Warning: Permanently added '10.128.10.31' (ECDSA) to the list of known hosts. 2019/10/02 17:53:47 fuzzer started 2019/10/02 17:53:52 dialing manager at 10.128.0.26:37073 2019/10/02 17:53:52 syscalls: 2412 2019/10/02 17:53:52 code coverage: enabled 2019/10/02 17:53:52 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/02 17:53:52 extra coverage: enabled 2019/10/02 17:53:52 setuid sandbox: enabled 2019/10/02 17:53:52 namespace sandbox: enabled 2019/10/02 17:53:52 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/02 17:53:52 fault injection: enabled 2019/10/02 17:53:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/02 17:53:52 net packet injection: enabled 2019/10/02 17:53:52 net device setup: enabled 17:57:13 executing program 0: syzkaller login: [ 301.347843][T11748] IPVS: ftp: loaded support on port[0] = 21 [ 301.488009][T11748] chnl_net:caif_netlink_parms(): no params data found [ 301.544252][T11748] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.551913][T11748] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.560865][T11748] device bridge_slave_0 entered promiscuous mode [ 301.570910][T11748] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.578146][T11748] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.587517][T11748] device bridge_slave_1 entered promiscuous mode [ 301.619416][T11748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.632500][T11748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.664713][T11748] team0: Port device team_slave_0 added [ 301.674025][T11748] team0: Port device team_slave_1 added [ 301.746719][T11748] device hsr_slave_0 entered promiscuous mode [ 302.002842][T11748] device hsr_slave_1 entered promiscuous mode [ 302.144335][T11748] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.152009][T11748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.160187][T11748] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.167585][T11748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.248345][T11748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.268859][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.280784][ T2938] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.292480][ T2938] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.305798][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 302.329274][T11748] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.346521][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.356228][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.363726][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.406792][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.416987][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.424574][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.435163][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.445521][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.471749][T11748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 302.482757][T11748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.515745][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 302.525265][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.535569][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.548871][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 302.562831][T11748] 8021q: adding VLAN 0 to HW filter on device batadv0 17:57:14 executing program 0: 17:57:14 executing program 0: 17:57:14 executing program 0: 17:57:14 executing program 0: 17:57:15 executing program 0: 17:57:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}}}, 0xb8}}, 0x0) socket(0x1, 0x10000e, 0x7) 17:57:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc0046209, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1400) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0xc0046209, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0xc0046209, &(0x7f0000000000)) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000040)=0x33f6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0xc0046209, &(0x7f0000000000)) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0xc0046209, &(0x7f0000000000)) prctl$PR_SET_TSC(0x1a, 0x0) syz_usb_connect(0x5, 0x8, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESHEX], @ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=r1, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES16=r0, @ANYBLOB="c1db01803b4d", @ANYRESHEX=r3, @ANYPTR64, @ANYRES32=r4, @ANYBLOB="a64ae57bacaba9244b6050d761a098a6b6834526936a7de9ce38dadd56aab9af7f5ffeefc123397554d20ce9db990f2850ee3a03ea0df960878d78f2f4b468ce9c107f5f1e1ab572c6e1f50210685ecfd4ca"]], 0x0) [ 303.182447][T11770] debugfs: File '11769' in directory 'proc' already present! [ 303.200863][T11770] debugfs: File '11769' in directory 'proc' already present! [ 303.209748][T11770] debugfs: File '11769' in directory 'proc' already present! [ 303.218170][T11770] debugfs: File '11769' in directory 'proc' already present! [ 303.730151][T11771] debugfs: File '11769' in directory 'proc' already present! [ 303.738638][T11771] debugfs: File '11769' in directory 'proc' already present! [ 303.747125][T11771] debugfs: File '11769' in directory 'proc' already present! [ 303.755635][T11770] debugfs: File '11769' in directory 'proc' already present! 17:57:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x400001, 0x0, 0x800000, 0x20000000}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x810, r0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x4f3902) r1 = getpgrp(0x0) setpriority(0x0, r1, 0xffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r3, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x14) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) clone(0x10c9fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x10000000016, &(0x7f0000000200)) ptrace(0x10, r5) 17:57:16 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400840, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0x2, @mcast2, 0x1f}, @in={0x2, 0x4e23, @empty}], 0x4c) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x111600, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xa99) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x80c0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000140)={{0x9, 0x4}, 'port0\x00', 0x105, 0x10a04, 0x4, 0x0, 0x80000000, 0x2, 0x800, 0x0, 0x1, 0x3}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x40000, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x2000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f00000002c0)={{0x0, 0x0, @identifier="e66b2c1740756f549012e3d63c29daf2"}}) syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x3, 0x2) r5 = add_key(&(0x7f0000000340)='rxrpc_s\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="fe543b7be70b0b3211852d38c92253eb824355", 0x13, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000400)={r5, 0x64}, 0x0, &(0x7f0000000440)="f7630db6dfa17c60757ac272b1675fbaa82390fbb1bcebd60aa4f062f22eb21b7ad2044e8df44bfb13edf4222139265bbed02c5e1a5a859faad9c073ef85c49b5506b3bfab437d4fe9596d3e2a7ddf461a857d7b619a7b21210fed4d90fc7102ca33cd2e", &(0x7f00000004c0)) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) fsetxattr(r6, &(0x7f0000000500)=@known='com.apple.FinderInfo\x00', &(0x7f0000000540)='posix_acl_access\x00', 0x11, 0x1) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video35\x00', 0x2, 0x0) flock(r7, 0x1) r8 = syz_open_dev$sndpcmc(&(0x7f00000005c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x82101) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x15}, 0x1}}, 0x80000000, 0x9, 0x1, 0x5, 0x6}, &(0x7f00000006c0)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000700)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x0, 0x40, 0xd7, 0xffffffff, 0x84}, &(0x7f00000007c0)=0x98) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000800)={@mcast2}, &(0x7f0000000840)=0x14) r10 = socket$inet6_udp(0xa, 0x2, 0x0) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000940)={{{@in=@rand_addr=0x800, @in6=@remote, 0x4e24, 0x2, 0x4e23, 0x1000, 0x2, 0x80, 0xa0, 0x84, 0x0, r11}, {0x651e, 0x7, 0x5, 0x5, 0x7fff, 0x401, 0x4, 0x7ff}, {0x85e3, 0x2, 0x300000, 0x4}, 0x7, 0x6e6bb4, 0x3, 0x0, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d2, 0xd222531a263c27e6}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3502, 0x0, 0x0, 0x0, 0x1000, 0x7816, 0x7}}, 0xe8) r12 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$KVM_GET_NESTED_STATE(r12, 0xc080aebe, &(0x7f0000000a80)={0x0, 0x0, 0x2080}) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002b00)='/dev/snapshot\x00', 0x400100, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000002b40), &(0x7f0000002b80)=0x4) pipe(&(0x7f0000002bc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETVNETHDRSZ(r14, 0x800454d7, &(0x7f0000002c00)) [ 304.694700][T11779] IPVS: ftp: loaded support on port[0] = 21 [ 304.841269][T11779] chnl_net:caif_netlink_parms(): no params data found [ 304.900593][T11779] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.907972][T11779] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.916763][T11779] device bridge_slave_0 entered promiscuous mode [ 304.928256][T11779] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.935690][T11779] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.944491][T11779] device bridge_slave_1 entered promiscuous mode [ 304.979566][T11779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.992655][T11779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.026503][T11779] team0: Port device team_slave_0 added [ 305.035895][T11779] team0: Port device team_slave_1 added [ 305.052586][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 305.059200][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:57:17 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket(0x3, 0x0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007041dfffd946f6105000a0700000000000b0028080008001e4004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x200, 0x8000, 0x9, 0x1, 0x0}, &(0x7f00000000c0)=0x10) r4 = accept4$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c, 0x40000) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)={r3, 0x0, 0x16, "f196c0ed93b3dc292f793db278d35da7d01577ebc837"}, 0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f00000001c0)={0x9, 0x0, 0x2021, 0x7f, 0x4, 0x5, 0x9, 0x3}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x42, &(0x7f0000000000), 0x20a154cc) [ 305.146536][T11779] device hsr_slave_0 entered promiscuous mode [ 305.193394][T11779] device hsr_slave_1 entered promiscuous mode [ 305.322275][T11779] debugfs: Directory 'hsr0' with parent '/' already present! [ 305.332078][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.454983][T11779] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.462265][T11779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.469990][T11779] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.477291][T11779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.597349][T11779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.626315][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.653788][ T2938] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.666082][ T2938] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.687367][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 17:57:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6000000000000, 0x40000) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x2f, &(0x7f0000001480)={0x0, 0x0}, &(0x7f0000000180)=0xc) setfsuid(r5) r6 = socket$isdn(0x22, 0x2, 0x21) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) getgroups(0x7, &(0x7f0000000c40)=[0xffffffffffffffff, 0xee01, 0x0, r7, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0x0, 0x1, {0x0, 0x4, 0x0, {0x4, 0x3, 0x800, 0x1, 0x6, 0x188, 0xba63, 0x6, 0x3, 0x1000, 0x3, r5, r7, 0x7f, 0x6}}}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @rand_addr="00f8fffffffffffff2ff00", 0x1}, 0xfffffd31) r8 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000140)={0x1, 0x200}) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000180)=""/11, 0x82000, 0x800, 0x1}, 0x18) [ 305.720890][T11779] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.748540][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.759393][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.766681][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.781035][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.789997][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.797240][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.821691][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.839721][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.845514][T11791] delete_channel: no stack [ 305.851595][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.879739][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.889586][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.899125][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.908603][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.917558][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 17:57:18 executing program 0: r0 = add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000000)="8000", 0x2, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) [ 305.926654][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.935784][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.950610][T11779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 17:57:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r9, 0xc0045520, &(0x7f00000001c0)=0x2) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x5, 0x14}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="440fc739410f78cd66baf80cb8dc31be84ef66bafc0cec0fc79b3a8b0000460f01c3b8010000000f01d9f3ad6565660f38801866b834000f00d0460f01cf", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) [ 306.024312][T11779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.062535][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 306.069050][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 306.118401][T11799] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 17:57:18 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc008}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfffffffffffeffff}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000200)) sendmsg$tipc(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fefdf715ea0d886cba48a1fdb6c664486cbdcad3d711c368d7443dbf3b27927e298009b2467799e1488a495d956fb2ccf08f765ab78b6f91af5952b6f2afe6d3192981e7b6834452861b6e91593323164c", 0x2ca}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) [ 306.182501][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 306.188828][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:57:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_DESTROY(r1, 0x5502) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6a, 0x73, 0x92, 0x10, 0x147a, 0xe018, 0x54fc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x62, 0xb3, 0xa, 0x0, [], [{{0x9, 0x5, 0x8d, 0x1f}}, {{0x9, 0x5, 0x3, 0x6}}]}}]}}]}}, 0x0) [ 306.302497][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 306.308839][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 306.326711][ C1] hrtimer: interrupt took 32858 ns [ 306.422518][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 306.428818][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 306.933004][ T12] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 307.172655][ T12] usb 2-1: Using ep0 maxpacket: 16 17:57:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x3, 0x9000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000a39de42141443200240012000c00010067726574610180000000020008000a0000dcb0bc3b82dfdd5b1856374c4db7efb700008f21b6bf7bd613850477cad4837ebcc32961f7e95b5a4913d088d60bbaa3b3c90a9d9a", @ANYRES32=r3], 0x44}}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000140)={{0x2e, @local, 0x4e24, 0x0, 'fo\x00', 0x14, 0xfffffffe, 0x1c}, {@rand_addr=0x6, 0x4e22, 0x4, 0x3, 0x1, 0x1}}, 0x44) [ 307.292641][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 307.303824][ T12] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 307.313682][ T12] usb 2-1: New USB device found, idVendor=147a, idProduct=e018, bcdDevice=54.fc [ 307.322851][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.365796][ T12] usb 2-1: config 0 descriptor?? [ 307.370729][T11818] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 307.394940][T11819] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 307.408775][ T12] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed! 17:57:19 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0xffffffffffffffb7, 0x7fffc) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @mcast1, 0x1}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9) syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) listen(r2, 0x200000000002) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 307.416544][ T12] mceusb: probe of 2-1:0.0 failed with error -12 [ 307.627636][ T12] usb 2-1: USB disconnect, device number 2 17:57:20 executing program 0: socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f00000018c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80000400202) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}) [ 308.412161][ T53] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 308.662073][ T53] usb 2-1: Using ep0 maxpacket: 16 [ 308.802992][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.814091][ T53] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 308.823978][ T53] usb 2-1: New USB device found, idVendor=147a, idProduct=e018, bcdDevice=54.fc [ 308.833136][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.844856][ T53] usb 2-1: config 0 descriptor?? [ 308.887297][ T53] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed! [ 308.895330][ T53] mceusb: probe of 2-1:0.0 failed with error -12 17:57:21 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000507fa7a6c710000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100626f6e640000000004000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@local, @local, r4}, 0xc) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000280)={0x0, 0x2}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) [ 309.101718][ T53] usb 2-1: USB disconnect, device number 3 [ 309.129799][T11843] bond1 (unregistering): Released all slaves [ 309.324017][T11841] bond1 (unregistering): Released all slaves 17:57:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:21 executing program 1: syz_usb_connect(0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) signalfd(r0, &(0x7f0000000240)={0x3ff}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc04c5349, &(0x7f0000000080)={0x800, 0x6, 0xfff}) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x136) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000380)={@in6={0xa, 0x4e21, 0x4, @mcast1, 0x7ff}, {&(0x7f0000000280)=""/169, 0xa9}, &(0x7f0000000340), 0x9}, 0xa0) r7 = dup(r0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x8, 0x9, 0x3, 0xee, 0x0, 0x100400000, 0x424, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x1ff, 0x8}, 0x140, 0xbfc8, 0xfffffff1, 0x4, 0x4, 0x731a9add, 0x7}, 0xffffffffffffffff, 0x1, r9, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0xc0046209, &(0x7f0000000000)) pwrite64(r11, &(0x7f0000000440)="5f8e50eee6be9caaab653226fc7b5f164556abc38fdd42da3e61975a4c7672511cc90713acad81f947a45b28ba1169e0abd9df78cd7fd54bf26987d5f3ad283975f3631b97e562e2005558dc203641ca371f721659875347f4d499c925db27d565553509b8c216623d400f24e470143a5f1299581b31814811f69c261e6b2c5a4132670ee67cfe38a5bb8e5114a70c9b4dacd51e1c30c10d2d3fe74ed645", 0x9e, 0x0) r12 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x7) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000000)={0x1, 0x9, 0x8001, 0x5, 0x0, 0x3f, 0xe0, 0x9, 0x7, 0x4}) 17:57:21 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, '\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00p\x80\x00', 0x4}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0x8936, &(0x7f0000000000)) 17:57:21 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2400, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x22, 0x30, 0x0, 0x10, 0x3, 0x8, 0x0, 0xad, 0x1}) r1 = semget(0x0, 0x0, 0x308) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000080)=0x100) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000100)={{0x1, 0x0, @descriptor="7fa3d9e50fed1945"}}) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000140)={0x5, "bdee4675dc83b38e6911b3c51afdcf0f353dae95dfbbd521e7728a3af0852fea", 0x3, 0x1002, 0x80000000, 0x52, 0x8, 0x0, 0xa90b, 0xf5}) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f00000001c0)={0x3, "b6040a8e2635692a5aced772cdb29ad3c47ef3b403922074e7815e251fabd26d1a45aa2cd10361a8d3117ca670acc5724c358e0b1679bafd08391818c76ca3cf"}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x68, &(0x7f0000000240)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xafc}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e21, 0x635, @rand_addr="b0d6615cd5c57de6467e7277a8862f58", 0xabf}]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r5, 0x8c9}, 0x8) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000380)={0x0, 0x0, 0x1ff}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000400)={r6, r7}) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000440)) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000004c0)={r5, @in={{0x2, 0x4e22, @multicast2}}, 0x3, 0xffff}, &(0x7f0000000580)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000005c0)={r9, 0x800}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x8) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000006c0)={{0x87, @dev={0xac, 0x14, 0x14, 0x25}, 0x4e21, 0x0, 'nq\x00', 0x2, 0x10000, 0x39}, {@loopback, 0x2, 0x3, 0x3f, 0x10000, 0x10001}}, 0x44) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000740)) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000780)=0xaa69a2c199854ebd) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000007c0)={0x9, {{0x2, 0x4e21, @rand_addr=0x2}}, 0x0, 0x8, [{{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x490) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_udp_int(r10, 0x11, 0xa, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000d00)) r11 = accept4(r0, 0x0, &(0x7f0000000d40), 0x800) sendmsg$nl_route(r11, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1804021}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)=@setneightbl={0x90, 0x43, 0x400, 0x70bd2a, 0x25dfdbfc, {0x2}, [@NDTA_THRESH1={0x8, 0x2, 0x100}, @NDTA_THRESH2={0x8, 0x3, 0x77922567}, @NDTA_PARMS={0x20, 0x6, [@NDTPA_RETRANS_TIME={0xc, 0x5, 0x1}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x101}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0x1f}]}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x81}, @NDTA_PARMS={0x40, 0x6, [@NDTPA_PROXY_DELAY={0xc, 0xd, 0x1}, @NDTPA_APP_PROBES={0x8, 0x9, 0x8001}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0x1}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0x9}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x8}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x1}]}]}, 0x90}}, 0x4040021) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000f00)=0x70000000) 17:57:21 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000100)={0x21, 0x7, 0x1, {{0x14, '+lo^]*\'ppp0%vboxnet1'}, 0xac02940}}, 0x21) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_usb_connect(0x6, 0x3a95, &(0x7f0000000600)={{0x12, 0x1, 0x350, 0x8, 0xc7, 0x8b, 0x20, 0x582, 0x25, 0xde1a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3a83, 0x4, 0x0, 0xb3, 0x10, 0x8, [{{0x9, 0x4, 0x56, 0x0, 0x1, 0x9e, 0x11, 0x8f, 0x1f, [], [{{0x9, 0x5, 0xb, 0x3, 0x61, 0x4, 0xc2, 0x7}}]}}, {{0x9, 0x4, 0x6d, 0x4, 0x8, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x8, 0x10, 0x74, 0x1, 0x3, 0x1f, [@generic={0x1002, 0x30, "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"}, @generic={0xec, 0x22, "8d141a579fd0df10889de272de9a20844e2a2f331b3b6736ec7398fbdb29eaa35c9a2def761211ad9912887971b765c4f33fac61c1cd919e59cce903c98c06cd4674742ad8c9271bd99bd40228f7721e618595abca654b2960a61c762cb9cab2eb55a01450ab3cc102af709b527bbe57bd2e0c7a5888f17153792e9f7af17a553ff20c9df81d20337bbcd6a6bfdd523aa3e41c0daff62f3fba9e5ca6d8cbea7e2bf656798ec3c3d7b370c9cd9389312380c7279eda43d4c36731eea3724fa11d25519c9fc2247a4bbae37e48d8e9a6935d85c1c42f985827e47a0b0be7991e8a833972e48b2e301ef2a5"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x108, 0x1, 0x64, 0x3, [@generic={0x1b, 0x6, "e716f3fe5c5f04ad3002f7205e5350df13e160ff72dee6b914"}, @generic={0x1002, 0x30, "09ee98d15a4c5bbc31fd30498b64c4bc5f447afae6f7427c50fff914b0a01f5bc3cf1030064cf760174bb7460fad84c645ef65a7a5550c636ccaf04abd24540df1d4d739bf79628e57d5971dd77372f6f26d7e37a60c2708e9aad701356b826193c95bdb546773f4a109aaa7135e4f198b879b0eab3d60bd567c1b52f83477ceae55221f21a37516a06e9a8cdc831ef907d8c74bc91a349e319708230121e154ed4d4cabf1fb6f8dab869caecf3799d2f1257a5dc2915234397c6d81e0af607e2896f0c223ce8b3088f3fcabef3636774b8db9afffdeaeaea1a0b8c5aacc064b78449d951fbd6f25bb73d3ee866c5e0fe7b47d57ca3afee0a985ec88b9a5d668c3e29b1afec3e22c6cf392c6ba2f6c6fc8251d830528a1a8244a019d0f4ed105e8eb030549f569bb1cd5057f4a5d8aac6fde26af00e65d80fdf9be96e02f32d2f0742280e20d8bf8d605c6cb74a8c7b0a71ec34d4cd126fca0df4f09d53d3766359fce400537ab81d5d3aea08d3b39c9d608f434a47c834c90750bd29f867db09f20326573f666c06372f2480cc2e763244e6973cb5e6477c51009ed079adadc27135220d3ba8c8717603682157c762146faeb44c8112fea49822d5b8c22723cb70e322a53f1d00cd29523454cca2e8b747f0f7f86e7a53fa151c09035215ab63f732b93f3d4a215df90432a144be92b9c14e35fb99a092a093abcabd72c00bc94a979adf02261e35ab591d321d72f5aa135c727492ee2d4d216735f76ec8609cf462fa09014f69f6edbcbcd34cad97c88728df735fc931eb2d601e500bd7771c363dc830f04938e82f41a1cea310f45b45173955fc8c79f7956ed5ba1221ad09f40f01e99a88e58f9d029da6d99f997aab099b53847b3fb81cee75e41ac96fc98e638fb809cdc9a9848bb1b7f244cc39f04c7d8ba8059d38a53bdb06c60d0d837fb8829ec2decbc4d5c2ee1607a90cd49a64af82cfbc37532ee616bee98dd0aeba1d53fac3b06d0f4f32a40badb3bfec3521cdd67b4ae2788eee81b79c499dce1979f3122fcfd45ad3bde9c13541b618e06bef4ae2772d3ace8b3454bf69fd779e8bfd55b2828b5b1a5e88be371fff2e20f073b3e42569a60c8367183815658f092f8eaf5d55f6ac8cfc26396ac64d29788f52f7f3ec3974026a075993b1551c02607adb4a5214f9185c488525fcc5f2640baa7be0ee43c136f7cd3c1c099d3284f6c715941f534930b1ca88a0e91e3f5bdc4f6473a50b3a2fb6e38293e9fe282aeb5e2aaa102d0d0864d32bccb5906dabf9539e1de1cd99457de9c4ab1f63d38c285aae546792fd8511f3158331177f7fb49d5fb13298c9c9c66041e97e0c66c17e74f30d77d9848e08fefa72761b312dfd67abc2f88974600c6cac7388cdb1ff6b890d4ce7412997b36f5de6127be2b4b0a6a908774c356b729e537ee304375e12692af3aaf8a33e36bc9c2c217e6d1652d87e78b137237de0075ad56aeb60014395b2d0f4e2830830d833cb20dcbd800127ed29b1400bc885ff785f162a345c31ce9032154a3278451b5c08367b266a486c148becf2a894e319cb5531b61089fedaac920f13ff2a5439dabf11a3b08ef77b5a03b15c84a076b939411186029255d540a3ddabe8e6dc8a20302bb28550fa5ebdf3dc0b5a6d26c4eef333d1d69b743a53d746c9fcdaf73c8cd5af6ab8eac58e473ade6f285c6acc0547304b1b7e71ae37d896b235dc577d39e182e8b7606cc1f97e4d3fe67303fd19c3e23f9994bda571698ca21df011b45ee14fb2ce0e6ce73102da1ff65562ca256ae395fb9b474f7987c43c12085988960c8bb79eac0da538e72afe279954e5961a0cd0388a7a5d9c3ed5c0766621fba51e95472081cf2a00fdc36d716199e8747d58eee627732347bcfe1c23c9b25734ba153f1aa03b8ca1175f5008cdbca9dab605be09b2679e2e9707380cf72d9150eb445fd700fdb2cec1fba51072816c61f014a0acd01da6c8b00a6de970c6a023ff9e3afe91f54dd93ced51ae42ee362de19547b4f5cbd5a90018d523b6b5bbeadbc92635d245f01b422b1800e4a833589672d1efbfa1eb22568e179fea26e36cee556f96e7bdd611ecd3c0d1ecbfea0123dfab1392ce976c19ab4a384b562fb9cf644feb92f84bc3532715f78be9e66f6e55233ef6591b3b9895c7950858885d66825305b03896f0bc209df5e8689b721408e2890d10f0a2b0b0bf8c20984f680c253e0e35e2161094c85a3072c2ce6f3ddc57368c0adc66f84eecf534d0e7ce86f93b9396de2c2bbef92387a65815c617ce4c8d3d1966705c10029e3f7a48c5fc3472d45c8ae606efde2ab5ed0e7876bbc6a4512a96a083b3b48ebd415ac52782dcc220adf80ac08a0016366f704f0f3a29d2872060857fee772fd9e35e3a4e645cbba20d51d0518602c16a06d081011c91d9a024bce2821a562a32551e72e27a3a2360e72b0beee3b312b8069350247e7467f1fccd0e89ff88bca7be76e02a3cd664fc1df18c9b4814f5b76f103522ed913aeb6fcd5c130a2d13f0eec876bc0ed90e0df484904619f7ce240fc46dcf8da19dd1875e606f976e666a5d65a28cf50cb052f5df0a6eefe09722801da2034a4bced2bbdb537f9d36d65a523711afbee0aa55a3634bef3108354267fef642b21ce4d6dae657b3effb1b2bd13efe1251df5ce88ae2524d9b4a379be3250062c2dc6cfd4eba2714ecb04480d7e8b3871c02f7362054a7ae571125f05739cf328071c2e9a3c14fb7ce9633dfe8c6a4f914694472c2ad11acdf3e7fed968d28f04412566e099b807768be0fc897a8216c457c78eaade78bb47dcf769cc3c18072f71ae7037e8df3cbf9519c838eb6b75fb2a96309e73a963b7741370f95f494c1bf749b5ac7e39a8ca41d38ac7d1b0b00ec03d70d215fd89e4e222e089912210d2ed0c8bdbfdfa6f6d42187a85ae3315c14ed48859f6d604d335840432a3766d66ca01053219d4b240a3a28e288bfd771679a3761daf7aeb6a6b33e623438968ff4d22fa0aebeaed48508ad4d9ae04c6cc51522950f61e703e48df0f3947ca1021b345869f98b8502fe5ad66834229d0c9800da92df64cabbed36e0c753a657e163634973410cbb9fed34165ac13f08463bbc1569c7dffd0ea0f21dda380e8cccc750e6819c291d6dbcd1dcbf57ef532524c6e6b2f8efa260458373fcc7102edd32f9dd93815e7b3f790c8cb7f788f9134fc93b94fb795e7dcc0f880bf3cdb5f1899530836a7cba84a2972b1a6dc032f91e7b1698bc9845208f65873f8cfe2c27a2c5b40bca13e1f2f4685483170c049b475231afd8cbce9ab9e6e99e4bbb17afc08cef3542ade75fc5eff00eca0a51a3acc19c2e44ae2883390ff197f2bdd2b5029285a72f270ab8d3caa41d3abaf4955902e024253f04b8cc433cbd1208afda0e62e6b9f36fd17e624ae84e5936f9960edb975e3903fa74f3958d6685d635e75866d3867e32d467f2c38132fe655606d21dc8ecd68cebfca822867e59c781ba631092f0401f83dcf9bc2dff092610ee9c14497163ee76b8a7f47dbfe45842160191b4357d10048f108a145bd57a973ae02a2ffde8290cc2509efcd3f1b6cb798512a2df664b212d13ffdf70c2a8c6ca5ade07f3307c1999c32274b1a796c0871b74e920344d0fadee9f2e2ee7ae6a61941ba061e345d86fb26b051844978efba62e55b03dcc87c7ec467a7845030ada592386d67fe8d95ea0fcff95f35edc1118482c6411ef2adca071bc6eb2fdcecec8e9afa70707c558db01c33d3f5bc8237611b0a003dc35d8ea53fb87904354c4c756e8861753bd04d6a29e1285c00d56362f3eb8eb842804bf1c7806165d479d718fc8ae7e2ce98b1b2125c56b84e55ae8f1be67ab855161055560216ea63456cf95b5a2623713686aeabfb26baa282c22f48e42fcf8f175138e5ca1e27164da16dc34939a37cbf1b6015167f23d6c0aae29ad60faa3c8e9f666f9ce030a0cf7359a7c6aaf5349d21f21ca077f5f658e2b415fa42c5dd9d66b9fe1cc910abbe54e0237d21fd6bd5531529bf53f068b9d5b61bf21b05e85416c4f22fca14daadeb4d1b351299c4a53c774526e35faf4946f89b6f1533a6d8bf5cc175d562657ea8c3ee0d8fc571fba4237b1395cdf2561947ce579cae90ac9c13f84ea4933e70f75b7b1997bd266efcfd3e23732a7e31551b68c3b23feb372f4d6b1581ce763ba17d25d836714076104a0a47ab3f9025a300726f7d588d5bd55bf3e6070502a4e5dc915e3a6a03e2da43202722a1e7032b9b64fa90233b585b3533918f965303707ba42c746f77de50a90e4d2881858bd40fa52b2c67e9fceb547344fdd58343e28770683edd6a0710c8ce5539594b47007d89acc8a3330439e4d20d32d903e01a264b2b382930681cae94fc624e310cd86f237a4f22455ddef55ae717fd6416bc78b6fa75abd10d5d0691324b36cb73fe167b1299c5ab95e53a6f525170cc54f72677ce77d7cc430be6a8dcee426ad736f655f15160c04fe59705698d7b730b98d44eec8bf9348cd24d657d981c82f8d3dcb67ff55f39a43363a4c373a4d723c48e88d0c240d5d547fe46ca4b6e8f88bf234366f7291e0b7d2c10f676882c7db33efbe2e0faad1a0cf28ec7dbc3883a0500e7929bfdc8928719fb9a2b57ee34799a23c670ccf388c384165bee8f6bb765646733e4b7efc2d0182970b3fcfb5da4d09a8d0dfa009aaefeb0c9fd4c2a32d2fd6deb2094f37b5d67cae43f9c9eb8405cd7afcf3adab9b3e5e0f9c7d55cc50f620a7bfac74081a10179b224789cd3799bb85d1ecce161bdf30bda0aedbd0ef8564ec6a4b23a7174cda37262eb053fcda5dd2607ce62cd8702dbe74747c8ae080c21b993557433fc0a0371ec9a00beb75a7477eebd3613650f565959f63549c2b3c669f1734d4a50c57d2f9173ca6e46ef12c918b905751b788a872222ee1e1b5ffe9d036918943209741c2cb0ed384bae31d32c6824c32ff93fa6c369df45c48195979170a64a2e0440335a19347f9681197e4fc16cc58fc63d6fc4aa89434fe15ed6065c0322d62e9a972964ca0d348a3c9da4252d000ddb5fd5b043229f5d174018e59a56d5f6a2e4b7cf00f00f0f645ba8552376cebe7e8fec8627a0ca54a55768d20b9235eee6766f8f1bd8cc41b48e7fea72a6912ab04fa133aa0470e31fc6e5c407c8cdb5303809af8e30a09669be8da30fba4b394222dccbad3306bc5652a6c93bd39cb15a0f0dc04b27e2d5543859e3c4be90e1900665bf1ea6d92edbd4c399341a1408bff66e56bd0cf1c178ad3c15c381ab51e1f7c8665de6c885c101ab8ec34eeaaf8bcadbf8ee77e545932d7574cfac247bdae5625e9788242ea19f8334edb70a5a3462cd2236747719126e2191c5fd79979382d950dd12075c4d000fde88669f283389b0139cce4dd2d7b22116db324b211cf8e506b8ed8a3178f133c6c330ab2c1ed1d65ddcc0d6dd58fa201393b562c78569c07b573af50ff6f7f6a61eb6fee8ba18ba44745b1965776bc834c69455ba044164fefbd33d30a8e87336da3476a95420029e2f07a9407eadd4dfc4a276cb65fa3555d9c0039d0354df21978a17b20427617969667363930522e0a4f487819153d7e31c103745e0d0332124465f925a432bde5bf22074e738f38f7b95d707149a005b14cc0448103e52ef5034f579f45359b46b9db36e62e8097af191d6ed8a721223c09d80f2664cc1cbe902a82e7e4cd2fd5f563f7ea3198e406a001c19b08ebcc35780372be07c5f"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x6, [@generic={0x1002, 0x24, "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"}, @generic={0xb8, 0x11, "c2937912a3b56323a796afb268859c139d52cde69da5f90b5720259d793172fc1ec71af048edbd5debdc7525397c84c82f7d1a95c4c70830febdbeb6859f92cfe14ee1425507025f07104e8fc8d22f161b5c5a955834230fa51db85fdfb5e9d376f7d24a3984228d213f12a230f417bd1bb2bd97470fb3377bc345b5c16435e7e0cc3a6c2443da2ac7f715ceb4690345701d3d530998f24587fc16118ea4facf2155ca99880baef9fa6a1bca61abe1cf0becf1818a76"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3a3, 0x3f, 0x0, 0x7, [@generic={0x9d, 0xd, "4528135b804d3461d80e951912420adf6ca2c9b950669ee24c6acfd2b4480f200e8cb87508dd389865f31ddca12c512c6e0a354866498bdcfa4902cb6658759a69b0388e277664d7a5d7abb61b23fdd4d654300ba74b7ed995dafe0fddb78825375884d293658a0c995a0fddda986235fc12043292edb9bc6b3157d50681846de49e78fb6df0d8ce932ab12283e39f64429221305f80bc8b7c6ac8"}, @generic={0xce, 0xb, "884d74de89cf84c34b2e901d5ca856eb0131f990fddee4ce5ece1f0abd5d9ad575fa61dc6407e9d75b25788bc875244a55d3b7324f026fdb0501d7c3f1ef9f6bc60a396a455fec3a04ae9dfead893005adc46f3f0447ad6e2187d0945985eccf8597b4a9239dffb665e8f18094964fad52c4eb646c92de9d2b776cbd2f6e60cb6f9c53516f2c8b0957e5d9cb7acad715aa884b475662d3c90d01886c5526edbeda0a2e287d479b47bb1292b39414a873e23e2ef03b536a2adadb2c616b95910833168d520a558f05db1b656f"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x208, 0x7, 0xff, 0xf8, [@generic={0x56, 0x5, "8e7ec79e82d248215cd0d73fb1e84a4fc8a949d956a44af4c1b10f47fb06680aa350d8b5c209ed46a2fc3a26cc50123ce504e044d56e1daed2908db1f1d255f734992af97d78ded86b7e5ef8c14ca5016cd425fc"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3db, 0x9, 0x9, 0xa5}}, {{0x9, 0x5, 0x8, 0x0, 0x28d, 0x0, 0x6, 0x1, [@generic={0x6f, 0x3e, "1a595aaf28743865102d04f33cdf3ed9f8292536a9e8c98faae4529d4fd93dbccf628c63511461ff43ec1d3640d8375bc2847d2b3457bf5ed89063748f70eeb6860afafb43fffa972a31a4ce461c31d5fb3be136828bb8225a3f46fb5353ba438663402d2b345572559df545f5"}]}}, {{0x9, 0x5, 0x7, 0x12, 0x205, 0x20, 0x5, 0x81, [@generic={0xde, 0x1, "f0a21cb72e05ac5ec22dc5c8c3dc1b015c7d3dad107f2820cd628de83fedd1cbcc490472b28faafb5851a036185e5246e450fa17fcc049df09fcbb471680a755235bfce398fe2ca17f3a0f9d93eb6bb6edc7783382e6f286dbde885c5346d970598427be46163a10c7d334c8204dbba5cdcf4661515e318a985ff6d6e259ece1c25d7829aec471acd249d3a99f2f789b65e6349e879080bac7f8f62fb28d77afa94ca5a1a3a6f715d5ec58c0611743b15bdd3f6686983ed152515e17c90899b39ef9f433da0bdf29635f7e1ed37334edf3da0ffcc69c81b5537c8095"}, @generic={0xdd, 0x22, "873c581fd7aa3e1eb8635f634ea3be3518080cb1dd3905f9918b3b5f0fb74f761c51e4d60305cf3b19e00f26a095daac27ae6ad075b250ac8d6745ae6322b84d15edc1687270950cd6c195921bc08efb13b9ad951305fba178ebda673f8d874c353dc9115c1bef019c8ceceec504f6eb8a9589d08298b4d33a961063498f5846d62c4333988847b3ad58508bece94d6a2e1bcc9002e0792846ebd614aef78de0057937d82f66fba718af17728a800b20015bee6846b3850563eedd91789e741fc5bd56380f40b47137074b230ae7c827f4d17a0386eab2d3a1cd68"}]}}]}}, {{0x9, 0x4, 0x83, 0x1, 0x4, 0xc2, 0x2f, 0x67, 0x8, [], [{{0x9, 0x5, 0x6, 0xc, 0x31b, 0xdb, 0xec, 0x7}}, {{0x9, 0x5, 0x9, 0x0, 0x341, 0xec, 0x80, 0x9, [@generic={0xaa, 0xc, "f14c1fb73a875bf43c3b4f6d9be82d666a35cd11a3de8401ffbde3a4a917ec721d37199c3b99f2901ea9caefefda8604a7d33c01061d384c607d77098f09255b7495294f28144137d4a6c8df6720ad198f42e792af5e7d9616b212bfc6cd065655546300fa162ff29b291b5836eebf1cbdc5c8e85381af41a53d1cf9fef2a4ddc6c316e22c2143bd98566d95e57defb8008890e880c323984f59947e3f16a8a1abafdd14eec811c5"}, @generic={0x89, 0x3, "6d0b0b8bca591e7af3ee880db234b4ee7c50052b8af87751a7f069bbf7fb1e0487f77e7f074f32b6e6772619be6ebfe13cdd3850c7060fd444700d51c5b85ee0ddb9db13b2885c9ff6f55aec4ba40299b5bc0e6069fc3794cffbc2680bfed13147b4d1758216b8a62f6870284248abe4f402ecea218d2474e2314d3fe106849f28cb3c0fc4da5a"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x2c7, 0xff, 0x1, 0xfe, [@generic={0x49, 0x10, "5c8360b79ae35cebe5dcc516347814e2f317bec7d39506edf0882e45dbe6310178ca53d9cee4f4fa9b1b0d7da9804b28e1a7d82031d22dbed0aa871b718cd0078441d00a299c54"}, @generic={0xd9, 0x22, "86ecd4e5df48665ba176691509cda5caf93ca23a9c0d6c43826565c90337053f15ba68b3283491869f9001bf62f33b021b2060765fc5328d5496a4c3089eb7338d859e931648917b7846dc8f9417388edf53b158bc61fd645cfd6d5fdabf5ad8cef36d56aea7e1e4c2ce10a931600ee6d7043e1ae9d7d48f5d0054adc0f8b385fdf89c8a02fa03c61f0709844cb9f8203f978327a8d813a36f386892e048baa1dc48c21e280489f40df3d879f5c46a2cc6ae17c35e01d2b67b596a5d9669e246e67ab29151715b78675deba2c06ac04c6486ff2b315a03"}]}}, {{0x9, 0x5, 0xaac9889aae2207f4, 0x10, 0xe, 0x5, 0x1, 0x0, [@generic={0x94, 0x4, "777367839239ea97c62963ba881aeb146cbb7369f0dddc422849df427c8a941193316103938915f968028461edf3c30ba3e6fc36f8e4f3812cca0b61b3ca5d28572df8d9b8f2d320e9074745f5b0ece5fe5787decedb2f314e712a365a8d3dc4bc4a11a646154d5ebde386bb1bdf4fecf56d8df40fc64b44728139a058366abe7a64285b2deb5ffcbd99f026074544777ac6"}, @generic={0x1f, 0x5b, "505e3a5b616f43662ec27f2becbd3b9204d07f9101c189dcef9ae100c3"}]}}]}}, {{0x9, 0x4, 0x29, 0x0, 0x4, 0x4d, 0x8d, 0x23, 0x9d, [@generic={0x3b, 0x2d, "e2a17045eb8d523b3bf5345dbedf888d92c0cb58a9fc4701fd7e5bde99e0ca1ba6c27013d91de5e610ff47ad7435ac8ebed02097da956ef77e"}, @hid_hid={0x9, 0x21, 0x1, 0x2d, 0x1, {0x22, 0x2e}}], [{{0x9, 0x5, 0x8, 0xb, 0x400, 0x3, 0x6, 0x8c}}, {{0x9, 0x5, 0x3, 0x8, 0xbf, 0x6, 0x0, 0x20}}, {{0x9, 0x5, 0x0, 0x13, 0x16f, 0x5, 0x0, 0x1}}, {{0x9, 0x5, 0x19, 0x0, 0x13c, 0x1f, 0x1, 0x7f, [@generic={0xc1, 0xb, "0e70768bb05881d3395eaf85c7657f9a80391e87f6cfdbf2dac2b0dc6eb4fb144f99a496267168d54d61a7a06b1b7006877269d27159bfe010ee36c2f0e143e8e3b6c306df9242f7a01707118c27c068d93caf745fa28844433c5004d1fd265bf38afee175166e5d0dc3b56b3e4fe8a121bb859842a872302d432427bd3d6c819542f0f304127a17f730be95573d3f54afb9ff8407d7520b0b6b3b40fed85ef0d954106ce28a852f8d8365b57c208a7f2c3dbe018ce8ffeb636bb1fd4b5bc9"}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x77, 0x6, 0x81, 0x10, 0x7}, 0x2a, &(0x7f0000000180)={0x5, 0xf, 0x2a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "1dd2fa3c5ac23ce515b6ba022b1e0039"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x2, 0x4}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x9}]}, 0x3, [{0x3c, &(0x7f0000000200)=@string={0x3c, 0x3, "c0a34d4d4425d91a24016e126ec8ba181ba92e41e28e2ca433675928f903988429b48827dd570d381b905148dd6902a82e28666cb2b2404c66fd"}}, {0x64, &(0x7f0000000240)=@string={0x64, 0x3, "5e4e34a1411d410ca44e6cc942b7259f93d04b388e0a54034ebb039bc52dff4ce05a42f7893d0d35ffc97c6523be8c8823639277c2186896c9625ae882254de0a5099069e48c7798a4a7c556973926a6c203f59ff11894605e2a0f8862b59afd1b8b"}}, {0xa, &(0x7f00000002c0)=@string={0xa, 0x3, "3d3839ec159c2c97"}}]}) lsetxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2, 0x14, 0x0) execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) [ 310.073542][ T53] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 310.181610][T11860] IPVS: ftp: loaded support on port[0] = 21 [ 310.330495][T11860] chnl_net:caif_netlink_parms(): no params data found [ 310.342075][ T53] usb 2-1: Using ep0 maxpacket: 32 [ 310.389321][T11860] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.396598][T11860] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.405994][T11860] device bridge_slave_0 entered promiscuous mode [ 310.418148][T11860] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.425477][T11860] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.434184][T11860] device bridge_slave_1 entered promiscuous mode [ 310.470625][T11860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.483600][T11860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.520039][T11860] team0: Port device team_slave_0 added [ 310.529371][T11860] team0: Port device team_slave_1 added [ 310.572668][ C0] net_ratelimit: 6 callbacks suppressed [ 310.572690][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 310.584711][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 310.612978][ T53] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 310.621104][ T53] usb 2-1: can't read configurations, error -22 [ 310.647017][T11860] device hsr_slave_0 entered promiscuous mode [ 310.674050][T11860] device hsr_slave_1 entered promiscuous mode [ 310.702186][T11860] debugfs: Directory 'hsr0' with parent '/' already present! [ 310.755889][T11860] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.763255][T11860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.770984][T11860] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.778513][T11860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.792293][ T53] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 310.866636][T11860] 8021q: adding VLAN 0 to HW filter on device bond0 17:57:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 310.919909][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.931185][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.949883][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.988999][T11860] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.017498][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.027530][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.034799][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.069641][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.079292][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.081915][ T53] usb 2-1: Using ep0 maxpacket: 32 [ 311.086577][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.131415][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 311.155219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 311.164836][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 311.174298][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 311.205009][T11860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.218228][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 311.234079][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 311.293115][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 311.293664][T11860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.299589][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 311.342967][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 311.349276][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 311.375443][ T53] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 311.383522][ T53] usb 2-1: can't read configurations, error -22 [ 311.424078][ T53] usb usb2-port1: attempt power cycle [ 311.472383][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 311.478739][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 311.592502][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 311.598872][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:57:23 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x28, 0xc2, 0x7b, 0x8, 0x8e9, 0x100, 0xd381, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x0, 0x0, 0x9c, 0xd8, 0x87}}]}}]}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e21, 0x4, @rand_addr="affaa5ebbf3e61f2a37e631fc30c709d"}}}, 0x84) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x257) 17:57:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 312.063140][ T12] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 312.142253][ T53] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 312.302688][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 312.412096][ T53] usb 2-1: Using ep0 maxpacket: 32 [ 312.422650][ T12] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 312.431010][ T12] usb 3-1: config 0 has no interface number 0 [ 312.437302][ T12] usb 3-1: New USB device found, idVendor=08e9, idProduct=0100, bcdDevice=d3.81 [ 312.446484][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.501369][ T12] usb 3-1: config 0 descriptor?? [ 312.546577][ T12] ir_usb 3-1:0.216: IR Dongle converter detected 17:57:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 312.713263][ T53] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 312.721312][ T53] usb 2-1: can't read configurations, error -22 [ 312.882864][ T53] usb 2-1: new high-speed USB device number 7 using dummy_hcd 17:57:25 executing program 1: syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000004c0)=""/249) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x86, &(0x7f00000003c0)=""/224, 0x0) lseek(0xffffffffffffffff, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x33821}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) dup(0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x401effff}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0) 17:57:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 313.593925][ T53] usb 2-1: device not accepting address 7, error -71 [ 313.613253][ T53] usb usb2-port1: unable to enumerate USB device [ 313.622293][ T12] usb 3-1: IRDA class descriptor not found, device not bound 17:57:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:26 executing program 1: syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000004c0)=""/249) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x86, &(0x7f00000003c0)=""/224, 0x0) lseek(0xffffffffffffffff, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x33821}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) dup(0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x401effff}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0) 17:57:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r5) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:26 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") dup3(r0, r1, 0x0) r3 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x2}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) [ 314.818433][ T53] usb 3-1: USB disconnect, device number 2 17:57:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x14) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x2}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007041dfffd946f6105000a0700000000000b0028080008001e4004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @empty}, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) 17:57:27 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000000c0)={0x3, r3}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') pread64(r4, &(0x7f00009f3000), 0xca, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 315.032891][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.172578][T11927] QAT: Invalid ioctl [ 315.304171][T11926] QAT: Invalid ioctl 17:57:27 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000400)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d) chmod(&(0x7f00000001c0)='./file0\x00', 0x38) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'team_slave_0\x00'}, 0x18) bind$inet(r4, &(0x7f00000004c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth1_to_bridge\x00', 0x3}, 0x18) sendto$inet(r4, &(0x7f0000a88f88), 0x0, 0x2000f401, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0xfffffffffffffff7, 0x0, 0x0, 'queue1\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="dabb28f2c84f1f7294", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet6_dccp_int(r5, 0x21, 0x4, &(0x7f0000000180), &(0x7f0000000300)=0x4) r6 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x240000) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000000c0)={0x9, 0x2, 0x10001, 0x7f, 0x1, 0x200000}) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000480)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1004000000016) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) fsetxattr(r7, &(0x7f00000003c0)=@known='system.sockprotoname\x00', &(0x7f0000000440)='\x00', 0x1, 0x1) keyctl$restrict_keyring(0x1d, r8, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)='^bdevwlan0procsecurity\x00') [ 315.506950][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.564148][T11936] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 0, id = 0 [ 315.578959][T11937] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 3, id = 0 17:57:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r5) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:27 executing program 1: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000180)=""/110) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00007c000000dfb2b27dabfbc12790da3da2463a35e5abbb03ea274291ef2682a47ec29fa52cd036c34ac9f854cb222ff27b3a405829103c561e7091f8db1401f6c6782c65205ff66a6fb3335251e6e3c160fccc1bcfedc15f9aaa1f57749ca91c734275bf14d34fe05992ee40c10f602e448e52a7e2b6150d192959851d9d8a5601"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000000)={0x8, 0x7}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:57:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0xffffffffffffffc6}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) [ 315.852429][ C1] net_ratelimit: 12 callbacks suppressed [ 315.852448][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 315.858580][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:57:28 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070001000000bf52cf6794a9d3000000611852fec8406f49b8818ffa5479613cfb657d733302dd624b13efecf449a8582c143494c60060a64695dd32b310aecd25713960e025f34473a827993c1885a2e3d55ae49ff6ee8d3b79d68e1f7ffe1e4f1012f9e1402f111f6e4aa65bb4a22bfda934a28ec8a12c03798e65b98b3567605164e3b09c"], 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xd9, 0x90, 0x3, 0x1, 0x0, 0x4, 0x20800, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x967b, 0xfffffffffffffffe}, 0x20804, 0x10001, 0x1ff, 0x7, 0x0, 0x7, 0x1f}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='keyringvmnet0\\\x00') [ 316.182975][ T12] usb 2-1: new high-speed USB device number 8 using dummy_hcd 17:57:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x200, 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x800}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x1a00, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r1, 0x180000, r2}) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f00000001c0)=""/35, &(0x7f0000000200)=0x23) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000002c0)=@int=0x6, 0x4) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2008002}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7fffffff, 0x4, 0x800, 0xff]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x5b337099, 0x6]}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000409) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000480)) r6 = syz_open_dev$audion(&(0x7f00000004c0)='/dev/audio#\x00', 0xfffffffffffeffff, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000500)={0x80000000, 0xff, 0x3ff, 0x4, 0xfff, 0x9}) r7 = syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x3, 0xa04a80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000680)=@sack_info={r8, 0x0, 0xfffffffc}, 0xc) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/capi/capi20ncci\x00', 0x644240, 0x0) ioctl$VIDIOC_G_SELECTION(r9, 0xc040565e, &(0x7f0000000700)={0x8, 0x101, 0x1, {0x8001, 0x4, 0x5, 0xd9e}}) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dsp\x00', 0x42, 0x0) setsockopt$RDS_GET_MR(r10, 0x114, 0x2, &(0x7f0000000800)={{&(0x7f0000000780)}, &(0x7f00000007c0), 0x607c5b87893d50c4}, 0x20) r11 = open$dir(&(0x7f0000000840)='./file0\x00', 0x101000, 0x44) getdents64(r11, &(0x7f0000000880)=""/226, 0xe2) listen(0xffffffffffffffff, 0x38000000) write$nbd(r0, &(0x7f0000000980)={0x67446698, 0x1, 0x3, 0x1, 0x2, "353dea04efc3bab5cf135685fcc3dda488fc07a15831247b0794fe5ed8d64fefa5e1dbaa10b9c658ba168ca2f7e8f3aea47c3d24d46100be9a6de94250bec8683efee709bd5e38e915da1be1d0d5d3e16230fef2b7d618182bea7a057d8f5242b7d9f54924cb882b725a7f8319595ddda2c4d2ebe80e4eff026e940a92c5208fa1f902397d1774f55e21cb8e32226c85e87b3087c33d451dc247939018f9b09567d8d30e5f4ce790b63f5b5990dce536edf3200a447a78d69fa168"}, 0xcb) r12 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) getsockopt$bt_BT_SNDMTU(r12, 0x112, 0xc, &(0x7f0000000a80)=0x112, &(0x7f0000000ac0)=0x2) r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vhost-net\x00', 0x2, 0x0) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) dup3(r13, r14, 0x100000) [ 316.362781][ T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 316.423313][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 316.543252][ T12] usb 2-1: config 0 has an invalid interface number: 159 but max is 0 [ 316.551622][ T12] usb 2-1: config 0 has no interface number 0 [ 316.558284][ T12] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 316.567709][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:57:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 316.597752][ T12] usb 2-1: config 0 descriptor?? [ 316.631944][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 316.753988][ T5] usb 3-1: config 118 has an invalid descriptor of length 82, skipping remainder of the config [ 316.765013][ T5] usb 3-1: config 118 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 316.778634][ T5] usb 3-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 316.787872][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.812375][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 316.818668][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 316.844865][ T5] hub 3-1:118.0: ignoring external hub [ 316.851695][ T5] cdc_wdm 3-1:118.0: skipping garbage [ 316.857868][ T5] cdc_wdm: probe of 3-1:118.0 failed with error -22 [ 316.867642][ T5] usbvision_probe: Hauppauge WinTv-USB found [ 316.873848][ T5] usbvision 3-1:118.0: interface 0 has 0 endpoints, but must have minimum 2 [ 317.004980][T11960] IPVS: ftp: loaded support on port[0] = 21 [ 317.197712][T11932] usb 3-1: USB disconnect, device number 3 [ 317.244736][T11960] chnl_net:caif_netlink_parms(): no params data found [ 317.340461][T11960] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.347841][T11960] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.356548][T11960] device bridge_slave_0 entered promiscuous mode [ 317.366180][T11960] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.373618][T11960] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.382737][T11960] device bridge_slave_1 entered promiscuous mode [ 317.416065][T11960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.429142][T11960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.462743][T11960] team0: Port device team_slave_0 added [ 317.472396][T11960] team0: Port device team_slave_1 added [ 317.532491][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 317.536814][T11960] device hsr_slave_0 entered promiscuous mode [ 317.539046][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 317.584033][T11960] device hsr_slave_1 entered promiscuous mode [ 317.632996][T11960] debugfs: Directory 'hsr0' with parent '/' already present! 17:57:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 317.772571][T11960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.794557][T11932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.803648][T11932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.817562][T11960] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.832678][T11932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.842173][T11932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.851103][T11932] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.858358][T11932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.868830][T11930] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 317.882044][T11932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.890717][T11932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.900737][T11932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.909792][T11932] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.917034][T11932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.933930][T11932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 317.942570][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 317.943045][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 317.962127][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.984045][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 317.995235][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.005180][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.014887][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.041580][T11960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.052208][T11960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.089618][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.098912][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.108294][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.117844][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.127040][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.148749][T11960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.165285][T11930] usb 3-1: Using ep0 maxpacket: 8 [ 318.168231][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.222504][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 318.228946][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 318.282614][T11930] usb 3-1: config 118 has an invalid descriptor of length 82, skipping remainder of the config [ 318.293714][T11930] usb 3-1: config 118 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.307057][T11930] usb 3-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 318.316323][T11930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.434795][T11930] hub 3-1:118.0: ignoring external hub [ 318.441573][T11930] cdc_wdm 3-1:118.0: skipping garbage [ 318.447181][T11930] cdc_wdm: probe of 3-1:118.0 failed with error -22 [ 318.456645][T11930] usbvision_probe: Hauppauge WinTv-USB found [ 318.462789][T11930] usbvision 3-1:118.0: interface 0 has 0 endpoints, but must have minimum 2 17:57:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 318.755321][ T5] usb 3-1: USB disconnect, device number 4 17:57:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 318.902518][ T12] CoreChips 2-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 318.913575][ T12] CoreChips 2-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 318.923423][ T12] CoreChips: probe of 2-1:0.159 failed with error -71 [ 318.983238][ T12] usb 2-1: USB disconnect, device number 8 17:57:31 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x81, 0x11, 0x8b, 0x20, 0xeb1a, 0xe361, 0x487e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4d, 0x0, 0x0, 0x9e, 0x9d, 0xee}}]}}]}}, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x0) pause() [ 319.713118][T11930] usb 2-1: new high-speed USB device number 9 using dummy_hcd 17:57:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 319.972690][T11930] usb 2-1: Using ep0 maxpacket: 32 [ 320.093640][T11930] usb 2-1: config 0 has an invalid interface number: 159 but max is 0 [ 320.102213][T11930] usb 2-1: config 0 has no interface number 0 [ 320.108424][T11930] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 320.117689][T11930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.176213][T11930] usb 2-1: config 0 descriptor?? [ 320.204366][T11932] usb 4-1: new high-speed USB device number 2 using dummy_hcd 17:57:32 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20c00000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8100}, 0x10) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/98, 0x62}], 0x1, 0xa5a) [ 320.462659][T11932] usb 4-1: Using ep0 maxpacket: 32 [ 320.495851][T11930] CoreChips: probe of 2-1:0.159 failed with error -71 [ 320.525772][T11930] usb 2-1: USB disconnect, device number 9 [ 320.613702][T11932] usb 4-1: config 0 has an invalid interface number: 77 but max is 0 [ 320.622290][T11932] usb 4-1: config 0 has no interface number 0 [ 320.803859][T11932] usb 4-1: New USB device found, idVendor=eb1a, idProduct=e361, bcdDevice=48.7e [ 320.813372][T11932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.821458][T11932] usb 4-1: Product: syz [ 320.825768][T11932] usb 4-1: Manufacturer: syz [ 320.830450][T11932] usb 4-1: SerialNumber: syz 17:57:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 320.883291][T11932] usb 4-1: config 0 descriptor?? [ 320.938075][T11932] dvb-usb: found a 'MSI Digivox Mini SL' in warm state. [ 320.945284][T11932] dvb-usb: bulk message failed: -22 (3/0) [ 320.972231][ C0] net_ratelimit: 14 callbacks suppressed [ 320.972252][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 320.983754][T11932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 320.985195][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 321.022758][T11932] dvbdev: DVB: registering new adapter (MSI Digivox Mini SL) [ 321.030401][T11932] usb 4-1: media controller created [ 321.129955][T11932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.220798][T11932] dvb-usb: bulk message failed: -22 (6/-30592) [ 321.227953][T11932] dvb-usb: bulk message failed: -22 (6/-30592) [ 321.234509][T11932] dvb-usb: no frontend was attached by 'MSI Digivox Mini SL' [ 321.293978][T11932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 321.318902][T11932] dvb-usb: schedule remote query interval to 150 msecs. [ 321.326196][T11932] dvb-usb: MSI Digivox Mini SL successfully initialized and connected. 17:57:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x3, @mcast1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004008}, 0x28804) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x68, r3, 0x2ff, 0x0, 0x0, {{0x1, 0x0, 0x3a1c}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x10, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x7, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x6) [ 321.456823][T11998] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 321.484543][T11930] dvb-usb: bulk message failed: -22 (1/-30591) [ 321.490785][T11930] dvb-usb: error while querying for an remote control event. [ 321.553665][T12000] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 321.632259][T11998] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 321.661956][T11930] dvb-usb: bulk message failed: -22 (1/-30591) [ 321.668297][T11930] dvb-usb: error while querying for an remote control event. [ 321.692732][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 321.699071][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 321.754208][T12000] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 321.842143][T11930] dvb-usb: bulk message failed: -22 (1/-30591) [ 321.848390][T11930] dvb-usb: error while querying for an remote control event. 17:57:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 322.013519][T11930] dvb-usb: bulk message failed: -22 (1/-30591) [ 322.019751][T11930] dvb-usb: error while querying for an remote control event. [ 322.102457][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 322.108812][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:57:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000005c0)=""/225, 0xe1}], 0x3, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="e9cfe3b6e0533b5f8b69e2bcb8734ce0", 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f0000000200)=""/115) tkill(r4, 0x1004000000013) write$P9_RGETLOCK(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="22000000370100021f000000000000000080000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x22) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 322.182000][T11930] dvb-usb: bulk message failed: -22 (1/-30591) [ 322.188296][T11930] dvb-usb: error while querying for an remote control event. [ 322.352502][T11930] dvb-usb: bulk message failed: -22 (1/-30591) [ 322.358745][T11930] dvb-usb: error while querying for an remote control event. [ 322.522786][T11930] dvb-usb: bulk message failed: -22 (1/-30591) [ 322.529715][T11930] dvb-usb: error while querying for an remote control event. [ 322.652321][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 322.658480][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 322.692012][T11930] dvb-usb: bulk message failed: -22 (1/-30591) [ 322.698359][T11930] dvb-usb: error while querying for an remote control event. 17:57:34 executing program 3: unshare(0x400) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000006ac0)=[{{0x0, 0xffffffffffffffd7, 0x0, 0x0, 0x0, 0x1b5}}], 0x1, 0x0, &(0x7f0000006bc0)) [ 322.865303][T11930] dvb-usb: bulk message failed: -22 (1/-30591) [ 322.871552][T11930] dvb-usb: error while querying for an remote control event. [ 322.930503][T11930] usb 4-1: USB disconnect, device number 2 17:57:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') io_destroy(0x0) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000000)=""/244, 0xfffffce7}], 0x1, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000180)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 323.052576][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 323.059010][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 323.075096][T11930] dvb-usb: MSI Digivox Mini SL successfully deinitialized and disconnected. 17:57:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) select(0x40, &(0x7f0000000200), 0x0, &(0x7f0000000280)={0x8, 0x80000000, 0x2, 0x0, 0x2}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000640)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 17:57:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc0046209, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0xc0046209, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0xc0046209, &(0x7f0000000000)) syz_usb_connect(0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRESOCT, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES32]], 0x0) [ 323.716466][T12034] debugfs: File '12033' in directory 'proc' already present! [ 323.734133][T12034] debugfs: File '12033' in directory 'proc' already present! 17:57:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 324.259311][T12041] debugfs: File '12033' in directory 'proc' already present! [ 324.272890][T12041] debugfs: File '12033' in directory 'proc' already present! 17:57:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) socket$packet(0x11, 0xa, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000005c0)=""/225, 0xe1}], 0x3, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="e9cfe3b6e0533b5f8b69e2bcb8734ce0", 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f0000000200)=""/115) tkill(r4, 0x1004000000013) write$P9_RGETLOCK(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="22000000370100021f000000000000000080000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x22) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:57:37 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000000000)="01df5c1436") socket$xdp(0x2c, 0x3, 0x0) 17:57:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc0046209, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0xc0046209, &(0x7f0000000000)) r3 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03631940", @ANYRES64=r3, @ANYBLOB="0963104003000000000000000800000d6300000000000000"], 0x32, 0x0, &(0x7f0000000080)="2c64fa2290def61467ba0c22ec04b9dac61e643a07e4bd779cb4644f5d1c0516e2ff551166756d2effeb7d329727379d0347"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000012c0)={0x2c, 0x0, &(0x7f0000000040)=[@enter_looper, @increfs={0x40046304, 0x2}, @dead_binder_done, @release={0x40046306, 0x2}, @free_buffer={0x40086303, r3}], 0xe, 0x0, &(0x7f0000001280)="6efb43438d78f70476abfbcd3292"}) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0xc0046209, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0xc0046209, &(0x7f0000000180)) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0xc0046209, &(0x7f0000000000)) r6 = syz_usb_connect(0x2, 0x7, &(0x7f0000002480)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="300a5aba8d9bf9af8690f1a11d80116a66abaaa143b28db5acfc77050feaadd77d87858f57d31085f71d83dac849517c5baab79aeaba4f21e64aa391246f94a909e3e8a9d48dc48b022b89ae4307e274b9becbe69ef49f5900cd49ce77daf0e9c254e9dece2f8015b5d7cb5906d48158c927cc37323507df7331bd578b2f8d13c565afe95e5a4ae4e2f66695d0135853d30852e1ed1294f6ee2b7366bf3d41ee6c7e58e3907615ce458cf4e3950d1009a6e5b33634e5c228a26e6651aa4f778cf582519bff312fa0c46fd2e59fc90ffe39e24be03d04c5cffd5a2d7d4af9fa5ace51b4ef88323dad6d839bc83d4504fa5c717682c3e701574f4ac47722bf2541fce2ed1bba50fb8cceb1dd0aa65857cfbd9b2036520192fb81acd5e6de85a577f79ddb354a52f37c2b9972675dd6cc2aaac520ec6d7383772e08960529c3ff07d40936a124ca0ef08f44a63f60af3d393e7837fe4f2e37952b6da967adcaa950e4cba9db8f1be1d6869a40bb637cd799543639b0164dab40b0b956ccdbb0fdbd3a946dc6e323636568f8d1c105ebf3dcee5e27e0ab7e5595dfb11e12a7212a9233f0b0ee1f2aebc1e118fa5526498a1b3a7c4521178789cfecd5fe769f55c33606fa918c832dd20990df5c2134084251faa2a962ede19b300e8994fae676eb28fd9950ff40745f643cfa00c3b971f5899d412de76ea77d9ecd1c55fe971646c2b89d8d09e454086837c61e5470bbdaff9ee5433667156de29bb3b0d8d38592e408932dce8db10ec5a1779566455e7fc173431a93da877bfe8f6374f63bbd0980e06400b955658c6d9b281e03291eccca4113adde9e6c1e4721999f61cdfba8edbfcf6ad81ccf3fa1fcd6184aaa5f575ffde042aeea7ac8b9540e1fd012368c5c9171ba13785f9f289b5a71f0b796ff1fa48437ffeb52b80d6f4be07a9692b07fde1ae8d524b260ca4e9d7c04b09bc0839201397e66f91bd4833602d82355caa0d112479f27eb08e19813a136a8d45da3aa38b8e818b2bbe6cef68e457f8e522634f0f419bb7f9438a7e9dc76e7f90be116280cb6be7eb64dd0bb52e4542f87c4cf2a35107d7cb88645b3cf8c327cd86e642703deb434cc955db917ba54a1ea7bc30db829d631246b1b7dfe9115d84a62e163c1ab1887ab6994f22c84ef779c2c2ef6dee2d1208c755a00daf6b922be60cf2a2878db148bce697e1639be791a5898f2f0b785f6c4ee04bdbad5b3ce8da46f6ba450b7a174b6999ab24d95fcdb8a8e3478dc74def6f452c7757da6df603622b25d2887fcd7ce3032609ab4b69dd428da265bc9fa434751168b412ad3cbeef7151837035b488c37f8052ace5aeca44f3cdcc89a47d0a16ec4f16554fbef1ed70ac25decd32cb89befe07de6a692973717fe9b0b7c1823df9fb89331726a41855bd1b3bc899618a122298397128b3fd2c7172ce1aa3f9766ca10792edf4bc240144c4c97064ba45c44296fe2f6b2df68f6b3860b873d5d74badb4cc296f3e41d6d70a50a716233f5b077e507010148fb3263011f78ebe86494b6e5f5e4003a6d5bde4c8a4ebf5a91b0ff710cffe577fd5c340dcde47cc29488d286f59878b83ddc2958cdf2d95fa1b5958e5a46b296379d3a3202c667162e2e00f7ab14be4fcda8c75363f0dd8558c6bdb13baf5f409b236bb38e146973f74f3689b98080dfe8d5b9c4c8e84164e1f077583cd3c08bbd62ee340642fd44624f42af8a26b9e98592eac642620125af8e94039ce058818f911e3abd8cfbc7130ce09713e6c5371c6e16e9edc489886ec01a4e25e1f2495b6d30f5661d53e5b61e26da1f58951d400b457d26fd7fc3ce69a234cff87f1cd487b37438a0e8e4b8fe7ad24440995c1721decc38c66d0c5302005bdb15bd27d425aca3a64361664ad1265fde13e2187008e82180d6c6bca3b6780b157da8d064a36b5bc842d5040d613d32eee56e499e003be942997ad97cac422627df143cc5f605ff8af15df5dca046aa66a5a894faf84853baad30fb095ab3ef6e4840ec46ab8b9874f065388632bd76d4fa102e6bc49b47c719e2d3f10d89f402d3d819d2d98c3ebb8cd646219cc62b27ca7730f762b2a5d67bf997de149dd7ac66b1471dfe6e5fa5385753ec250c3be3fd177a33edbaa536945a2cfa74a7944eb1bbed1242cae0e3300bdb9efa014522f1d0ea5e73a43451afa98addbb48f5350cfce55a1cd3dfc5f79fee88bfcff72fbf17562696e4a048645984d3987c6178d7d7d17415bcea4851ea4cac0c9531cd46564282a6d9692d3c5c02887455be716952b5df8834caccbf6d2d86b330a7ea603fe8e4b1ef036214e6324936d01f28a0c4d73f5287477080f6ee9457f904bd1ac431a9369b0f71ec2553a554854eac68eda4c65efa68cca6959490c040a9d46f82ae4824f815e7334af7e885a3ca76b9720e8ba0d2682b43dc775bc4937e8d7b8b16f5fb31593095ec77fbb72a2171d960aecd3195b56b3e9127c5df0b49eb6ab57ef0e552d24f82bdaf1aa9d748eb423db39d9fa148baa008517b30fd6015cf90a4c2cb0793c82495edcb16533d18e37c8e4c4ca8ab774ef40cda206bd21beef5827744e31642c61c4f7d1cc36bd88740a7e845d1a12c442c6c90b3308f483d0ef43f8bffaaaed2d9590cc65bbb13bf8fb1afb39b408780221220ae4f7416078792c025065bc84b833c9629e8ff9f6a7d136f982628a34af99e31c408155fc2fddbf81e1ebf0edd8c4af194b2d4197a41995756d94153d2526f24ccb463618f805eadaf7f7a3e9262394b08cb56267c3fe651b380c157bd37585826b892afe403100ec6891402a61d58249eebba5ea1b7510cfbfabb4b8e8ac917416191c71a6e5ba716854f639b399b8278cf7a912c57fb2a7b7dc6c2b5ba44e2d820ab42fb71a97739e668619c74f95f05240033ede8627d4f0ac3209f6bb78992417a07901374f1fef27f2671e5d32077f71738cc361380e5a3884e9a1a08748958a668ef027495a2ea0836877026e138487e41042b2036096be2dabaad77530d0c7dace4a9ee2553e8ecf0310bffce69a3848113ece1af9405cb5267390bfc662018beb6c1a4a954386e8cfccecc37ad2581ec379372f0b4086711f82a385786c5801b6fbcc43f31bf067eafd5dbe4798b25cdb3445fe7e27a4c3aacc0e9ed7bafb5b76565239841b7e2d63eef818e2945e13373bc4263950ef994f894b1b01ea2a8d522d36187a80b6ba871e12f1e9d8f0ef9b5be34b9a27e51f6f930c95bc222a3e913da9f20239165f90daca3c986a39765b509fc4a49a112ac3d14cfbdf283b17bbe04de5daea93a580c16666eb3b3b354683fe1a686b45dbdb899abb22cc0e382ee4b27f8d2b8f30b0c4935b24bd143e9a6a29f1336eaa4a83ed9ec56de985d4dd1a8eeeb3d9c340770a7788ea64b25602972f63bcdfe603be43de520393cbf727795642692aa47926eb6b627bfd1f89fff5da9e97af665b2b8695f80683d6ebffa2bd3fdf05eb739ea5137ffb242d940aa216c78db724787a1c1f68a33eea12d55460485ed3d4297bde85612d57b4f203479d5bbbe695a2dcfdd2045973ea5a3304fb46181551cd72143854563f2bc2217bc2ab761ea5e3efbe106fcd201f19d79136be3391cbde458327bd22618482028fa2c53a1e4e822316505c98118527c68c518c3d35da3b8ca96386ea8ade252330f11d9586af5c9e2d52ea8d0447bcdc2c4e7f72bd617f9f7531b2482a65110daea75a276997aa8c5502c0ed3f7143e5a501ad8fa9e4c411c3838f17adfcb4b3634253ef501bcd37227300bcf2153b5749e63f42d4d25d121b75e5c1751758ba98a154aca1bf8e2ad772b407f6639e8a174f34cd4822dec23df4a97c8e67e72ea1a62dd68d33971e662a5450c30efbdea9946c060c8627892a1905f2db76fb41937f6988ab98fa9d1c8e4bc32ed3906e1d8222af42cf657fc9c14ce6b182add37a3406869e8671402599a0c0be40e2cdfdcfb5c7767690e13d6c58087f7cea5e1d9fa4d5d855769a4421ff782dccfae854c926d0b83ba2712b2f42f0e634bc638ab29aed1cdf29c4d7b475611518205259497bae4c41366ab12f3cb37de3e308cf77d89767dcc1029c0afde46258f64eb7a0a9833dc928855681ab2b16a5cc948579a637a0c4b8a55ecf62a752b5b8a501591d4e73059c9e9d995e4be8376bbf55544eaa98b0add6acd6a8a1cfbd363d6d083e802bd26052ce32a7612c34fe08a41882937782b6cc60f35293026344f1ad906a0799cdaa9185ff04c9031901930e0d414bfc00347b677c1c99ced2ae74a7e5d8942d24cfd5f88f0a48e2b8d39648bc19d2059dfafc15c1c7d0bd9d824080ba030c72122526639594d4fe525b94d4b54d6cebeef0ad00a60f86f292524ece55ee88b9f1d1452fb54f472d1fd04275b0851d766b18a0433f78b6db4067c15ec0caa03eda513e0d3c1aa49cd749ac1504bf8a443020e48b20ec5cc297bb844f8dab7a633622542a593d6f78f46b85e17ceac7d1cffc3ee5b319cca04e7c58f601a6dc11ec415208e5b9fd8587e8e9a61eeea3fddfa3b9e188165293950387fdc4c6fc0c085013186f1ec316d0cae4e4c72fa817d66ec5558f1fd6e2702a930a51a82c783ba48a5fe01b009fb716b834017fca136704dd1496ac06de3e705b794d50161e49125fe14d3d91a1179d3715fc827a43bb4f9758ac8700bc8132ead57d7961f4e46028e0cf4e563894bc33f6be80903009208b40b7f657d3ea31052940bb49e313681ab606a8eb0dfdd3e5be27ee9a11a49efdd37b887e2acd8dedc4a85fc7ecdbdae26190162a498913e1f555576936a02a76d7bdfcd8f57fa5376bdacc25f0d5116e50d3296bd9bce5c923e46383dfd9d0667629c15b2c73dcb05f185d92f38431175e28a40ff15ca1f70b90eec3bb4bb129167e56cf05b5da423311bd3ae5244a64e91e3b943676add2ffd65c3ed8dd1afc2e0643812c0d1f72859e5a6d61305bc54700aa368cbf14a01ca09948e130d10359b2977dc6586c1801514ff2dfaff5927662d2943e39fdc5afb7f7f8c6bc2fcf2699fefd4ee754fa3f547cae5cb40e0dd9f01da345aa89e7035800e0e4bba0c11c336240c98d9669c450b62a6deaaab68a5570f970e58d3f126a8ca75a278ecf86c29067bdac627bdb86bc0bbed18a977cedc47b26fe53c699ee7a6567e76eb3842960c3b7dbd9a49bf861d97b5bc69e1c6c92fb3b410479fca947b814f1821204506a1bfe2bfba42f127d1d85a12f002bb560fe7b0cb65270d135d3fe1c248456d6ef8f50691e00c7c6312dae0c89be552122e3964f51ef46f29c016b1608c585c57b0e2bf20aed50ab40bf64fb2145455b65cc85879300ff60562c3d5d7f318860cd4a7509081ab1b38cab253282e9e903b01cf5af421236e0053dd27369e71a8cc5663941c1fb8a76b3f40126df382e455d05de19cc39c16efc9474cb79638ce9d70013604d9438ab748ff07935f0b137440207d035da6b441ac99162c7bf5d266c5f37e130f68c72709af07c77701cc454418f4ad378785e00ffc6fe78d343f3fe70fc69e9293413407f49c5f0b8cff28fa968740fc0531c9891e2abe7174602c466e56c463dbaa7f33acb7d0c3818ad4b7809d211a9cc1dac8eb2149ef27bb4339bbbf8ea8afac0ac02bfd90e86146d012908644b03662f3f77ddc883517c520a18634b86cdba13289cd67c8459a8bf3154bb11cb2ed1c42f20894561a76f16a692305247e2195cf359b06e74dd5a2c70c000000000000007b65382d900f9281376490ad766b05868ff6baeee4045fe1df3c7ff6ca84ae34b390b00cd36a952afc17df3bdb267614c7e71f073993afe0c8f0b6fe9ddfeaae8ac06a9281b00366d392f943fe33490062c732c1baf74db6614bc7", @ANYRESOCT=0x0, @ANYBLOB="07747f6d65b99583fc2b5d2cff17523f42afa621ce8430556110becd714b1c1e6b58cd11c12fd4e71c68912fd8c41c81bdc5dd4d090c064272063bf38005a44c1f465ba0d9c8fb348a50a5a63f8373bbb46ea7997053e222fcaaa8925b6e0be746b4757103bae0a0bc1a328d44512ccf50c5db3c50c42d351a7341b8640ec814504352aea871cfc22334926feedd4211946f67c8d62617cc70c355c629b6898475f5d524a4c930aa91509146c5ded3078195b504cbc1be0302f6", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES64], @ANYRES32=r0, @ANYRES32, @ANYRES16, @ANYRES64, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYPTR64, @ANYRES32=0x0, @ANYRES64=r1, @ANYPTR, @ANYPTR, @ANYRESDEC, @ANYPTR64], @ANYRES64], @ANYRES32=r1, @ANYRES32=r5], 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200000, 0x20) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f00000002c0)=0x10) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r8 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0xc0046209, &(0x7f0000000000)) ftruncate(r8, 0x1) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bind$tipc(r10, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x43, 0x2}, 0x4}}, 0x10) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000000)) [ 325.314695][T12054] debugfs: File '12050' in directory 'proc' already present! 17:57:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) socket$packet(0x11, 0xa, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 325.356495][T12054] debugfs: File '12050' in directory 'proc' already present! 17:57:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1f, 0x7, 0x400000, 0x9c1, 0x9, 0x7fffffff, 0x6e}}, 0x50) syz_open_dev$video(&(0x7f0000000500)='/dev/video#\x00', 0x5, 0x10000) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x1007, 0x6, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x486001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000240)) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000000040)=0x8001) [ 325.430661][T12060] debugfs: File '12050' in directory 'proc' already present! [ 325.451476][T12060] debugfs: File '12050' in directory 'proc' already present! [ 325.492654][T12060] debugfs: File '12050' in directory 'proc' already present! 17:57:37 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @remote, 0x4}, 0x1c) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9ba, 0x200206) fcntl$lock(r1, 0x6, &(0x7f00000000c0)={0x1, 0x2, 0x4, 0x2, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x8, @local, 0x1}}, [0xd0, 0x0, 0x7ff, 0x1, 0x7, 0xb4, 0x6, 0x7000000, 0x1, 0x9, 0x0, 0x3, 0xff, 0x3, 0x1]}, &(0x7f0000000200)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r2, 0x5fd}, 0x8) r3 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x5, 0x10800) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x5}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000340)={r4, 0x5, 0x30}, 0xc) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x22080800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xac, 0x0, 0xb10, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500)='/dev/zero\x00', 0x65000, 0x0) openat$cgroup_type(r5, &(0x7f0000000540)='cgroup.type\x00', 0x2, 0x0) r6 = creat(&(0x7f0000000580)='./file0\x00', 0x40) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f00000005c0)={0xc, {0x0, 0xa24, 0x8000, 0x7fff}, {0x7, 0x5, 0xe59, 0x6}, {0x2, 0x3}}) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)={&(0x7f0000000600)='./file0\x00', 0x0, 0x8}, 0x10) fcntl$getownex(r7, 0x10, &(0x7f0000000680)={0x0, 0x0}) r9 = syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x2, 0x800) sendto$inet6(r9, &(0x7f0000000700)="18effc69e7ff3e4248e6c38cd8bd11b07c1b48f55fc7655243ce4d09431c62c55dd6711fbb333950548c81f358833e33503cab2282a23a939f8dbc2307932a8b4bf470aff5f7e3ed", 0x48, 0x0, &(0x7f0000000780)={0xa, 0x4e23, 0x8001, @loopback, 0x80000000}, 0x1c) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000007c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000800)=@sack_info={0x0, 0x101, 0x9f}, &(0x7f0000000840)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000880)=@assoc_value={r10, 0x6396775f}, &(0x7f00000008c0)=0x8) r11 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000900)='/dev/mISDNtimer\x00', 0x80000, 0x0) write$binfmt_script(r11, &(0x7f0000000940)={'#! ', './file0', [{0x20, '/dev/null\x00'}, {0x20, '*'}, {0x20, '/dev/admmidi#\x00'}, {}, {0x20, 'cgroup.type\x00'}, {0x20, 'cgroup.type\x00'}, {0x20, 'vmnet1ppp0cgroup\xe3proc*,\x00'}, {}, {}, {0x20, '@^}usereth0'}]}, 0x69) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000009c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000a00)='TRUE', 0x4, 0x0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000a40)=0xf38) ioctl$RTC_VL_CLR(r0, 0x7014) lseek(0xffffffffffffffff, 0x0, 0x3) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000a80)=r8) r12 = syz_open_dev$media(&(0x7f0000000ac0)='/dev/media#\x00', 0x101, 0x101080) ioctl$PPPIOCGUNIT(r12, 0x80047456, &(0x7f0000000b00)) [ 326.262542][ C1] net_ratelimit: 10 callbacks suppressed [ 326.262564][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 326.274759][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 326.389798][T12068] IPVS: ftp: loaded support on port[0] = 21 17:57:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) socket$packet(0x11, 0xa, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 326.605149][T12068] chnl_net:caif_netlink_parms(): no params data found [ 326.757846][T12068] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.765485][T12068] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.774995][T12068] device bridge_slave_0 entered promiscuous mode [ 326.813082][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 326.819535][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 326.840786][T12068] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.848116][T12068] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.857021][T12068] device bridge_slave_1 entered promiscuous mode [ 326.949666][T12068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.989591][T12068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.097090][T12068] team0: Port device team_slave_0 added [ 327.132652][T12068] team0: Port device team_slave_1 added [ 327.212370][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 327.218547][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 327.276833][T12068] device hsr_slave_0 entered promiscuous mode [ 327.312764][T12068] device hsr_slave_1 entered promiscuous mode [ 327.353328][T12068] debugfs: Directory 'hsr0' with parent '/' already present! [ 327.409191][T12068] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.416510][T12068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.424403][T12068] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.431615][T12068] bridge0: port 1(bridge_slave_0) entered forwarding state 17:57:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 327.587241][T12068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.613317][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.628260][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.662973][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 327.738688][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.747302][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.765527][T12068] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.820406][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.830181][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.839207][T11930] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.846436][T11930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.932513][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 327.938775][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 327.946426][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.956589][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.965628][T11930] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.972959][T11930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.981413][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.991379][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.001388][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.011101][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.065338][T12068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.076377][T12068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.196245][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.205413][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.215328][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.225538][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.234718][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.244459][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.253536][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.282602][T12068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.332639][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 328.339016][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:57:40 executing program 1: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x0, 0x4, {0x2, "de95"}}, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000000c0)={0xff, 0x9, 0x1, 0x2, 0x82}) [ 328.467587][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 17:57:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_SECCOMP(0x15) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x280940, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x0) linkat(r2, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x400) fcntl$dupfd(r0, 0x0, r0) fallocate(r1, 0x8, 0x4e, 0x9) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) unshare(0x20400) ioctl$int_in(r3, 0x80000000005008, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000021e000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000035a000/0x3000)=nil) 17:57:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 328.820401][T11930] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 328.917308][T12087] IPVS: ftp: loaded support on port[0] = 21 17:57:41 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0x8}}, 0x20) r1 = accept(r0, &(0x7f00000001c0)=@hci, &(0x7f0000000000)=0x80) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000240)=0x4, 0x4) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='security.capability\x00', &(0x7f0000000880)=@v2={0x2000000, [{0x100, 0x7f}, {0x200, 0x50}]}, 0x14, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) pkey_alloc(0x0, 0x1) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000400)={"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"}) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x7fff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=0x10d) sysfs$2(0x2, 0x100, &(0x7f0000000140)=""/74) unshare(0x40000000) [ 329.118227][T12092] IPVS: ftp: loaded support on port[0] = 21 [ 329.577939][T12088] IPVS: ftp: loaded support on port[0] = 21 [ 329.603710][T11930] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 329.611956][T11930] usb 2-1: config 0 has no interface number 0 [ 329.618153][T11930] usb 2-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 329.629272][T11930] usb 2-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping 17:57:42 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0x8}}, 0x20) r1 = accept(r0, &(0x7f00000001c0)=@hci, &(0x7f0000000000)=0x80) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000240)=0x4, 0x4) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='security.capability\x00', &(0x7f0000000880)=@v2={0x2000000, [{0x100, 0x7f}, {0x200, 0x50}]}, 0x14, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) pkey_alloc(0x0, 0x1) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000400)={"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"}) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x7fff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=0x10d) sysfs$2(0x2, 0x100, &(0x7f0000000140)=""/74) unshare(0x40000000) [ 330.165411][T11930] usb 2-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 330.174659][T11930] usb 2-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 330.182889][T11930] usb 2-1: Manufacturer: syz 17:57:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 330.236409][T11930] usb 2-1: config 0 descriptor?? [ 330.287394][T11930] usb 2-1: BUG? WUSB host has no security descriptors [ 330.360426][T12102] IPVS: ftp: loaded support on port[0] = 21 [ 330.429187][T11930] hwa-hc 2-1:0.66: Wireless USB HWA host controller [ 330.437933][T11930] hwa-hc 2-1:0.66: new USB bus registered, assigned bus number 41 [ 330.819250][T11930] hwa-hc 2-1:0.66: error waiting for HC to reset: -1780612608 [ 330.826919][T11930] hwa-hc 2-1:0.66: can't setup: -1780612608 [ 330.833189][T11930] hwa-hc 2-1:0.66: USB bus 41 deregistered [ 330.897406][T11930] hwa-hc 2-1:0.66: Cannot add HCD: -1780612608 [ 330.937825][T11930] hwa-hc: probe of 2-1:0.66 failed with error -1780612608 17:57:43 executing program 4: syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2) r0 = syz_open_dev$cec(0x0, 0x2, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007041dfffd946f6105000a0700000000000b0028080008001e4004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) [ 331.046355][ T53] usb 2-1: USB disconnect, device number 10 [ 331.211243][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 331.372666][ C0] net_ratelimit: 20 callbacks suppressed [ 331.372688][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 331.385028][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:57:43 executing program 4: r0 = socket$inet6(0xa, 0x2000000080803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x4000, 0x191) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000000c0)=0xfff) read$hidraw(r1, &(0x7f0000000200)=""/239, 0xef) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffd, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 17:57:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 331.865967][T11930] usb 2-1: new high-speed USB device number 11 using dummy_hcd 17:57:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RLOCK(r4, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x1}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 17:57:44 executing program 4: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300030000006799a33200006d4c369f000000000000000000002000010006af8e632658c37e000003000000000000000000000d7f630328d8030000004400000100000003000000"], 0x58) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 332.092259][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 332.098539][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 332.272515][T11930] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 332.280782][T11930] usb 2-1: config 0 has no interface number 0 [ 332.287213][T11930] usb 2-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 332.298671][T11930] usb 2-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping 17:57:44 executing program 4: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300030000006799a33200006d4c369f000000000000000000002000010006af8e632658c37e000003000000000000000000000d7f630328d8030000004400000100000003000000"], 0x58) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 332.403794][T11930] usb 2-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 332.413427][T11930] usb 2-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 332.421593][T11930] usb 2-1: Manufacturer: syz [ 332.492349][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 332.498593][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 332.539965][T11930] usb 2-1: config 0 descriptor?? [ 332.754497][T11930] usb 2-1: can't set config #0, error -71 [ 332.779651][T11930] usb 2-1: USB disconnect, device number 11 [ 332.812390][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 332.818672][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:57:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0xc0046209, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0xc0046209, &(0x7f0000000240)={0x73622a85, 0x2100, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:57:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xcc, 0x0, 0x305, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57fb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8101}, 0x20040004) getsockopt$sock_buf(r0, 0x1, 0x100000003f, 0x0, &(0x7f00000000c0)=0xbc) [ 332.933073][T12139] debugfs: File '12138' in directory 'proc' already present! [ 332.963356][T12139] debugfs: File '12138' in directory 'proc' already present! 17:57:45 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001a0007041dfffd946f61050002000300fe0200000001080008000200ac14140e", 0x24}], 0x1}, 0x0) [ 333.052567][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 333.058899][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:57:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="f800000016001703000000000000000000000000000000001b00000000000000000000020000000000000000000000000000fa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00"/176], 0xf8}}, 0x0) 17:57:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0xc0046209, &(0x7f0000000000)) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) r4 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000000c0)={0x0, r4}) read(r1, 0x0, 0x47c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000027c0)={@multicast1, @multicast1, 0x0}, &(0x7f0000002800)=0xc) sendto(r0, &(0x7f0000000300)="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", 0x1000, 0x0, &(0x7f0000002840)=@ll={0x11, 0x2, r5, 0x1, 0x71, 0x6, @broadcast}, 0x80) 17:57:45 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x44800) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0), 0xc, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000000000000007410000004c00180000000062726f6164636173742d010000000000000000000000000021000000000000000000000000000000000000000000007800"/98], 0x68}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x504}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000280)=""/99, 0x63}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 17:57:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000)) socket$bt_hidp(0x1f, 0x3, 0x6) syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5}, [@mdlm_detail={0x4}]}}}]}}]}}, 0x0) [ 333.368852][T12153] binder: 12152:12153 ioctl 40086602 20000000 returned -22 [ 333.446764][T12159] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! 17:57:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x8, 0x21}, {0x20}]}, 0x14, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x10a280, 0x0) bind$packet(r2, &(0x7f0000000140)={0x11, 0x5, r1, 0x1, 0x81, 0x6, @local}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000015c0)=ANY=[@ANYBLOB="2c0000001800311d0000000000000000020000000000fe020200000008000400", @ANYRES32=r1, @ANYBLOB="08000700ac141408"], 0x2c}}, 0x0) 17:57:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r2, r3, 0x0) ioctl$KVM_SET_SREGS(r4, 0x8400ae8e, &(0x7f0000000140)) dup2(r5, r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='/dev/kvm\x00'}, 0x30) r7 = gettid() tkill(r7, 0x1004000000013) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) kcmp(r6, r7, 0x2, r8, 0xffffffffffffffff) [ 333.832131][ T12] usb 3-1: new high-speed USB device number 5 using dummy_hcd 17:57:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000000)=""/39, 0x27}, &(0x7f0000000080), 0x5}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e21, 0x0, @loopback}}}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x6, @local}}}, 0x84) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x38}}, 0x0) [ 334.082577][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 334.223243][ T12] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 17:57:46 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc100) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00da0000000000000000ff0700004000000000000000000000551d1acb000040"], 0x20) [ 334.393122][ T12] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.403290][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.411361][ T12] usb 3-1: Product: syz [ 334.415706][ T12] usb 3-1: Manufacturer: syz [ 334.420374][ T12] usb 3-1: SerialNumber: syz 17:57:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 334.679489][T12190] sctp: [Deprecated]: syz-executor.4 (pid 12190) Use of int in max_burst socket option. [ 334.679489][T12190] Use struct sctp_assoc_value instead 17:57:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 334.750007][T12191] sctp: [Deprecated]: syz-executor.4 (pid 12191) Use of int in max_burst socket option. [ 334.750007][T12191] Use struct sctp_assoc_value instead [ 334.767227][ T12] usb 3-1: bad CDC descriptors [ 334.788702][ T12] usb 3-1: USB disconnect, device number 5 17:57:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x200002) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x8200) r1 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x6, 0xfc, 0x80, 0x8}, 0x6) sendmsg$nl_route(r0, &(0x7f00000087c0)={0x0, 0x0, &(0x7f0000008780)={&(0x7f00000086c0)=ANY=[@ANYBLOB="4000000010000505000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e0000100002000400120008000e0000000000"], 0x40}}, 0x0) 17:57:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 335.140923][T12203] sctp: [Deprecated]: syz-executor.4 (pid 12203) Use of int in max_burst socket option. [ 335.140923][T12203] Use struct sctp_assoc_value instead [ 335.149529][T12201] netlink: 'syz-executor.1': attribute type 14 has an invalid length. 17:57:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:57:47 executing program 1: shmdt(0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x0, "70f3d0f554c3e3aa88d031bb057b60075d49df64f2b8ed24eb386634d481ae36eb76dfd2ae8d8a83ed4986c1958d6e046c005a9fa4b0d97d3e61090a042baf51f8499ad75e0cfb2b02922406e6b0580e"}, 0xd8) [ 335.412022][T12211] sctp: [Deprecated]: syz-executor.4 (pid 12211) Use of int in max_burst socket option. [ 335.412022][T12211] Use struct sctp_assoc_value instead [ 335.513130][ T12] usb 3-1: new high-speed USB device number 6 using dummy_hcd 17:57:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r2, &(0x7f00001cb000)={0x0, 0x0, &(0x7f0000f4a000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002a00110280e17c2accc06fcaba709b5b87638651f2109895ab8df60000188b11147c43354f9a000021818fb4c0703fdf61370000"], 0x14}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x11a, 0xffffffffffffff30) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 17:57:47 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x6, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local, 'vxcan1\x00'}}, 0x1e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000280)={0x18, 0x0, {0x4, @remote, 'erspan0\x00'}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000100)={'bond0\x00', r3}) r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xed, 0x40000) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x420080}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x81c, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x20}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x26006000}, 0x80) 17:57:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 335.856870][T12220] sctp: [Deprecated]: syz-executor.4 (pid 12220) Use of int in max_burst socket option. [ 335.856870][T12220] Use struct sctp_assoc_value instead [ 335.904500][T12222] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 336.662466][ C1] net_ratelimit: 14 callbacks suppressed [ 336.662488][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 336.674652][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:57:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x1000, 0x4) syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@broadcast, @random="96a58c5eeec0", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/209) 17:57:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:57:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x80, 0x8, 0x1, 0x40}, 0x8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r3, 0x0, 0x4004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) accept$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000140)={{0x4, 0x0, @identifier="89566317818895f412ff92d23e621c09"}}) r6 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'ifb0\x00'}, 0x18) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xfeac, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000004303fadb780010000118004ea9bd0836176bfa164743841200000000000000000000000409adee04e622aaae75e082688c4c97e8", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b298fca675cf1985a4b33911bcbca77642b0151edd214d0cfe5f2832620387f52b0520cdb002902de388bc74d532631e40d9503f0897b73cbc19f20e514461a1f4a2bde01e7388aa6b2bf616b8d491a04abca4376181b1d27bdad31cfdbe298d34ff959e250383e37f3c306724d907ee4dc5b20ba6f129dcc8ac9ee63604bc25bffa79a5f402c16ba92671e17c63644ecc02a25e52e"], 0x30}}, 0x0) 17:57:48 executing program 2: syz_usb_connect(0x0, 0x3e5, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080dd2715e60f0098b83c0000000109021200000000040009000000007e0522005a5f209041263a29984511044a976040a3acc3313b68370ce834"], 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000000080)=""/248, 0xf8) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc0046209, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe1de5c0313dc873d, 0x30, r2, 0x0) [ 336.854747][T12235] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:57:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 336.972565][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 336.978926][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:57:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r0, r0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:57:49 executing program 3: r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000000837fe618a520a481a0001090224000100000000090400000903000000092100000001222200090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x228001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00740000007400bed42a07000000789bdd5546d3b901a20824ec95110219f2dae0d217"], 0x0, 0x0, 0x0, 0x0}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x5) [ 337.121977][T11932] usb 3-1: new high-speed USB device number 7 using dummy_hcd 17:57:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r0, r0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 337.212509][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 337.218849][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:57:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r0, r0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 337.432016][T11932] usb 3-1: device descriptor read/64, error 18 17:57:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 337.472880][T11750] usb 4-1: new high-speed USB device number 3 using dummy_hcd 17:57:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 337.612481][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 337.618827][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:57:49 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0x54, 0x0, 0x0, 0x0, 0x5, 0x81, 0x9, 0x0, 0x5, 0x3, 0x0, 0x3, 0x6, 0x0, &(0x7f0000000780)=""/4096, 0x6}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 337.712215][T11750] usb 4-1: Using ep0 maxpacket: 8 17:57:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 337.832233][T11750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.843484][T11750] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 337.852590][T11932] usb 3-1: device descriptor read/64, error 18 [ 337.982556][T11750] usb 4-1: New USB device found, idVendor=fe37, idProduct=8a61, bcdDevice= a.52 [ 337.991759][T11750] usb 4-1: New USB device strings: Mfr=72, Product=26, SerialNumber=0 [ 338.000127][T11750] usb 4-1: Product: syz [ 338.004656][T11750] usb 4-1: Manufacturer: syz 17:57:50 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 338.051190][T11750] usb 4-1: config 0 descriptor?? [ 338.142302][T11932] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 338.334305][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 338.340548][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 338.442701][T11932] usb 3-1: device descriptor read/64, error 18 [ 338.526517][T11750] hid-generic 0003:FE37:8A61.0001: unknown main item tag 0x0 [ 338.534361][T11750] hid-generic 0003:FE37:8A61.0001: unknown main item tag 0x0 [ 338.542039][T11750] hid-generic 0003:FE37:8A61.0001: unbalanced collection at end of report description [ 338.552295][T11750] hid-generic: probe of 0003:FE37:8A61.0001 failed with error -22 [ 338.728593][T11750] usb 4-1: USB disconnect, device number 3 [ 338.852138][T11932] usb 3-1: device descriptor read/64, error 18 [ 338.974045][T11932] usb usb3-port1: attempt power cycle [ 339.502026][T11930] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 339.692017][T11932] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 339.741968][T11930] usb 4-1: Using ep0 maxpacket: 8 17:57:51 executing program 2: r0 = syz_usb_connect(0x0, 0x66, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x78, 0x3a, 0x10, 0x557, 0x2008, 0x2551, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x0, 0x3, 0xf6, 0xe5, 0x30, 0x0, [], [{{0x9, 0x5, 0x8d, 0x1f}}, {{0x9, 0x5, 0x5, 0x2}}, {{0x9, 0x5, 0x8f, 0x1e}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000011c0)={0x1c, &(0x7f0000000100), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, 0x0, 0x0}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x0, 0x0, 0x1, '\r'}, 0x0, 0x0}) 17:57:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc100) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00007c0a182a12bfed200b0000000000000000000003040200"/41], 0x20) 17:57:51 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0xd314bd2f2d9d8005}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x810000, 0x0) finit_module(r2, &(0x7f0000000140)='\x00', 0x0) io_setup(0x3ff, &(0x7f0000000180)=0x0) r4 = timerfd_create(0x6, 0xc93733490710d5f7) io_cancel(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4289f2012a91ab4e, 0x5, r4, &(0x7f00000001c0)='\\', 0x1, 0x8, 0x0, 0x3}, &(0x7f0000000240)) r5 = accept(0xffffffffffffffff, &(0x7f0000000280)=@alg, &(0x7f0000000300)=0x80) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000780)={0x0, 0x0}) fstat(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000840)=[0xffffffffffffffff, 0xee01]) sendmsg$unix(r5, &(0x7f00000008c0)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000003c0)="dda1e9f13f8aac8a7f4b0e64ed4ad27b651c36d19e983af75ab05306b92e70038bda1dfd53c8f19e7b0820ee3790f08a736625eef000ce0145fa6781bc51bfb3843366bc1a5719a55341fa6dfadffe159fc1c2919a90b13b695114a791", 0x5d}, {&(0x7f0000000440)="7ec45ffc237b9f3549e22d1be1ac06940211f54bd6bdcc5ad4340a671cef2f086c9fd6f2000df4d68f84b40a142442b6646d83070ca21fb845f4b582c587f34055fa5719adf827712db0eaace5ae7df6de58767a0696b4b9b723859102b37fbd2349142be26aa3e660cec902198042032c9583374baf8c4203bbe9e51bc96464895b9f4691090f0b113453b2ba093aecb543a20ba055d4a8ead6551e04236fc6e360aa58210089462626325c936cc302", 0xb0}, {&(0x7f0000000500)="c127d05ff67d5ed1d4b576b1561c37ec827ee509d087a95826d1729e9ce9062960c70b44af494e0898662c63a099f0403f1fb2644fd0ceba4ee66913f522d32875ec45389e4acf037b78246bd9", 0x4d}, {&(0x7f0000000580)="690bf490d78a202a96febe57c02a5b611150ad58835ff67a5f0cdef3826a9e94d18fe7e6fbe9c5ef2ff1e291fa42110c844c129866ec74baf61e007d46b600", 0x3f}], 0x4, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x40, 0x800}, 0x20080c04) openat$random(0xffffffffffffff9c, &(0x7f0000000900)='/dev/urandom\x00', 0x400, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_QUERY_DV_TIMINGS(r11, 0x80845663, &(0x7f0000000980)={0x0, @reserved}) r12 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$KDGETLED(r12, 0x4b31, &(0x7f0000000a40)) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x20, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000ac0)={0x2, r13}) r14 = dup(0xffffffffffffffff) ioctl$VIDIOC_ENUMAUDOUT(r14, 0xc0345642, &(0x7f0000000b00)={0x3f, "c4680098d0b8ea5933f1c64ba0d0f6ec76de0146ebea87de27e4c46fc1e29b47", 0x2, 0x1}) r15 = syz_open_dev$adsp(&(0x7f0000000b40)='/dev/adsp#\x00', 0x0, 0x0) ioctl$HIDIOCGUCODE(r15, 0xc018480d, &(0x7f0000000b80)={0x2, 0x1, 0x6, 0x7fff, 0x80000000, 0x7}) r16 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/self/net/pfkey\x00', 0x3b52b076dee00bc, 0x0) ioctl$PPPIOCNEWUNIT(r16, 0xc004743e, &(0x7f0000000c00)=0x3) r17 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/cachefiles\x00', 0x202400, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r17, 0xc010641d, &(0x7f0000000d80)={0x0, &(0x7f0000000c80)=""/212}) [ 339.862242][T11930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.873468][T11930] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.964633][T11932] usb 3-1: device descriptor read/64, error 18 [ 340.004266][T11930] usb 4-1: New USB device found, idVendor=fe37, idProduct=8a61, bcdDevice= a.52 [ 340.013876][T11930] usb 4-1: New USB device strings: Mfr=72, Product=26, SerialNumber=0 [ 340.022231][T11930] usb 4-1: Product: syz [ 340.027631][T11930] usb 4-1: Manufacturer: syz [ 340.045435][T11930] usb 4-1: config 0 descriptor?? [ 340.192788][T12295] IPVS: ftp: loaded support on port[0] = 21 17:57:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:52 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:57:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03753555c97e8e37d01da4d44a994354a9fa3ed7bc02e3af355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d44076d3b97247e066165ccf1032f51d36ab231f6c20d87e9167edf69776dca67d90a17ccd18fb9c7b21d53478e382dcf296a23a060bfe9ac9d9cd196187d0b64c834783111c7758bf5a62c197735b91d92591d04108e4a92ad8cd3ddf0000000029cb6fc8277e40be030437ff6d23073753f6b418fac8c8145093000000c32f5221dbf42b", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427", 0x9}], 0x1) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:57:52 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x800006, 0x11, r4, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9a}) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) lseek(r3, 0x0, 0x3) 17:57:52 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1/file0\x00') rename(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file0\x00') creat(0x0, 0x0) [ 340.351600][T12295] chnl_net:caif_netlink_parms(): no params data found [ 340.363214][T11930] usbhid 4-1:0.0: can't add hid device: -71 [ 340.369410][T11930] usbhid: probe of 4-1:0.0 failed with error -71 [ 340.397214][T11930] usb 4-1: USB disconnect, device number 4 17:57:52 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 340.488502][T12295] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.495848][T12295] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.505353][T12295] device bridge_slave_0 entered promiscuous mode [ 340.522292][T11932] usb 3-1: device descriptor read/64, error -71 17:57:52 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001030101000921000000012205000905810346fa121c00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000d000000090001"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000700)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000b40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x3b, {0x3b, 0xf, "cf1ac309e206f370ee2ce82f502d9bb353407093f30f5d8a3b30fc6673844a0c455cd3e4c925a271d833d9938cca606da052a4cb8ff9ab769f"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000300)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0x2, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x7, 0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x3f, 0x0, 0x10001, 0xf, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0xe1, 0x3f, 0x0, 0x7}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x8, 0x1, 0x2, "9b8f2211", "fa74a68c"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x5, 0xff, 0x4, 0x7c, 0xad2}}}, &(0x7f0000000bc0)={0xac, &(0x7f0000000540)={0x40, 0x1, 0x86, "7d01c868d80ecdf2e404d15159bc15995532c44fbf241e47f000db4b1238bc2d994403d80f474ff46b5b55589645078f6046db00614c4d2409887dc9d3ac88853b87b1006df09d2cb7fabcc7773551597df2e061c0e26ea6db956334afd2576f75a8153b5ca452f326741a1facb5844682b0f5713acb51bcec3ece853a35decb4f04cfe5505c"}, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x94}, &(0x7f0000000600)={0x20, 0x81, 0x1, "c5"}, &(0x7f0000000640)={0x20, 0x82, 0x2, "baee"}, &(0x7f0000000680)={0x20, 0x83, 0x2, "a2b2"}, &(0x7f0000000340)={0x20, 0x84, 0x3, "51103c"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "62b2ef"}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0xa0, 0xd81eaea6e125698d}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x76}, &(0x7f0000000900)={0x40, 0xb, 0x2, "8f6b"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0xfb}, &(0x7f0000000980)={0x40, 0x13, 0x6, @remote}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x19, 0x2, '*H'}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0xf3}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0xc3}}) [ 340.551164][T12295] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.558545][T12295] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.567338][T12295] device bridge_slave_1 entered promiscuous mode 17:57:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc150", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 17:57:52 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 340.679697][T12295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.707119][T12295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.770194][T12295] team0: Port device team_slave_0 added [ 340.786651][T12295] team0: Port device team_slave_1 added [ 340.794983][T11932] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 340.877506][T12295] device hsr_slave_0 entered promiscuous mode [ 340.891263][T12328] ptrace attach of "/root/syz-executor.1"[12327] was attempted by "/root/syz-executor.1"[12328] [ 340.913138][T12295] device hsr_slave_1 entered promiscuous mode [ 340.932245][T11750] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 340.935966][T12295] debugfs: Directory 'hsr0' with parent '/' already present! [ 340.996293][T12295] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.003645][T12295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.011361][T12295] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.018664][T12295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.068553][T11932] usb 3-1: Using ep0 maxpacket: 16 [ 341.127897][T12295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.151681][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.163791][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.192278][T11932] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 341.200507][T11932] usb 3-1: config 0 has no interface number 0 [ 341.206831][T11932] usb 3-1: config 0 interface 88 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.217982][T11932] usb 3-1: config 0 interface 88 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.224750][T11750] usb 4-1: Using ep0 maxpacket: 32 [ 341.227874][T11932] usb 3-1: config 0 interface 88 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 341.244102][T11932] usb 3-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=25.51 [ 341.253326][T11932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.262910][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.272575][T11932] usb 3-1: config 0 descriptor?? [ 341.295324][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 341.315300][T11932] pl2303 3-1:0.88: pl2303 converter detected [ 341.339610][T12295] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.359691][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.369747][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.378876][ T3912] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.383285][T11750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 341.386093][ T3912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.397043][T11750] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 341.415664][T11750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.426359][T11750] usb 4-1: config 0 descriptor?? [ 341.427511][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.442816][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.451692][ T3912] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.459118][ T3912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.471591][T11932] pl2303 3-1:0.88: pl2303_vendor_read - failed to read [8484]: -110 [ 341.481324][T11750] hub 4-1:0.0: ignoring external hub [ 341.504795][T11932] pl2303 3-1:0.88: pl2303_vendor_write - failed to write [0404]: -32 [ 341.520848][T12295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.531761][T12295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.547516][T11932] pl2303 3-1:0.88: pl2303_vendor_read - failed to read [8484]: -32 [ 341.560204][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.570592][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.580133][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.590804][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.600508][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.610192][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.619319][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.628349][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.637344][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.646320][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.656580][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.665654][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 341.696299][T12295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.742300][ C1] net_ratelimit: 16 callbacks suppressed [ 341.742321][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 341.754387][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 341.772268][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 341.774865][T11932] pl2303 3-1:0.88: pl2303_vendor_read - failed to read [8484]: -110 [ 341.778449][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 341.803014][T11932] pl2303 3-1:0.88: pl2303_vendor_write - failed to write [0404]: -71 [ 341.822138][T11932] pl2303 3-1:0.88: pl2303_vendor_read - failed to read [8484]: -71 [ 341.842969][T11932] pl2303 3-1:0.88: pl2303_vendor_read - failed to read [8383]: -71 [ 341.862448][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 341.868703][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 341.883237][T11932] pl2303 3-1:0.88: pl2303_vendor_write - failed to write [0000]: -71 [ 341.908120][T11932] pl2303 3-1:0.88: pl2303_vendor_write - failed to write [0001]: -71 [ 341.932442][T11932] pl2303 3-1:0.88: pl2303_vendor_write - failed to write [0002]: -71 [ 341.946496][T11932] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 341.957555][T11932] usb 3-1: USB disconnect, device number 10 [ 341.968130][T11932] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 341.977317][T11932] pl2303 3-1:0.88: device disconnected [ 341.983551][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 341.983936][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 342.092286][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 342.098552][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 342.582728][ T12] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 342.832004][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 342.952106][ T12] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 342.960390][ T12] usb 3-1: config 0 has no interface number 0 [ 342.966721][ T12] usb 3-1: config 0 interface 88 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 342.977878][ T12] usb 3-1: config 0 interface 88 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 342.987765][ T12] usb 3-1: config 0 interface 88 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 342.999850][ T12] usb 3-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=25.51 [ 343.009032][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.018418][ T12] usb 3-1: config 0 descriptor?? [ 343.065451][ T12] pl2303 3-1:0.88: pl2303 converter detected [ 343.192289][ T12] pl2303 3-1:0.88: pl2303_vendor_read - failed to read [8484]: -110 [ 343.212256][ T12] pl2303 3-1:0.88: pl2303_vendor_write - failed to write [0404]: -32 [ 343.232250][ T12] pl2303 3-1:0.88: pl2303_vendor_read - failed to read [8484]: -32 17:57:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') getdents64(r0, &(0x7f0000000180)=""/4096, 0x1000) 17:57:55 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:57:55 executing program 1: socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x0, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r2, r3, r4) socket$inet6(0xa, 0x80001, 0x1ff) socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480)) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0) close(r1) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, 0x0) ioctl$KVM_GET_FPU(r8, 0x81a0ae8c, &(0x7f0000000180)) r9 = accept4$packet(r8, &(0x7f0000001d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001d80)=0x14, 0x100000) listen(r9, 0xfffffffd) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce) process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x2a8}], 0x6, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0x81}], 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000000840)=ANY=[@ANYBLOB="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"/278]], 0x8}}, 0xfffffffffffffff9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000002000290f0000faffffff0000020000009500290000000001acf2fbd06c5362a7", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0) [ 343.252389][ T12] pl2303 3-1:0.88: pl2303_vendor_read - failed to read [8383]: -32 [ 343.282329][ T12] pl2303 3-1:0.88: pl2303_vendor_read - failed to read [8484]: -32 17:57:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2ee6bc40dbce6995}) io_setup(0x2, &(0x7f0000000080)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000148000000400000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000d0003000000"], 0x30}}, 0x0) io_submit(r2, 0x1, &(0x7f0000000bc0)=[&(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, r1, 0x0, 0x383}]) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 343.324787][ T12] pl2303 3-1:0.88: pl2303_vendor_write - failed to write [0404]: -71 [ 343.362144][ T12] pl2303 3-1:0.88: pl2303_vendor_read - failed to read [8484]: -71 [ 343.387470][ T12] pl2303 3-1:0.88: pl2303_vendor_read - failed to read [8383]: -71 17:57:55 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 343.430840][ T12] pl2303 3-1:0.88: pl2303_vendor_write - failed to write [0000]: -71 [ 343.486216][ T12] pl2303 3-1:0.88: pl2303_vendor_write - failed to write [0001]: -71 [ 343.511290][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:57:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017P\xe5\xf7\x02\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x96%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x1d\x00', 0x1000}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 343.533776][ T12] pl2303 3-1:0.88: pl2303_vendor_write - failed to write [0002]: -71 17:57:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 343.580209][ T12] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 343.648232][ T12] usb 3-1: USB disconnect, device number 11 17:57:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$cont(0x9, r0, 0x6, 0x1) [ 343.707478][ T12] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 343.717190][ T12] pl2303 3-1:0.88: device disconnected [ 343.721773][T12371] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 343.741034][T12372] input input7: cannot allocate more than FF_MAX_EFFECTS effects 17:57:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:57:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017P\xe5\xf7\x02\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x96%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x1d\x00', 0x1000}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 343.845637][T11750] usbhid 4-1:0.0: can't add hid device: -71 [ 343.854927][T11750] usbhid: probe of 4-1:0.0 failed with error -71 [ 343.875784][T12355] bridge0: port 3(gretap0) entered blocking state [ 343.882711][T12355] bridge0: port 3(gretap0) entered disabled state [ 343.906255][T12355] device gretap0 entered promiscuous mode [ 343.918480][T12355] bridge0: port 3(gretap0) entered blocking state [ 343.926220][T12355] bridge0: port 3(gretap0) entered forwarding state 17:57:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 344.054893][T11750] usb 4-1: USB disconnect, device number 5 [ 344.084958][T12385] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 344.156092][T12363] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 17:57:56 executing program 3: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000480), 0x24, 0x0) 17:57:56 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0/file1\x00', 0x0, 0x85080, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xfffffed0) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85eb}}}, 0x90) 17:57:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:57:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:56 executing program 5: socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x0, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r2, r3, r4) socket$inet6(0xa, 0x80001, 0x1ff) socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480)) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0) close(r1) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, 0x0) ioctl$KVM_GET_FPU(r8, 0x81a0ae8c, &(0x7f0000000180)) r9 = accept4$packet(r8, &(0x7f0000001d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001d80)=0x14, 0x100000) listen(r9, 0xfffffffd) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce) process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x2a8}], 0x6, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0x81}], 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000000840)=ANY=[@ANYBLOB="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"/278]], 0x8}}, 0xfffffffffffffff9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000002000290f0000faffffff0000020000009500290000000001acf2fbd06c5362a7", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0) 17:57:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:57:56 executing program 3: syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcf, 0xd2, 0xc0, 0x10, 0xeb1, 0x7007, 0x200, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7e, 0x0, 0x0, 0xff, 0x0, 0xff}}]}}]}}, 0x0) 17:57:56 executing program 1: socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x0, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r2, r3, r4) socket$inet6(0xa, 0x80001, 0x1ff) socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480)) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0) close(r1) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, 0x0) ioctl$KVM_GET_FPU(r8, 0x81a0ae8c, &(0x7f0000000180)) r9 = accept4$packet(r8, &(0x7f0000001d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001d80)=0x14, 0x100000) listen(r9, 0xfffffffd) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce) process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x2a8}], 0x6, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0x81}], 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000000840)=ANY=[@ANYBLOB="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"/278]], 0x8}}, 0xfffffffffffffff9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000002000290f0000faffffff0000020000009500290000000001acf2fbd06c5362a7", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0) 17:57:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 344.925796][T12423] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 344.951374][T12428] bridge0: port 3(gretap0) entered blocking state [ 344.959163][T12428] bridge0: port 3(gretap0) entered disabled state [ 344.986405][T12428] device gretap0 entered promiscuous mode [ 345.000396][T12428] bridge0: port 3(gretap0) entered blocking state [ 345.007274][T12428] bridge0: port 3(gretap0) entered forwarding state [ 345.057688][T12430] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 17:57:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x114, 0x2718, 0x0, &(0x7f000033bffc)=0x7ffff000) [ 345.133198][T11932] usb 4-1: new full-speed USB device number 6 using dummy_hcd 17:57:57 executing program 5: socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x0, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r2, r3, r4) socket$inet6(0xa, 0x80001, 0x1ff) socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480)) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0) close(r1) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, 0x0) ioctl$KVM_GET_FPU(r8, 0x81a0ae8c, &(0x7f0000000180)) r9 = accept4$packet(r8, &(0x7f0000001d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001d80)=0x14, 0x100000) listen(r9, 0xfffffffd) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce) process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x2a8}], 0x6, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0x81}], 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000000840)=ANY=[@ANYBLOB="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"/278]], 0x8}}, 0xfffffffffffffff9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000002000290f0000faffffff0000020000009500290000000001acf2fbd06c5362a7", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0) 17:57:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:57:57 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') getdents64(r0, &(0x7f0000000180)=""/4096, 0x1000) 17:57:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') getdents64(r0, &(0x7f0000000180)=""/4096, 0x1000) [ 345.435056][T12440] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 17:57:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000300)=""/31, 0x4fec1d97c6a21f7b, 0x100, &(0x7f0000000340)={0xa, 0x0, 0x0, @rand_addr='\x00\x00\x00\x00\b\x00'}, 0xfffffe70) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x120) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x0, 0x300) ioctl(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x10000017a) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x2, 0x0, 0x1a) [ 345.494158][T11932] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 345.502697][T11932] usb 4-1: config 0 has no interface number 0 [ 345.508997][T11932] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 345.518310][T11932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.610921][T11932] usb 4-1: config 0 descriptor?? [ 345.706461][T11932] go7007 4-1:0.126: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 345.716314][T11932] WIS XMen or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 345.725916][T11932] go7007: probe of 4-1:0.126 failed with error -12 17:57:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:57:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 345.885788][T11750] usb 4-1: USB disconnect, device number 6 [ 346.632197][T11932] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 346.992355][T11932] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 347.001411][T11932] usb 4-1: config 0 has no interface number 0 [ 347.007990][T11932] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 347.017130][T11932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.027292][T11932] usb 4-1: config 0 descriptor?? [ 347.052415][ C1] net_ratelimit: 27 callbacks suppressed [ 347.052437][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 347.064365][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 347.087547][T11932] go7007 4-1:0.126: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 347.097562][T11932] WIS XMen or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 347.107140][T11932] go7007: probe of 4-1:0.126 failed with error -12 [ 347.283883][T11750] usb 4-1: USB disconnect, device number 7 [ 347.372196][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 347.378249][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 347.612422][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 347.618874][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:57:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="a4ab12ad273b1e89e46f905080af4d90ccb170f60b3a8bf56db763e30601037dca291318d0a17270bbcecfb47888318b04aeb1747555ba16ea10e6ddb915ce000000004f3482ca3c4a1d3b9bba1395c4825b6c944f90608987f43c08eaba138726c4fe54204eaa3d026e05b4eb14ed018724d9694aa311d04010ff449107929838fe220927cb0900ba91de1e10907f84356c9b6f44ddfa86ced2a0215173e3b5cebe60ec91606a2c3730104a3c70208bf9faa3c30dd3c0c0de314d2c50d38667e7c02f5d2240ac86f22de9b60de141409b8ff30e727c1f3f24a0d901ce2899736e0e0d7d5904590d141013fc112701fd6549f34c", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:57:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x342) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pwrite64(0xffffffffffffffff, &(0x7f0000000200)="c002150a846dfabe4f80358213ec0f9f7a2758872c379d6a4f60fb3bc6a66b504d4b611e5e7f7954821ddee3f4320cea33eb59d4e7f1a771546871770bfb676563014581be230e27427b9ad80b0a73db0567676d961f149288d76eb6ca7d9314c8b9e2bfed98733cb0dc7dd30d11c367d23c0ce9bc8aeaa54b58ac62968b896868af55c60e8f1e6dda50c2b5f8dd57a4ab91863ccad04e2cea622d3136d91b4ef888411c6d6dd970432d7df15f8b9bdecf90da2ff50f6a8167ebea7f39704c08cde324d34c5025eeadbae7412522b72cc2dad75fa885c9b1e95df3c79608", 0xde, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000580)="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", 0x33f}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:57:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:57:59 executing program 5: socket$inet6(0xa, 0x0, 0x0) clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$cont(0x9, r0, 0x0, 0x1) 17:57:59 executing program 3: syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcf, 0xd2, 0xc0, 0x10, 0xeb1, 0x7007, 0x200, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7e, 0x0, 0x0, 0xff, 0x0, 0xff}}]}}]}}, 0x0) 17:57:59 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:58:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0xc) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) fallocate(r0, 0x11, 0x0, 0x9000000) 17:58:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 347.983423][T12486] kvm [12484]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x4d00000000f [ 348.012461][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 348.016035][T12486] kvm [12484]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f [ 348.018688][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:58:00 executing program 5: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) eventfd(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) fallocate(r0, 0x11, 0x0, 0x9000000) [ 348.113660][T12486] kvm [12484]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x4d00000000f [ 348.149099][T12486] kvm [12484]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f 17:58:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 348.185794][T12486] kvm [12484]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x4d00000000f [ 348.202030][T11750] usb 4-1: new full-speed USB device number 8 using dummy_hcd 17:58:00 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1/file0\x00') rename(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file0\x00') creat(0x0, 0x0) 17:58:00 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') getdents64(r0, &(0x7f0000000180)=""/4096, 0x1000) [ 348.229250][T12486] kvm [12484]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f [ 348.332468][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 348.338905][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:58:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:58:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) mount$fuseblk(0x0, 0x0, &(0x7f0000000500)='fuseblk\x00', 0x2, &(0x7f0000000740)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions='default_permissions'}, {@max_read={'max_read'}}], [{@subj_user={'subj_user', 0x3d, '/dev/autofs\x00'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}]}}) syz_open_dev$dmmidi(0x0, 0xc230, 0x0) setgid(0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@loopback}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:58:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000002180), &(0x7f0000000000)=0x4) [ 348.562328][T11750] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 348.570724][T11750] usb 4-1: config 0 has no interface number 0 [ 348.579474][T11750] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 348.588734][T11750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:58:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 348.692291][T11750] usb 4-1: config 0 descriptor?? [ 348.739573][T11750] go7007 4-1:0.126: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 348.749401][T11750] WIS XMen or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 348.758975][T11750] go7007: probe of 4-1:0.126 failed with error -12 [ 348.949121][T11750] usb 4-1: USB disconnect, device number 8 17:58:01 executing program 3: syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcf, 0xd2, 0xc0, 0x10, 0xeb1, 0x7007, 0x200, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7e, 0x0, 0x0, 0xff, 0x0, 0xff}}]}}]}}, 0x0) 17:58:01 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, 0x0, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8001) 17:58:01 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe2, 0xaf, 0x2, 0x8, 0x6a5, 0xd001, 0x8821, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0xa3, 0x5c, 0x37}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0xac, &(0x7f00000008c0)={0x0, 0x0, 0xffffffffffffff74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xac, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:58:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:58:01 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:58:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xfffb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017P\xe5\xf7\x02\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x96%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x1d\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 349.559848][T12553] input: syz0 as /devices/virtual/input/input9 17:58:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:58:01 executing program 1: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r0}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000200)={0x0, 0x0, 0x0, r0, 0x4}) 17:58:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400), 0x4) ptrace$setsig(0x4203, 0x0, 0x1ff, &(0x7f0000000540)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0) getresuid(&(0x7f0000000540)=0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) mount$fuseblk(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)='fuseblk\x00', 0x0, &(0x7f0000000740)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}, {@blksize={'blksize'}}, {@max_read={'max_read', 0x3d, 0x80000000}}], [{@smackfsroot={'smackfsroot', 0x3d, '(em0vboxnet0lo+,&'}}, {@subj_user={'subj_user', 0x3d, '/dev/autofs\x00'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}]}}) syz_open_procfs(0x0, 0x0) getresuid(0x0, 0x0, &(0x7f00000005c0)) geteuid() gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgid(0x0) gettid() setreuid(0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000140)) geteuid() getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000140)) getresuid(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) mount$fuseblk(&(0x7f0000000480)='/dev/loop0\x00', &(0x7f00000004c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000740)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}, {@default_permissions='default_permissions'}, {@max_read={'max_read'}}, {@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions='default_permissions'}, {@blksize={'blksize'}}, {@max_read={'max_read'}}], [{@obj_role={'obj_role', 0x3d, '#'}}, {@uid_eq={'uid', 0x3d, r3}}, {@uid_gt={'uid>'}}]}}) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xc230, 0x0) timer_create(0x0, &(0x7f0000000140), 0x0) gettid() setreuid(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000240)="39000000130009006900000000000000ab008048100000004600010700000014190001c025000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) fstat(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dmmidi(0x0, 0x0, 0x802) timer_create(0x0, &(0x7f0000000140)={0x0, 0x16, 0x4}, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r6, 0x0) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) timer_create(0x9, 0x0, 0x0) gettid() r7 = socket(0x1, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r8) fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x4}, [{0x2, 0x0, r2}, {0x2, 0x2}, {}, {}], {}, [{}, {}, {0x8, 0x1, r5}, {}, {}]}, 0x6c, 0x0) 17:58:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, 0x0, 0x0) [ 349.832040][T11750] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 349.853998][ T5] usb 4-1: new full-speed USB device number 9 using dummy_hcd 17:58:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x14, 0x7, 0x0, 0x0, {0x2c, 0xf0ffff, 0x600}, [@typed={0x10, 0x0, @binary="582f45cff97465821b"}]}, 0x24}}, 0x0) 17:58:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, 0x0, 0x0) [ 350.072801][T11750] usb 6-1: Using ep0 maxpacket: 8 [ 350.192574][T11750] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 350.200803][T11750] usb 6-1: config 0 has no interface number 0 [ 350.207149][T11750] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=88.21 [ 350.216530][T11750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.232556][ T5] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 350.241582][ T5] usb 4-1: config 0 has no interface number 0 [ 350.247922][ T5] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 350.257146][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.288473][T11750] usb 6-1: config 0 descriptor?? [ 350.294710][ T5] usb 4-1: config 0 descriptor?? [ 350.337267][T11750] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 350.349246][ T5] go7007 4-1:0.126: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 350.359589][ T5] WIS XMen or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 350.369888][ T5] go7007: probe of 4-1:0.126 failed with error -12 [ 350.550089][T11932] usb 4-1: USB disconnect, device number 9 17:58:03 executing program 3: syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcf, 0xd2, 0xc0, 0x10, 0xeb1, 0x7007, 0x200, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7e, 0x0, 0x0, 0xff, 0x0, 0xff}}]}}]}}, 0x0) 17:58:03 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 351.402858][ T5] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 351.782259][ T5] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 351.790656][ T5] usb 4-1: config 0 has no interface number 0 [ 351.796959][ T5] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 351.806199][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.815689][ T5] usb 4-1: config 0 descriptor?? [ 351.858010][ T5] go7007 4-1:0.126: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 351.868073][ T5] WIS XMen or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 351.877715][ T5] go7007: probe of 4-1:0.126 failed with error -12 [ 352.058901][T11932] usb 4-1: USB disconnect, device number 10 [ 352.065129][T11750] gspca_nw80x: reg_w err -71 [ 352.069931][T11750] nw80x: probe of 6-1:0.11 failed with error -71 [ 352.078719][T11750] usb 6-1: USB disconnect, device number 2 [ 352.172424][ C0] net_ratelimit: 20 callbacks suppressed [ 352.172446][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 352.184884][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 352.492126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 352.498278][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 352.822013][T11932] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 352.892318][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 352.898359][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 353.061976][T11932] usb 6-1: Using ep0 maxpacket: 8 [ 353.182195][T11932] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 353.190478][T11932] usb 6-1: config 0 has no interface number 0 [ 353.196821][T11932] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=88.21 [ 353.206085][T11932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.215593][T11932] usb 6-1: config 0 descriptor?? [ 353.256226][T11932] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 353.292131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 353.298204][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:58:05 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe2, 0xaf, 0x2, 0x8, 0x6a5, 0xd001, 0x8821, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0xa3, 0x5c, 0x37}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0xac, &(0x7f00000008c0)={0x0, 0x0, 0xffffffffffffff74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xac, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:58:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, 0x0, 0x0) 17:58:05 executing program 1: io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'netdevsim0\x00', 0x2}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) 17:58:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0xc) eventfd(0x1f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) socket(0x840000000002, 0x3, 0x200000000000ff) fallocate(r0, 0x11, 0x0, 0x9000000) 17:58:05 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:58:05 executing program 3: [ 353.606911][T11932] gspca_nw80x: reg_w err -71 [ 353.611769][T11932] nw80x: probe of 6-1:0.11 failed with error -71 [ 353.612564][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 353.625447][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:58:05 executing program 3: [ 353.674490][T11932] usb 6-1: USB disconnect, device number 3 17:58:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x0, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:58:05 executing program 2: pipe(&(0x7f0000000140)) r0 = socket(0x2, 0x2, 0x0) epoll_create1(0x0) shutdown(r0, 0x2) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 17:58:05 executing program 3: 17:58:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x6) 17:58:06 executing program 2: clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$cont(0x9, r0, 0x0, 0x1) [ 354.092681][T11932] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 354.352202][T11932] usb 6-1: Using ep0 maxpacket: 8 [ 354.474093][T11932] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 354.482560][T11932] usb 6-1: config 0 has no interface number 0 [ 354.488797][T11932] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=88.21 [ 354.498058][T11932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.507749][T11932] usb 6-1: config 0 descriptor?? [ 354.556448][T11932] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 356.312041][T11932] gspca_nw80x: reg_w err -71 [ 356.316862][T11932] nw80x: probe of 6-1:0.11 failed with error -71 [ 356.325856][T11932] usb 6-1: USB disconnect, device number 4 17:58:08 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe2, 0xaf, 0x2, 0x8, 0x6a5, 0xd001, 0x8821, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0xa3, 0x5c, 0x37}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0xac, &(0x7f00000008c0)={0x0, 0x0, 0xffffffffffffff74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xac, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:58:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x0, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:58:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 17:58:08 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcf, 0xd2, 0xc0, 0x10, 0xeb1, 0x7007, 0x200, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7e, 0x0, 0x0, 0xff, 0x0, 0xff}}]}}]}}, 0x0) 17:58:08 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x20000, 0x20) 17:58:08 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:58:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x0, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:58:09 executing program 2: bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) shutdown(r1, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xffffffeb, 0x0, 0x0, 0x535e2f3003f56a5b) 17:58:09 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket(0x2, 0x2, 0x0) epoll_create1(0x0) shutdown(r2, 0x2) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:58:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x0, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 357.131978][T11932] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 357.192506][T11750] usb 6-1: new high-speed USB device number 5 using dummy_hcd 17:58:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x0, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 357.372987][T11932] usb 4-1: Using ep0 maxpacket: 16 [ 357.452905][ C1] net_ratelimit: 21 callbacks suppressed [ 357.452926][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 357.465198][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 357.474951][T11750] usb 6-1: Using ep0 maxpacket: 8 [ 357.579930][T11932] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 357.588325][T11932] usb 4-1: config 0 has no interface number 0 [ 357.594614][T11932] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 357.600726][T11750] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 357.603778][T11932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.611969][T11750] usb 6-1: config 0 has no interface number 0 17:58:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x0, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 357.626137][T11750] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=88.21 [ 357.635334][T11750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.676121][T11750] usb 6-1: config 0 descriptor?? [ 357.725263][T11932] usb 4-1: config 0 descriptor?? [ 357.737199][T11750] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 357.772618][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 357.778886][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 357.800634][T11932] go7007 4-1:0.126: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 357.810447][T11932] WIS XMen or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 357.820025][T11932] go7007: probe of 4-1:0.126 failed with error -12 [ 357.994982][ T5] usb 4-1: USB disconnect, device number 11 [ 358.012426][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 358.018820][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 358.412225][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 358.418369][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 358.732263][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 358.738321][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 359.452898][T11750] gspca_nw80x: reg_w err -71 [ 359.457682][T11750] nw80x: probe of 6-1:0.11 failed with error -71 [ 359.471184][T11750] usb 6-1: USB disconnect, device number 5 17:58:12 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe2, 0xaf, 0x2, 0x8, 0x6a5, 0xd001, 0x8821, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0xa3, 0x5c, 0x37}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0xac, &(0x7f00000008c0)={0x0, 0x0, 0xffffffffffffff74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xac, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:58:12 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:58:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:58:12 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400206) 17:58:12 executing program 1: 17:58:12 executing program 3: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 17:58:12 executing program 1: 17:58:12 executing program 2: 17:58:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:58:12 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="a4ab12ad273b1e89e46f905080af4d90ccb170f60b3a8bf56db763e30601037dca291318d0a17270bbcecfb47888318b04aeb1747555ba16ea10e6ddb915ce000000004f3482ca3c4a1d3b9bba1395c4825b6c944f90608987f43c08eaba138726c4fe54204eaa3d026e05b4eb14ed018724d9694aa311d04010ff449107929838fe2209", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:58:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x342) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) pwrite64(0xffffffffffffffff, &(0x7f0000000200)="c002150a846dfabe4f80358213ec0f9f7a2758872c379d6a4f60fb3bc6a66b504d4b611e5e7f7954821ddee3f4320cea33eb59d4e7f1a771546871770bfb676563014581be230e27427b9ad80b0a73db0567676d961f149288d76eb6ca7d9314c8b9e2bfed98733cb0dc7dd30d11c367d23c0ce9bc8aeaa54b58ac62968b896868af55c60e8f1e6dda50c2b5f8dd57a4ab91863ccad04e2cea622d3136d91b4ef888411c6d6dd970432d7df15f8b9bdecf90da2ff50f6a8167ebea7f39704c08cde324d34c5025eeadbae7412522b72cc2dad75fa885c9b1e95df3c79608", 0xde, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000580)="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", 0x33f}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 360.277063][T12727] ptrace attach of "/root/syz-executor.2"[12726] was attempted by "/root/syz-executor.2"[12727] 17:58:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x15) tkill(0x0, 0x0) [ 360.322936][T11932] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 360.459079][T12730] kvm [12729]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x4d00000000f [ 360.475497][T12730] kvm [12729]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f [ 360.500374][T12730] kvm [12729]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x4d00000000f [ 360.526659][T12730] kvm [12729]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f [ 360.559439][T12730] kvm [12729]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x4d00000000f [ 360.573175][T11932] usb 6-1: Using ep0 maxpacket: 8 [ 360.575616][T12730] kvm [12729]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f [ 360.692439][T11932] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 360.700939][T11932] usb 6-1: config 0 has no interface number 0 [ 360.707254][T11932] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=88.21 [ 360.716582][T11932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.754617][T11932] usb 6-1: config 0 descriptor?? [ 360.796851][T11932] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 362.562161][T11932] gspca_nw80x: reg_w err -71 [ 362.566951][T11932] nw80x: probe of 6-1:0.11 failed with error -71 [ 362.575830][T11932] usb 6-1: USB disconnect, device number 6 [ 362.582375][ C0] net_ratelimit: 20 callbacks suppressed [ 362.582394][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 362.594745][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 362.892157][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 362.898332][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:58:15 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe2, 0xaf, 0x2, 0x8, 0x6a5, 0xd001, 0x8821, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0xa3, 0x5c, 0x37}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0xac, &(0x7f00000008c0)={0x0, 0x0, 0xffffffffffffff74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xac, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:58:15 executing program 3: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 17:58:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:58:15 executing program 1: 17:58:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:58:15 executing program 2: 17:58:15 executing program 2: 17:58:15 executing program 1: 17:58:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:58:15 executing program 2: 17:58:15 executing program 1: [ 363.293127][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 363.299641][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:58:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) [ 363.432327][T11932] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 363.672436][T11932] usb 6-1: Using ep0 maxpacket: 8 [ 363.692244][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 363.698525][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 363.802209][T11932] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 363.810627][T11932] usb 6-1: config 0 has no interface number 0 [ 363.817420][T11932] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=88.21 [ 363.826723][T11932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.836880][T11932] usb 6-1: config 0 descriptor?? [ 363.886391][T11932] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 364.012247][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 364.018427][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 365.412348][T11932] gspca_nw80x: reg_w err -71 [ 365.417294][T11932] nw80x: probe of 6-1:0.11 failed with error -71 [ 365.426419][T11932] usb 6-1: USB disconnect, device number 7 17:58:17 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe2, 0xaf, 0x2, 0x8, 0x6a5, 0xd001, 0x8821, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0xa3, 0x5c, 0x37}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0xac, &(0x7f00000008c0)={0x0, 0x0, 0xffffffffffffff74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xac, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:58:17 executing program 2: 17:58:17 executing program 1: 17:58:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}, 0x3c) 17:58:17 executing program 3: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 17:58:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:58:18 executing program 1: 17:58:18 executing program 4: 17:58:18 executing program 2: 17:58:18 executing program 4: 17:58:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ab553fec10649c67aebb0900e68875297f", 0x11) 17:58:18 executing program 2: [ 366.281990][T11750] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 366.522057][T11750] usb 6-1: Using ep0 maxpacket: 8 [ 366.642166][T11750] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 366.650468][T11750] usb 6-1: config 0 has no interface number 0 [ 366.656836][T11750] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=88.21 [ 366.666063][T11750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.679281][T11750] usb 6-1: config 0 descriptor?? [ 366.726746][T11750] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 367.852179][ C1] net_ratelimit: 20 callbacks suppressed [ 367.852200][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 367.864277][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 368.182351][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 368.188540][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 368.252084][T11750] gspca_nw80x: reg_w err -71 [ 368.257208][T11750] nw80x: probe of 6-1:0.11 failed with error -71 [ 368.266809][T11750] usb 6-1: USB disconnect, device number 8 [ 368.420229][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 368.426752][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:58:20 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe2, 0xaf, 0x2, 0x8, 0x6a5, 0xd001, 0x8821, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0xa3, 0x5c, 0x37}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0xac, &(0x7f00000008c0)={0x0, 0x0, 0xffffffffffffff74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xac, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:58:20 executing program 4: 17:58:20 executing program 2: 17:58:20 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcf, 0xd2, 0xc0, 0x0, 0xeb1, 0x7007, 0x200, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7e, 0x0, 0x0, 0xff, 0x0, 0xff}}]}}]}}, 0x0) 17:58:20 executing program 1: 17:58:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 368.812478][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 368.818831][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:58:20 executing program 2: 17:58:20 executing program 1: 17:58:20 executing program 4: 17:58:21 executing program 2: 17:58:21 executing program 1: 17:58:21 executing program 4: [ 369.072476][T11750] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 369.102455][ T5] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 369.132389][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 369.138639][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 369.362587][T11750] usb 4-1: device descriptor read/64, error 18 [ 369.372245][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 369.504158][ T5] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 369.512511][ T5] usb 6-1: config 0 has no interface number 0 [ 369.518777][ T5] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=88.21 [ 369.528579][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.539347][ T5] usb 6-1: config 0 descriptor?? [ 369.597351][ T5] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 369.772005][T11750] usb 4-1: device descriptor read/64, error 18 [ 370.042058][T11750] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 370.311986][T11750] usb 4-1: device descriptor read/64, error 18 [ 370.702067][T11750] usb 4-1: device descriptor read/64, error 18 [ 370.822167][T11750] usb usb4-port1: attempt power cycle [ 371.122120][ T5] gspca_nw80x: reg_w err -71 [ 371.127023][ T5] nw80x: probe of 6-1:0.11 failed with error -71 [ 371.137895][ T5] usb 6-1: USB disconnect, device number 9 [ 371.532161][T11750] usb 4-1: new high-speed USB device number 14 using dummy_hcd 17:58:23 executing program 2: 17:58:23 executing program 1: 17:58:23 executing program 4: 17:58:23 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcf, 0xd2, 0xc0, 0x0, 0xeb1, 0x7007, 0x200, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7e, 0x0, 0x0, 0xff, 0x0, 0xff}}]}}]}}, 0x0) 17:58:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:58:23 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe2, 0xaf, 0x2, 0x8, 0x6a5, 0xd001, 0x8821, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0xa3, 0x5c, 0x37}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0xac, &(0x7f00000008c0)={0x0, 0x0, 0xffffffffffffff74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xac, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:58:23 executing program 2: 17:58:23 executing program 1: 17:58:23 executing program 4: [ 371.812301][T11750] usb 4-1: device descriptor read/64, error 18 17:58:23 executing program 4: 17:58:23 executing program 1: 17:58:23 executing program 2: 17:58:24 executing program 2: 17:58:24 executing program 1: 17:58:24 executing program 4: [ 372.112220][T11932] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 372.362346][T11750] usb 4-1: device descriptor read/64, error -71 [ 372.372379][T11932] usb 6-1: Using ep0 maxpacket: 8 [ 372.492470][T11932] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 372.504130][T11932] usb 6-1: config 0 has no interface number 0 [ 372.510354][T11932] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=88.21 [ 372.519558][T11932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.530064][T11932] usb 6-1: config 0 descriptor?? [ 372.586527][T11932] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 372.632027][T11750] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 372.902022][T11750] usb 4-1: device descriptor read/64, error 18 [ 372.972485][ C0] net_ratelimit: 20 callbacks suppressed [ 372.972507][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 372.984510][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 373.292111][T11750] usb 4-1: device descriptor read/64, error 18 [ 373.292296][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 373.304579][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 373.412122][T11750] usb usb4-port1: unable to enumerate USB device [ 373.692322][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 373.698518][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 374.092255][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 374.098415][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 374.105185][T11932] gspca_nw80x: reg_w err -71 [ 374.110002][T11932] nw80x: probe of 6-1:0.11 failed with error -71 [ 374.119576][T11932] usb 6-1: USB disconnect, device number 10 [ 374.412411][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 374.418639][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:58:26 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcf, 0xd2, 0xc0, 0x0, 0xeb1, 0x7007, 0x200, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7e, 0x0, 0x0, 0xff, 0x0, 0xff}}]}}]}}, 0x0) 17:58:26 executing program 4: 17:58:26 executing program 2: 17:58:26 executing program 1: 17:58:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:58:26 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe2, 0xaf, 0x2, 0x8, 0x6a5, 0xd001, 0x8821, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0xa3, 0x5c, 0x37}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0xac, &(0x7f00000008c0)={0x0, 0x0, 0xffffffffffffff74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xac, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:58:27 executing program 1: 17:58:27 executing program 4: 17:58:27 executing program 2: 17:58:27 executing program 1: 17:58:27 executing program 4: 17:58:27 executing program 2: [ 375.264405][T11932] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 375.272200][T11750] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 375.532504][T11932] usb 6-1: Using ep0 maxpacket: 8 [ 375.553452][T11750] usb 4-1: device descriptor read/64, error 18 [ 375.652241][T11932] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 375.660530][T11932] usb 6-1: config 0 has no interface number 0 [ 375.667036][T11932] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=88.21 [ 375.676262][T11932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.685952][T11932] usb 6-1: config 0 descriptor?? [ 375.726237][T11932] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 375.961975][T11750] usb 4-1: device descriptor read/64, error 18 [ 376.242168][T11750] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 376.521973][T11750] usb 4-1: device descriptor read/64, error 18 [ 376.922019][T11750] usb 4-1: device descriptor read/64, error 18 [ 377.042310][T11750] usb usb4-port1: attempt power cycle [ 377.252012][T11932] gspca_nw80x: reg_w err -71 [ 377.256858][T11932] nw80x: probe of 6-1:0.11 failed with error -71 [ 377.267749][T11932] usb 6-1: USB disconnect, device number 11 [ 377.762078][T11750] usb 4-1: new high-speed USB device number 18 using dummy_hcd 17:58:30 executing program 4: 17:58:30 executing program 1: 17:58:30 executing program 2: 17:58:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:58:30 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe2, 0xaf, 0x2, 0x8, 0x6a5, 0xd001, 0x8821, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0xa3, 0x5c, 0x37}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0xac, &(0x7f00000008c0)={0x0, 0x0, 0xffffffffffffff74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xac, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:58:30 executing program 1: [ 378.052884][T11750] usb 4-1: device descriptor read/64, error 18 17:58:30 executing program 4: 17:58:30 executing program 3: 17:58:30 executing program 2: 17:58:30 executing program 3: [ 378.252406][ C1] net_ratelimit: 20 callbacks suppressed [ 378.252448][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 378.264605][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:58:30 executing program 1: 17:58:30 executing program 4: [ 378.342506][T11932] usb 6-1: new high-speed USB device number 12 using dummy_hcd 17:58:30 executing program 2: 17:58:30 executing program 1: 17:58:30 executing program 3: [ 378.572401][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 378.578707][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 378.585531][T11932] usb 6-1: Using ep0 maxpacket: 8 [ 378.702564][T11932] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 378.710832][T11932] usb 6-1: config 0 has no interface number 0 [ 378.717184][T11932] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=88.21 [ 378.726681][T11932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.764975][T11932] usb 6-1: config 0 descriptor?? [ 378.806660][T11932] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 378.822464][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 378.828708][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:58:31 executing program 2: [ 379.212411][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 379.218706][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 379.532323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 379.538383][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 380.322026][T11932] gspca_nw80x: reg_w err -71 [ 380.326842][T11932] nw80x: probe of 6-1:0.11 failed with error -71 [ 380.337366][T11932] usb 6-1: USB disconnect, device number 12 17:58:32 executing program 3: 17:58:32 executing program 4: 17:58:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:58:32 executing program 1: 17:58:32 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe2, 0xaf, 0x2, 0x8, 0x6a5, 0xd001, 0x8821, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0xa3, 0x5c, 0x37}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0xac, &(0x7f00000008c0)={0x0, 0x0, 0xffffffffffffff74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xac, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:58:32 executing program 2: 17:58:32 executing program 4: 17:58:33 executing program 3: 17:58:33 executing program 2: 17:58:33 executing program 1: 17:58:33 executing program 4: 17:58:33 executing program 2: 17:58:33 executing program 3: 17:58:33 executing program 1: [ 381.186759][T11932] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 381.432056][T11932] usb 6-1: Using ep0 maxpacket: 8 [ 381.554203][T11932] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 381.563085][T11932] usb 6-1: config 0 has no interface number 0 [ 381.569296][T11932] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=88.21 [ 381.578528][T11932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.590538][T11932] usb 6-1: config 0 descriptor?? 17:58:33 executing program 4: [ 381.636398][T11932] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 383.152039][T11932] gspca_nw80x: reg_w err -71 [ 383.156993][T11932] nw80x: probe of 6-1:0.11 failed with error -71 [ 383.165992][T11932] usb 6-1: USB disconnect, device number 13 [ 383.372201][ C0] net_ratelimit: 20 callbacks suppressed [ 383.372214][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 383.384403][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:58:35 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe2, 0xaf, 0x2, 0x8, 0x6a5, 0xd001, 0x8821, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x0, 0xa3, 0x5c, 0x37}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0xac, &(0x7f00000008c0)={0x0, 0x0, 0xffffffffffffff74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xac, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:58:35 executing program 2: 17:58:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:58:35 executing program 3: r0 = syz_usb_connect(0x0, 0x3e6, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x72, 0x68, 0x34, 0x8, 0x424, 0x9908, 0x6a5e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x2, 0xc2, 0x8b, 0xac, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x8a, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001c00)={0x2c, &(0x7f0000001140), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0xac, &(0x7f0000000240)={0x0, 0x0, 0x2, "5cdf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000280)={0x0, 0x0, 0x1, "ae"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:58:35 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x4, 0xe1, 0x34, 0x8, 0x5ac, 0x9219, 0x7d82, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x10, 0x0, 0x0, 0x3, 0xb8}}]}}]}}, 0x0) 17:58:35 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x81, 0xed, 0x1a, 0x40, 0x471, 0x303, 0xb446, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x36, 0xae}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0xac, &(0x7f0000003680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0xac, &(0x7f0000001100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0xac, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0xac, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0xac, &(0x7f0000000e00)={0x0, 0x0, 0x380}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:58:35 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x8, 0x572, 0xcb01, 0x4a75, 0x0, 0x8, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6, 0x0, 0x0, 0x4a, 0x32, 0xa5}}]}}]}}, 0x0) [ 383.692279][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 383.698532][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 383.982119][T11750] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 384.012370][ T5] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 384.022975][T11932] usb 5-1: new high-speed USB device number 2 using dummy_hcd 17:58:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 384.072267][ T12] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 384.092525][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 384.098659][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 384.105650][T11752] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 384.232293][T11750] usb 6-1: Using ep0 maxpacket: 8 [ 384.252228][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 384.335583][ T12] usb 2-1: Using ep0 maxpacket: 8 [ 384.362001][T11752] usb 3-1: Using ep0 maxpacket: 8 [ 384.373113][T11750] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 384.381419][T11750] usb 6-1: config 0 has no interface number 0 [ 384.382530][T11932] usb 5-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=b4.46 [ 384.387780][T11750] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=88.21 [ 384.396687][T11932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.421123][T11750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.431097][ T5] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 384.439668][ T5] usb 4-1: config 0 has no interface number 0 [ 384.446071][ T5] usb 4-1: config 0 interface 128 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 384.456096][ T5] usb 4-1: config 0 interface 128 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 384.464505][T11932] usb 5-1: config 0 descriptor?? [ 384.466191][ T5] usb 4-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=6a.5e [ 384.480266][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.491228][T11750] usb 6-1: config 0 descriptor?? [ 384.492449][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 384.502700][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 384.505204][ T5] usb 4-1: config 0 descriptor?? [ 384.516535][T11932] pwc: Philips PCA646VC USB webcam detected. [ 384.538439][T11750] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 384.556084][ T5] smsc95xx v1.0.6 [ 384.572684][ T12] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 384.580945][ T12] usb 2-1: config 0 has no interface number 0 [ 384.587454][ T12] usb 2-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=7d.82 [ 384.596758][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.605766][T11752] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 384.614017][T11752] usb 3-1: config 0 has no interface number 0 17:58:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=""/154, &(0x7f00000002c0)=""/132, &(0x7f0000000380)=""/4096, 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 384.638269][ T12] usb 2-1: config 0 descriptor?? [ 384.687761][ T12] appledisplay 2-1:0.16: Could not find int-in endpoint [ 384.696622][ T12] usbhid 2-1:0.16: couldn't find an input interrupt endpoint [ 384.706552][T11752] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 384.715779][T11752] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 384.723955][T11752] usb 3-1: Product: syz [ 384.732370][T11752] usb 3-1: config 0 descriptor?? [ 384.812409][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 384.818512][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 384.885526][ T53] usb 2-1: USB disconnect, device number 12 [ 384.992507][ T5] ===================================================== [ 384.999496][ T5] BUG: KMSAN: uninit-value in smsc95xx_bind+0x467/0x1690 [ 385.006525][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.3.0-rc7+ #0 [ 385.013805][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.023876][ T5] Workqueue: usb_hub_wq hub_event [ 385.028908][ T5] Call Trace: [ 385.033524][ T5] dump_stack+0x191/0x1f0 [ 385.037875][ T5] kmsan_report+0x13a/0x2b0 [ 385.042400][ T5] __msan_warning+0x73/0xe0 [ 385.046918][ T5] smsc95xx_read_eeprom+0x203/0x920 [ 385.052174][ T5] smsc95xx_bind+0x467/0x1690 [ 385.056860][ T5] ? kmsan_memcpy_memmove_metadata+0x119/0x2d0 [ 385.063041][ T5] ? smsc95xx_mdio_write+0xc10/0xc10 [ 385.068333][ T5] usbnet_probe+0x10ae/0x3960 [ 385.073029][ T5] ? kmsan_internal_set_origin+0x6a/0xb0 [ 385.078692][ T5] ? usbnet_disconnect+0x660/0x660 [ 385.083973][ T5] usb_probe_interface+0xd19/0x1310 [ 385.089195][ T5] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 385.095092][ T5] ? usb_register_driver+0x7d0/0x7d0 [ 385.100364][ T5] really_probe+0x1373/0x1dc0 [ 385.105053][ T5] driver_probe_device+0x1ba/0x510 [ 385.110288][ T5] __device_attach_driver+0x5b8/0x790 [ 385.115687][ T5] bus_for_each_drv+0x28e/0x3b0 [ 385.115703][ T5] ? deferred_probe_work_func+0x400/0x400 [ 385.115774][ T5] __device_attach+0x489/0x750 [ 385.131159][ T5] device_initial_probe+0x4a/0x60 [ 385.136169][ T5] bus_probe_device+0x131/0x390 [ 385.141012][ T5] device_add+0x25b5/0x2df0 [ 385.145524][ T5] usb_set_configuration+0x309f/0x3710 [ 385.150990][ T5] generic_probe+0xe7/0x280 [ 385.155494][ T5] ? usb_choose_configuration+0xae0/0xae0 [ 385.161224][ T5] usb_probe_device+0x146/0x200 [ 385.166085][ T5] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 385.171974][ T5] ? usb_register_device_driver+0x470/0x470 [ 385.177872][ T5] really_probe+0x1373/0x1dc0 [ 385.182661][ T5] driver_probe_device+0x1ba/0x510 [ 385.187769][ T5] __device_attach_driver+0x5b8/0x790 [ 385.193133][ T5] bus_for_each_drv+0x28e/0x3b0 [ 385.197977][ T5] ? deferred_probe_work_func+0x400/0x400 [ 385.203697][ T5] __device_attach+0x489/0x750 [ 385.208465][ T5] device_initial_probe+0x4a/0x60 [ 385.213477][ T5] bus_probe_device+0x131/0x390 [ 385.218324][ T5] device_add+0x25b5/0x2df0 [ 385.222841][ T5] usb_new_device+0x23e5/0x2fb0 [ 385.227701][ T5] hub_event+0x581d/0x72f0 [ 385.232131][ T5] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 385.238000][ T5] ? led_work+0x720/0x720 [ 385.242325][ T5] ? led_work+0x720/0x720 [ 385.246650][ T5] process_one_work+0x1572/0x1ef0 [ 385.251698][ T5] worker_thread+0x111b/0x2460 [ 385.256492][ T5] kthread+0x4b5/0x4f0 [ 385.260553][ T5] ? process_one_work+0x1ef0/0x1ef0 [ 385.265736][ T5] ? kthread_blkcg+0xf0/0xf0 [ 385.270339][ T5] ret_from_fork+0x35/0x40 [ 385.274751][ T5] [ 385.277059][ T5] Local variable description: ----buf.i.i86@smsc95xx_read_eeprom [ 385.284754][ T5] Variable was created at: [ 385.289165][ T5] smsc95xx_read_eeprom+0x109/0x920 [ 385.294352][ T5] smsc95xx_bind+0x467/0x1690 [ 385.299022][ T5] ===================================================== [ 385.305928][ T5] Disabling lock debugging due to kernel taint [ 385.312065][ T5] Kernel panic - not syncing: panic_on_warn set ... [ 385.318727][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Tainted: G B 5.3.0-rc7+ #0 [ 385.327493][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.337733][ T5] Workqueue: usb_hub_wq hub_event [ 385.342829][ T5] Call Trace: [ 385.346117][ T5] dump_stack+0x191/0x1f0 [ 385.350444][ T5] panic+0x3c9/0xc1e [ 385.354360][ T5] kmsan_report+0x2a2/0x2b0 [ 385.358965][ T5] __msan_warning+0x73/0xe0 [ 385.363479][ T5] smsc95xx_read_eeprom+0x203/0x920 [ 385.368692][ T5] smsc95xx_bind+0x467/0x1690 [ 385.373366][ T5] ? kmsan_memcpy_memmove_metadata+0x119/0x2d0 [ 385.379592][ T5] ? smsc95xx_mdio_write+0xc10/0xc10 [ 385.384868][ T5] usbnet_probe+0x10ae/0x3960 [ 385.389561][ T5] ? kmsan_internal_set_origin+0x6a/0xb0 [ 385.395196][ T5] ? usbnet_disconnect+0x660/0x660 [ 385.399185][T12975] udc dummy_udc.1: registering UDC driver [USB fuzzer] [ 385.400305][ T5] usb_probe_interface+0xd19/0x1310 [ 385.400332][ T5] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 385.400367][ T5] ? usb_register_driver+0x7d0/0x7d0 [ 385.407401][T12975] dummy_hcd dummy_hcd.1: port status 0x00010101 has changes [ 385.412448][ T5] really_probe+0x1373/0x1dc0 [ 385.419003][ T53] usb usb2: dummy_bus_resume [ 385.423596][ T5] driver_probe_device+0x1ba/0x510 [ 385.423623][ T5] __device_attach_driver+0x5b8/0x790 [ 385.423649][ T5] bus_for_each_drv+0x28e/0x3b0 [ 385.423664][ T5] ? deferred_probe_work_func+0x400/0x400 [ 385.423697][ T5] __device_attach+0x489/0x750 [ 385.431172][ T53] dummy_hcd dummy_hcd.1: port status 0x00010101 has changes [ 385.435796][ T5] device_initial_probe+0x4a/0x60 [ 385.478282][T12977] udc dummy_udc.2: registering UDC driver [USB fuzzer] [ 385.478770][ T5] bus_probe_device+0x131/0x390 [ 385.478797][ T5] device_add+0x25b5/0x2df0 [ 385.478840][ T5] usb_set_configuration+0x309f/0x3710 [ 385.478897][ T5] generic_probe+0xe7/0x280 [ 385.485942][T12977] dummy_hcd dummy_hcd.2: port status 0x00010101 has changes [ 385.490613][ T5] ? usb_choose_configuration+0xae0/0xae0 [ 385.518276][ T5] usb_probe_device+0x146/0x200 [ 385.523142][ T5] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 385.529046][ T5] ? usb_register_device_driver+0x470/0x470 [ 385.534955][ T5] really_probe+0x1373/0x1dc0 [ 385.539766][ T5] driver_probe_device+0x1ba/0x510 [ 385.544882][ T5] __device_attach_driver+0x5b8/0x790 [ 385.550241][ T5] bus_for_each_drv+0x28e/0x3b0 [ 385.555074][ T5] ? deferred_probe_work_func+0x400/0x400 [ 385.560777][ T5] __device_attach+0x489/0x750 [ 385.565526][ T5] device_initial_probe+0x4a/0x60 [ 385.570535][ T5] bus_probe_device+0x131/0x390 [ 385.575477][ T5] device_add+0x25b5/0x2df0 [ 385.580121][ T5] usb_new_device+0x23e5/0x2fb0 [ 385.585005][ T5] hub_event+0x581d/0x72f0 [ 385.589449][ T5] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 385.595332][ T5] ? led_work+0x720/0x720 [ 385.599645][ T5] ? led_work+0x720/0x720 [ 385.603964][ T5] process_one_work+0x1572/0x1ef0 [ 385.608988][ T5] worker_thread+0x111b/0x2460 [ 385.613782][ T5] kthread+0x4b5/0x4f0 [ 385.618195][ T5] ? process_one_work+0x1ef0/0x1ef0 [ 385.623376][ T5] ? kthread_blkcg+0xf0/0xf0 [ 385.628247][ T5] ret_from_fork+0x35/0x40 [ 385.633560][ T5] Kernel Offset: disabled [ 385.637898][ T5] Rebooting in 86400 seconds..