0x9, 0x1000, 0x1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x31}, 0x100) write$binfmt_elf64(r0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x100000530) 07:01:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 485.305381][T19137] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 485.326120][T19137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.359168][T19137] usb 5-1: Product: syz [ 485.365770][T17692] usb 4-1: device descriptor read/64, error 18 [ 485.378356][T19137] usb 5-1: Manufacturer: syz [ 485.405204][T19137] usb 5-1: SerialNumber: syz [ 485.431102][T19137] usb 5-1: config 0 descriptor?? [ 485.504554][T17692] usb usb4-port1: attempt power cycle [ 485.934889][T17692] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 486.165512][T17692] usb 4-1: device descriptor read/8, error -61 [ 486.444692][T17692] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 486.655420][T17692] usb 4-1: device descriptor read/8, error -61 [ 486.776518][T17692] usb usb4-port1: unable to enumerate USB device 07:01:26 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:01:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000000206010200000000000000000000000005000400000000000900020073797a3000000000050005000a000000050001000600000015000300686173683a69702c706f72742c6e6574"], 0x50}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 07:01:26 executing program 0: unshare(0x48040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x1) dup(r1) write$nbd(0xffffffffffffffff, 0x0, 0x0) 07:01:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="66130700ae897094e700267f97eaa769be36b2fb7be6a16d05c41b0d4e677d9959d7b76597a774e67307492bb3fa424e2770241d2796c3603523d14d08e4baa878a8238a93859cdcd394f49a8b59742205dd40542e436cda4c55c9a138bdf7894872a3ef40a6d975fde7d3ce25a8b01ac639a65a3b9c40916031bf58e36c1e39943a628025aa6af6ed0bcc951e806fa7c48ce99499fb2459050d7d6b0e46abf0e731f77ada", 0xa5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:01:26 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 487.378379][T16067] usb 5-1: USB disconnect, device number 41 07:01:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:26 executing program 2: timer_create(0x7, &(0x7f0000000900)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000980)={{0x77359400}, {0x77359400}}, &(0x7f00000009c0)) 07:01:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000000206010200000000000000000000000005000400000000000900020073797a3000000000050005000a000000050001000600000015000300686173683a69702c706f72742c6e6574"], 0x50}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 07:01:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 487.754786][T17692] usb 4-1: new high-speed USB device number 33 using dummy_hcd 07:01:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700cc0000000000000000000000000000000000000000000000000000ac840000000300000068030000f0000000f000000000000000f0000000f0000000d0020000d0020000d0020000d0020000d002000043"], 0x1) 07:01:27 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x4924924924925a9, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x38}}, 0x1c) [ 487.993128][T17692] usb 4-1: device descriptor read/64, error 18 [ 488.022807][T16067] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 488.284663][T17692] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 488.464885][T16067] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 488.478150][T16067] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.504426][T17692] usb 4-1: device descriptor read/64, error 18 [ 488.524476][T16067] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.625388][T17692] usb usb4-port1: attempt power cycle [ 488.754648][T16067] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 488.768387][T16067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.789190][T16067] usb 5-1: Product: syz [ 488.833803][T16067] usb 5-1: Manufacturer: syz [ 488.851879][T16067] usb 5-1: SerialNumber: syz [ 488.868592][T16067] usb 5-1: config 0 descriptor?? [ 489.074438][T17692] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 489.274529][T17692] usb 4-1: device descriptor read/8, error -61 [ 489.564210][T17692] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 489.774324][T17692] usb 4-1: device descriptor read/8, error -61 [ 489.905805][T17692] usb usb4-port1: unable to enumerate USB device 07:01:29 executing program 4: r0 = syz_usb_connect(0x0, 0x7f, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "a1763cb866"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:01:29 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)={0x1c, r0, 0x62d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 07:01:29 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x6) 07:01:29 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x2160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8941, 0x0) 07:01:29 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 490.545348][ T8426] usb 5-1: USB disconnect, device number 42 07:01:30 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x0) 07:01:30 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x10001}, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bind(0xffffffffffffffff, &(0x7f0000000540)=@in6={0xa, 0x4e20, 0xd, @private1={0xfc, 0x1, '\x00', 0x10}, 0x8}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}]}, 0x44}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e0500000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ae340b7677a0e5bf5ff1b0816f3f6db1c000100000000000000495f0000001c00000006ad8e5e00000089da8d0f00"}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="60000000320000022cbd7000fcdbdf250000000008000400ed0000002c0001000c00010007000100787400000c000d00080001006e617400100006000700000073070000006974000c00020000000000000000000c0002000100000000000000cb8b215c525eef38cd0f12e8fb47946f0d06e9445e957d0bb559ac9486b2b607a218cc528b3cb201838fa089de0f1cd88ecf91e76c3dc507dab526a9160f3280d4a624831fe7f6c093b99c1ab58d850a3bff5f8801f806a5831b6863b8d779fc49ccf950e8ffcaa41a6303863fb8d8051c5cff"], 0x60}}, 0x4080) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @dev}, 0x0, r7}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x3, 0x1, {0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}}}, 0x3a) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x8) write$P9_RREADDIR(r8, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX], 0xbf) fallocate(0xffffffffffffffff, 0xc, 0x4, 0x0) sendfile(r8, r8, &(0x7f0000000240)=0x4, 0x7ffb) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/106, 0x6a}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f00000001c0)=""/2, 0x2}], 0x3, 0x8, 0x2) 07:01:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, &(0x7f00000000c0)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 490.874044][ T6236] usb 4-1: new high-speed USB device number 37 using dummy_hcd 07:01:30 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="66130700ae897094e700267f97eaa769be36b2fb7be6a16d05c41b0d4e677d9959d7b76597a774e67307492bb3fa424e2770241d2796c3603523d14d08e4baa878a8238a93859cdcd394f49a8b59742205dd40542e436cda4c55c9a138bd", 0x5e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 491.074225][ T6236] usb 4-1: device descriptor read/64, error 18 [ 491.124991][ T8426] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 491.343934][ T6236] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 491.504680][ T8426] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 491.532254][ T8426] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.545707][ T6236] usb 4-1: device descriptor read/64, error 18 [ 491.577886][ T8426] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.664396][ T6236] usb usb4-port1: attempt power cycle [ 491.814513][ T8426] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 491.843172][ T8426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.888899][ T8426] usb 5-1: Product: syz [ 491.903968][ T8426] usb 5-1: Manufacturer: syz [ 491.929067][ T8426] usb 5-1: SerialNumber: syz [ 491.962773][ T8426] usb 5-1: config 0 descriptor?? [ 492.074178][ T6236] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 492.244632][ T6236] usb 4-1: device descriptor read/8, error -61 [ 492.513843][ T6236] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 492.704613][ T6236] usb 4-1: device descriptor read/8, error -61 [ 492.823976][ T6236] usb usb4-port1: unable to enumerate USB device 07:01:33 executing program 4: r0 = syz_usb_connect(0x0, 0x75, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:01:33 executing program 0: r0 = socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r1, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x6}, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2000, 0xa4) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x2000011a) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) 07:01:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000005000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x6db6e559) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) clone(0x2000000002100100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x33) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xc60e}, 0x1, 0x3e65957f}, 0x0) 07:01:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000057c000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:01:33 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a504bd40eb030200ffba000000010902"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 493.701674][T19137] usb 5-1: USB disconnect, device number 43 07:01:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x60000000) 07:01:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 494.083728][ T8426] usb 4-1: new high-speed USB device number 41 using dummy_hcd 07:01:33 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/223, 0xdf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x103, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x40a85323, &(0x7f00000004c0)) tkill(r0, 0x7) 07:01:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setattr(r2, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x8, {"a2e3ad21ed6b52f99cfbf4c087f70eb4d04fe7ff7fc6e5539b366e0e8b546a1b5d52940f0890e0878f0e1ac6e7049b61b4956c409a242a5b67f3988f7ef319520100ffe8d178708c523c921b1b29300a0d9b44d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba571eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) name_to_handle_at(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000008100000000000400000000000000fffffffbffffff00"/36], &(0x7f0000000180), 0x400) 07:01:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:33 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002d00), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) [ 494.283576][T19137] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 494.484780][ T8426] usb 4-1: config 0 has no interfaces? [ 494.490320][ T8426] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff [ 494.553808][ T8426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.559826][ T8426] usb 4-1: config 0 descriptor?? [ 494.664210][T19137] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 494.664241][T19137] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.664276][T19137] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.824049][T19137] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 494.824087][T19137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.824113][T19137] usb 5-1: Product: syz [ 494.824133][T19137] usb 5-1: Manufacturer: syz [ 494.824153][T19137] usb 5-1: SerialNumber: syz [ 494.826445][T19137] usb 5-1: config 0 descriptor?? [ 496.768722][ T8426] usb 4-1: USB disconnect, device number 41 07:01:36 executing program 4: r0 = syz_usb_connect(0x0, 0x75, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:01:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f00000010c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 07:01:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000001900)={'tunl0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x13, 0x0, [@loopback, @empty, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@remote}, {@empty}, {@loopback}, {@dev}]}, @ra={0x94, 0x4}]}}}}}) 07:01:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2283, &(0x7f0000000240)) 07:01:36 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a504bd40eb030200ffba000000010902"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 496.867284][T17692] usb 5-1: USB disconnect, device number 44 07:01:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r1, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000000), 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff7c, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x6, 0x2c, 0xfff, 0x7, 0x1800000000, 0x4c, 0x10001, 0x8, 0x81}, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) clock_gettime(0x0, &(0x7f00000080c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 07:01:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x400, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}, 0x0, 0x6, 0x1000, 0x2, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0xa) lseek(r3, 0x400009, 0x0) fcntl$setstatus(r3, 0x4, 0x6800) recvmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000200)=@qipcrtr, 0x80, &(0x7f0000000900)=[{&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000580)=""/191, 0xbf}, {&(0x7f0000000640)=""/108, 0x6c}, {&(0x7f00000006c0)=""/71, 0x47}, {0x0}, {&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000000ec0)=""/109, 0x6d}], 0x8, &(0x7f00000009c0)=""/244, 0xf4}, 0x3}, {{&(0x7f0000000ac0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/51, 0x33}], 0x1, &(0x7f0000000b40)=""/26, 0x1a}, 0x4}, {{&(0x7f0000000b80)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000c80)=""/11, 0xb}], 0x2, &(0x7f0000000d40)=""/212, 0xd4}, 0x1}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001300)=""/184, 0xb8}, {&(0x7f0000001400)=""/171, 0xab}], 0x2, &(0x7f0000001740)=""/4096, 0x1000}}], 0x4, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)={'security\x00', 0x0, [0x6, 0x7, 0x4, 0x6a3, 0x3f]}, &(0x7f0000000880)=0x54) preadv(r3, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/142, 0x8e}, {&(0x7f0000000180)=""/16, 0x10}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000003c0)=""/72, 0x48}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000640)=""/97, 0x61}], 0x6, 0x1ff, 0x3) clone(0x40100100, 0x0, 0x0, 0x0, 0x0) clone(0x40000000, &(0x7f0000000000)="61226eb8447132f76054c4d30e7f61f0176f0b2127671e39aa1c09ec58e62558b7a6ad5dbe9b354d1a1bf3dd9f388aa4ad0c04e0a927abb94d5d9c3a13c96fb0e86f7b29aecd88c965256639aa9331aff95272737d0dddfb3ea0cf41afffe404abcd5d1c676bf17b15d5d8b977f3948c", &(0x7f0000000080), &(0x7f00000000c0), 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 07:01:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 497.276457][T19526] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 497.423224][ T8426] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 497.444144][T17692] usb 5-1: new high-speed USB device number 45 using dummy_hcd 07:01:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 497.795283][ T8426] usb 4-1: config 0 has no interfaces? [ 497.800816][ T8426] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff [ 497.843576][T17692] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 497.887522][ T8426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.897798][T17692] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.947829][ T8426] usb 4-1: config 0 descriptor?? [ 497.960170][T17692] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 07:01:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x126, 0x126, 0x2, [@datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "b3"}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}, @volatile, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @ptr, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], '\x00'}, @const, @volatile, @func, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, 0x0, 0x142}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x38) [ 498.243109][T17692] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 498.265734][T17692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.309906][T17692] usb 5-1: Product: syz [ 498.330165][T17692] usb 5-1: Manufacturer: syz [ 498.352098][T17692] usb 5-1: SerialNumber: syz [ 498.390275][T17692] usb 5-1: config 0 descriptor?? [ 499.978951][ T6236] usb 4-1: USB disconnect, device number 42 07:01:39 executing program 4: r0 = syz_usb_connect(0x0, 0x75, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:01:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0xfffffffe, 0x8}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x40, 0x4, 0x8, 0x102, 0x3, 0x0, 0x0, 0x80}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x80019e) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x101000, 0x1) setreuid(0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xc140, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000180)=0x4) sendfile(r4, r5, 0x0, 0x401ffc000) 07:01:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:39 executing program 1: perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "6504a8385cb0d4"}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000a40)={{r0, 0x1, 0x0, 0x1, 0x889e, 0x7, 0x1000, 0x3, 0x4, 0x0, 0x4f, 0x5, 0x800, 0x6, 0x10000}}) creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 07:01:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001400)="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"/3581, 0xdfd) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) 07:01:39 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a504bd40eb030200ffba000000010902"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 500.053719][T19137] usb 5-1: USB disconnect, device number 45 07:01:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040), 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 500.662672][T19137] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 500.722769][ T8426] usb 4-1: new high-speed USB device number 43 using dummy_hcd 07:01:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040), 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 501.032931][T19137] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 501.064228][T19137] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 07:01:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040), 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 501.103758][ T8426] usb 4-1: config 0 has no interfaces? [ 501.109850][ T8426] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff [ 501.123269][T19137] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.172844][ T8426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.173871][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.192158][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.252173][ T8426] usb 4-1: config 0 descriptor?? [ 501.372996][T19137] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 501.396862][T19137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.442865][T19137] usb 5-1: Product: syz 07:01:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 501.468782][T19137] usb 5-1: Manufacturer: syz [ 501.496559][T19137] usb 5-1: SerialNumber: syz [ 501.532798][T19137] usb 5-1: config 0 descriptor?? 07:01:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:42 executing program 4: r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0x5}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:01:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:42 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_io_uring_setup(0x15b0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000980)=[{r0}], 0x1, 0x38b) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x1) read$dsp(r0, &(0x7f0000000280)=""/18, 0x12) 07:01:42 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents(r2, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000077c0)="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", 0x2000, &(0x7f0000006a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000067c0)={0x10}, 0x0, 0x0, 0x0}) 07:01:42 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0x3, 0x4, 0x6, 0x101, 0xdf21, 0x32}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x80, 0x28) sendfile(r1, r2, 0x0, 0x80001d00c0d0) fallocate(r0, 0x11, 0x6, 0x280407) [ 503.355082][T17716] usb 5-1: USB disconnect, device number 46 07:01:42 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a504bd40eb030200ffba0000000109021b000100000000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 503.484011][ T8426] usb 4-1: USB disconnect, device number 43 07:01:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:42 executing program 2: socket(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x2df5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="1c5b72bfb5ceb98bd00f15e1f344bacc32d8170e672463853a7896cc9cde5215ea0de13a8987f5a5c7b4ae5c0ee4663f93c3ca5ef65ee8d651d20775e3dfb2e5d9ec63f4ba3cc8def84e8d6578605a11c1b0de1ce0d8b008f62abd2f6f5198be47b05e1c47f8409ee87c817c8ac4f87498003ca15566f3433119360edde462f9f4548e40154ed8f33dc8ae", 0x8b}, {&(0x7f00000002c0)="84", 0x1}], 0x2}}], 0x1, 0x40080) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000080)={[0x7f]}, &(0x7f0000000140), 0x8) 07:01:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffd}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x0, 0xcc0, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0xfff}, 0x28) 07:01:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:43 executing program 2: socket(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x2df5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="1c5b72bfb5ceb98bd00f15e1f344bacc32d8170e672463853a7896cc9cde5215ea0de13a8987f5a5c7b4ae5c0ee4663f93c3ca5ef65ee8d651d20775e3dfb2e5d9ec63f4ba3cc8def84e8d6578605a11c1b0de1ce0d8b008f62abd2f6f5198be47b05e1c47f8409ee87c817c8ac4f87498003ca15566f3433119360edde462f9f4548e40154ed8f33dc8ae", 0x8b}, {&(0x7f00000002c0)="84", 0x1}], 0x2}}], 0x1, 0x40080) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000080)={[0x7f]}, &(0x7f0000000140), 0x8) [ 503.832371][T17716] usb 5-1: new high-speed USB device number 47 using dummy_hcd 07:01:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 504.072339][ T8426] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 504.202396][T17716] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 504.217886][T17716] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.241673][T17716] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.442477][T17716] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 504.451565][T17716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.472653][ T8426] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.497458][ T8426] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff [ 504.502984][T17716] usb 5-1: Product: syz [ 504.521773][T17716] usb 5-1: Manufacturer: syz [ 504.530396][ T8426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.542494][T17716] usb 5-1: SerialNumber: syz [ 504.569867][T17716] usb 5-1: config 0 descriptor?? [ 504.585067][ T8426] usb 4-1: config 0 descriptor?? [ 504.644165][ T8426] igorplugusb 4-1:0.0: incorrect number of endpoints 07:01:45 executing program 4: r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000002e80)={{0x12, 0x1, 0x0, 0x17, 0xcc, 0xd8, 0x40, 0x413c, 0x81b6, 0x533a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, '*#'}, @selector_unit={0x5}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 07:01:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:45 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) fdatasync(0xffffffffffffffff) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) fsopen(0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) socket$kcm(0x29, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)) 07:01:45 executing program 2: socket(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x2df5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="1c5b72bfb5ceb98bd00f15e1f344bacc32d8170e672463853a7896cc9cde5215ea0de13a8987f5a5c7b4ae5c0ee4663f93c3ca5ef65ee8d651d20775e3dfb2e5d9ec63f4ba3cc8def84e8d6578605a11c1b0de1ce0d8b008f62abd2f6f5198be47b05e1c47f8409ee87c817c8ac4f87498003ca15566f3433119360edde462f9f4548e40154ed8f33dc8ae", 0x8b}, {&(0x7f00000002c0)="84", 0x1}], 0x2}}], 0x1, 0x40080) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000080)={[0x7f]}, &(0x7f0000000140), 0x8) 07:01:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x101, 0xe, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe000000}]}]}, 0x5c}}, 0x0) [ 506.558994][T19137] usb 5-1: USB disconnect, device number 47 07:01:45 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a504bd40eb030200ffba0000000109021b000100000000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="76c02a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 506.623489][T19762] ------------[ cut here ]------------ 07:01:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 506.671338][T19762] WARNING: CPU: 1 PID: 19762 at mm/util.c:597 kvmalloc_node+0x111/0x120 [ 506.683369][ T6236] usb 4-1: USB disconnect, device number 44 [ 506.709560][T19762] Modules linked in: [ 506.739744][T19762] CPU: 1 PID: 19762 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 506.772724][T19762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.817900][T19762] RIP: 0010:kvmalloc_node+0x111/0x120 [ 506.840622][T19762] Code: 01 00 00 00 4c 89 e7 e8 ad 18 0d 00 49 89 c5 e9 69 ff ff ff e8 f0 98 d0 ff 41 89 ed 41 81 cd 00 20 01 00 eb 95 e8 df 98 d0 ff <0f> 0b e9 4c ff ff ff 0f 1f 84 00 00 00 00 00 55 48 89 fd 53 e8 c6 07:01:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) 07:01:46 executing program 2: socket(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x2df5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="1c5b72bfb5ceb98bd00f15e1f344bacc32d8170e672463853a7896cc9cde5215ea0de13a8987f5a5c7b4ae5c0ee4663f93c3ca5ef65ee8d651d20775e3dfb2e5d9ec63f4ba3cc8def84e8d6578605a11c1b0de1ce0d8b008f62abd2f6f5198be47b05e1c47f8409ee87c817c8ac4f87498003ca15566f3433119360edde462f9f4548e40154ed8f33dc8ae", 0x8b}, {&(0x7f00000002c0)="84", 0x1}], 0x2}}], 0x1, 0x40080) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000080)={[0x7f]}, &(0x7f0000000140), 0x8) [ 506.922578][T19762] RSP: 0018:ffffc90005587268 EFLAGS: 00010216 [ 506.960251][T19762] RAX: 0000000000000431 RBX: ffffc90005587380 RCX: ffffc90002f41000 [ 506.997939][T19762] RDX: 0000000000040000 RSI: ffffffff81a56291 RDI: 0000000000000003 [ 507.024906][T19762] RBP: 0000000000400dc0 R08: 000000007fffffff R09: ffff8880b9c32a0b [ 507.046910][T19762] R10: ffffffff81a5624e R11: 000000000000001f R12: 0000000080000018 [ 507.065838][T19762] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff88801cac4000 [ 507.081854][T19137] usb 5-1: new high-speed USB device number 48 using dummy_hcd 07:01:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 507.107590][T19762] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0063) knlGS:00000000f44d2b40 [ 507.189482][T19762] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 507.207004][T19762] CR2: 00000000f7447004 CR3: 000000007b0d0000 CR4: 00000000003506e0 [ 507.221792][ T6236] usb 4-1: new high-speed USB device number 45 using dummy_hcd 07:01:46 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x11d040, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, 0x0) [ 507.249813][T19762] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 507.307764][T19762] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 07:01:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "7873c5e679ef1971", "40945582c68f5712ab534e2bdc588d7f", "b92aadcc", "8d011208037a02a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "a16611e93404730a", "f4e8b7a124a6848b63b95cc291fb012d", "a47968af", "734ce308f6c7fb4a"}, 0x28) [ 507.361047][T19762] Call Trace: [ 507.371920][T19762] hash_netportnet_create+0x3dd/0x1220 [ 507.377521][T19762] ? __nla_parse+0x3d/0x50 [ 507.420513][T19762] ? hash_netportnet6_list+0x1460/0x1460 [ 507.438552][T19762] ip_set_create+0x782/0x15a0 [ 507.451844][T19137] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 507.460566][T19137] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.470958][T19762] ? ip_set_sockfn_get+0xe60/0xe60 [ 507.511983][T19762] nfnetlink_rcv_msg+0xbc9/0x13f0 [ 507.517202][T19762] ? nfnetlink_net_init+0x380/0x380 [ 507.529699][T19137] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.573181][T19762] ? find_held_lock+0x2d/0x110 [ 507.578051][T19762] ? __dev_queue_xmit+0x1b54/0x36e0 [ 507.602484][ T6236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.631887][ T6236] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.ff [ 507.640973][ T6236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.649116][T19762] ? lock_downgrade+0x6e0/0x6e0 [ 507.662672][T19762] ? __local_bh_enable_ip+0xa0/0x120 [ 507.668094][T19762] ? lockdep_hardirqs_on+0x79/0x100 [ 507.687972][T19762] ? __dev_queue_xmit+0x1b54/0x36e0 [ 507.695360][ T6236] usb 4-1: config 0 descriptor?? [ 507.734340][T19762] ? __local_bh_enable_ip+0xa0/0x120 [ 507.746009][ T6236] igorplugusb 4-1:0.0: incorrect number of endpoints [ 507.756375][T19762] netlink_rcv_skb+0x153/0x420 [ 507.775253][T19762] ? nfnetlink_net_init+0x380/0x380 [ 507.786298][T19762] ? netlink_ack+0xa60/0xa60 [ 507.797888][T19762] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 507.815133][T19137] usb 5-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=53.3a [ 507.824524][T19762] ? ns_capable+0xd9/0x100 [ 507.829068][T19137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.837315][T19762] nfnetlink_rcv+0x1ac/0x420 [ 507.842143][T19762] ? nfnetlink_rcv_batch+0x25f0/0x25f0 [ 507.847734][T19137] usb 5-1: Product: syz [ 507.854669][T19137] usb 5-1: Manufacturer: syz [ 507.859382][T19762] ? netlink_deliver_tap+0x1b1/0xc30 [ 507.866190][T19137] usb 5-1: SerialNumber: syz [ 507.871152][T19762] netlink_unicast+0x533/0x7d0 [ 507.887379][T19137] usb 5-1: config 0 descriptor?? [ 507.894448][T19762] ? netlink_attachskb+0x890/0x890 [ 507.900370][T19762] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 507.922327][T19762] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 507.951058][T19762] ? __phys_addr_symbol+0x2c/0x70 [ 507.963110][T19762] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 507.978878][T19762] ? __check_object_size+0x16e/0x3f0 [ 507.996799][T19762] netlink_sendmsg+0x86d/0xdb0 [ 508.011921][T19762] ? netlink_unicast+0x7d0/0x7d0 [ 508.030482][T19762] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 508.053186][T19762] ? netlink_unicast+0x7d0/0x7d0 [ 508.075141][T19762] sock_sendmsg+0xcf/0x120 [ 508.091237][T19762] ____sys_sendmsg+0x6e8/0x810 [ 508.107670][T19762] ? kernel_sendmsg+0x50/0x50 [ 508.122861][T19762] ? do_recvmmsg+0x6d0/0x6d0 [ 508.133542][T19762] ? lock_chain_count+0x20/0x20 [ 508.152081][T19762] ? lock_chain_count+0x20/0x20 [ 508.162664][T19762] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 508.175601][T19762] ___sys_sendmsg+0xf3/0x170 [ 508.195225][T19762] ? sendmsg_copy_msghdr+0x160/0x160 [ 508.212546][T19762] ? __fget_files+0x21b/0x3e0 [ 508.230474][T19762] ? lock_downgrade+0x6e0/0x6e0 [ 508.248013][T19762] ? __fget_files+0x23d/0x3e0 [ 508.265691][T19762] ? __fget_light+0xea/0x280 [ 508.282872][T19762] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 508.304199][T19762] __sys_sendmsg+0xe5/0x1b0 [ 508.308850][T19762] ? __sys_sendmsg_sock+0x30/0x30 [ 508.328934][T19762] ? lock_downgrade+0x6e0/0x6e0 [ 508.345333][T19762] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 508.369383][T19762] __do_fast_syscall_32+0x65/0xf0 [ 508.387430][T19762] do_fast_syscall_32+0x2f/0x70 [ 508.406113][T19762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 508.429213][T19762] RIP: 0023:0xf6ed8549 [ 508.444867][T19762] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 508.505928][T19762] RSP: 002b:00000000f44d25fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 508.526385][T19762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 508.554218][T19762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 508.613021][T19762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 508.650774][T19762] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 508.707872][T19762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 508.751920][T19762] Kernel panic - not syncing: panic_on_warn set ... [ 508.758557][T19762] CPU: 1 PID: 19762 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 508.767339][T19762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.777413][T19762] Call Trace: [ 508.780704][T19762] dump_stack_lvl+0xcd/0x134 [ 508.785394][T19762] panic+0x2b0/0x6dd [ 508.789332][T19762] ? __warn_printk+0xf3/0xf3 [ 508.793947][T19762] ? __warn.cold+0x1a/0x44 [ 508.798381][T19762] ? kvmalloc_node+0x111/0x120 [ 508.803165][T19762] __warn.cold+0x35/0x44 [ 508.807427][T19762] ? kvmalloc_node+0x111/0x120 [ 508.812214][T19762] report_bug+0x1bd/0x210 [ 508.816639][T19762] handle_bug+0x3c/0x60 [ 508.820814][T19762] exc_invalid_op+0x14/0x40 [ 508.825336][T19762] asm_exc_invalid_op+0x12/0x20 [ 508.830205][T19762] RIP: 0010:kvmalloc_node+0x111/0x120 [ 508.835597][T19762] Code: 01 00 00 00 4c 89 e7 e8 ad 18 0d 00 49 89 c5 e9 69 ff ff ff e8 f0 98 d0 ff 41 89 ed 41 81 cd 00 20 01 00 eb 95 e8 df 98 d0 ff <0f> 0b e9 4c ff ff ff 0f 1f 84 00 00 00 00 00 55 48 89 fd 53 e8 c6 [ 508.855222][T19762] RSP: 0018:ffffc90005587268 EFLAGS: 00010216 [ 508.861309][T19762] RAX: 0000000000000431 RBX: ffffc90005587380 RCX: ffffc90002f41000 [ 508.869304][T19762] RDX: 0000000000040000 RSI: ffffffff81a56291 RDI: 0000000000000003 [ 508.877288][T19762] RBP: 0000000000400dc0 R08: 000000007fffffff R09: ffff8880b9c32a0b [ 508.885268][T19762] R10: ffffffff81a5624e R11: 000000000000001f R12: 0000000080000018 [ 508.893271][T19762] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff88801cac4000 [ 508.901260][T19762] ? kvmalloc_node+0xce/0x120 [ 508.905958][T19762] ? kvmalloc_node+0x111/0x120 [ 508.910743][T19762] ? kvmalloc_node+0x111/0x120 [ 508.915521][T19762] hash_netportnet_create+0x3dd/0x1220 [ 508.921002][T19762] ? __nla_parse+0x3d/0x50 [ 508.925438][T19762] ? hash_netportnet6_list+0x1460/0x1460 [ 508.931084][T19762] ip_set_create+0x782/0x15a0 [ 508.935781][T19762] ? ip_set_sockfn_get+0xe60/0xe60 [ 508.940949][T19762] nfnetlink_rcv_msg+0xbc9/0x13f0 [ 508.946007][T19762] ? nfnetlink_net_init+0x380/0x380 [ 508.951238][T19762] ? find_held_lock+0x2d/0x110 [ 508.956020][T19762] ? __dev_queue_xmit+0x1b54/0x36e0 [ 508.961228][T19762] ? lock_downgrade+0x6e0/0x6e0 [ 508.966095][T19762] ? __local_bh_enable_ip+0xa0/0x120 [ 508.971394][T19762] ? lockdep_hardirqs_on+0x79/0x100 [ 508.976602][T19762] ? __dev_queue_xmit+0x1b54/0x36e0 [ 508.981809][T19762] ? __local_bh_enable_ip+0xa0/0x120 [ 508.987121][T19762] netlink_rcv_skb+0x153/0x420 [ 508.991899][T19762] ? nfnetlink_net_init+0x380/0x380 [ 508.997115][T19762] ? netlink_ack+0xa60/0xa60 [ 509.001724][T19762] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 509.007980][T19762] ? ns_capable+0xd9/0x100 [ 509.012416][T19762] nfnetlink_rcv+0x1ac/0x420 [ 509.017031][T19762] ? nfnetlink_rcv_batch+0x25f0/0x25f0 [ 509.022501][T19762] ? netlink_deliver_tap+0x1b1/0xc30 [ 509.027806][T19762] netlink_unicast+0x533/0x7d0 [ 509.032592][T19762] ? netlink_attachskb+0x890/0x890 [ 509.037713][T19762] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 509.043972][T19762] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 509.050227][T19762] ? __phys_addr_symbol+0x2c/0x70 [ 509.055265][T19762] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 509.060997][T19762] ? __check_object_size+0x16e/0x3f0 [ 509.066305][T19762] netlink_sendmsg+0x86d/0xdb0 [ 509.071088][T19762] ? netlink_unicast+0x7d0/0x7d0 [ 509.076042][T19762] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 509.082297][T19762] ? netlink_unicast+0x7d0/0x7d0 [ 509.087246][T19762] sock_sendmsg+0xcf/0x120 [ 509.091676][T19762] ____sys_sendmsg+0x6e8/0x810 [ 509.096458][T19762] ? kernel_sendmsg+0x50/0x50 [ 509.101141][T19762] ? do_recvmmsg+0x6d0/0x6d0 [ 509.105747][T19762] ? lock_chain_count+0x20/0x20 [ 509.110603][T19762] ? lock_chain_count+0x20/0x20 [ 509.115463][T19762] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 509.121462][T19762] ___sys_sendmsg+0xf3/0x170 [ 509.126070][T19762] ? sendmsg_copy_msghdr+0x160/0x160 [ 509.131376][T19762] ? __fget_files+0x21b/0x3e0 [ 509.136059][T19762] ? lock_downgrade+0x6e0/0x6e0 [ 509.140939][T19762] ? __fget_files+0x23d/0x3e0 [ 509.145637][T19762] ? __fget_light+0xea/0x280 [ 509.150241][T19762] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 509.156504][T19762] __sys_sendmsg+0xe5/0x1b0 [ 509.161029][T19762] ? __sys_sendmsg_sock+0x30/0x30 [ 509.166062][T19762] ? lock_downgrade+0x6e0/0x6e0 [ 509.170942][T19762] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 509.177550][T19762] __do_fast_syscall_32+0x65/0xf0 [ 509.182595][T19762] do_fast_syscall_32+0x2f/0x70 [ 509.187462][T19762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 509.193807][T19762] RIP: 0023:0xf6ed8549 [ 509.197887][T19762] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 509.217679][T19762] RSP: 002b:00000000f44d25fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 509.226103][T19762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 509.234077][T19762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 509.242052][T19762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 509.250029][T19762] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 509.258004][T19762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 509.266238][T19762] Kernel Offset: disabled [ 509.274656][T19762] Rebooting in 86400 seconds..