_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:22:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, 0x0, 0x0) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x5000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 839.694454][T25844] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 839.994719][ T3836] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 840.235278][ T3836] usb 5-1: Using ep0 maxpacket: 16 [ 840.355662][ T3836] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 840.366496][ T3836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.377858][ T3836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.387751][ T3836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 840.494833][ T3836] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 840.504046][ T3836] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 840.513141][ T3836] usb 5-1: Product: syz [ 840.523309][ T3836] usb 5-1: config 0 descriptor?? [ 840.991635][T25847] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 841.000003][T25847] FAULT_INJECTION: forcing a failure. [ 841.000003][T25847] name failslab, interval 1, probability 0, space 0, times 0 [ 841.013431][T25847] CPU: 1 PID: 25847 Comm: syz-executor.4 Not tainted 5.8.0-rc4-syzkaller #0 [ 841.022820][T25847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 841.032887][T25847] Call Trace: [ 841.036197][T25847] dump_stack+0x18f/0x20d [ 841.040530][T25847] should_fail.cold+0x5/0x14 [ 841.045110][T25847] should_failslab+0x5/0xf [ 841.049513][T25847] kmem_cache_alloc_node_trace+0x27d/0x400 [ 841.055310][T25847] __kmalloc_node+0x38/0x60 [ 841.059800][T25847] kvmalloc_node+0x61/0xf0 [ 841.064223][T25847] alloc_netdev_mqs+0x97/0xdc0 [ 841.068994][T25847] ? macvlan_process_broadcast+0x610/0x610 [ 841.074794][T25847] rtnl_create_link+0x219/0xad0 [ 841.079657][T25847] __rtnl_newlink+0xfa0/0x1730 [ 841.084418][T25847] ? rtnl_setlink+0x3c0/0x3c0 [ 841.089093][T25847] ? lock_downgrade+0x820/0x820 [ 841.093953][T25847] ? is_bpf_text_address+0xcb/0x160 [ 841.099162][T25847] ? kernel_text_address+0xbd/0xf0 [ 841.104267][T25847] ? __kernel_text_address+0x9/0x30 [ 841.109455][T25847] ? unwind_get_return_address+0x51/0x90 [ 841.115083][T25847] ? profile_setup.cold+0xc1/0xc1 [ 841.120108][T25847] ? arch_stack_walk+0x97/0xf0 [ 841.124858][T25847] ? stack_trace_save+0x8c/0xc0 [ 841.129688][T25847] ? stack_trace_consume_entry+0x160/0x160 [ 841.135492][T25847] ? __kasan_slab_free+0xf5/0x140 [ 841.140516][T25847] ? kmem_cache_free+0x7f/0x310 [ 841.145371][T25847] ? mark_lock+0xbc/0x1710 [ 841.149772][T25847] ? pcibios_lookup_irq+0x764/0xb80 [ 841.155023][T25847] ? trace_kmalloc+0xfd/0x130 [ 841.159700][T25847] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 841.165240][T25847] rtnl_newlink+0x64/0xa0 [ 841.169597][T25847] ? __rtnl_newlink+0x1730/0x1730 [ 841.174610][T25847] rtnetlink_rcv_msg+0x44e/0xad0 [ 841.179542][T25847] ? rtnetlink_put_metrics+0x510/0x510 [ 841.184982][T25847] ? perf_trace_lock+0xeb/0x4a0 [ 841.189838][T25847] ? __lockdep_free_key_range+0x110/0x110 [ 841.195555][T25847] netlink_rcv_skb+0x15a/0x430 [ 841.200371][T25847] ? rtnetlink_put_metrics+0x510/0x510 [ 841.205847][T25847] ? netlink_ack+0xa10/0xa10 [ 841.210433][T25847] netlink_unicast+0x533/0x7d0 [ 841.215202][T25847] ? netlink_attachskb+0x810/0x810 [ 841.220304][T25847] ? _copy_from_iter_full+0x247/0x890 [ 841.225705][T25847] ? __phys_addr+0x9a/0x110 [ 841.230223][T25847] ? __phys_addr_symbol+0x2c/0x70 [ 841.235232][T25847] ? __check_object_size+0x171/0x3e4 [ 841.240504][T25847] netlink_sendmsg+0x856/0xd90 [ 841.246213][T25847] ? netlink_unicast+0x7d0/0x7d0 [ 841.251157][T25847] ? netlink_unicast+0x7d0/0x7d0 [ 841.256085][T25847] sock_sendmsg+0xcf/0x120 [ 841.260504][T25847] ____sys_sendmsg+0x6e8/0x810 [ 841.265269][T25847] ? kernel_sendmsg+0x50/0x50 [ 841.269939][T25847] ? do_recvmmsg+0x6d0/0x6d0 [ 841.274517][T25847] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 841.280486][T25847] ? __lockdep_free_key_range+0x110/0x110 [ 841.286208][T25847] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 841.292179][T25847] ___sys_sendmsg+0xf3/0x170 [ 841.296752][T25847] ? sendmsg_copy_msghdr+0x160/0x160 [ 841.302028][T25847] ? __fget_files+0x272/0x400 [ 841.306690][T25847] ? lock_downgrade+0x820/0x820 [ 841.311530][T25847] ? __lockdep_free_key_range+0x110/0x110 [ 841.317225][T25847] ? find_held_lock+0x2d/0x110 [ 841.321976][T25847] ? ksys_write+0x212/0x250 [ 841.326462][T25847] ? __fget_files+0x294/0x400 [ 841.331139][T25847] ? __fget_light+0xea/0x280 [ 841.335722][T25847] __sys_sendmsg+0xe5/0x1b0 [ 841.340207][T25847] ? __sys_sendmsg_sock+0xb0/0xb0 [ 841.345221][T25847] ? do_syscall_64+0x1c/0xe0 [ 841.349801][T25847] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 841.355791][T25847] do_syscall_64+0x60/0xe0 [ 841.360205][T25847] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 841.366080][T25847] RIP: 0033:0x45cba9 [ 841.369968][T25847] Code: Bad RIP value. [ 841.374011][T25847] RSP: 002b:00007ff54f5cec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.382407][T25847] RAX: ffffffffffffffda RBX: 0000000000503800 RCX: 000000000045cba9 [ 841.390362][T25847] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 841.398320][T25847] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 841.406283][T25847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 841.414234][T25847] R13: 0000000000000a6c R14: 00000000004cd48b R15: 00007ff54f5cf6d4 [ 841.514984][ T3836] usbhid 5-1:0.0: can't add hid device: -71 [ 841.521079][ T3836] usbhid: probe of 5-1:0.0 failed with error -71 [ 841.534280][ T3836] usb 5-1: USB disconnect, device number 122 10:22:33 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 10:22:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) dup(r5) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x200000000003e) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, 0x0, 0x0) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:33 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, r4) r6 = geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="040007000000080800000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRESOCT=r1, @ANYBLOB="f6dfbcef026a7840ea929f27745b83c13d309e67c14b771a2f8441ba921bd51957f89b766d26e4bd9ca1af180dc7e4b97da54fbc142070252e75ad81b3b6c65afb621b7fb13fc685ab8b356c845accfc8c0c971fe13a462191ff187734330a01da7b1f917d8b7abdd8fa6e524c37870a7ea9c50aed3ee024f145a0be4d8f717dcc3a56330918e64465dcb392d86af88201e081ca0ca9c374d9f5bffa29e7f106", @ANYRES16=r5, @ANYRES64, @ANYRES64], 0x7, 0x0) keyctl$get_persistent(0x16, r6, r4) r7 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000003c0)="585ccb01ed83b836c1a6474914dc34e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a1a0900000000000042e3308965210007c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99b2655043a2ce0d23f4d2f6b0bfb1a4ebb022b8753a1880100569f435fb3bae96efb74b50ec93c152f5e8e198a29e51ff5ff70e48884ca000018cea780dc555bd640b9b88a8d2725d8ef8b7df00baad70b5274ccdebeca9943d63800"/192, 0xc0, r5) r8 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r8, r7, r8}, &(0x7f0000000240)=""/112, 0x208, &(0x7f0000000580)={&(0x7f0000000500)={'crc32\x00'}}) r9 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, 0x0, r9) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) socket$packet(0x11, 0x3, 0x300) 10:22:33 executing program 4 (fault-call:14 fault-nth:5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) [ 842.418320][T25870] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 842.521348][T25881] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x9000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 842.606681][T25888] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 842.701979][T25892] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 842.711571][ T3836] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 842.964832][ T3836] usb 5-1: Using ep0 maxpacket: 16 [ 843.114843][ T3836] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 843.125776][ T3836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.137326][ T3836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.147642][ T3836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 843.245125][ T3836] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 843.254498][ T3836] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 843.262921][ T3836] usb 5-1: Product: syz [ 843.268822][ T3836] usb 5-1: config 0 descriptor?? [ 843.730147][T25874] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 843.738428][T25874] FAULT_INJECTION: forcing a failure. [ 843.738428][T25874] name failslab, interval 1, probability 0, space 0, times 0 [ 843.751133][T25874] CPU: 1 PID: 25874 Comm: syz-executor.4 Not tainted 5.8.0-rc4-syzkaller #0 [ 843.759854][T25874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 843.769905][T25874] Call Trace: [ 843.773202][T25874] dump_stack+0x18f/0x20d [ 843.777527][T25874] should_fail.cold+0x5/0x14 [ 843.782116][T25874] should_failslab+0x5/0xf [ 843.786538][T25874] kmem_cache_alloc_trace+0x47/0x2d0 [ 843.791828][T25874] __hw_addr_create_ex+0x5b/0x310 [ 843.796894][T25874] __hw_addr_add_ex+0x1ed/0x2b0 [ 843.801776][T25874] dev_addr_init+0x10b/0x1f0 [ 843.806371][T25874] ? __hw_addr_unsync_dev+0x190/0x190 [ 843.811753][T25874] alloc_netdev_mqs+0x13d/0xdc0 [ 843.816599][T25874] ? macvlan_process_broadcast+0x610/0x610 [ 843.822429][T25874] rtnl_create_link+0x219/0xad0 [ 843.827295][T25874] __rtnl_newlink+0xfa0/0x1730 [ 843.832068][T25874] ? rtnl_setlink+0x3c0/0x3c0 [ 843.836726][T25874] ? lock_downgrade+0x820/0x820 [ 843.841566][T25874] ? is_bpf_text_address+0xcb/0x160 [ 843.846754][T25874] ? kernel_text_address+0xbd/0xf0 [ 843.851873][T25874] ? __kernel_text_address+0x9/0x30 [ 843.857079][T25874] ? unwind_get_return_address+0x51/0x90 [ 843.862691][T25874] ? profile_setup.cold+0xc1/0xc1 [ 843.867706][T25874] ? arch_stack_walk+0x97/0xf0 [ 843.872486][T25874] ? stack_trace_save+0x8c/0xc0 [ 843.877340][T25874] ? stack_trace_consume_entry+0x160/0x160 [ 843.883138][T25874] ? __kasan_slab_free+0xf5/0x140 [ 843.888150][T25874] ? kmem_cache_free+0x7f/0x310 [ 843.893041][T25874] ? mark_lock+0xbc/0x1710 [ 843.897457][T25874] ? pcibios_lookup_irq+0x764/0xb80 [ 843.902657][T25874] ? trace_kmalloc+0xfd/0x130 [ 843.907336][T25874] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 843.912882][T25874] rtnl_newlink+0x64/0xa0 [ 843.917203][T25874] ? __rtnl_newlink+0x1730/0x1730 [ 843.922214][T25874] rtnetlink_rcv_msg+0x44e/0xad0 [ 843.927158][T25874] ? rtnetlink_put_metrics+0x510/0x510 [ 843.932614][T25874] ? perf_trace_lock+0xeb/0x4a0 [ 843.937456][T25874] ? __lockdep_free_key_range+0x110/0x110 [ 843.943166][T25874] netlink_rcv_skb+0x15a/0x430 [ 843.947936][T25874] ? rtnetlink_put_metrics+0x510/0x510 [ 843.953395][T25874] ? netlink_ack+0xa10/0xa10 [ 843.957999][T25874] netlink_unicast+0x533/0x7d0 [ 843.962753][T25874] ? netlink_attachskb+0x810/0x810 [ 843.967863][T25874] ? _copy_from_iter_full+0x247/0x890 [ 843.973244][T25874] ? __phys_addr+0x9a/0x110 [ 843.977738][T25874] ? __phys_addr_symbol+0x2c/0x70 [ 843.982765][T25874] ? __check_object_size+0x171/0x3e4 [ 843.988057][T25874] netlink_sendmsg+0x856/0xd90 [ 843.992813][T25874] ? netlink_unicast+0x7d0/0x7d0 [ 843.997755][T25874] ? netlink_unicast+0x7d0/0x7d0 [ 844.002687][T25874] sock_sendmsg+0xcf/0x120 [ 844.007097][T25874] ____sys_sendmsg+0x6e8/0x810 [ 844.011857][T25874] ? kernel_sendmsg+0x50/0x50 [ 844.016515][T25874] ? do_recvmmsg+0x6d0/0x6d0 [ 844.021113][T25874] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 844.027100][T25874] ? __lockdep_free_key_range+0x110/0x110 [ 844.032806][T25874] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 844.038783][T25874] ___sys_sendmsg+0xf3/0x170 [ 844.043353][T25874] ? sendmsg_copy_msghdr+0x160/0x160 [ 844.048627][T25874] ? __fget_files+0x272/0x400 [ 844.053311][T25874] ? lock_downgrade+0x820/0x820 [ 844.058141][T25874] ? __lockdep_free_key_range+0x110/0x110 [ 844.063848][T25874] ? find_held_lock+0x2d/0x110 [ 844.068606][T25874] ? ksys_write+0x212/0x250 [ 844.073103][T25874] ? __fget_files+0x294/0x400 [ 844.077765][T25874] ? __fget_light+0xea/0x280 [ 844.082340][T25874] __sys_sendmsg+0xe5/0x1b0 [ 844.086846][T25874] ? __sys_sendmsg_sock+0xb0/0xb0 [ 844.091894][T25874] ? do_syscall_64+0x1c/0xe0 [ 844.096510][T25874] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 844.102487][T25874] do_syscall_64+0x60/0xe0 [ 844.106909][T25874] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 844.112799][T25874] RIP: 0033:0x45cba9 [ 844.116729][T25874] Code: Bad RIP value. [ 844.120785][T25874] RSP: 002b:00007ff54f5cec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.129214][T25874] RAX: ffffffffffffffda RBX: 0000000000503800 RCX: 000000000045cba9 [ 844.137181][T25874] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 844.145158][T25874] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 844.153118][T25874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 844.161067][T25874] R13: 0000000000000a6c R14: 00000000004cd48b R15: 00007ff54f5cf6d4 [ 844.244833][ T3836] usbhid 5-1:0.0: can't add hid device: -71 [ 844.250920][ T3836] usbhid: probe of 5-1:0.0 failed with error -71 [ 844.259182][ T3836] usb 5-1: USB disconnect, device number 123 10:22:36 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='hsr0\x00', 0x10) accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x2, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x6004c808}, 0x800) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 10:22:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0xa000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x0, 0x4080040, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='THAWED\x00', 0x7) 10:22:36 executing program 4 (fault-call:14 fault-nth:6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) [ 845.495980][T25918] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000000, 0x76643) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r3) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x10, 0xa}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, [], 0x20}, 0x0, 0x0, 0x3, 0x4, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4) 10:22:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0xb000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet(0xa, 0x801, 0x1) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000180)={0xfffffff, 0x7, 0x401, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x990afb, 0x0, [], @p_u32=&(0x7f00000000c0)=0xfffffff7}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000001c0)={'team_slave_0\x00', 0x400}) sendto$rxrpc(r2, &(0x7f0000000000)="0673bde042b19ee60ecf9f41c705af19b6898364109302fe0b5f60a2ce674ea2fab9635a0c22e69a92faead97608c07f27eca6d363a185488e0386d0376f2d355836fd69fb93f78b", 0x48, 0x4000040, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24) 10:22:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 845.727009][T25938] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 845.804892][ T5] usb 5-1: new high-speed USB device number 124 using dummy_hcd 10:22:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:37 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x9) [ 846.032298][T25954] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 846.044797][ T5] usb 5-1: Using ep0 maxpacket: 16 10:22:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x14}}]}, 0x50}}, 0x44) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x42000, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendfile(r4, r5, &(0x7f0000000040)=0x2, 0x3ff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x4, @private2, 0x101}}, 0x40, 0x6, 0xfc49, 0x81, 0x96, 0x5, 0x3f}, 0x9c) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2000, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r6 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) clone(0x40040400, &(0x7f0000000240)="bf9a51e2a8ee984497e48338a32bd6c0c23f99f34d3141c52471a71de70395fffccacd87d318405f50543e5d41b101022f97ba584319df9784c3aeb313f2de6dbbed255e7608cba2", &(0x7f0000000100), &(0x7f00000002c0), &(0x7f0000000300)="c4c77fcb5d5f77c513cc9acd56bf3fa53f5dc6ef5dd345bdc472d614e05ba03127") [ 846.166557][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 10:22:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000000, 0x76643) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r2, r3) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x10, 0xa}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, [], 0x20}, 0x0, 0x0, 0x3, 0x4, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4) 10:22:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 846.208807][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.267493][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.310780][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 846.335244][T25963] IPVS: ftp: loaded support on port[0] = 21 [ 846.349857][T25966] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 846.455740][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 846.478466][ T5] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 846.520811][ T5] usb 5-1: Product: syz [ 846.543326][ T5] usb 5-1: config 0 descriptor?? [ 846.683064][T25963] IPVS: ftp: loaded support on port[0] = 21 [ 846.775080][ T65] tipc: TX() has been purged, node left! [ 847.028173][T25921] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 847.036585][T25921] FAULT_INJECTION: forcing a failure. [ 847.036585][T25921] name failslab, interval 1, probability 0, space 0, times 0 [ 847.050060][T25921] CPU: 1 PID: 25921 Comm: syz-executor.4 Not tainted 5.8.0-rc4-syzkaller #0 [ 847.058727][T25921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 847.068773][T25921] Call Trace: [ 847.072067][T25921] dump_stack+0x18f/0x20d [ 847.076404][T25921] should_fail.cold+0x5/0x14 [ 847.080999][T25921] should_failslab+0x5/0xf [ 847.085412][T25921] kmem_cache_alloc_node_trace+0x27d/0x400 [ 847.091221][T25921] __kmalloc_node+0x38/0x60 [ 847.095725][T25921] kvmalloc_node+0x61/0xf0 [ 847.100144][T25921] alloc_netdev_mqs+0x6eb/0xdc0 [ 847.105007][T25921] rtnl_create_link+0x219/0xad0 [ 847.109871][T25921] __rtnl_newlink+0xfa0/0x1730 [ 847.114676][T25921] ? rtnl_setlink+0x3c0/0x3c0 [ 847.119370][T25921] ? lock_downgrade+0x820/0x820 [ 847.124245][T25921] ? is_bpf_text_address+0xcb/0x160 [ 847.129455][T25921] ? kernel_text_address+0xbd/0xf0 [ 847.134573][T25921] ? __kernel_text_address+0x9/0x30 [ 847.139800][T25921] ? unwind_get_return_address+0x51/0x90 [ 847.145442][T25921] ? profile_setup.cold+0xc1/0xc1 [ 847.150476][T25921] ? arch_stack_walk+0x97/0xf0 [ 847.155264][T25921] ? stack_trace_save+0x8c/0xc0 [ 847.160125][T25921] ? stack_trace_consume_entry+0x160/0x160 [ 847.165946][T25921] ? __kasan_slab_free+0xf5/0x140 [ 847.170982][T25921] ? kmem_cache_free+0x7f/0x310 [ 847.175878][T25921] ? mark_lock+0xbc/0x1710 [ 847.180299][T25921] ? pcibios_lookup_irq+0x764/0xb80 [ 847.185499][T25921] ? trace_kmalloc+0xfd/0x130 [ 847.190173][T25921] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 847.195720][T25921] rtnl_newlink+0x64/0xa0 [ 847.200047][T25921] ? __rtnl_newlink+0x1730/0x1730 [ 847.205067][T25921] rtnetlink_rcv_msg+0x44e/0xad0 [ 847.210005][T25921] ? rtnetlink_put_metrics+0x510/0x510 [ 847.215560][T25921] ? perf_trace_lock+0xeb/0x4a0 [ 847.220413][T25921] ? __lockdep_free_key_range+0x110/0x110 [ 847.226132][T25921] netlink_rcv_skb+0x15a/0x430 [ 847.230898][T25921] ? rtnetlink_put_metrics+0x510/0x510 [ 847.236359][T25921] ? netlink_ack+0xa10/0xa10 [ 847.240971][T25921] netlink_unicast+0x533/0x7d0 [ 847.245769][T25921] ? netlink_attachskb+0x810/0x810 [ 847.250891][T25921] ? _copy_from_iter_full+0x247/0x890 [ 847.256269][T25921] ? __phys_addr+0x9a/0x110 [ 847.260801][T25921] ? __phys_addr_symbol+0x2c/0x70 [ 847.265845][T25921] ? __check_object_size+0x171/0x3e4 [ 847.271145][T25921] netlink_sendmsg+0x856/0xd90 [ 847.275921][T25921] ? netlink_unicast+0x7d0/0x7d0 [ 847.280880][T25921] ? netlink_unicast+0x7d0/0x7d0 [ 847.285825][T25921] sock_sendmsg+0xcf/0x120 [ 847.290261][T25921] ____sys_sendmsg+0x6e8/0x810 [ 847.295037][T25921] ? kernel_sendmsg+0x50/0x50 [ 847.299717][T25921] ? do_recvmmsg+0x6d0/0x6d0 [ 847.304315][T25921] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 847.310293][T25921] ? __lockdep_free_key_range+0x110/0x110 [ 847.316003][T25921] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 847.321980][T25921] ___sys_sendmsg+0xf3/0x170 [ 847.326566][T25921] ? sendmsg_copy_msghdr+0x160/0x160 [ 847.331846][T25921] ? __fget_files+0x272/0x400 [ 847.336519][T25921] ? lock_downgrade+0x820/0x820 [ 847.341359][T25921] ? __lockdep_free_key_range+0x110/0x110 [ 847.347084][T25921] ? find_held_lock+0x2d/0x110 [ 847.351844][T25921] ? ksys_write+0x212/0x250 [ 847.356351][T25921] ? __fget_files+0x294/0x400 [ 847.361026][T25921] ? __fget_light+0xea/0x280 [ 847.365615][T25921] __sys_sendmsg+0xe5/0x1b0 [ 847.370114][T25921] ? __sys_sendmsg_sock+0xb0/0xb0 [ 847.375146][T25921] ? do_syscall_64+0x1c/0xe0 [ 847.379737][T25921] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 847.385715][T25921] do_syscall_64+0x60/0xe0 [ 847.390128][T25921] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 847.396026][T25921] RIP: 0033:0x45cba9 [ 847.399903][T25921] Code: Bad RIP value. [ 847.403955][T25921] RSP: 002b:00007ff54f5cec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.412388][T25921] RAX: ffffffffffffffda RBX: 0000000000503800 RCX: 000000000045cba9 [ 847.420363][T25921] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 847.428330][T25921] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 847.436298][T25921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 847.444270][T25921] R13: 0000000000000a6c R14: 00000000004cd48b R15: 00007ff54f5cf6d4 [ 847.524950][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 847.531006][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 847.541032][ T5] usb 5-1: USB disconnect, device number 124 10:22:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:39 executing program 4 (fault-call:14 fault-nth:7): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:22:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setregid(0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) fchown(r0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x20001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x400822, 0x0) accept$inet(r2, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="01000000000000000a004e24fffffffffe880000000000000000000000000101010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000070000000a004e2000000d86fe80000000000000000000000000001701040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000008fe88000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22ffff03b9fe8000000000000000000000000000aa00040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000a004e2200009502fe8000000000000000000000000000bb01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000a004e2300000081fe880000000000000000000000000101970d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000003ff02000000000000000000000000000103000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000001ff0200000000000000000000000000010600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000713cba59a946d6abe552f99d1a6ad1875b193b53fab045060080adff36f841a58bb81f4cf1ddbac5ccec399a33b5622b4ea711fca070393be30b6975b388f9717f88dcc53684454bd9b6a5c959ba8d83dc8c62218ee251b954b8cbcf7c5ba86f39afe916d0fa237feae3045e160fcafea7fb1e8ec132f8829481816ad8f489a15572f8b52ff0a977b53fdde88a8e62d1c5190e8ec6f44cdcd6bde4ec7c7f828fe0ab9da633367496aa12628bcf53b43efa257e2bdc39c467913457efdc252a70452874932aaba218cf7b682ab623e7f7b1f0934f510e7caff0c518e709619095b4c90e1765c0e4731169c41f35132708000000000000006de397a677c207a54287f1e2934de5547a6031f9d8d96335f5ca762adaa05119fd8c92144d880c2894c441a4001650"], 0x410) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x3}]}, 0x3c}}, 0x0) preadv(r1, 0x0, 0xffffffffffffffcf, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149042, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') [ 848.056822][T26042] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x11000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 848.354757][ T3838] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 848.414941][T26059] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x12000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 848.580283][T26046] syz-executor.5 (26046) used greatest stack depth: 23120 bytes left [ 848.604778][ T3838] usb 5-1: Using ep0 maxpacket: 16 [ 848.641052][T26071] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 848.696807][T26071] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 848.735444][ T3838] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 848.754690][ T3838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.804689][ T3838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.814457][ T3838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 848.945421][ T3838] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 848.954504][ T3838] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 10:22:40 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0x4f, 0x0, "2920fcf1afecf07e06f8fe8bc1865277cd821987df72f5371e50b4dd0a344a4332b42d28f56c8bc22caf1f8e9e9017bfe1443beb0501ac395f1cf5bfd2a5f8672fdeed4a51048935bf830b620792388a"}, 0xd8) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 10:22:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 849.014929][ T3838] usb 5-1: Product: syz [ 849.041658][ T3838] usb 5-1: config 0 descriptor?? [ 849.543209][T26045] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 849.575590][T26045] FAULT_INJECTION: forcing a failure. [ 849.575590][T26045] name failslab, interval 1, probability 0, space 0, times 0 [ 849.603265][T26045] CPU: 0 PID: 26045 Comm: syz-executor.4 Not tainted 5.8.0-rc4-syzkaller #0 [ 849.611953][T26045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 849.622008][T26045] Call Trace: [ 849.625309][T26045] dump_stack+0x18f/0x20d [ 849.629656][T26045] should_fail.cold+0x5/0x14 [ 849.634255][T26045] should_failslab+0x5/0xf [ 849.638683][T26045] kmem_cache_alloc_node_trace+0x27d/0x400 [ 849.644504][T26045] __kmalloc_node+0x38/0x60 [ 849.649042][T26045] kvmalloc_node+0x61/0xf0 [ 849.653469][T26045] alloc_netdev_mqs+0x6eb/0xdc0 [ 849.658336][T26045] rtnl_create_link+0x219/0xad0 [ 849.663198][T26045] __rtnl_newlink+0xfa0/0x1730 [ 849.667983][T26045] ? rtnl_setlink+0x3c0/0x3c0 [ 849.672663][T26045] ? lock_downgrade+0x820/0x820 [ 849.677531][T26045] ? is_bpf_text_address+0xcb/0x160 [ 849.682765][T26045] ? kernel_text_address+0xbd/0xf0 [ 849.687898][T26045] ? __kernel_text_address+0x9/0x30 [ 849.693106][T26045] ? unwind_get_return_address+0x51/0x90 [ 849.698759][T26045] ? profile_setup.cold+0xc1/0xc1 [ 849.703798][T26045] ? arch_stack_walk+0x97/0xf0 [ 849.708590][T26045] ? stack_trace_save+0x8c/0xc0 [ 849.713454][T26045] ? stack_trace_consume_entry+0x160/0x160 [ 849.719262][T26045] ? __kasan_slab_free+0xf5/0x140 [ 849.724282][T26045] ? kmem_cache_free+0x7f/0x310 [ 849.729181][T26045] ? mark_lock+0xbc/0x1710 [ 849.733601][T26045] ? pcibios_lookup_irq+0x764/0xb80 [ 849.738801][T26045] ? trace_kmalloc+0xfd/0x130 [ 849.743481][T26045] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 849.749029][T26045] rtnl_newlink+0x64/0xa0 [ 849.753356][T26045] ? __rtnl_newlink+0x1730/0x1730 [ 849.758378][T26045] rtnetlink_rcv_msg+0x44e/0xad0 [ 849.763328][T26045] ? rtnetlink_put_metrics+0x510/0x510 [ 849.768790][T26045] ? perf_trace_lock+0xeb/0x4a0 [ 849.773647][T26045] ? __lockdep_free_key_range+0x110/0x110 [ 849.779374][T26045] netlink_rcv_skb+0x15a/0x430 [ 849.784146][T26045] ? rtnetlink_put_metrics+0x510/0x510 [ 849.789615][T26045] ? netlink_ack+0xa10/0xa10 [ 849.794222][T26045] netlink_unicast+0x533/0x7d0 [ 849.798997][T26045] ? netlink_attachskb+0x810/0x810 [ 849.804113][T26045] ? _copy_from_iter_full+0x247/0x890 [ 849.809491][T26045] ? __phys_addr+0x9a/0x110 [ 849.813996][T26045] ? __phys_addr_symbol+0x2c/0x70 [ 849.819035][T26045] ? __check_object_size+0x171/0x3e4 [ 849.824334][T26045] netlink_sendmsg+0x856/0xd90 [ 849.829113][T26045] ? netlink_unicast+0x7d0/0x7d0 [ 849.834066][T26045] ? netlink_unicast+0x7d0/0x7d0 [ 849.839007][T26045] sock_sendmsg+0xcf/0x120 [ 849.843432][T26045] ____sys_sendmsg+0x6e8/0x810 [ 849.848199][T26045] ? kernel_sendmsg+0x50/0x50 [ 849.852870][T26045] ? do_recvmmsg+0x6d0/0x6d0 [ 849.857465][T26045] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 849.863447][T26045] ? __lockdep_free_key_range+0x110/0x110 [ 849.869161][T26045] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 849.875141][T26045] ___sys_sendmsg+0xf3/0x170 [ 849.879729][T26045] ? sendmsg_copy_msghdr+0x160/0x160 [ 849.885010][T26045] ? __fget_files+0x272/0x400 [ 849.889687][T26045] ? lock_downgrade+0x820/0x820 [ 849.894557][T26045] ? __lockdep_free_key_range+0x110/0x110 [ 849.900276][T26045] ? find_held_lock+0x2d/0x110 [ 849.905041][T26045] ? ksys_write+0x212/0x250 [ 849.909551][T26045] ? __fget_files+0x294/0x400 [ 849.914237][T26045] ? __fget_light+0xea/0x280 [ 849.918862][T26045] __sys_sendmsg+0xe5/0x1b0 [ 849.923370][T26045] ? __sys_sendmsg_sock+0xb0/0xb0 [ 849.928425][T26045] ? do_syscall_64+0x1c/0xe0 [ 849.933019][T26045] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 849.939009][T26045] do_syscall_64+0x60/0xe0 [ 849.943436][T26045] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 849.949328][T26045] RIP: 0033:0x45cba9 [ 849.953213][T26045] Code: Bad RIP value. [ 849.957271][T26045] RSP: 002b:00007ff54f5cec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.965699][T26045] RAX: ffffffffffffffda RBX: 0000000000503800 RCX: 000000000045cba9 [ 849.973686][T26045] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 849.981660][T26045] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 849.989630][T26045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 849.997597][T26045] R13: 0000000000000a6c R14: 00000000004cd48b R15: 00007ff54f5cf6d4 [ 850.134776][ T3838] usbhid 5-1:0.0: can't add hid device: -71 [ 850.140836][ T3838] usbhid: probe of 5-1:0.0 failed with error -71 [ 850.159089][ T3838] usb 5-1: USB disconnect, device number 125 10:22:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) connect(r1, &(0x7f0000000000)=@can, 0x80) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setregid(0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) fchown(r0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x20001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x400822, 0x0) accept$inet(r2, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="01000000000000000a004e24fffffffffe880000000000000000000000000101010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000070000000a004e2000000d86fe80000000000000000000000000001701040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000008fe88000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22ffff03b9fe8000000000000000000000000000aa00040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000a004e2200009502fe8000000000000000000000000000bb01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000a004e2300000081fe880000000000000000000000000101970d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000003ff02000000000000000000000000000103000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000001ff0200000000000000000000000000010600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000713cba59a946d6abe552f99d1a6ad1875b193b53fab045060080adff36f841a58bb81f4cf1ddbac5ccec399a33b5622b4ea711fca070393be30b6975b388f9717f88dcc53684454bd9b6a5c959ba8d83dc8c62218ee251b954b8cbcf7c5ba86f39afe916d0fa237feae3045e160fcafea7fb1e8ec132f8829481816ad8f489a15572f8b52ff0a977b53fdde88a8e62d1c5190e8ec6f44cdcd6bde4ec7c7f828fe0ab9da633367496aa12628bcf53b43efa257e2bdc39c467913457efdc252a70452874932aaba218cf7b682ab623e7f7b1f0934f510e7caff0c518e709619095b4c90e1765c0e4731169c41f35132708000000000000006de397a677c207a54287f1e2934de5547a6031f9d8d96335f5ca762adaa05119fd8c92144d880c2894c441a4001650"], 0x410) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x3}]}, 0x3c}}, 0x0) preadv(r1, 0x0, 0xffffffffffffffcf, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149042, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') 10:22:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x12060000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:42 executing program 4 (fault-call:14 fault-nth:8): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:22:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x13000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 850.749355][T26097] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_INPUT(r3, &(0x7f0000000180)={0x8, {"bf7c11d60f2e70983d383e0d3be4ff65e2c10df1fa7af2751e554502968201ad5ccb042bda1af9b47ed15514cb5931fdf9ee4f8130584ce9e2ba142418746c74b75466b67ecafa64bc47b1752e84ada0c9f365072e9a086c8e6240c2e198a9ad92a7fccc8e6f573e96203d47d2b0ab1c1187ca11e4f54a2caffc62ceff177c634a7f1c1227e385da56c8f83a71067cbe38447b883b29c73e0947731930e7997e87f9f9ac28bbe270290297b21874e74f263e810a78d8ac1c24698446a38b5659127786653fb5be010909634630c7ebbd2881d03d6babd98ad241e10bebaa527687c49271888beb7a88be36aa5d0b86c9ba8bea033bef7509cc719a70d97fc8e24c5f87105d6d952ae05c446b03bfcd5aaf44e2b63c16da5b89884321f073482fdc99b6173addb61cb2b8906a7fd485cac8df5570bbc40d6eb1cdd291bb62c510a6e2a2421d9d3d40911685ca355a672b402cd566840a1f4254e3865d1ae871af4f9a66b8e1a30078559947dd5bb229c776105becfd26201292138da9f293c4cc9939e8c24560d4069c532216ec781462e4e2d663be761a9a15846e53f3da02b25177237671f361f3587e9a5b04143a8fb0ef515a6dd437f8216668134b2a1897bc61c6f09df61598f3dc3b4a514ccda4f907a4e9ad9d3477004b3ff61493d180a6288129f77a8013da69283163d7d81346e60c462638685205e15d6d19095a4ce5866de963bdab574a84dcb53503b7c2a538578102e16daf357e02551b4b4cd491a6b441680d2ca4b5f4074660c53017ab38f2f07e48fca1f8e5654177fc06d0fdea5e9c8036c73c934735cd889a28547e42c9eac05ec417a4fdaecb5dd6e026a75103e594f5a35d7b93f0c241194e54705c8c6032d3191ecd9b9bdd605c6086937b3b3607f7da9ee4e82858032391bdbae8ba191a914ab6c0b0773b8a59eccbb64a99552db8dbd7e1c6f99cd8a07acca6b67e52107a60ef5698417bf3adc2cc37acbbdfc9c412cd185fae3bc4f746291e8773aae5e823c49455aa3a62cdb017241519cbcc32778b40f985b1fc915109c421b0bc53bfb8895b4d825918fc55600c4092350108a992559d9476e10159818a6791e6c10fdad0c0ceca80408b5dca3a2c9d9736c0e276b998c5321c0609745562e41fec4298ffe59600f3f0b33cb7db3daa7a7c6ac2855f2f90c24dfdc6c15ce8ed998bf53f93ae2eb70e4d507d75b4055326585688a474e968b18a2b318f6a890840fb6f512ce5beb4e1358a492bed2774c63ee9f0cbd75e051bb2e5272966e8ebf7fa14668c6bb67ae3bbc83438a05c2bd7b758d1dbcd467bad95f1842df88cb01d5f4dfb30ba682413854a4fca670c6e5ff611f2b6889e769c2e1d7538dc9399b906ead7a5e0a609a0ce89c3df620749b80bbaeebf17b76c96b3763094fafa78d742e7cd8c0fae4d788bfe44a280e89722b0b4b31108f5a9876e538c054f5e9aff0a3800caf8bdb0dfa0fa9915e251572eddd7a7cdacfc191bcd0e3056d1de154a346b38e3c2f88fdac6ed87af9cd68bdb9a6d5672690ec863cac9c6829de884d0b3e5bdc866bd9daacba74aab47cad15157374c8a188ae3ec12041322ad0b875508c506bd23763f84fdd6ffc2351fcb714e28130621ec0415a665a1f563df18f20e3a8be9b13c9f7d18b8b62413c4846b2dc151f9d3a183027ee41db27a6947ec357b7076d97b11d98375182b7ffb71441302aa76c3aa2a662dd39ec026f36da1330f30c051247cd6f98fa308b318c9a1b0e188bb8d08ff0cc45f467dc81d20644a5571af708ff2f7ef9f41e7df934fa6901dbeaf53094a261906cbeb59ff3aa89d10a30aa94a709d34301fc3b20b3e64c41d051829a6f875d6e724b79c55fc3d17019b3c2356377be97d25546ceaa9e17dacf778dc48aa8b6b18f74bd14d93de9b53f6b1c0ec67e160202ad3c2301e85d95c771265fa337fab2529d512d9b0936031070d58e20a24786fcf4d4f4ba3bd16eb3cbf56e8a95c8b064b5425193fb7b3e628f99d21e0f5c8e31c7d320e5a945dd0bfea1841ffec7bde79120c015d10616d5500278bafd053fb59d1b8cd909f43be20e55f422d9c04b50583b5873c6db4642f9035778c5ff077fe8ce89ab9ab8b23db081f57402ebb21b80af19f0fc3b6166df47107ecbad5f997e7daf4f4d7bd1b313ef6ec3c88e974cd39748fb1aef48b4d7817771ccf7069d032f7c85e30ba90c72ca81fe79ebaa969fc574cc4444e9bc2e6bf3247c7fe99c787bfe60d08f706c0b3f48fedeaf11a12204fe4c2ecc84a39062629c1368ab0bb7733687043924e64ffa66973d534ec2579315d2f28bed92670d016dad479453a0b276a088e6a08ffb40972fed732a9c5a02c6496d7294fceffb8e5c2704912b6e72ab0f5d9240a5991076585aabf8e65ba66b6de0d791a9826a8b5ebcb94c58ac1dcde53b447aef76d8a0b77c2d5671e07dd3f239864497b435c9fc62a7304783aa280f98a96c76b517c3a8c33c4916c626c008dc7e6160c8c44bfd458e67246ccce750b3d8508104095f50a6b9ff2ab125021e02a532e920aba08c6c0fd01a04c34e5d4c4b19f02112342dd4aa30e29f725656a9140ea51185124f6e02d5eb21c1420ee7425d75650efbe3e0c2745178fa4e04b575d68b53143e786dd8a3201f1b39e8b530987fa8c0f714fda3c559c14776e110d5436590d4a1706a80654b0d8856fc1f445c4f24f17c98bb1bb9dfcd76023a71f8f0645220a41ede85557fd318bd646138320c7aa4762712e88415d8735bd8e902c1bbb197e6f47e6cae96228ea843cb769f12cfe21db3497f0bd9b9c9a8d72b4e64fbb5050952ff032a4b46d5280fc3a84a108d22b05fb5231be599d54e138ad71bfc008725c2f5416e10f9e70c695eb98a60125cd44ac4f37608452ce2c856caada0838cb45c65e67f8c363e0e1c023e87413f24de7a4cb76028455d471538829e02f3788afa1cdc1a19b1292df10f5b51bf2706f9153b201e668a3bb24e4a48b92ccc858db791305be2cf18398b709738ea6ac1e806f6f51576b7581644d80de57ff11042c41bf430d8793ddd59fcb9d1b63012d31b5c1516f50072449b4108f08aab2825e90894b8224bcbe6e2b9f2550ba39b2f82bdf0267774d164ec20f5ebc27eed40898fbde43b991f0a50121df901b6283f1457bd2f06393861aadfb919061fd14fbb0aedc2bc9c207a21cdcbce503c5c24f6d6199f745e1d2e857268952a1c1b7ed764564e7a6834d4aba5db7ca51c86ef807eee37c9c75554ed40f0531cdaadbb90f4115c121603121e1cd1aa248934343089cc585ffa0a2047a256d63b76f91141218cfee3d26d6cdfbe9509431ac7115e3665f2d0407121fa7f70cc2a7372f44ea3a2447b23718c66269ad9bd362be63461805b0d17d1264c20b37069961b4e4416d71f2a3a05b5529fe1fe1682253e276e4ce6d04adf84767dfb6ee34b4262311e320038c652812bddae8e5589a70c06ab7cf6212c99c0ac68907db82fd2038d6b51103582beba2a1cc965849365f24e3d5517a58300001b25557389e657989994bcf83c8e803480ef3bf84e078c69fac6b4bd9032ae6aec2abe302070e06b037c2b99729d0b718fbdb4750fde824291bfe86c26edb41dbdae77972e3cf38b5ded1d845a587fa92063d01322fee860f50ffffb05ebceda3d5c71cd6f2982872343a407af351209f3efec67636e3758c6643d6288c92080f7a6ca8119da409a16afa486ecc74cda80b3f9e0ee8757bdb93219aa89a80639e330d44b5d39fa884c1ad10c914b25ed288aa7f4af8e64859afb770f5477712aede53df4f19f1d2f5b03886697f968c093d1dfaa95fa4467ad613ca89a747890cb7496db4aeb175e9d47076fb53966154133a18ae87a07e8fa8270d7d79d99039238023956a4d63a1e426e2d90e35059fcd5071ba3acc962f4bebbb208bed31b7589dfb6a3662d75629f8ed7095c198124ee7fc9d3bb906328f392a31e4401f79275a986e3fd2f1bd24fa423f545e8043fcba7894d466c07d31b1c23bd92ba2a78d97ce622f44ea36bd2c2bc872655e098092ad209cb4e796d4cd32865bc63978c6c8516837edd1ebd2ca2b7cacd9dcc26c3137f9d90b9d10904d76e5e322c2a1b810706bb9c32e8b1ca8e2bc08cca2446c4eaf8c4816e2b0208633106ab7b6d9f7f50e37b98afa5a717fa6ad1c1e440d972fe711fb8a06b55b0f668a7192b633014adfa2e08ee830b4fa5b7cc0bf0eeb7664e440176c14bc01da21477965fa245f4a40b10f3c85bffd1a19b11ed42fba3842618cb8bd30da86b293e686077d6d7e833fa66f61f0a8126bef4785b300ef9241835404a623420ef95aff3931cb5f9b55c37f9b5cf2dce8a13d835cd0e3c045beb2e1a49ef6d49276759a6f5460339954f216fa4df05ac901358a23dc73b09a4c1caedbf6e497a109052ef2591420b56494b42ea2641f598d655b5712de35540d194e505b17edea588c9a57eeb5b7aae5a41bc911c17be268931b6cddb4c8dfb943a05a3fd27e8b1b584078f670770b8924a124718917ea610027628b57f5d7be6c441b2f17619e47a73240242dbf7a404085b5042c71b0a47e33ff3e3ac173a059c7175c697c514ea3f5fd235e42f9ba1ab7dfbff0d56a12a335fad73883cfdf953998589534766d10612930830e0d18917a7d8bb2e0120d1c137d1311ba8a792c9e4ab5dbc6bbddf4968f0fc0b838fff631067990f7b284f5ae959b85df99b4044a1f19ec9b04f51eb65ded0a064169541c2f0840dafb754f84d074f32d830b0f2de3907c3c458521c0785494cc4e96b75211b34c0e8f8f7a9bf08b6b6208b201d06e35d5f45883be4a9c768c068fec7b582042183be72c97e0f9d831b27122797881898ff32da4a36c470e854260ae1c72e4457590abb6e3cba6d600f00ab9a9c0560c075de41ce75ced9c041dbe2826a332ec1ae92cc9c4540b1ce799f0b23a19915314bcbf26896255c1e0f3d2e40b128a46e88625340aabc2a068cb90a84763cec26f115c9d230eedb1b12f78de174ec393b206b31c1b2c806e3e1a3df5298d0584410eef79978da5344713046a1c0d2c33e58fc0165ab5569efb371c1c3f0d9e1a3692d2d3cc6e1490c0e529da661486a4d9e9b61ea73d8b8ca74249a2f50cda5fe2c68d8f5cd68c4de272b0c3b17e8ed3398fa734cca7747843260dd2ebbbf934f55a07e98fb3ccbcea07b8cb319d2d6112be9595061b1a7f37d2c542cd20f61617abb25dc70635590bcb07643973c672e359f4622fc649babf208e7c5cf768c8dc179ab1e5d625baf7b5549f6dd863bb2b60eb4a783e6fccd1582ad77777ff4ad90441b8631c43c1d4927f94cd032b52cef7255242f6400a8ac0ac158466525dc473a27d7582a232177454b4496cd458d95a725dc5859944a789eee423327ddbf4504e5b4e5b51ad2db95b7d7adf9132f5f1b36eac97cce0f5bbb35e31336a96b036de630c57d9b4e0f4f237d41fcd8ef0a0a47609c6464c138fc5be13fe6c1cd94f56c680d06e0e9bb45adb1d73978d3ff5d3aaa2d9ea9d086cebdd61fc336999f46c9cca5bb635307c260304f135892ca7dffc97244f529b84bbbd1651b719fd16b4b44c63082485783b195ffc2837f1122001e2977b28878fd616911c0443ae29de1622a71bde860eb745cf6dabb5d66ca6144cd661901d0068566fdc0d38af84e4aa9415b4fbd26144a62f98b91886c130d9995cf4747345b4f80d4e8dbb45fb9cc8bf8905c54ceb6ec98869abc8ee702a85491b59a2", 0x1000}}, 0x1006) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 851.004758][ T2486] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 851.020701][T26110] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x20000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 851.256479][ T2486] usb 5-1: Using ep0 maxpacket: 16 [ 851.265449][T26121] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 851.395537][ T2486] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 851.414674][ T2486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.428778][ T2486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.439710][ T2486] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 851.534897][ T2486] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 851.543938][ T2486] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 851.552184][ T2486] usb 5-1: Product: syz [ 851.563671][ T2486] usb 5-1: config 0 descriptor?? [ 852.037989][T26091] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 852.047705][T26091] FAULT_INJECTION: forcing a failure. [ 852.047705][T26091] name failslab, interval 1, probability 0, space 0, times 0 [ 852.060693][T26091] CPU: 1 PID: 26091 Comm: syz-executor.4 Not tainted 5.8.0-rc4-syzkaller #0 [ 852.069382][T26091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.079435][T26091] Call Trace: [ 852.082716][T26091] dump_stack+0x18f/0x20d [ 852.087047][T26091] should_fail.cold+0x5/0x14 [ 852.091644][T26091] should_failslab+0x5/0xf [ 852.096065][T26091] kmem_cache_alloc_node_trace+0x27d/0x400 [ 852.101879][T26091] __kmalloc_node+0x38/0x60 [ 852.106407][T26091] kvmalloc_node+0x61/0xf0 [ 852.110847][T26091] alloc_netdev_mqs+0x884/0xdc0 [ 852.115699][T26091] rtnl_create_link+0x219/0xad0 [ 852.120562][T26091] __rtnl_newlink+0xfa0/0x1730 [ 852.125344][T26091] ? rtnl_setlink+0x3c0/0x3c0 [ 852.130014][T26091] ? lock_downgrade+0x820/0x820 [ 852.134875][T26091] ? is_bpf_text_address+0xcb/0x160 [ 852.140080][T26091] ? kernel_text_address+0xbd/0xf0 [ 852.145217][T26091] ? __kernel_text_address+0x9/0x30 [ 852.150425][T26091] ? unwind_get_return_address+0x51/0x90 [ 852.156066][T26091] ? profile_setup.cold+0xc1/0xc1 [ 852.161101][T26091] ? arch_stack_walk+0x97/0xf0 [ 852.165890][T26091] ? stack_trace_save+0x8c/0xc0 [ 852.170754][T26091] ? stack_trace_consume_entry+0x160/0x160 [ 852.176563][T26091] ? __kasan_slab_free+0xf5/0x140 [ 852.181583][T26091] ? kmem_cache_free+0x7f/0x310 [ 852.186487][T26091] ? mark_lock+0xbc/0x1710 [ 852.190911][T26091] ? pcibios_lookup_irq+0x764/0xb80 [ 852.196104][T26091] ? trace_kmalloc+0xfd/0x130 [ 852.200774][T26091] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 852.206329][T26091] rtnl_newlink+0x64/0xa0 [ 852.210660][T26091] ? __rtnl_newlink+0x1730/0x1730 [ 852.215693][T26091] rtnetlink_rcv_msg+0x44e/0xad0 [ 852.220639][T26091] ? rtnetlink_put_metrics+0x510/0x510 [ 852.226097][T26091] ? perf_trace_lock+0xeb/0x4a0 [ 852.230960][T26091] ? __lockdep_free_key_range+0x110/0x110 [ 852.236711][T26091] netlink_rcv_skb+0x15a/0x430 [ 852.241457][T26091] ? rtnetlink_put_metrics+0x510/0x510 [ 852.246925][T26091] ? netlink_ack+0xa10/0xa10 [ 852.251512][T26091] netlink_unicast+0x533/0x7d0 [ 852.256300][T26091] ? netlink_attachskb+0x810/0x810 [ 852.261416][T26091] ? _copy_from_iter_full+0x247/0x890 [ 852.266784][T26091] ? __phys_addr+0x9a/0x110 [ 852.271276][T26091] ? __phys_addr_symbol+0x2c/0x70 [ 852.276291][T26091] ? __check_object_size+0x171/0x3e4 [ 852.281579][T26091] netlink_sendmsg+0x856/0xd90 [ 852.286345][T26091] ? netlink_unicast+0x7d0/0x7d0 [ 852.291276][T26091] ? netlink_unicast+0x7d0/0x7d0 [ 852.296206][T26091] sock_sendmsg+0xcf/0x120 [ 852.300611][T26091] ____sys_sendmsg+0x6e8/0x810 [ 852.305372][T26091] ? kernel_sendmsg+0x50/0x50 [ 852.310036][T26091] ? do_recvmmsg+0x6d0/0x6d0 [ 852.314637][T26091] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 852.320628][T26091] ? __lockdep_free_key_range+0x110/0x110 [ 852.326351][T26091] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 852.332337][T26091] ___sys_sendmsg+0xf3/0x170 [ 852.336928][T26091] ? sendmsg_copy_msghdr+0x160/0x160 [ 852.342210][T26091] ? __fget_files+0x272/0x400 [ 852.346912][T26091] ? lock_downgrade+0x820/0x820 [ 852.351780][T26091] ? __lockdep_free_key_range+0x110/0x110 [ 852.357500][T26091] ? find_held_lock+0x2d/0x110 [ 852.362275][T26091] ? ksys_write+0x212/0x250 [ 852.366781][T26091] ? __fget_files+0x294/0x400 [ 852.371462][T26091] ? __fget_light+0xea/0x280 [ 852.376075][T26091] __sys_sendmsg+0xe5/0x1b0 [ 852.380574][T26091] ? __sys_sendmsg_sock+0xb0/0xb0 [ 852.385607][T26091] ? do_syscall_64+0x1c/0xe0 [ 852.390207][T26091] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 852.396180][T26091] do_syscall_64+0x60/0xe0 [ 852.400595][T26091] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 852.406474][T26091] RIP: 0033:0x45cba9 [ 852.410356][T26091] Code: Bad RIP value. [ 852.414395][T26091] RSP: 002b:00007ff54f5cec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.422788][T26091] RAX: ffffffffffffffda RBX: 0000000000503800 RCX: 000000000045cba9 [ 852.430760][T26091] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 10:22:43 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x3f2, 0x200, 0x70bd27, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x40800) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 10:22:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1f, 0x820) r5 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="5f4652dad4553dab458f2c1e6e46b0498a1f4434c66377d856ec39ef8fa0be702eb1a7b4e24cc718affc5af89fbeefefb0953ccaf851e42d5fd86482a7db7b4338678b0e97b97b7fb83f3680d8a7a4aeddedde2525de82d788c4c68fe86c80595b5cd7e58514bf0f5eef080c407ddbe23385", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000040)={r7, @in6={{0xa, 0x4e24, 0x42, @remote, 0x200}}, 0x1000, 0x40, 0x7, 0x80000001, 0x26, 0x4, 0x7f}, 0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x7ffff000}], 0x23, &(0x7f0000001480)=[{&(0x7f0000000000)=""/78, 0x7ffff000}], 0x1, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)) 10:22:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x31000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, 0x0, 0x0) [ 852.438715][T26091] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 852.446686][T26091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 852.454691][T26091] R13: 0000000000000a6c R14: 00000000004cd48b R15: 00007ff54f5cf6d4 [ 852.534797][ T2486] usbhid 5-1:0.0: can't add hid device: -71 [ 852.550249][T26139] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 852.570492][ T2486] usbhid: probe of 5-1:0.0 failed with error -71 10:22:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r4, 0x65f6f000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), &(0x7f0000000040)=@udp=r1, 0x1}, 0x20) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 852.633150][ T2486] usb 5-1: USB disconnect, device number 126 [ 852.650493][T26139] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:44 executing program 4 (fault-call:14 fault-nth:9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:22:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, 0x0, 0x0) 10:22:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') sendfile(r0, r1, 0x0, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x8) 10:22:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x3f000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000040)={0x2, [0x6, 0x5, 0x1], [{0x3, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x7fff, 0xffff8000, 0x0, 0x1, 0x0, 0x1}, {0x101, 0xfffffff8, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x400, 0x0, 0x0, 0x1}, {0x1000, 0x101, 0x1, 0x0, 0x1}, {0xbd7, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x2, 0x8001, 0x0, 0x1, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x3ff, 0x0, 0x1, 0x1}, {0x1, 0x6, 0x0, 0x1}], 0xff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, 0x0, 0x0) [ 853.052397][T26170] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 853.384737][ T2486] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 853.644755][ T2486] usb 5-1: Using ep0 maxpacket: 16 [ 853.785158][ T2486] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 853.799776][ T2486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.811918][ T2486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.822827][ T2486] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 853.915505][ T2486] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 853.924695][ T2486] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 853.932724][ T2486] usb 5-1: Product: syz [ 853.941637][ T2486] usb 5-1: config 0 descriptor?? [ 854.402405][T26174] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 854.410796][T26174] FAULT_INJECTION: forcing a failure. [ 854.410796][T26174] name failslab, interval 1, probability 0, space 0, times 0 [ 854.424699][T26174] CPU: 0 PID: 26174 Comm: syz-executor.4 Not tainted 5.8.0-rc4-syzkaller #0 [ 854.433414][T26174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.443448][T26174] Call Trace: [ 854.446724][T26174] dump_stack+0x18f/0x20d [ 854.451049][T26174] should_fail.cold+0x5/0x14 [ 854.455642][T26174] should_failslab+0x5/0xf [ 854.460052][T26174] kmem_cache_alloc_node_trace+0x27d/0x400 [ 854.465852][T26174] __kmalloc_node_track_caller+0x38/0x60 [ 854.471471][T26174] __alloc_skb+0xae/0x550 [ 854.475817][T26174] netlink_ack+0x331/0xa10 [ 854.480215][T26174] ? netlink_sendmsg+0xd90/0xd90 [ 854.485137][T26174] ? __lockdep_free_key_range+0x110/0x110 [ 854.490838][T26174] netlink_rcv_skb+0x344/0x430 [ 854.495595][T26174] ? rtnetlink_put_metrics+0x510/0x510 [ 854.501057][T26174] ? netlink_ack+0xa10/0xa10 [ 854.505637][T26174] netlink_unicast+0x533/0x7d0 [ 854.510386][T26174] ? netlink_attachskb+0x810/0x810 [ 854.515491][T26174] ? _copy_from_iter_full+0x247/0x890 [ 854.520844][T26174] ? __phys_addr+0x9a/0x110 [ 854.525354][T26174] ? __phys_addr_symbol+0x2c/0x70 [ 854.530361][T26174] ? __check_object_size+0x171/0x3e4 [ 854.535627][T26174] netlink_sendmsg+0x856/0xd90 [ 854.540373][T26174] ? netlink_unicast+0x7d0/0x7d0 [ 854.545294][T26174] ? netlink_unicast+0x7d0/0x7d0 [ 854.550227][T26174] sock_sendmsg+0xcf/0x120 [ 854.554648][T26174] ____sys_sendmsg+0x6e8/0x810 [ 854.559414][T26174] ? kernel_sendmsg+0x50/0x50 [ 854.564107][T26174] ? do_recvmmsg+0x6d0/0x6d0 [ 854.568700][T26174] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 854.574670][T26174] ? __lockdep_free_key_range+0x110/0x110 [ 854.580384][T26174] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 854.586355][T26174] ___sys_sendmsg+0xf3/0x170 [ 854.591365][T26174] ? sendmsg_copy_msghdr+0x160/0x160 [ 854.596643][T26174] ? __fget_files+0x272/0x400 [ 854.601306][T26174] ? lock_downgrade+0x820/0x820 [ 854.606149][T26174] ? __lockdep_free_key_range+0x110/0x110 [ 854.611864][T26174] ? find_held_lock+0x2d/0x110 [ 854.616611][T26174] ? ksys_write+0x212/0x250 [ 854.621115][T26174] ? __fget_files+0x294/0x400 [ 854.625798][T26174] ? __fget_light+0xea/0x280 [ 854.630371][T26174] __sys_sendmsg+0xe5/0x1b0 [ 854.634860][T26174] ? __sys_sendmsg_sock+0xb0/0xb0 [ 854.639884][T26174] ? do_syscall_64+0x1c/0xe0 [ 854.644465][T26174] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 854.650441][T26174] do_syscall_64+0x60/0xe0 [ 854.654852][T26174] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 854.660720][T26174] RIP: 0033:0x45cba9 [ 854.664604][T26174] Code: Bad RIP value. [ 854.668652][T26174] RSP: 002b:00007ff54f5cec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.677035][T26174] RAX: ffffffffffffffda RBX: 0000000000503800 RCX: 000000000045cba9 [ 854.685001][T26174] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 854.692963][T26174] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 854.700920][T26174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 854.708893][T26174] R13: 0000000000000a6c R14: 00000000004cd48b R15: 00007ff54f5cf6d4 [ 854.824855][ T2486] usbhid 5-1:0.0: can't add hid device: -71 [ 854.831133][ T2486] usbhid: probe of 5-1:0.0 failed with error -71 [ 854.840542][ T2486] usb 5-1: USB disconnect, device number 127 10:22:47 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_deladdr={0x70, 0x15, 0x2, 0x70bd28, 0x25dfdbfe, {0xa, 0x8, 0x10, 0xfd, r5}, [@IFA_CACHEINFO={0x14, 0x6, {0x1, 0xfffffeff, 0xf2c, 0x8}}, @IFA_CACHEINFO={0x14, 0x6, {0xffffff20, 0x7, 0xfffff000, 0x1}}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x14}, @IFA_CACHEINFO={0x14, 0x6, {0x200, 0x81, 0x4, 0x7fe0000}}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000040)={'vxcan1\x00', {0x2, 0x4e23, @broadcast}}) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 10:22:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @private=0xa010109}, 0x10) listen(r2, 0x8) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:22:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x48000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000180)={0x1, 0x8}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x6, 0x7}}}]}, 0x78}}, 0x0) 10:22:47 executing program 4 (fault-call:14 fault-nth:10): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) [ 855.623454][T26209] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x4c000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:47 executing program 0 (fault-call:7 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:22:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) close(r3) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 855.764461][T26222] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 855.821269][T26225] FAULT_INJECTION: forcing a failure. [ 855.821269][T26225] name failslab, interval 1, probability 0, space 0, times 0 [ 855.849046][T26225] CPU: 1 PID: 26225 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 855.857762][T26225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 855.867852][T26225] Call Trace: [ 855.871153][T26225] dump_stack+0x18f/0x20d [ 855.875505][T26225] should_fail.cold+0x5/0x14 [ 855.880109][T26225] should_failslab+0x5/0xf [ 855.884532][T26225] kmem_cache_alloc_trace+0x240/0x2d0 [ 855.889912][T26225] sctp_stream_init_ext+0x4b/0x1b0 [ 855.895036][T26225] sctp_sched_set_value+0x148/0x1a0 [ 855.900235][T26225] ? _copy_from_user+0x138/0x190 [ 855.905229][T26225] sctp_setsockopt+0x2c8c/0x70d0 [ 855.910171][T26225] ? __fget_files+0x272/0x400 [ 855.914861][T26225] ? __sctp_setsockopt_connectx+0x180/0x180 [ 855.920770][T26225] ? lock_is_held_type+0xb0/0xe0 [ 855.925722][T26225] ? lock_downgrade+0x820/0x820 [ 855.930592][T26225] ? aa_sk_perm+0x316/0xaa0 [ 855.935103][T26225] ? aa_af_perm+0x230/0x230 [ 855.939626][T26225] __sys_setsockopt+0x24a/0x480 [ 855.944484][T26225] ? __sock_recv_wifi_status+0x1b0/0x1b0 [ 855.950127][T26225] ? vfs_write+0x1b0/0x6b0 [ 855.954564][T26225] ? fput_many+0x2f/0x1a0 [ 855.958905][T26225] ? ksys_write+0x1a5/0x250 [ 855.963424][T26225] ? lock_is_held_type+0xb0/0xe0 10:22:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000180)={0x1, 0x8}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x6, 0x7}}}]}, 0x78}}, 0x0) 10:22:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @broadcast}, 0x10) listen(r2, 0x8) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 855.968378][T26225] __x64_sys_setsockopt+0xba/0x150 [ 855.973507][T26225] ? lockdep_hardirqs_on+0x6a/0xe0 [ 855.978632][T26225] do_syscall_64+0x60/0xe0 [ 855.983061][T26225] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 855.988958][T26225] RIP: 0033:0x45cba9 [ 855.992847][T26225] Code: Bad RIP value. [ 855.996911][T26225] RSP: 002b:00007f9065582c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 856.002932][T26231] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 856.005327][T26225] RAX: ffffffffffffffda RBX: 0000000000507240 RCX: 000000000045cba9 [ 856.005338][T26225] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000006 [ 856.005348][T26225] RBP: 000000000078bf00 R08: 0000000000000008 R09: 0000000000000000 [ 856.005357][T26225] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000007 [ 856.005367][T26225] R13: 0000000000000b55 R14: 00000000004d8490 R15: 00007f90655836d4 [ 856.009688][ T2486] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 856.394728][ T2486] usb 5-1: Using ep0 maxpacket: 16 [ 856.515455][ T2486] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 856.526391][ T2486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.537933][ T2486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.548591][ T2486] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 856.645005][ T2486] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 856.654151][ T2486] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 856.662434][ T2486] usb 5-1: Product: syz [ 856.667680][ T2486] usb 5-1: config 0 descriptor?? [ 857.118778][T26210] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 857.127173][T26210] FAULT_INJECTION: forcing a failure. [ 857.127173][T26210] name failslab, interval 1, probability 0, space 0, times 0 [ 857.140755][T26210] CPU: 1 PID: 26210 Comm: syz-executor.4 Not tainted 5.8.0-rc4-syzkaller #0 [ 857.149436][T26210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.159491][T26210] Call Trace: [ 857.162800][T26210] dump_stack+0x18f/0x20d [ 857.167159][T26210] should_fail.cold+0x5/0x14 [ 857.171770][T26210] should_failslab+0x5/0xf [ 857.176231][T26210] kmem_cache_alloc+0x40/0x3b0 [ 857.181016][T26210] skb_clone+0x14f/0x3c0 [ 857.185264][T26210] netlink_deliver_tap+0x990/0xb70 [ 857.190388][T26210] ? is_vmalloc_addr+0x28/0x40 [ 857.195165][T26210] netlink_unicast+0x697/0x7d0 [ 857.199927][T26210] ? netlink_attachskb+0x810/0x810 [ 857.205034][T26210] ? memset+0x20/0x40 [ 857.209022][T26210] ? __nlmsg_put+0x155/0x1c0 [ 857.213616][T26210] netlink_ack+0x6e2/0xa10 [ 857.218032][T26210] ? netlink_sendmsg+0xd90/0xd90 [ 857.222955][T26210] ? __lockdep_free_key_range+0x110/0x110 [ 857.228669][T26210] netlink_rcv_skb+0x344/0x430 [ 857.233426][T26210] ? rtnetlink_put_metrics+0x510/0x510 [ 857.238868][T26210] ? netlink_ack+0xa10/0xa10 [ 857.243446][T26210] netlink_unicast+0x533/0x7d0 [ 857.248223][T26210] ? netlink_attachskb+0x810/0x810 [ 857.253326][T26210] ? _copy_from_iter_full+0x247/0x890 [ 857.258686][T26210] ? __phys_addr+0x9a/0x110 [ 857.263171][T26210] ? __phys_addr_symbol+0x2c/0x70 [ 857.268190][T26210] ? __check_object_size+0x171/0x3e4 [ 857.273483][T26210] netlink_sendmsg+0x856/0xd90 [ 857.278246][T26210] ? netlink_unicast+0x7d0/0x7d0 [ 857.283189][T26210] ? netlink_unicast+0x7d0/0x7d0 [ 857.288148][T26210] sock_sendmsg+0xcf/0x120 [ 857.292586][T26210] ____sys_sendmsg+0x6e8/0x810 [ 857.297355][T26210] ? kernel_sendmsg+0x50/0x50 [ 857.302026][T26210] ? do_recvmmsg+0x6d0/0x6d0 [ 857.306619][T26210] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 857.312599][T26210] ? __lockdep_free_key_range+0x110/0x110 [ 857.318305][T26210] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 857.324272][T26210] ___sys_sendmsg+0xf3/0x170 [ 857.328857][T26210] ? sendmsg_copy_msghdr+0x160/0x160 [ 857.334152][T26210] ? __fget_files+0x272/0x400 [ 857.338813][T26210] ? lock_downgrade+0x820/0x820 [ 857.343653][T26210] ? __lockdep_free_key_range+0x110/0x110 [ 857.349381][T26210] ? find_held_lock+0x2d/0x110 [ 857.354161][T26210] ? ksys_write+0x212/0x250 [ 857.358668][T26210] ? __fget_files+0x294/0x400 [ 857.363338][T26210] ? __fget_light+0xea/0x280 [ 857.367924][T26210] __sys_sendmsg+0xe5/0x1b0 [ 857.372433][T26210] ? __sys_sendmsg_sock+0xb0/0xb0 [ 857.377476][T26210] ? do_syscall_64+0x1c/0xe0 [ 857.382068][T26210] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 857.388044][T26210] do_syscall_64+0x60/0xe0 [ 857.392445][T26210] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 857.398325][T26210] RIP: 0033:0x45cba9 [ 857.402203][T26210] Code: Bad RIP value. [ 857.406249][T26210] RSP: 002b:00007ff54f5cec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.414649][T26210] RAX: ffffffffffffffda RBX: 0000000000503800 RCX: 000000000045cba9 [ 857.422618][T26210] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 857.430586][T26210] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 857.438558][T26210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 857.446524][T26210] R13: 0000000000000a6c R14: 00000000004cd48b R15: 00007ff54f5cf6d4 [ 857.534842][ T2486] usbhid 5-1:0.0: can't add hid device: -71 [ 857.540949][ T2486] usbhid: probe of 5-1:0.0 failed with error -71 [ 857.554379][ T2486] usb 5-1: USB disconnect, device number 2 10:22:50 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000040)=""/112, &(0x7f0000000140)=0x70) 10:22:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x10000, 0x0) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0xfffffffa, 0x4) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x30000) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000100)=[0x3ff, 0x4]) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000180)) r6 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x68000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:50 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x280, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000001200)=0x5) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000080)) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f00000011c0)) write$cgroup_type(r5, &(0x7f00000000c0)='threaded\x00', 0x9) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="b7230000000000000000070000f008000600", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x50000}, 0x0) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 10:22:50 executing program 0 (fault-call:7 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:22:50 executing program 4 (fault-call:14 fault-nth:11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) [ 858.752734][T26258] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:22:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x6c000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r6, 0x0) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000000)) [ 859.027452][T20572] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 859.036637][T26277] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000180)=""/176, 0xb0}, &(0x7f0000000040), 0x4}, 0x20) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) r2 = socket$inet(0xa, 0x6, 0x8000) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x1d, 0x800000003, 0xffffffff) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendto$packet(r4, &(0x7f0000000400)="0013f1d36683633ff83592d93dd4030e229108f5e879a4ce4fbcef360af489425bd27bd3205fdbaacca76d6543018538417ef41e5b6661fc1742fb198e4248abe19e2abcf113303eca46fb89dc64de4a0f62d081ebe9c0be9f912d4205522a1ab8f59eb081d98c9959c703d69e54fd969834ce5c3a39d0fb179fc6673441157b5bffe299409b2d771337b0eb7947ac3fcdd80a3f1fac28202654331e46c669b7435760085313228523bdb714b78c1a257121f60a4c87450a2bb5e501b21981bbbede5a375c666f2328e1cad9a71f8e5c689f3046b0be61313d3eb59ff12c788d1c6cc2070840c667ff31ac4b", 0xec, 0x4008012, &(0x7f0000000280)={0x11, 0x18, 0x0, 0x1, 0xff, 0x6, @dev={[], 0x17}}, 0x14) r5 = fcntl$dupfd(r2, 0x406, r3) ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) listen(r2, 0x8) r6 = accept4(r2, 0x0, 0x0, 0x0) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x2600, 0x0) sendto$inet(r7, &(0x7f00000002c0)="934547bb670491675dd77bc003c7a6fc072d5302350cc8bcd0d036fe48763f17516d95847f3f0cab2df9f315c18f9a932ac6548f6403c393330acf45c06512fd0f29c81aa63646af5e17b0164f7f78d67f90653a15ae92a922a5b0d1ed83c4985e084accb15636a22ad48914ef4b5d6a", 0x70, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x2, &(0x7f0000000140), 0x8) 10:22:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 859.243963][T26286] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 859.285770][T20572] usb 5-1: Using ep0 maxpacket: 16 [ 859.405546][T20572] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 859.432034][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.506211][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.547669][T20572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 859.675859][T20572] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 859.695273][T20572] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 859.703307][T20572] usb 5-1: Product: syz [ 859.752300][T20572] usb 5-1: config 0 descriptor?? [ 860.237618][T26256] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 860.324844][T20572] usbhid 5-1:0.0: can't add hid device: -71 [ 860.330942][T20572] usbhid: probe of 5-1:0.0 failed with error -71 [ 860.358266][T20572] usb 5-1: USB disconnect, device number 3 10:22:53 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 10:22:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x7a000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x3, &(0x7f0000000140), 0x8) 10:22:53 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x265) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x280, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000001200)=0x5) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000080)) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f00000011c0)) write$cgroup_type(r5, &(0x7f00000000c0)='threaded\x00', 0x9) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="b7230000000000000000070000f008000600", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x50000}, 0x0) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) 10:22:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:22:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400082, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r5, 0x58fc6eb79c4a23d9}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400e001}, 0x0) listen(r2, 0x8) r6 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCCBRK(r8, 0x5428) [ 861.909645][T26314] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x4, &(0x7f0000000140), 0x8) 10:22:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x6, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="9719cf210fca3d22488f8c1a00766a25db964fbac76a416be0578b3ee2b1dbc50700300d53b215246cbf770d73de900972de5c7e05af7ecad3254461e5461bd99cfc1f9bbb21bbe2c39c38", 0x4b}, {&(0x7f0000000040)="2bf7376255a1adc18e982c3137bea084f8a15c05ec5974fa1045d61d223c2d6fbd078a582f234c08e7a9479ec9a93af7", 0x30}, {&(0x7f0000000080)="2aa99273a63c1b1796c56ac88b00004959cad0ff3fda029376078431b44d3d0c42363b9ef6f742f7cd92e103254db3cb2187fa788da3912a9f3a33aef1f6e796f2083990fc54c86d51989dcf4efc57b7751ab5c12bba7c30df0d1bdafd8f5438e8d49c6f7749ecbade8e277f", 0x6c}], 0x3) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x7fffef93, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x5, &(0x7f0000000140), 0x8) [ 862.164755][ T5] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 862.195611][T26331] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 862.249147][T26331] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:53 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) eventfd(0x2b) sendto$inet(r2, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x7fffefc4, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 862.385759][T26346] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 862.414696][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 862.551761][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 862.562920][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.574340][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.584686][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 862.675421][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 862.689049][ T5] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 862.701594][ T5] usb 5-1: Product: syz [ 862.711605][ T5] usb 5-1: config 0 descriptor?? [ 863.187557][T26312] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 863.284867][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 863.290933][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 863.300289][ T5] usb 5-1: USB disconnect, device number 4 10:22:56 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x65f6f000) write$midi(r5, &(0x7f0000000240)="af976f8b6391fbfbc9aefec98d702e7a3b20efbfbf050c7c96da8534a7f853defd4b2dffbccc13ca18eb6a4d15623aff4a052a68d9b7587f8652e1dec4b6ec8fa21a483e4c8d1685e4612b2ef2ca1f2072ddb1c0a6643f956754a8305b41cd8bef4c625cdb339f5661c0d5dcd781725ae6672fbb5c35166340469de07d6c895f2be90581522521c479bd4792be0200dccd2b40aefa917e441097ca745d617480b354c5ce1d8a53574d1ad86d665a2c16df006291a8a9429c95bf5966d1e7b765230196d70c8ac7693c8befb2d8623a0353e7f94bf8614807f1bf2d39baf70a2e0a35b7511177795ccd6314aa7476f8fd", 0xf0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r8, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r8, 0x4141, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 10:22:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x6, &(0x7f0000000140), 0x8) 10:22:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x93efff7f, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000016c0)={'ip6gre0\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x40, 0x8, 0x2, @dev={0xfe, 0x80, [], 0x29}, @private1, 0x8000, 0x40, 0x9, 0x5}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000017c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60024000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x5c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 10:22:56 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYBLOB="52f14692a627cb20e6e9bcf5aa"], 0xe) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) ftruncate(r2, 0x1000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) r5 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) getsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000100)={@private, @broadcast}, &(0x7f0000000180)=0xc) r6 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) r7 = socket(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 10:22:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:22:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7, &(0x7f0000000140), 0x8) [ 865.024851][T26382] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0xc4060000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 865.142299][T26390] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x8, &(0x7f0000000140), 0x8) 10:22:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0xc4efff7f, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 865.236679][T26395] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 865.274833][ T5] usb 5-1: new high-speed USB device number 5 using dummy_hcd 10:22:56 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80, 0x40000) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000040)="203aeda26e86ba421ef64e86f5b4201280b7894cb86f5748cfed4468a69d5e6069fec00d11956f8b89caea") listen(r1, 0x8) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x0, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x65f6f000) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) dup(r7) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000180)) r8 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendto$inet(r8, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 865.370690][T26404] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 865.514772][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 865.635803][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 865.647124][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.659586][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.670314][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 865.755572][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 865.772374][ T5] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 865.780686][ T5] usb 5-1: Product: syz [ 865.786279][ T5] usb 5-1: config 0 descriptor?? [ 866.247563][T26370] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 866.324786][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 866.330817][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 866.346286][ T5] usb 5-1: USB disconnect, device number 5 [ 866.764724][T26423] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:22:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x9, &(0x7f0000000140), 0x8) 10:22:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x10120, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x0) faccessat2(r5, &(0x7f0000000000)='./file0\x00', 0x2, 0x100) listen(r2, 0x8) r6 = accept4(r2, 0x0, 0x0, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg(r7, &(0x7f0000000640)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)="554c69ddee33d4220f8237b32277b1cebd1043482074581b5dd5616a7c1fd8f6a2ea05362bbc6b803ed63e695d3738462c262baadfc59f9243f6a11f2a8a73385014c2ecd5e304c169189e75578e5768afb5c081ad8e120950e7605d06e962857e149010df22a51a8eba3026471e6db9331250bef316ea981f55eb5076cd66", 0x7f}, {&(0x7f0000000080)="b63f0b2c6838c9263df4902e9e74c5b3022f9450b88584e33e383c2476d2a16c6eb5dccdae1886ed6200a870cd", 0x2d}, {&(0x7f0000000380)="abdbfd967c841dc752c3fc55b07e445f0fde94866b62248ad13ca9f6069b830bbe59c4655d79e139076a1455ae1fa2c72a45c1958ab1e2b6b635a4e3c085a488a6d7c458b2ffccd31d18bc66d4f5d822014b5121d7d7fbaa7a62559d3c0a15f0fba0be9bbb57f276edaa32168ade1ecec5d6a6a71a22b21362b4084bd116b20caeed0e2130fe41ee120c247b02f73bcbb5cef4ad9eb1363798a13c4ab29057ec832b6feeba0e49781f26f7c8cb0e08d256cbb04f69607f6632c1a68c9a14f97b88d929262aa10a383d9963e01409282e260f08680518bbbd463649a59bcb6773f4c4b8bfe7", 0xe5}], 0x3, &(0x7f0000000480)=[{0x30, 0x109, 0x1, "31e682d54024c2a236e1208b3751080c5d5db10271c4a846123b4ee99e"}, {0x70, 0x10b, 0x3, "ac03dcaf32b9f5456f96d5bc1502172276134bc40eb8b76b29009528a3ec4bc1ec788d5ec03115c586f7e39faecc9458b080ae22c49b2b168ca6b4077a88dfd749f00e9d37160554a369975c9d95423e623fefa1c6a4a5f1789ff3cd"}, {0x100, 0x119, 0x8b, "92a83bec40793aa2f5be3d53a4ea332ec39595fc33d5baabe6ecd12bd4ffc27a4bf05e9fb42d24bafa2b9fc908dcc0ca715f4411ca90802b429ea896891e4c1b773f096ac636e1d1afe07f823cfefeb1b49694a7687749a19bd19b27403053d906d5a7fb490f5ddd71c0bddeebe0295fc9a7bc8051e341976983ccffaad2a7cc34ac43efd3bda181c98c99669e9fc762e72e02783fbca1eaf06580f582fbefbc47523a1c77b6c91ad37a6a02075f6f34519bff0e863b400bb2a5b2bf89c2bbe6007ab91aac862a84fd10ef5fff2ca0caa254a6fc269b2f9400204dc5a8a94706142322392442daa2d39e"}], 0x1a0}, 0x40) sendto$inet(r6, &(0x7f0000000180)="26a95a179e1281c416125e30794203be733447f630d285b5aa9e2ef4af8f16e679d8ecddef3748c5f934a39745574197027ffa5cd61cfdd0126c1510dac30f013c304103c435261b3619c04c71abaada61055a42c24e50767ca03f7050c14c5c101a1180f918a9491a6586f2d36d31fa3b9a858a86ceb9f7826f23e81f1948bf0a3ae04676a8fadc103c5a95314ecb772200197dbbc3658bdf32e214b23f83010a0442918c12d5ae041c9e69c83ae3687e1a2ae948dce13a3ee7d3ed859f8a2e228e35ecd80000000000000000", 0xcd, 0x60000840, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3325}}, 0x20}}, 0x0) 10:22:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) [ 868.012235][T26430] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:59 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x30000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r4, 0xb0343aabd1184b87}, 0x14}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r9, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x16, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x22040080}, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) [ 868.056142][T26430] device bridge5 entered promiscuous mode [ 868.078737][T26437] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 868.082896][T26443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:59 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x803, 0xfffffffc) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcsu\x00', 0x2884c0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000480)={0x3, 0x3, 0x4, 0x800, 0x9, {r6, r7/1000+10000}, {0x96e86c71faaaedf1, 0x8, 0x2, 0x40, 0x7f, 0x80, "b9756a35"}, 0x7, 0x3, @fd=r8, 0x6}) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r10, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0xf}}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x4000001) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, 0x0, 0x10a81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}]}}}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) 10:22:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0xa, &(0x7f0000000140), 0x8) 10:22:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket(0x1d, 0x1, 0x1) sendto$inet(r4, &(0x7f0000000040)="6355cfb862cbc9c902688f314edb087c29737d8415a46f39f063285526ad601a28a18b0e59a48278fa3b4dd07a891db022fec4b05853d834fcff647915356a7b5334ec1083cab1a84e34814a9fcfa6d549d818e6fc8e5bd048cdbadf317b965135ac27ff05a86eea4476a73c6f3764a7fe8356987a8217ee9e86a6af4dd346d7dd957abee7eafd9849dc93331d", 0x8d, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sysfs$1(0x1, &(0x7f0000000000)='/-):&\x00') 10:22:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:22:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0xb, &(0x7f0000000140), 0x8) [ 868.324931][T20572] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 868.359026][T26473] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x1, 0x5f8e, 0x4f9e, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:22:59 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x80005) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x7, 0x4) 10:22:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0xc, &(0x7f0000000140), 0x8) [ 868.592202][T20572] usb 5-1: Using ep0 maxpacket: 16 10:23:00 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000140)={0x9, "9ebe30117f709e74869a2b7b50eda4fd957dd5d407858f2b66925cc060571bbb", 0xc3879e6edb722da6, 0x2, 0x7, 0x4, 0x3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x800}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x2, 0x3, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="3b8363845853544d881de86ec7ab931350dba65b6e5e8959d8d7b5d3f646738336f8e502c6d233bba52dcd349776178241ef263f4f1a018fbc440817c43f1d9deda2"], 0x155) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000001040)="827f2117fa2662a64ed52ef5acc6d464fc9a21c455df647bdea6834f774cde1bf3117355d33843fd06076bcade1b70b183c6556e55ac2527a2ea12bce87013b09d14e2c819d367aec4cee7e44ebc7c48360dca0b4854d5526ff0", 0x5a}, {&(0x7f0000001300)="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", 0xfdf}], 0x3) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) [ 868.649407][T26490] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 868.725886][T20572] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 868.744504][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.767655][T26501] sg_write: data in/out 1297371956/295 bytes for SCSI command 0xc6-- guessing data in; [ 868.767655][T26501] program syz-executor.5 not setting count and/or reply_len properly [ 868.775708][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.804140][T20572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 868.905498][T20572] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 868.905520][T20572] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 868.905534][T20572] usb 5-1: Product: syz [ 868.906856][T20572] usb 5-1: config 0 descriptor?? [ 869.211788][T26501] sg_write: data in/out 1297371956/295 bytes for SCSI command 0xc6-- guessing data in; [ 869.211788][T26501] program syz-executor.5 not setting count and/or reply_len properly [ 869.378942][T26434] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 869.484884][T20572] usbhid 5-1:0.0: can't add hid device: -71 [ 869.490940][T20572] usbhid: probe of 5-1:0.0 failed with error -71 [ 869.500136][T20572] usb 5-1: USB disconnect, device number 6 10:23:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) [ 869.885977][T26517] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 870.397338][ T5] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 870.654705][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 870.785343][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 870.796172][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.808808][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.819390][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 870.915698][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 870.924920][ T5] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 870.932993][ T5] usb 5-1: Product: syz [ 870.939585][ T5] usb 5-1: config 0 descriptor?? 10:23:02 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 10:23:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0xd, &(0x7f0000000140), 0x8) 10:23:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r7, 0x65f6f000) r8 = openat(r7, &(0x7f0000000000)='./file0\x00', 0xa0000, 0x154) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x844}, 0x8000) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r10, 0x0) ioctl$VT_ACTIVATE(r10, 0x5606, 0x4) 10:23:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000000)={{0x2, 0x3}, {0x5, 0xff}, 0x8000, 0x4, 0x81}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x401, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) [ 871.162328][T26533] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:23:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40400, 0x112, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x10, &(0x7f0000000140), 0x8) 10:23:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r6, 0x65f6f000) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f0000000000)="404e52125bdbaaed751d43b87a3d4394e7d767045e0d057aa492b8fbe2455f058df86cfaf59471e336855997f525230812751c0bd97f2bb1f7d9044bf81a8492dd41462d776d0feb0daf5226bcaf015a5f6c568e0f0b89d7e674dc92339db9a106101c547be541b52ab1a4823b3e3e8fb82f8e1d449d9f25cfb2c812b841848d0b3546703c3f17d5c9e6b4f86c903e881d11f54174d8baa7a45ff5cdcaea7a3fdc09d04f8a8712f7ceaa4049d2d68f87021aefe00ceb4b") sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 871.408888][T26522] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 871.439646][T26545] sctp: [Deprecated]: syz-executor.0 (pid 26545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.439646][T26545] Use struct sctp_sack_info instead 10:23:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 871.471041][T26549] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 871.504867][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 871.510933][ T5] usbhid: probe of 5-1:0.0 failed with error -71 10:23:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x11, &(0x7f0000000140), 0x8) [ 871.559361][ T5] usb 5-1: USB disconnect, device number 7 [ 871.646547][T26559] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 872.194767][T20572] usb 5-1: new high-speed USB device number 8 using dummy_hcd 10:23:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) [ 872.277671][T26574] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 872.734750][T20572] usb 5-1: Using ep0 maxpacket: 16 [ 872.855443][T20572] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 872.866263][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.877278][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.887220][T20572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 872.975758][T20572] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 872.985105][T20572] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 872.993107][T20572] usb 5-1: Product: syz [ 872.999456][T20572] usb 5-1: config 0 descriptor?? [ 873.467067][T26579] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 873.544963][T20572] usbhid 5-1:0.0: can't add hid device: -71 [ 873.551029][T20572] usbhid: probe of 5-1:0.0 failed with error -71 [ 873.560223][T20572] usb 5-1: USB disconnect, device number 8 [ 873.985512][T26594] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001840)={0x14, r3, 0x309, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x11000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xec, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x9}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffd}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x2, @private2, 0xe3db}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x5c87, @private=0xa010101}], 0x3c) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r6, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="09000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x12, &(0x7f0000000140), 0x8) 10:23:05 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fstat(r2, &(0x7f0000000140)) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000040)=""/241) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x6) 10:23:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0f000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x13, &(0x7f0000000140), 0x8) 10:23:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) r2 = dup3(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f00006a2000/0x1000)=nil, 0x1000}, &(0x7f0000000300)=0x10) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000180)=0xfffffffa, 0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x124801, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000003", @ANYRES16=r4, @ANYBLOB="874b000000000000000005000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000a2489af40614fa8e8710bc203b73de61be43f1e0344ae3ac7da0b571f27a7193ac12c10eef8837628c4e4472dcdc7dc4f6dff0ba515fc6f91b3e159bae8d9ab6f2f4aac5e6d30a1d21e8ee75719ecf960527ba2ca5e5d06cdac7b2859b1aba6d88783fc19ea8d79fe6dfecbc43dd15a9", @ANYRES16=r4, @ANYBLOB="08002dbd7000fcdbdf25160000000a001a000180c200000000000c0099000600000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc}, 0x0, 0x0, 0x401, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f00000001c0)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) syz_emit_ethernet(0x300cce, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) 10:23:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x11000, 0x10, 0x12}, 0x18) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)={0x3, 'veth0_to_bond\x00', {0x4}, 0x7}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x14, &(0x7f0000000140), 0x8) [ 874.604888][ T5] usb 5-1: new high-speed USB device number 9 using dummy_hcd 10:23:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="67000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x15, &(0x7f0000000140), 0x8) [ 874.854791][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 874.880500][T26637] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.1'. 10:23:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r6, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r9, r7}}, 0x5b) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r9}}, 0x18) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) shmctl$IPC_RMID(0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6d000000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 874.975864][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 875.007449][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:23:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x16, &(0x7f0000000140), 0x8) [ 875.068643][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.135107][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 875.305333][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 875.331288][ T5] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 875.358581][ T5] usb 5-1: Product: syz [ 875.383265][ T5] usb 5-1: config 0 descriptor?? [ 875.877519][T26605] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 875.974900][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 875.991147][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 876.012515][ T5] usb 5-1: USB disconnect, device number 9 [ 876.684745][T20572] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 876.758150][T26676] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="bc010020120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x17, &(0x7f0000000140), 0x8) 10:23:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x3c34) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000180)={0x6, {{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}}, 0x88) r4 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) fcntl$getflags(r0, 0x401) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000000)=@srh={0x88, 0x6, 0x4, 0x3, 0x7, 0x8, 0x8001, [@loopback, @ipv4={[], [], @private=0xa010101}, @rand_addr=' \x01\x00']}, 0x38) 10:23:08 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x201, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xfffffffffffffeff}]}}}]}, 0x40}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 10:23:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="00f0ff7f120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x18, &(0x7f0000000140), 0x8) 10:23:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000f0001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x19, &(0x7f0000000140), 0x8) [ 877.203551][T26703] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 877.259430][T26703] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:23:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x1e, &(0x7f0000000140), 0x8) 10:23:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c020000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 877.458221][T20572] usb 5-1: Using ep0 maxpacket: 16 10:23:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x501c02, 0x0) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f00000001c0)=@secondary='builtin_and_secondary_trusted\x00') r4 = add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x3, 0x0, "4fdaf1311e0eb34a83958bae3ee0deb4743548505e7e3541038c377278786aaa06e7a272bd8c48561435943bdffad3139de130b40c616f8cf04cd258450bc004468569"}, 0x4b, r3) r5 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, &(0x7f00000001c0)=@secondary='builtin_and_secondary_trusted\x00') keyctl$unlink(0x9, r4, r5) listen(r2, 0x8) r6 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 877.575554][T20572] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 877.603166][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.649807][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.681920][T20572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 877.815596][T20572] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 877.828671][T20572] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 877.843826][T20572] usb 5-1: Product: syz [ 877.853628][T20572] usb 5-1: config 0 descriptor?? [ 878.339206][T26688] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 878.424923][T20572] usbhid 5-1:0.0: can't add hid device: -71 [ 878.431147][T20572] usbhid: probe of 5-1:0.0 failed with error -71 [ 878.449765][T20572] usb 5-1: USB disconnect, device number 10 [ 878.881653][T26733] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c030000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x21, &(0x7f0000000140), 0x8) 10:23:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x24000, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r5 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) 10:23:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f22d8f30fbcf80f3581d90c0066f2ba5f57160fc77c01", 0x2d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000001a00000c080000807f"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0xfffffffffffffe7c, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000208", @ANYRES16=r5, @ANYBLOB="874b000000000000000005000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec3a2f6603b3f0f8d75a963d20000000", @ANYRES16=r5, @ANYBLOB="000127bd7000fddbdf254b0000000a000600aaaaaaaaaabb0000"], 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) 10:23:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c040000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x800, 0xaa81) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) sendmsg$sock(r4, &(0x7f00000013c0)={&(0x7f00000001c0)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)="3755c1f7b41d7d3b580562095ed3886f58bacdad316712d472da4eb0a82314d5b59ffc3df01757b457f1e5530588a006be14f2d7acecb36c1e805d28f56b30429a233daef54dbf1bb431962755d7fd7136", 0x51}, {&(0x7f00000002c0)="bb8696363f7c1cda16da199c2a497042044eabed32ae6465009cee55dbe3bccf905a34e55e12a0e3c7ac893e9b9e59c28597423d3f0670f6020ac21d0bcf0e756192efec6f9fccef5746a31a6e6c7945b966c66b7c5fc31d9bf262aea3db309174a21ef91017e366b2c5e9bdf61d82e6e145dbb2e17f93f1cc5ec4bfa631dbcfaef26a638ed8fe56e1a69adac7f881d959f9431a53efe67254d2e49d1c645f5af6e030c19681d5d48dd9a1d58a34015e5ad9bed9200ad026333d6e44bb327f35354899fac7dd3f9ef6782d0c26c146ed862b966ef2df64b21937", 0xda}, {&(0x7f00000003c0)="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", 0x1000}], 0x3}, 0x40) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) r5 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r7, 0x7}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000001400)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x1000, @empty, 0x40}], 0x2c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r8, 0x1}, 0x8) 10:23:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x22, &(0x7f0000000140), 0x8) 10:23:10 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200, 0x0, 0x401}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r6, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r6, &(0x7f0000000240)={@void, @val={0x2, 0x6, 0xc3a, 0x2, 0x4, 0x5d1}, @ipv4=@tcp={{0x7, 0x4, 0x0, 0x22, 0xfe, 0x67, 0x0, 0x9d, 0x6, 0x0, @remote, @remote, {[@end, @generic={0x88, 0x7, "b72408323d"}]}}, {{0x4e21, 0x4e20, r7, r8, 0x0, 0x0, 0xf, 0x60, 0x3ff, 0x0, 0x3, {[@mss={0x2, 0x4}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0xfffffffb, 0xb5}, @fastopen={0x22, 0xc, "b39396d95618c370ee88"}, @exp_fastopen={0xfe, 0x6, 0xf989, "729e"}, @nop]}}, {"ed0cf0a08ba238ff3788023967cba20dc206a9632cf40a4fcc9a7c0ca92d96105228a33e4a9e9d660c3e8465c2cd369b29b0baaaa5b7bd96c830972f621d8c1bbe32e3f70e7b843edc96facfae23ccef3032b30321b8cc98171cf716ba549affceaa0c561965c92675e8481b0e04af0d79599166107e267660a0676b1e43c803c1444db4891ce37fcaffbb298a0fa401417b6af5a7af9f1d778ae9148d7868fa7b408be8d65b"}}}}, 0x108) 10:23:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c050000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x23, &(0x7f0000000140), 0x8) [ 879.394838][ T3838] usb 5-1: new high-speed USB device number 11 using dummy_hcd 10:23:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c060000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 879.634772][ T3838] usb 5-1: Using ep0 maxpacket: 16 [ 879.755649][ T3838] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 879.766966][ T3838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.779651][ T3838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.789842][ T3838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 879.875768][ T3838] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 879.885060][ T3838] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 879.893172][ T3838] usb 5-1: Product: syz [ 879.904408][ T3838] usb 5-1: config 0 descriptor?? [ 879.984946][ T2479] kworker/dying (2479) used greatest stack depth: 23112 bytes left [ 880.377828][T26742] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 880.465082][ T3838] usbhid 5-1:0.0: can't add hid device: -71 [ 880.471188][ T3838] usbhid: probe of 5-1:0.0 failed with error -71 [ 880.486252][ T3838] usb 5-1: USB disconnect, device number 11 10:23:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000010400ff00"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000540012800b00010067656e65766500004400028005000d002000000005000d00ff00000005000d000900000005000a000500000005000c00000000000800010004000000050008000000000008000b4000000000"], 0x74}}, 0x0) 10:23:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x24, &(0x7f0000000140), 0x8) 10:23:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c070000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000000c0)={@void, @val={0x0, 0x0, 0x8}, @mpls={[{0x1, 0x0, 0x1}], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @remote}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\b\x00', 0x0, "b90005"}}}}}, 0x32) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x31, 0x0, 0xffffffffffffffff}) r8 = dup(r7) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000040a0500000000000000000002000005080007006e61740008000a40000000000900030073797a30000c00024000000000000000f2ffffffffffffff0000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040080) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r8, 0x65f6f000) ioctl$VT_GETSTATE(r8, 0x5603, &(0x7f0000000000)={0x20, 0x4, 0xa}) [ 880.906438][T26799] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup2(r3, r3) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x6c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001840)={0x14, r7, 0x309, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x1e8, r7, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40080}, 0x8811) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000000440)={0x80, 0x5a65, 0x5, 0x3ff, 0x2, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x62, 0x0, 0x0, 0x0) 10:23:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c080000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x25, &(0x7f0000000140), 0x8) [ 881.514758][ T2478] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 881.754762][ T2478] usb 5-1: Using ep0 maxpacket: 16 [ 881.875434][ T2478] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 881.886496][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.898715][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.909455][ T2478] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 881.994862][ T2478] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 882.003932][ T2478] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 882.017882][ T2478] usb 5-1: Product: syz [ 882.023234][ T2478] usb 5-1: config 0 descriptor?? 10:23:13 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0xff) setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000200)=0x4bfe, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@isdn={0x22, 0x8, 0x0, 0xff, 0x80}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x4e22, @broadcast}}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 10:23:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c090000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r3, 0x65f6f000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000080)={0x7, 0x1, 0x7ff, 0x80, &(0x7f0000000040)=[{}]}) pause() 10:23:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x64, &(0x7f0000000140), 0x8) [ 882.487971][T26818] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 882.564912][ T2478] usbhid 5-1:0.0: can't add hid device: -71 [ 882.571639][ T2478] usbhid: probe of 5-1:0.0 failed with error -71 [ 882.597382][ T2478] usb 5-1: USB disconnect, device number 12 10:23:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0a0000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r4}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x109002, 0x0) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000000806010100000000000000000c00080601000100070000000900020073797a30000000000900020073797a30000000000500010007124413b200020073a17a3000000000097c020073797a30000000000900020073797a32000000000000020073797a31000000000500010007000000"], 0x70}, 0x1, 0x0, 0x0, 0x24004840}, 0x800) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x65, &(0x7f0000000140), 0x8) [ 883.014080][T26878] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0b0000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x6b, &(0x7f0000000140), 0x8) 10:23:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) 10:23:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r3, 0x65f6f000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000080)={0x7, 0x1, 0x7ff, 0x80, &(0x7f0000000040)=[{}]}) pause() [ 883.494759][ T5] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 883.744719][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 883.865829][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 883.876624][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.889630][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.899822][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 883.985301][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 883.994335][ T5] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 884.002804][ T5] usb 5-1: Product: syz [ 884.008834][ T5] usb 5-1: config 0 descriptor?? [ 884.468679][T26889] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 884.544898][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 884.551072][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 884.564422][ T5] usb 5-1: USB disconnect, device number 13 [ 884.983952][T26924] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:17 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x81, 0x1fb}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 10:23:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0e0000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x6e, &(0x7f0000000140), 0x8) 10:23:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) finit_module(r1, &(0x7f0000000040)=']C\x00', 0x3) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x88000003}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) 10:23:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r3, 0x65f6f000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000080)={0x7, 0x1, 0x7ff, 0x80, &(0x7f0000000040)=[{}]}) pause() 10:23:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0f0000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x71, &(0x7f0000000140), 0x8) 10:23:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c100000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x80, 0x0, 0x6}}, 0x14) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 885.864830][ T3838] usb 5-1: new high-speed USB device number 14 using dummy_hcd 10:23:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x72, &(0x7f0000000140), 0x8) 10:23:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c110000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 886.104847][ T3838] usb 5-1: Using ep0 maxpacket: 16 [ 886.225492][ T3838] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 886.236416][ T3838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.249397][ T3838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.259536][ T3838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 886.344987][ T3838] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 886.354214][ T3838] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 886.363999][ T3838] usb 5-1: Product: syz [ 886.384209][ T3838] usb 5-1: config 0 descriptor?? [ 886.849344][T26936] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 886.924822][ T3838] usbhid 5-1:0.0: can't add hid device: -71 [ 886.930840][ T3838] usbhid: probe of 5-1:0.0 failed with error -71 [ 886.946189][ T3838] usb 5-1: USB disconnect, device number 14 [ 887.372462][T26984] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$xdp(0x2c, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r3 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r4 = geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000c80)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0f82", @ANYRES32=r4, @ANYBLOB="040007000000080800000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setregid(0x0, r5) fchownat(0xffffffffffffffff, 0x0, 0x0, r5, 0x1000) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1, r4}, {0x2, 0x1, 0xee01}], {0x4, 0x2}, [{0x8, 0x3, r5}], {0x10, 0x4}, {0x20, 0x1}}, 0x44, 0x1) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x8000000000400200) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c120000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:20 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) ioctl$PPPIOCDISCONN(r0, 0x7439) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 10:23:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x75, &(0x7f0000000140), 0x8) 10:23:20 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000020601000000000000000000000000080e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ac1e00010c00018008000140a0000000050014000800000005000500020000000500010006"], 0x1}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r6}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r10, 0x84, 0x20, &(0x7f00000000c0)=0xab17, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x6209, 0x0) 10:23:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x76, &(0x7f0000000140), 0x8) 10:23:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c130000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x77, &(0x7f0000000140), 0x8) 10:23:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c310000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 888.964865][ T7898] usb 5-1: new high-speed USB device number 15 using dummy_hcd 10:23:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c480000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x78, &(0x7f0000000140), 0x8) [ 889.224776][ T7898] usb 5-1: Using ep0 maxpacket: 16 [ 889.344828][ T7898] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 889.361435][ T7898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.385104][ T7898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.401988][ T7898] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 889.495251][ T7898] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 889.504359][ T7898] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 889.513884][ T7898] usb 5-1: Product: syz [ 889.522861][ T7898] usb 5-1: config 0 descriptor?? [ 890.008708][T26994] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 890.084783][ T7898] usbhid 5-1:0.0: can't add hid device: -71 [ 890.090884][ T7898] usbhid: probe of 5-1:0.0 failed with error -71 [ 890.103908][ T7898] usb 5-1: USB disconnect, device number 15 [ 890.530951][T27056] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:23 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x65f6f000) perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x3f, 0x7, 0x7f, 0x0, 0x0, 0xcd3, 0x1200, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000040)}, 0x10c, 0x2, 0x650, 0x0, 0x7ff, 0x628}, r5, 0x0, r1, 0x0) 10:23:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c4c0000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) listen(r3, 0x8) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x79, &(0x7f0000000140), 0x8) 10:23:23 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendfile(r5, 0xffffffffffffffff, 0x0, 0x9) 10:23:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c600000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff00000000, 0x30400) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000040)={0x20, 0x5, 0x8, 0xfff}) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140), 0x8) 10:23:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7d, &(0x7f0000000140), 0x8) 10:23:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c680000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x54800, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000000)=[0x5, 0x962]) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x3) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r8, 0x65f6f000) ioctl$PPPIOCSCOMPRESS(r8, 0x4010744d) listen(r2, 0x8) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 892.044697][ T2478] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 892.304845][ T2478] usb 5-1: Using ep0 maxpacket: 16 [ 892.436692][ T2478] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 892.447642][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.460068][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.470845][ T2478] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 892.594987][ T2478] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 892.604268][ T2478] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 892.613442][ T2478] usb 5-1: Product: syz [ 892.621154][ T2478] usb 5-1: config 0 descriptor?? [ 893.080138][T27067] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 893.166479][ T2478] usbhid 5-1:0.0: can't add hid device: -71 [ 893.172497][ T2478] usbhid: probe of 5-1:0.0 failed with error -71 [ 893.188515][ T2478] usb 5-1: USB disconnect, device number 16 [ 893.884750][ T2478] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 893.943849][T27117] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:26 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="0000001f00000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10000004ffe6, 0x0) 10:23:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="4466350a000000440f22c0d5d501c43e640fade5643e0f070f23c80f21f866350800e1000f23f8480f35660f113f0f0fcb9e0f01c3365c", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r6, 0x0) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000000040)={0x1db, 0x4, &(0x7f0000000440)="aa7e9ca0593a6a080ebb20ed967bf18b48ad827198864dad830d464023224bf2ca0c0210911231b23ade7b2235156e16aceecb1d4445b14cecea0c710d641f15c955a828aedfd61ff9e74635d519d9dece0320671f1f3730dacfc24730b20c596a95dcc1c57f457cb1629631de9b24de65b6f7bf4ba13190ca712c80f8867ece9c78cdcdbe0248773485029bd01bd1d1df7d7d5aecf0b16e694fb7b5a428733ecf1ccd87501b5dd949d88058be3db568f052bd46552853225be48d65b2ac8e11350beac42be1a4b9981f94b5e5063be766d426792f50c11a82fde00e1662a50322907e866c28e73e6fc91c6a66a21aaa62a119c654ae0805a72c508f65f8131dc8d4b80dfd3c111b310aa81ebc01bfd82c8459ada84dbaee1fc6b8798b6355c3959b829c16c5aebaa3e9ef662519a34ac4094580bd3311182a18dfe2c3739fa7cea4160bf6d63ddb5ca42136cad695dea54bb998ea17f3ffa6533634f740db3e108f09af6e02a978703c306f74d2749d2f696b57df358b7c2cb1670e30c97a13eb4d6fb7f0ae35c606c0c573cdf1cbd66a37af029bc57133682cee6d9a1852a125a0c6d7dc32c6a2c2f4fbec9e5c069c6673fbe3bddde3fc0d08209b7b7afa0ecff7cba8c5b8062285b69906624c11b0b84c921405e24a37cd204bc86422cf6c5f3d23af5b588c589b9b491fe9cef4dba572f0840ef86872fe64e63e7db4bf385143ca73c27d2039c3accee2a6c86ffa28f89bb27b49328b322ed4c42ead9c8d874c99ba92ec57f8a598e3ec9b6d35ac386502a7308ec01aeaf1d1d80460f7dadc829a4f55258ac1a0e34a9153b61083e4eeb173780ab65c7bbcf8c8ea9893405c41eb12d2541f02bbc740ccafe8cb23ec9300a236bbaf2c86b67c5392c0c53fa9327afc6911e7c65aa8d49d249fdf2702b76ab4fca1fb22b11231d2d8ec06952b125f5ee272e56a1baf62c48774f620a44507e6f71363a071843c2c9eaab670324235c1630259955fa339ff37a05960c4c6b6174af649d093b236918ce01bae29851950174e5a7fbdd0bb1be435f3aeeadc970f9f0cc7f6a75350ed485d0cc4f872fa40a06bd1b24b7ebda47b331caf8b0e89209c159f7b1d5012808f35d9a40612bdc6941f02cbaac7e4baca6a940262aec6c80b5406d9f686a7f94e4170573cb7ec6fd018cc2fe4065b377a1e0a597cf549eefe5d2a31edf072af8967d4d8579dfcaeaf8926e76724dab5caa970c0c4b6ee93608c433fc97341cc2f04ac61bf6e2f1768e4765215761da16c350b8948efb238307b2911df3a8a9711c346aecb19c2618a397c57c6d249fca96ecbabe0e4ab4975d6718cbe52e35a0562b207afaef575e8a08cd3dda1f4b1ff1247e5da9e9a15f6ee7e8647c7b26ac9b2b345ad347da6c57fbd4f915925038258b685e5d888b5168882c2acac3e553336d718"}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 10:23:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x82, &(0x7f0000000140), 0x8) 10:23:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c6c0000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xb) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x4, 0x0) semop(r4, &(0x7f0000000000)=[{0x3, 0x8}, {0x1, 0x80}, {0x2, 0x80, 0x800}, {0x3, 0x9, 0x800}, {0x7, 0x7, 0x800}, {0x7, 0x6, 0x1000}, {0x2, 0x3ff, 0x1000}, {0x1, 0x47d}], 0x8) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000000c0)=0xffff, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x12}, 0x8) 10:23:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x83, &(0x7f0000000140), 0x8) 10:23:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c740000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 895.014768][T27143] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:23:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c7a0000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:26 executing program 2: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_RMID(r0, 0x0) msgsnd(r0, &(0x7f0000000740)={0x0, "a8610526d17f6f553055f6fcdcd0c5b72efd1cc8573f5186be6332f94e20363571560c71aa5edf9c1dd1db631c837d956c17d0ed5c34a3538b2a5a7dc287e281c207273a968a36bcb0ec982d7f0e0880f0070199b4c2551228cd3b4ad6d3c89a104426922d3e745c1a30594c22ae28fc94ed30b2d3fe34a0217324b39aa8d5873acf694652dd3afe12bd0f65f4de92c3340ca5ce545eb72be2adeab08364283f10b79f984f1f570255fcc5f373cb95b2f2ef592abcceb9ccfd12413a99de0ba9e24a2f4a1598f889d8fb480c7afe2c6014e8ba5360838f15aa50cd799ebfb7fc73431b472cfc394536674410b53c71ff2decc49aed3723bb11ddf28241f63d2e05027666e3ab13a5286fd1de335e616d26663378a1cc846825a5e561fc8a3672839d87edf9051f13e9cd60485a27e01d1bc6f8bc5f000b31ef3f14b1edb356b92c5155c968cd945a75ce25c8484d27ca70e68ab80b45794d9f5f856521bf02679e26066049be06910234e0495523b139de0a3a21b8211963334b4f4c10134cbc3a9048645d43483c98ebf14343245d1d8adadaa412252dcbe1c31e4c0637922fe41fad92e82b2eb8b96cc290337837a8ded31fef317f0df4702e9f0dca46bd5732753f9f2949df65c44f8719b1432096d04db2a473c347bde10d3cfc40846fc62a218df7b144625effb511d2626e09851666b2f6e621ba6aa6a469cfef2df363ec96b35e95c0a45160d95ec751ebfdbfef46836b8d452bc0516b518ba0bef221b6a55f5df9869c99ec2cc63bc00c20426d18179f52304947006450285ca245b953d03229aaa0c74101b11f20be4199e33dac5aa9f78b68b805642a2789df8cd02b760c5c387b9baaa3965c6235e6773165bbef5da09a44c5f5352d2e698c582390ea7ce48097bd37340fae6bcf8da9b9d30a7da4990096d366f369b3ca26a62025b114702e49e1ddb87af19e5b0fb78337e5b861543d3e5686f4b69864fc1348ec05664d2da5dc2724c97bc1bcf34352446228129d5ee900d9e90322c287ca5a653a930482aec15a7af17331dad248a3d2d0efe2566870440bea6595378aad193cb6ff01163d240f666b98dd9a84e0e65345c16f2c4e8da264a114f7a55c95e0091f91980485cf04bc9a77cb8acd1f060a71f9bfe1889b47eabaa565fa780894868960449c8b767faf45740565cda273a5186a2060ce5bd81ef4346017fc6f9fe5b3133e540a309128d7425e86ea4db3365feead28bce3c15088f759ec6b59facfeca8e862bfae2d92557d87564aa973e989a7dbe58cc8ad7649c09b1f2547d60a29d4e6722d5a0ca28bbcb201f1f01606af6a1fb6a896813d3ddf125e5e7656a93d46021f5bcf418a673e0cbb1535f15326261f6e47080f7274168bd508af7de28dc78556e69a82ecca2c47471fa454353fdfa629af79a31d983e7a686c022cc28063d80e842029b0cd7a980e6e338ced5ba630802331943e0679632357db125b92e5ebb80cb452f1ebbac53ac5f3662dbcc3055c4c43b112f996b750f9944a289769aa0444e79bfcfc8d07d404fd1efb3880466556f61c231815643358318e0a5876ffe0051fbbb27dbb854c14bc5fe5691fa18380cb82fc7a63e31d780c045896bde833c556d0ed16c4b8650dadc612e68cfa18ac07af92e27eda2a9b03fd431cb2517badcdca5f95697fddb809848364d2cb71dae55f70ccb345928ec21c8d120ba29a51523a1799a014f9d58fdb12999be69d6420c476b895a7981338c6dbcf0ba7b62c7e3d1f21e0e5187fc1838760326085ecba0075567ef76ded3fc90549b00eef0b8d321d0e37998a20ef3a117be1b7164cdba71e6766de9421b7209154a9d3d65d4a565eb9c7355666a9207583a48249a20c8d3cf50e7c4c052058a1c1c145b31da6bda3852a718a989c661a187ac0127488f2866291c492811e39d5fa3a968389665d88bbf5afe9133f84d4cbc8a34e6ea7845cc67460e2e2f5c67e770224265384881d7445edb13c7f167551569f71cf0d408a937cbe306da13350722a28868f2bb7f507e7e3a8cd0fa915ae3c1320d786ecbe93f6817c4c57ef3897a327d6a26c0e37b32b3a2fdf42f97c7cc0345e7e12a2c20ff38c8052cf5fc8ba81fea54b91b319f440ecf24287224f82aaf1347fd9f486dfbdff0b5f55ccac5b46a48de0f95c8c320880e85e0445796f6966b6868cca6ffc2195f700769977577d0113e58d660e5c7321f4ca120a47b873171bde6cbdca75449d3e05e38bae3c09fb69e424f958683c559bf15956988067ebf52dc1c356e10093dd8dc45fe77df08845339e39c000faa033c60e0c957b2bbbb9b51ea463011e1907c4259a17b9b781af03c0996f178baf26d5482382427c5e7069059682b32b96e74586a8aedffc5be3586b0a3c179a50c32e8c9c6cd0b9907e7cab4ecf0a6b1a3cd95c19018cae1d184092386a7919439638ab3d58583826a7a22568889a9748b23be39a903964f3fab44f00b986c758992e19e24554b59aaaadfa249598ce6b88f63fcb3e02d4269e0249388af05f9ab715e4d8317f27b87f7340692940779a0fab7a9158851104b809c0a4640f111a6a87db8933123d1b6534a9041fa4040c352c91eeda53602a43991c8cdfaa5a5d1c00896bece09d8ee723e59a4fd75fa942dbbb5e9f488e57f6825fdfd18d7b8ab3cdc7d6dac93506d420dabca126df8fc1eae6a0613e4f0118040b7d5e2b37747fb1e59a1ebc3c0123bc91fc8e7e93d8b4472eeae44387307c1627a81cac24b62e83aca1c0289f0ecf6b4af16ccedc2dd2e2676297a7663d1ae4d9340ac5b9542e7b5e30e5ca2ffc8bc0c4efffdedafb258bfe2ab55a7d5f7a2b2a43dcce884984325158ece6d8d5c307f5da933645f8c63b626955707c3b29d564ef2b7d7c7638979f55797b15f5fd24ef08cb8071dbe70f041d70d4a6fe5beb82771d547aa67951a4f70d18b97083cbac82b3589c916d39e6a444b411e366f7e7c2f85f90f64ebd4fe071854495aa1c8ea36c9caa66bd72cc36c733842b6ee17f71cc58584807472134ce09af45dd834dcfdbf222738a2a673e2d58cb48eb6286e8191448d359d4f52d59d4556ae085c1d6f2a2c8757a623d93d728b7a6e548b5e965cad32fc90e9dc66a4c2e7d5e3dda7d8a1c3f0244f3e3931eb1b0e4426ea50bf1676e0ff3e0eefdddc26220f239893d3529dec119531676ea9d4bdf004c5933078b8e01d16eae816c32b9edc980c2adf608646f8e0bdaff37e842bc2d2e1131f22e86082653d7ce3a0e01fbb7d52434f99798b85094b1a1e127982e35905c5982e4c30714934d5d75a8fb4da081540a11b59c2de25ceb3531720cb425d2cb66097bb036bf861b2cf8f94fbb91601c7d5bc7cb18ed8e888de346abe297f3551893cb36627ba14afdb5eeeb049eae4aa9b243f267f482d87ab9e00d684e9e27b2dfec0d8cfa66b39a516b74307d9466a68c1d217e00eac2cf81baff9904fc11a0814d00e47504ce297474b69fc9cae205c1c574160b846c3d0ff8a32500be1cab0b05a7f3d00bc9be5d54b885041c2a4731d1f62ffad981503c2cc47a24feb6e7686c9e5e72ffee3532279e6e9b9149e8b19a634349005893c4f4623504f028de591bbf93f23bad9b28d6f71228781f7e00ce5b58eb8eb56e75a04b1be091092ffab3ebc634afc5976b112424eef9805b385ce0e99312bd02b8f2077579cbc430d899fe216034b5d81b0947cfbb1aac5f9c4e73777121f0709d75347991f65048fad73e03b08ce30108f83ba90786fc219905a71e7180bfbbd25ced47f0202668fd2cea6cb89979e69273509133fb21da0a7c7e7ac6e10bf74f624fda2864575f061d14703b4fcb3354c54fa9b5929f7e3d2bb3bd56423b955cf9a02580493caf5d190e7c5d2db93b46bf3d81a84d8ef89e2d78321d384af617289ca3e78b05435b7aa45003ef07db249196a400e6d4a98a30e219c1af93c65de9cd83b7517baeb285ca2d51e7c7c2dff371c173de6eb2fb991e0386d6cfcb4cd8bb3980cd8311e56ede4e39da8b9231d8c13d546ace3f58d97405194b25af34b6f02470482d87e6c65eb25741932a3471e0d0f53c78bb393d088c2d3b33edc05ec675fecd4c9f8d235799ca48f02b7f9e71ec4fb52a49df92908e98612dc529a127703963e07e065d0dbbb1bfdd3563cda98dc9442b371d995acdc9a4ceaa589f287563ff612a55bbb23d01e20d03f09f1ee03b44e1b326d13501ffc3dcae7a00a7e79d0bab3349748e2f5fa140f08448fd3ed4cbf2eef3508002fe36a7731b54278c20d0006ee5acba7399d1d29c628b591a384d3192617df8a43ac6bf8895232b9aa1128756f68a15581d8fd8073b1488964e99563c74269bd6b2be24d6bb83187280908a79b8a38dee0e4f942c1f045dc056aa14b5e3db9ed928bb2ac7bff653e53c0b5136acf637e704088157d6d3258bb5b930df224a09a7b2afd5581e97a7e4c11e1bd2d7f8d0fbc8dad65bc4b870eeee1e4c4d6de97c42287fb766cccaba527d58e425fdcb58c53e5df998d64dc51569b9bf18dbe746a0ce6ec196286b4323598d7504d11bbbba017f7ce9b4a06ee390105ffe79c932235ff253aa792518afd78b8cdc8a64d5e68ee2c5e5a7b5a9af6e992c4538f192ffaf1e5c124d718fed5ffa33f01bddbd399b781d3ae76be55b8741ab0bea63268054a4c822ffb165817f90ad38af75ed33f406f9144de4cde02d4190c481a9476c9a58243500db3a08e08a48b35682a2f9036bf96b96f905c1c00e8828a731d5aa265846ab54bca8444b5bee7030872ba1c92f964e59569a53cb10b4db678e0ff99697cfdf41a357dcdc3168e264ec775b8f7972b44b90581ac22fd1166cf5fb57d297a623347ff1f0bb723031bb4c37b51cb312e93e8d080ebc4c983dfe71d07210630c2e4fc772355e9741a6de3a999de26198f608083b395fd249ae41daa8e8f6356c3d487a166db1ddafec21d063fd6c4f1dd249eb11676501d46c6e1af36d47bba8ee86ce25e3124e1833a245ac43bf8d53c0dff6fe59328b32518975aa86dd692376d90fe1495ae96c01c69da1286262a8b9c11d92a0c66143d309e577ecf7d0b57314f5cc6aecd975da380fd9a60dda49a87dfe1a0ed4d3783c04d784a130aade15bfbd862592c07d6ed561a46e7bf9f4a936add7e1927dee50ee282c666788b82b7284f03c655266aa667ce72d886f9f0af3c93aa576336ddc0900c22a19b3502e376402d9aa4ca989b9f9e40aa766c3c628913f479bd027130d59255f70477bd1df9172441a0d8244333659d57b91bbe301755228ef8e7663f1e8e24b4db7bab78dafedfc577ba520a612d670c3cc9130f5b868048bfd2a1dd59d138b7d24b6e99c033d8fc04a27d137c7df31ca41547f3c4be48f9dd266f31ae8e67ab281237b2b221a58e6a78f046c4530ab055a53d71648f37259bae7e5caf8c0001ab50d21dfd9cd692b533dce38decb05cfbcb65c29bea43a03191eaecbcb0f88c56aec96190dec7a0907c39319c1101f194de4c680a5180e673dcb67d1fbe1f913441bf35b9c2e56723fb59ec6db5c206d619c061040651e7ef617e854ade88185ada5a0e52dd21a2fbfe7c35facfac695131fe6283d26c2e7337550bb8fa40b62ed121783d1d68ba38a41579b39fbef8f0696d4287ae53e55cee9e9d3432ff06c4a70fc8659522f595871db4f694471c5bf6b0648e6caaf2c28911215a26aa8076af0c5b0e7a82476bb2fe66a0d53303f8f0ef476a412f9db58872643073af095d76fa4"}, 0x1008, 0x800) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000100)=""/46) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r6, 0x0) ioctl$HIDIOCGRAWPHYS(r6, 0x80404805, &(0x7f0000000080)) r7 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) sendto$inet(r7, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) [ 895.205072][ T2478] usb 5-1: new high-speed USB device number 18 using dummy_hcd 10:23:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80), 0x0, 0x4000000) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8038550a, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 895.464753][ T2478] usb 5-1: Using ep0 maxpacket: 16 [ 895.594888][ T2478] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 895.614781][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.631448][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.641871][ T2478] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 10:23:27 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000000020104000000000000000000000000240002801400018008000100e000000108040200ac1414000c000280050001000000000004000380040001"], 0x40}}, 0x0) 10:23:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0xa}, 0x8) 10:23:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3cf00000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r4, 0x0) mmap$qrtrtun(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r4, 0x2) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:27 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000240)='/dev/vcsu#\x00', 0x9, 0x2000) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001080)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x170, 0x14, 0x400, 0x70bd2a, 0x25dfdbfe, {0x15, 0xe}, [@INET_DIAG_REQ_BYTECODE={0x65, 0x1, "b1399b4d44d32ab63dfe6cae93e74015d3b4c460a5bc671b8b34d12bc2d2cf56578a16cd9e3d9aabd5ffae86d98962eb89493aafd2a53f03c5f60e75a094931d33923333c648efb9413fbddaab1b29f4fa3ea1823fdc01c487ef96c96397599ca4"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "2d78cf0baa76250fc69c6a615760255cc59185f006473f9526b9dfd74cfe3a9be93a4416c09563dfd625d897386ad9cc754af76b38fa5d420cdb062a6fd36b0d75c0020967a1fccc45559ba138943788cef79dd330e7f2da55b3a305b1238008eb7b"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "3ed595ac1957a3d7f2238ecb5e32535ca59ddb8c04e2ac27a7dc90c27318a8c4cf4f5078f69cd34aca73a0ec0152f55e022b53e9f1ef3a16a5cf87dc144b389b67146d4300ab915aeff201b6d220da0a5a3c33f19339d5d727eec57e1f9baa7c89e2cf4bcb827a89e03738"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "e99836b3fe2b9cbcf7536cec4b35b24aa9823af8657cd5"}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x10044880) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0x8d) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@loopback, 0x64, r2}) setsockopt$inet6_int(r1, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x2, 0x3ef, 0x5, 0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x75, r3}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@empty, @private0, @private1, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, r3}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r5}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={r5, 0x7}, &(0x7f0000000180)=0x8) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) [ 895.736717][ T2478] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 895.756918][ T2478] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 895.789802][ T2478] usb 5-1: Product: syz [ 895.827871][ T2478] usb 5-1: config 0 descriptor?? [ 895.889213][T27193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.950723][T27193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.966242][T27193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.992865][T27193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 896.051760][T27199] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 896.064142][T27199] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 896.081698][T27199] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 896.091239][T27199] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 896.336548][T27125] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 896.424859][ T2478] usbhid 5-1:0.0: can't add hid device: -71 [ 896.431108][ T2478] usbhid: probe of 5-1:0.0 failed with error -71 [ 896.440513][ T2478] usb 5-1: USB disconnect, device number 18 10:23:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000300120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:23:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0xa00}, 0x8) 10:23:28 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000240)='/dev/vcsu#\x00', 0x9, 0x2000) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001080)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x170, 0x14, 0x400, 0x70bd2a, 0x25dfdbfe, {0x15, 0xe}, [@INET_DIAG_REQ_BYTECODE={0x65, 0x1, "b1399b4d44d32ab63dfe6cae93e74015d3b4c460a5bc671b8b34d12bc2d2cf56578a16cd9e3d9aabd5ffae86d98962eb89493aafd2a53f03c5f60e75a094931d33923333c648efb9413fbddaab1b29f4fa3ea1823fdc01c487ef96c96397599ca4"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "2d78cf0baa76250fc69c6a615760255cc59185f006473f9526b9dfd74cfe3a9be93a4416c09563dfd625d897386ad9cc754af76b38fa5d420cdb062a6fd36b0d75c0020967a1fccc45559ba138943788cef79dd330e7f2da55b3a305b1238008eb7b"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "3ed595ac1957a3d7f2238ecb5e32535ca59ddb8c04e2ac27a7dc90c27318a8c4cf4f5078f69cd34aca73a0ec0152f55e022b53e9f1ef3a16a5cf87dc144b389b67146d4300ab915aeff201b6d220da0a5a3c33f19339d5d727eec57e1f9baa7c89e2cf4bcb827a89e03738"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "e99836b3fe2b9cbcf7536cec4b35b24aa9823af8657cd5"}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x10044880) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0x8d) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@loopback, 0x64, r2}) setsockopt$inet6_int(r1, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x2, 0x3ef, 0x5, 0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x75, r3}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@empty, @private0, @private1, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, r3}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r5}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={r5, 0x7}, &(0x7f0000000180)=0x8) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 10:23:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000400)={0x0, 0xfb, 0x1015, 0x1, 0x3f, "3741ef9d52122ce51d72c1dafb4f79ef", "2b5812e30380794a623754120f32c46d8a260c2b2c3cb97efbcb1a56432f0beb0b158196b7b4d885f329d42a72ac7608dbec96bbfd6d5b6c383f5ee952bb26d08aeeb1b4e5b1366c79a0a999445cadc7d82810e387b88d19b0e63d0a25cbc4804b67c93cb0688fffe4a73babdb295fce61b79ba7493ff16c3dfe19245255cb44076120d49381e31bc45580887259d82100fe836c7561e49d1d1a0734685d7b62dcb40909b855fc6e6de39cd5d3e155c4f430bc7cbdd5fa66139088c5693c31d6777cbc1518375de58a4ba660fcc991d47fbee458006b5a32db057ef62a2ca22c2b5d611161b99e26ee30f51346dd13c68ba2325a93d997fff82db2ae48d75a53532739349bbf44cdea817b9bc4b455f77a2f28e3d9ec3107bf87cc9fdaf573b47c6a2cc8da3af3a6daec23c45dda41d34dd1dc5fa0af5f595069cf06e16823f3fe17a284e3937f76c512cbc8cd4fd72294fd841265f9e47bc9100737d72d7e9609a2e5bff55a857a88b92fefc46618e1fcea96a60d8b1c3ae624cc7cc054e912ad6b3afb07d389906f542ff648e73143a386d7aabfbc7c5f7497fede6dd24ae50e635fea54f28dbdd3426c7642a6c9761f3bf97007e483020a1b2d6c391aa8fa169153c523ac76b148b3c8b748324d44dbda58a429442b153480a671929d2848bbea69d21bc28fa0a9842c520dcf13e04226fcd59fcf838d1dabfea83ab7ba264a4abe23d8ee23f512172a09c68bf88925a652f0b99cd93786d74865e787a3a47a7e6719554c98c89b87f4a83a20c27fc2c8336cabedcedbc4956615f1d0c5d8dcacb495000394a050100eac8a19a913905029cf6900054150c16145b7336a037ba6e18793df4347b21e22176a9b9b09bd16cd12fcaed88046a310731fcf5124f67d814d5ae6101064bb4e3f28365cc5ff432637696240c2d0ce3e81b26eb8bb32543bbc5bf529f6ff1d30423a1b99220d1e46e6a3e10c3da3114d9142062614dee977a9d996e367a946c6089599e909b2b1399d041418b4af62d81b0d137655a6fbafeb250c60f06ab40819cb6abe28473e56df33ff60adbbb0b995b08832ef954b30b52a9c3ef171ba80d289907cae5606c67bf8d35536859adc9446f8617005e1bb6b28178264832d37452f795c23635ed76885b07e74cd197e1ed5dc4deddd23d995254914bd0bbaa8adf30597517a0e07486f97028dcd02be5784e46dfd3aca85c48eadceefc2cb5d25fa0c2ae433a489ba74c4e603ce7fbdfd0ddd501773e9dfa84cef55b36d6a676d4d61a29ff5d3dd21fdb93f617a33c130a74c2a5bdca1c809cbe9d906d49c960bd189914cb9b667a1b64070f30607550870b9b1a3c5f3de3b41295c95f7d20012f85be822ff748f8535f6d1ca8c76c3875d7fab9775ecad40708ea48708df5820033e571adc7da66ea8a16bd588689276eb1550cd8ca629aad1c1bc34f02727fb3b79ff522a8ebc3799ae9e490c9e26b9ec328b9340aacce9276e849dea4e5124c7943d3c4a5d85e4af532db6e52a9fcae257c1180dcd31f22a145027f9fa6c8beee8bd8f14daf97964a9d732680a63e365ad2be19b3931e036928d14a4f80b85e27d6d92a38cbb3f6168e554c70b3045ad9eb1a5639abdde060d8d818bc228f81dcf5d12dfa7568b961acb1a48d47f583e13397f4caa68dd24915a8f7289e04b4a515fbbac0571310ad02a29c736e14d3e3b8d0cf29b3dfa80fa872311291fbfa40bc26fba9206daea1aaaa238084520e1497fdea080c2e96b46073585dab5ebbdba44abdb9b2416a3b151755546600b8ebbfa896e173a0264d1986bf3b8abcd9185375eecd38ccd8cdeff5f453db96902628ede3ba13896cd7d154890d3a7bc53d53c3d457947d0fd40233400c26a5f383ee9e338fa49abf11044976bee436a35a180085764ac64f28bc10bd8b3901c1421d752db448f2415a39b48ece9dded74e15c82e861b429b38cc912ae818c527e44ed73735ff7e356e3cd6881ff505fbe0ac114043a02428e85825b9b09e1fdd46bbd3a36b93c7cd5aad8d7d4f181725dd564b48e53f2d875271f279130e06530b74e9a8532ca00dfd8c0edf4255cdb596920c0b07c55b1bf67fd56a2cf262c9cf42236589a3b52ca3fcd170ca076938184e975b27da2bfa3aba78269460b5c38e715214ca3a5ef007cb72611ec5132952008b43fd6b9f142d5c49f7348c11b864329fc52ca0fcef6e873f732464fb1c5ea848d53ca276e8d9e47a2be535a053cfe6cb129f2b9b85fa2c82b1359e26d9d8f58c661de69f24d5de5cc00fe642e7f866e0caf800f7e25aebfb232ffaecb95147302e1987c29d2b3eda7e713a3c91fff759c2cb44bdc98382ab36000a653e7bb8037d0f944a737849ab29220ca33b67f22cee1352d2d57dfac7b560795d0e592fad2152f32a126acdc40e238d5e72089b7ffedbf33296a023cc4209db6c3e29d49f12641712c68c42d88f9256a09790a0e845a6e5a5cbf4ce88918cbc744fbfa0602ddae25d16d955916ec8cf9b4a6bb0435201b5bc751fd3b190b4a9256ad97a3c126bed5afc02aa57e5cf2398f6e222dfb4f7dd03aebcaf8d6c89208652748b2e38f58a5f9e8a08babff786631fb45c9250e15b492b494d4cc7d743f18bf80a9484c4d095c69b0171e71746471299819c6de9ce1cdc3e5c8d885accbf5b3b7e45adf3c4d9b5c250e04efec68b12e24f3afa41a2e4aa6e8fb7d7b8fd0f69f5b3dba157485481dbb6c2a76ca5fde91d19fb9321aa435b87c1c06a0d68b00d4368879338e9920b819ea842ee624aaf1bde5d616a5534844c1f5c929bf2549c97c0b9f61a2e9e7b63315ea45acf03407cf11bd501e25c80f352dae87498528133b1f12bf5cb0e9e141a88492fac89cafb9343cbb1a2bfa7b456c2e076eff57890a70928913f3d0ee7025cd4aecafc20dfb3228f3f1beb48880189aa4b8ce93f88fe3de77a52f8fa1e9209ba5efbea559497f0a7dcaab6f39b5b8984c750be8b6e4bb7ba3b0d4583d5c173e1388d17700d5a2f6ebf23d09d820d6290ac3a6f992314c599c978d24a288843c2146c85238dcb43625ef0a4484cf1c414a3f9d2e9cb2b1467acb88bce9ed8abad1d6940cf40c0c67acce2ce4ebe5e77f835838fd6ee99700989b0cf1939e481c0505040a86424337fa420cbfcf78cb1d83ddb2b9be65bfc66e93ce26fb3268ddddcd8844493e193754ac7f821fe0e775ebec00d8f08807e1b795c65c4caae8c0cf527c3ba8360a0148ed8908c88ebcff8b27cbad2eaa8b4a6ceebb51a758864f66dd551fe0400a5e52bd3d5dd32a35456b01af916057ed5969651d2679b50911bf0ec1489d07133d4cd201eedc8a7239666c33ba9f604c5db9a39c180593cba4244529b2a4ba1adb96fe77255579762288a6de7f0fa397c8b4c1a2fd347d9f321c4452141cbf2c9cd66dd178ee9b5e4dce29abef9bebc0448fcae9f2e40f7b1bb9b171997365d8c05c2f5d3d51bdba072e10ee548d9e5459b5b62b9695030459f3e7ca629587b0759c7968d0d65c76cec9d1fab8c26b9d237348de68e4dd7dbb09ec8fe0ddb11463e09ddd740ef7afe46cadc328a086f82eacdaf59c3e8b0a5d404aca91a98f4139fc5bca7ed968b189965a52517231b03d8fe10d4221b313ebe5afd2bc6a1380a2efc03600129d22b00e8b261e9cebe06c003ca4f391e8157bf15b35b76071153e778f2d2d5ca764905a4436d583bd19d39afdbbe32f850e04342f08e373d49d0877e59d185e72c1d313239cb3bc144da4ef8ace66967b46c10e3769ec7b41cc8bba73762b7e4c1743ebead74ba4ff9da44105fd73610f37033c8dce05391af63e0f3a3a22a89da7c790c599287d2ee17b7030879b9968fcce900088ef2a2f95404cf2bf03b76b2c0e1c9ae15c93e2e04d0d299d0b585b9898149123339577a2c3127e8c6238001fc8fba71b2b938ff88f2e695ac66299b280ba01bab734adeda5fdd9bfe081250b8eb67947397b4190d9d4084d5d1c2285b68e9b65d994b669aa809ba1dcbbecd096c9986990212adaef35bde632327b7bff7d97d06f5db523351880bec3d4795d0067f234253f6753ccd33eeb7ad8456734e3d780df0b8ebf61c024058471ec849a2cffdc378dff1e09f633364570e5c128b068437cf3c7729f612ce8a191cbc0b1c2bec8ca44689a36f0d799efe0875dd752ac337552b73de97643f4d9fed3499e7070476d658577afe1ab5240b57342cc0cb9773de3980a7879e856dd15108a84756f7f9793c1f84a01eeeff381579e48526eaffe1cc07eb7badea28ca7b7a866c1bf81be1e55bb318efb707172b31bd9796c408e916b4f54be8ca7ab841da0e191a95647568906a25b286f54e3857eff7581dbddc12bb62d533dd824b993f04e878953284531d9dcf35e0485b938a7da8359784742368dbb8d1332f42ae25fe8ad40bf71f555e4cf0f0d1cfd4eded69e4b3283ddb581a04f279ebdc5e289cefe8e3528f310bbcb4e43cd67273884d86a49febc474b0ea10dc92d3348e29395cfb4d787df68d43373db05207989a746b20df775283b59a712c51e05f6964518b81b8882b7336c8bd8e73226235f0cd87ecd7953ba42038def957ec3b1b2774755efa96d3452303cf902484fec585bd199bcde5bfad95f4db2bd77196e40989b89332aba53feb964c0bdb752049cdebae5f390c5bad81493cb6bc81e190f1a7bac9e1395bebd72e7c0854528401380eb31e119988076ebc952951a2b27c010949b9957dd6fbfa278c357f049317f522b04e0aabde89fe7f5ec5b80c13c86d901a3819e840cd73bc5bc24e7d9948edc6319e967f8f41ee3fae1a8cfee9e22596c8d17936bfe1e455b755874fcd9e768405d99f40fbca979664beae4a92213081ba202b38fdd7125fdd7cbb06066c45d9313668446e4958b094cf39ac8f4f3e7a8aea4411db5908f267a50b199dd3cfe79fb909c688e45f2ce4bfcecb69810e3a7057daab1e1b9600d8422cbc33496749ff8bd332561fcc5d09d26eaeae0b8190d935884a8a06274963e8a5767faf59e70ed36679f0d0b3ba3db03b19150d8e57d2b553bfe2b3f50c47476be09d38c51e7886616517856c7eb60a8db233d519e0560a060b12c426f36cb41850eac7e5e58e70a4955fa2f3e5933a2f97df0e828b8edc46168db3e5b1983e8ccf134f0a2b27a0fc22d1578268f8449cb925db12ebef5c340ae4f7e248656091823d224a158e20ef2702d2ad572aeb33099b66dd7b7c7e6ed1c54ee835659aaee6a635bbbe29ffb7bfad214ffe08beafda48b492345405326f53c3a795b195a109717d3c986f3e0281fd23630df4d190d767b670bfc0831b98f784a114112196313ee1de94df10439f2fcef5b6ed7b25613a6c72c4453cf45128d352f39aca346647487ffcc1b8bcdade4f90a875b5c8f4efd3f0d578b76b81ed27996138a0d2ad5f15db0634ba5a8f6402ecd4059f33970bb4bd4a6d631d34ba3a993c0eda9f7c87c992238c13ffc5a8b8c9021f3435af34f4519e78c11c49c54b394ff17ebf5fd19cfa30dac7d891c41f0d226854b06e5014e6b4e508ea580ea885fe614ca710ca6de9d5f9f0e5cc1253a48771b70353fe3e2b83cf23aec6230cfa399ca9ffc61180899db9772a3d6bc3ce370b1d96c2bf03d5c5e643e8087d20ddabb0572c3923268ad3d2fa84c1b131f355a03e848aeba713f579d874c273e1891a637c215e75de4a76895fc407639f2b15c2bf7c38627f7388b50a494176421ed323a8712bdd8045a3fabd81529a7193f7b2d"}, 0x1015, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20004040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000014002101000000000000000002110000b8a72e829866817ded42778240d05417aef62cfe3eb239f0fd4822ba505d592b32e645c101ac1b3f34c552888709f044a6f7658415506cff7b105e6c0efbc2", @ANYRES32=r6, @ANYBLOB="08000200e00000010800090002000000"], 0x28}}, 0x0) [ 896.852774][T27210] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 896.936985][T27218] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 10:23:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x3f00}, 0x8) 10:23:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x5f, 0x0, 0x0, "b180d2371878cca660aa4ed221e3f0ce", "f10c405f42451b564e4d2651dcbbdd3e97a06b8dcc1a461e6a9297bd98d987bca4943c0587bcb291b043ac946b6103af4dbeaff5214a329a852c5c7bb9a34d1b774f336d7715a68e5d4d"}, 0x5f, 0x1) r6 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$read(0xb, r6, &(0x7f00000002c0)=""/191, 0xbf) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400100, 0x0) sendmsg$TIPC_NL_PUBL_GET(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xce}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) sendto$inet(r8, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000500120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800900010069706970000000003400028008000300640101020600100002000000050005000700000008001400ff0ff10008000100", @ANYRES32=0x0, @ANYBLOB="050005000200000008000a00", @ANYRES32], 0x6c}}, 0x0) 10:23:28 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000240)='/dev/vcsu#\x00', 0x9, 0x2000) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001080)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x170, 0x14, 0x400, 0x70bd2a, 0x25dfdbfe, {0x15, 0xe}, [@INET_DIAG_REQ_BYTECODE={0x65, 0x1, "b1399b4d44d32ab63dfe6cae93e74015d3b4c460a5bc671b8b34d12bc2d2cf56578a16cd9e3d9aabd5ffae86d98962eb89493aafd2a53f03c5f60e75a094931d33923333c648efb9413fbddaab1b29f4fa3ea1823fdc01c487ef96c96397599ca4"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "2d78cf0baa76250fc69c6a615760255cc59185f006473f9526b9dfd74cfe3a9be93a4416c09563dfd625d897386ad9cc754af76b38fa5d420cdb062a6fd36b0d75c0020967a1fccc45559ba138943788cef79dd330e7f2da55b3a305b1238008eb7b"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "3ed595ac1957a3d7f2238ecb5e32535ca59ddb8c04e2ac27a7dc90c27318a8c4cf4f5078f69cd34aca73a0ec0152f55e022b53e9f1ef3a16a5cf87dc144b389b67146d4300ab915aeff201b6d220da0a5a3c33f19339d5d727eec57e1f9baa7c89e2cf4bcb827a89e03738"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "e99836b3fe2b9cbcf7536cec4b35b24aa9823af8657cd5"}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x10044880) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0x8d) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@loopback, 0x64, r2}) setsockopt$inet6_int(r1, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x2, 0x3ef, 0x5, 0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x75, r3}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@empty, @private0, @private1, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, r3}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r5}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={r5, 0x7}, &(0x7f0000000180)=0x8) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 10:23:28 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x65f6f000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r6}, 0x10) dup3(r0, r1, 0x0) [ 897.365680][ T2478] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 897.604733][ T2478] usb 5-1: Using ep0 maxpacket: 16 [ 897.724907][ T2478] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 897.735766][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.747157][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.757430][ T2478] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 897.844857][ T2478] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 897.853909][ T2478] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 897.863399][ T2478] usb 5-1: Product: syz [ 897.869908][ T2478] usb 5-1: config 0 descriptor?? [ 898.338401][T27226] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 898.424817][ T2478] usbhid 5-1:0.0: can't add hid device: -71 [ 898.430905][ T2478] usbhid: probe of 5-1:0.0 failed with error -71 [ 898.440562][ T2478] usb 5-1: USB disconnect, device number 19 10:23:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000600120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0xa000000}, 0x8) 10:23:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x20002, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:30 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000240)='/dev/vcsu#\x00', 0x9, 0x2000) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001080)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x170, 0x14, 0x400, 0x70bd2a, 0x25dfdbfe, {0x15, 0xe}, [@INET_DIAG_REQ_BYTECODE={0x65, 0x1, "b1399b4d44d32ab63dfe6cae93e74015d3b4c460a5bc671b8b34d12bc2d2cf56578a16cd9e3d9aabd5ffae86d98962eb89493aafd2a53f03c5f60e75a094931d33923333c648efb9413fbddaab1b29f4fa3ea1823fdc01c487ef96c96397599ca4"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "2d78cf0baa76250fc69c6a615760255cc59185f006473f9526b9dfd74cfe3a9be93a4416c09563dfd625d897386ad9cc754af76b38fa5d420cdb062a6fd36b0d75c0020967a1fccc45559ba138943788cef79dd330e7f2da55b3a305b1238008eb7b"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "3ed595ac1957a3d7f2238ecb5e32535ca59ddb8c04e2ac27a7dc90c27318a8c4cf4f5078f69cd34aca73a0ec0152f55e022b53e9f1ef3a16a5cf87dc144b389b67146d4300ab915aeff201b6d220da0a5a3c33f19339d5d727eec57e1f9baa7c89e2cf4bcb827a89e03738"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "e99836b3fe2b9cbcf7536cec4b35b24aa9823af8657cd5"}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x10044880) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0x8d) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@loopback, 0x64, r2}) setsockopt$inet6_int(r1, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x2, 0x3ef, 0x5, 0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x75, r3}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@empty, @private0, @private1, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, r3}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r5}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={r5, 0x7}, &(0x7f0000000180)=0x8) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 10:23:30 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x65f6f000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r6}, 0x10) dup3(r0, r1, 0x0) [ 898.854137][T27281] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x3f000000}, 0x8) 10:23:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x490080, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa2086802}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, 0x1405, 0x10, 0x70bd25, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getpeername$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c120600120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:30 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x65f6f000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r6}, 0x10) dup3(r0, r1, 0x0) 10:23:30 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x65f6f000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r6}, 0x10) dup3(r0, r1, 0x0) 10:23:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x7) [ 899.424957][ T2478] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 899.684771][ T2478] usb 5-1: Using ep0 maxpacket: 16 [ 899.804947][ T2478] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 899.815836][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.827418][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.837764][ T2478] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 899.945473][ T2478] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 899.954758][ T2478] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 899.962821][ T2478] usb 5-1: Product: syz [ 899.968945][ T2478] usb 5-1: config 0 descriptor?? [ 900.429245][T27299] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 900.534828][ T2478] usbhid 5-1:0.0: can't add hid device: -71 [ 900.540980][ T2478] usbhid: probe of 5-1:0.0 failed with error -71 [ 900.550954][ T2478] usb 5-1: USB disconnect, device number 20 10:23:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x4c, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x78f, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x3, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x40}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 10:23:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3cc40600120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vcs\x00', 0x320400, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0xffffffffffffffea, 0x2b, 0x0, r3}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x65f6f000) ioctl$SG_IO(r5, 0x2285, &(0x7f0000001540)={0x53, 0xfffffffffffffffd, 0xc5, 0x43, @scatter={0x8, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000000040)=""/134, 0x86}, {&(0x7f0000001180)=""/73, 0x49}, {&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000001200)=""/8, 0x8}, {&(0x7f0000001240)=""/87, 0x57}, {&(0x7f00000012c0)=""/26, 0x1a}]}, &(0x7f0000001380)="41ee44a853ccb78ac19d6ccbd2d94e74af14730cfacfda8724dfaa1a76659eab3f745355381fa9e7e31e3acba8aacd08f1bd7e7240794a8e595b18ea5b317105a645ff18af64585e3f8a341624f5c1f6eeca4d31ea6757e5b2c887899171d306727ae8dc426a2ba7aa720dd29ec35c38ec81115fadf3d50f959daadf69ea118496937516456dfeaebedec5cecb7b79f30ec7f08b94be7eb663b5879678e7cf344b7d398c8288fe8c00dc8aa027593de57468fd371907c1d39235a09cf4a5b17b99bdc4b680", &(0x7f0000001480)=""/113, 0x7ff, 0x0, 0xffffffffffffffff, &(0x7f0000001500)}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f0000001600)=0x1) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) listen(r2, 0x8) r8 = accept4(r2, 0x0, 0x0, 0x800) sendto$inet(r8, &(0x7f0000001640)="1461a6b4abfb3415663149e7460aa310ff4439a1efa5c429", 0x214, 0x0, 0x0, 0x363) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:32 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x65f6f000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r6}, 0x10) dup3(r0, r1, 0x0) 10:23:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x20000148) [ 900.945013][T27333] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000700120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = dup3(0xffffffffffffffff, r1, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_script(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003904000000000000000100000000", @ANYRES32=r7, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32], 0x40}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xadfe}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x48}}, 0x200040c1) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r8 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f0000000140), 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$setopts(0x4200, r9, 0x8001, 0x4b) [ 901.400461][T27369] __nla_validate_parse: 3 callbacks suppressed [ 901.400473][T27369] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:23:32 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x65f6f000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r6}, 0x10) dup3(r0, r1, 0x0) 10:23:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000900120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 901.475416][ T2478] usb 5-1: new high-speed USB device number 21 using dummy_hcd 10:23:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4$tipc(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0xcbaa7375a02a3475, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x6, 0x3, 0x0, 0x6}, {0x6, 0x27, 0x0, 0x40}, {0x5, 0x1f, 0x2, 0x3f}, {0x8, 0x3, 0x6, 0x4}, {0x7e27, 0xd7, 0xf9, 0xc6}, {0x1, 0x40, 0x2, 0x9}, {0x1000, 0x7f, 0x20, 0x7}, {0x0, 0xfb, 0x6, 0x9}]}) r5 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:23:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000a00120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 901.755083][ T2478] usb 5-1: Using ep0 maxpacket: 16 [ 901.875752][ T2478] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 901.906410][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.968331][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.011184][ T2478] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 902.105301][ T2478] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 902.114358][ T2478] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 902.122678][ T2478] usb 5-1: Product: syz [ 902.129619][ T2478] usb 5-1: config 0 descriptor?? [ 902.598125][T27350] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 902.674841][ T2478] usbhid 5-1:0.0: can't add hid device: -71 [ 902.680937][ T2478] usbhid: probe of 5-1:0.0 failed with error -71 [ 902.689625][ T2478] usb 5-1: USB disconnect, device number 21 10:23:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:34 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_FPEXC(0xc, 0x10000) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:23:34 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r4, 0x65f6f000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r4}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r5}, 0x10) 10:23:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000b00120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:34 executing program 2: r0 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r1 = geteuid() fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000c80)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0f82", @ANYRES32=r1, @ANYBLOB="040007000000080800000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setregid(0x0, r2) fchownat(0xffffffffffffffff, 0x0, 0x0, r2, 0x1000) r3 = gettid() ptrace(0x10, r3) r4 = gettid() ptrace(0x10, r4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x1, 0x0, 0x0, r1, r2, 0x0, 0xbd}, 0x0, 0x0, 0x8001, 0x7, 0xffffffffffffff00, 0x7fffffff, 0x2, 0x7981, 0x200, 0x1, r3, r4}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmmsg$alg(r0, &(0x7f0000001a00)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[@assoc={0x18}], 0x18}], 0x3, 0x0) socket(0x24, 0x80000, 0xffffff7f) [ 903.384717][ T2478] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 903.406852][T27400] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x20001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x3}]}, 0x3c}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000180)) 10:23:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000e00120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RFLUSH(r3, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000180)) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="cefb578107c354ce157e52e34aecee50673ee9c5513dd4132b372e186856e627b2bb114d8e9fce8209f7bcef0b2fc7d33b6d5806b3d40000000000000000", 0x3e, 0x0, 0x0, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, 0xffffffffffffffff, 0x65f6f000) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x101, 0x7, {0x80000001, 0x400, 0x2}}) r7 = gettid() ptrace(0x8, 0x0) write$FUSE_LK(r1, &(0x7f0000000000)={0x28, 0x0, 0x6, {{0xffffffff, 0x8000, 0x2, r7}}}, 0x28) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:35 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r4, 0x65f6f000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r4}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r5}, 0x10) 10:23:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r7, r5}}, 0x5b) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {r7, 0x4, 0x0, 0x0, 0x0, @ib={0x1b, 0x3f, 0xfffff621, {"43bb7fbc72f2e568a744236b3af606ac"}, 0x6, 0x5, 0x9}, @in={0x2, 0x4e20, @multicast1}}}, 0x118) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000000c0)={0x9b0000, 0x39, 0x425d, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x980902, 0x80000000}}) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4) listen(r2, 0x8) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000040)=0x40) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7c, &(0x7f0000000140), 0x8) exit(0xff) [ 903.834790][ T2478] usb 5-1: device descriptor read/64, error -71 10:23:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000f00120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 904.200027][ T2478] usb 5-1: Using ep0 maxpacket: 16 [ 904.324914][ T2478] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 904.342922][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.355842][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.367072][ T2478] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 904.454863][ T2478] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 904.464022][ T2478] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 904.479855][ T2478] usb 5-1: Product: syz [ 904.487368][ T2478] usb 5-1: config 0 descriptor?? [ 904.949300][T27416] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 905.047085][ T2478] usbhid 5-1:0.0: can't add hid device: -71 [ 905.053292][ T2478] usbhid: probe of 5-1:0.0 failed with error -71 [ 905.082901][ T2478] usb 5-1: USB disconnect, device number 22 10:23:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x68, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:37 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r4, 0x65f6f000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r4}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r5}, 0x10) 10:23:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x3, 0x7) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) r5 = gettid() ptrace(0x10, r5) r6 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r7 = geteuid() fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000c80)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0f82", @ANYRES32=r7, @ANYBLOB="040007000000080800000000", @ANYRES32=0x0, @ANYBLOB="10000200000000082000000000000000bf6ba308525fb82df4d1ae00a29f40e06b000000000000000000000000000000cb96010000808cf51cd8a6b0caae714e399af327eca1a4e438ce01747a7736e2648cd3bcc59a1b37cd350944aa459f1d304fa8b17722732506148b6a44510363745431f26bc2e31a60a275bc6211731f0361878aa0c2930a0e0092d4c02c1fe9c5659f5d672bf342eacd48f6806b463b3a94083644525ad3670c2a888ee1a4fa9bd178b4e2f2b734cb2a8c260efb90130bc6afd43aeee4e5410c904bfaeebd4782454044c095cad8923b8682629a5a67f101a1a2fcd828392f1507dfecad1c2530c84da1c9dc457ed82cbc622bbe9273159cef38d5c5c3c72797d7b4f6b463bf6a0eadd053bd82a4cf6c8ba5536c23c99bd67a59f429027cdaaf18a497760080f7241c3040b51558adb47b2c786d3fe8d48315d12079bd4b28d6ecb69b0dfdc3c6c4fe56db1cd32fcdc10aac13394f9e5097905f5dfb08b69f24225ee86859e1c48fdd8c4439c3f5f6c270d31102feb71a9767c3de68861b96b58a608d21719f1b789f0f1fba2fb4f9240779306ed9310459ffd4c371b7527c0b8b7ed9adaffd1f957a6ed65564e58cc382d03569cf924881641dfa7d367e3688d020a8b64658a1599d203795be8979ecee265946763d878c2ebcdac5b964b90b9964874c1967537a79ebf30dde0040d0acf11dac674cc8ddb2753b216f4fc2c2eda952a78329e16f0369adf495a885ec5abeb580b6d53079bbfa2ef0e8e5035e04afd81a5e75694deec95ccaa92f72af62b7829e94b82737442503667e104c12c6611543f18c2d8e829ab3062d9c009bd7ba7a05a01558fb610db6036e73c0f19e98dbbfcf006b262d9b2ae14a66835d44a2e632cb883f3a2ce238aa938f0fa813bf101837ca43972550ce1482c3ea432683072551c51f377692d4faef78175f024cc75264bc91ccab0bd2f1b1480425f758b9e5ea58616ac98aaf463ad5372ae4d79f508cd8a0dafb336cb5d279869108ac3c39d44b1c983db6ea2b419f9c7dbd000000000000000029f72bcf07e1766264166b207b1235f7661dacb4dd81fbe4ed9080ccb5d5ba33a47435b712746a609ef267c42cdc1260cdd40ce65e9ec34e466d70ed417e7925f400237975fcadbd326605c4b3e44ac48257c4a095a80fe09db3d1703926ef05d2b306fa1f8d68eb6388d7d97abdcc5820facb184791d2f97a1f2b6c20bd09e02f24fd93ff5c328f72ea3f017aefdb836fec2706f32afa19f298446f7ef0e950e316fa326ebb9a8270ae860dd2843f91fa2129b2a0cc85aa432c94f080b832eb2681c31aa85e63a0e2490d"], 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setregid(r8, 0xee01) fchownat(0xffffffffffffffff, 0x0, 0x0, r8, 0x1000) sendmsg$unix(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)="5c6ca77fa5b5b6455f0f3c813aedf47728e680491f737f82a3003b6aa5bbd884adaa4637f1063aff3206036620", 0x2d}, {&(0x7f0000000180)="63c542865b8957c9a17a2a466262de0e4b38d9e0535d4c4c0659634a538db85af78df50f0dc3e7f360cd1c2ec84c684cc0f01ad546164e5ca9637ba16dd472a5d030682d491cc40a466b9848af1a950ca039d288a48644f4b05f294dbf2f5aa91e679699cbe9e551bcb445ad53457cd228b8113b8ca46c9f8201f3c0c6ec70d416f89b8822a9", 0x86}, {&(0x7f0000000240)="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", 0x1000}], 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000008000000000100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000100000000001f90ebffffff0000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='1G\vj'], 0xc0, 0x40088}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c001100120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x20001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x3}]}, 0x3c}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000180)) [ 905.490715][T27471] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r2, 0x65f6f000) ioctl$RTC_UIE_OFF(r2, 0x7004) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c001200120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c061200120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:37 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x65f6f000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) dup3(r0, r1, 0x0) [ 906.014721][ T2478] usb 5-1: new high-speed USB device number 23 using dummy_hcd 10:23:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r4, 0x65f6f000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r4}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r5}, 0x10) 10:23:37 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r0}]}}}]}, 0x40}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @remote}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_getaddr={0x28, 0x16, 0x200, 0x70bd2b, 0x25dfdbfc, {0x2, 0x80, 0x14, 0xc8, r3}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010100}]}, 0x28}, 0x1, 0x0, 0x0, 0x200408c4}, 0x20004045) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_G_STD(r8, 0x80085617, &(0x7f0000000000)) listen(r6, 0x8) r9 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r9, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c001300120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 906.294736][ T2478] usb 5-1: Using ep0 maxpacket: 16 [ 906.415479][ T2478] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 906.439388][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.474756][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.494756][ T2478] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 906.586250][ T2478] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 906.600152][ T2478] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 906.612871][ T2478] usb 5-1: Product: syz [ 906.623604][ T2478] usb 5-1: config 0 descriptor?? [ 907.099348][T27485] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 907.174902][ T2478] usbhid 5-1:0.0: can't add hid device: -71 [ 907.180971][ T2478] usbhid: probe of 5-1:0.0 failed with error -71 [ 907.193589][ T2478] usb 5-1: USB disconnect, device number 23 10:23:39 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r4, 0x65f6f000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r4}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r5}, 0x10) 10:23:39 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x65f6f000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) dup3(r0, r1, 0x0) 10:23:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000180)=""/4096) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4200) r4 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={r6}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000040)={r6, 0x0, 0x75, "b5d99ff166eed379d1d2a3db11cb0fa96ca8c36fe7aced3dab33e3fbe5551105213613522431ec2956085155e4c45560bdbd6fc2be4fe60392059431cd74721f8c7bdb6cf67e05419f433e9866b8ecef041939755c879218a363ee4a7d0b129e94e791a9328e2dba19e4ec5db8c574fb855ac843e0"}, 0x7d) listen(r2, 0x8) r7 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c002000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x21) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', r6}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x60}}, 0x8000) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) accept4(r9, 0x0, 0x0, 0x0) [ 907.622038][T27530] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c003100120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:39 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7ef}, 0x10, 0x400, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000140)='autofs\x00', 0x800410, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000080)=[0x5, 0xfffffffb, 0x4, 0xffff], 0x4, 0x80000, 0x0, r2}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) unlink(&(0x7f0000000380)='./file0\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x2}}, 0x80) dup(r3) 10:23:39 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x65f6f000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r5}) dup3(r0, r1, 0x0) 10:23:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c003f00120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c004800120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0980ffffc0f61a79955f410b7695c60a8d4cc69845c4b41a38c890319744b12d8e80c8bf74f1ee69fbcfd64ddb2bbd52efd0ff527f7f1675c6c5a311a2e244d8ed192b95be8133d2dbfbcb2c35192168f4194545d7197d108bfc209c41220370e32de524a2cbbca0dc1500000000000000f3ffb7b9f4581b82031a36a2d88dd4a33502d53dc39dfec94b347cb5fe48fc", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f0000000100), 0x8) 10:23:39 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r4, 0x65f6f000) dup3(r0, r1, 0x0) [ 908.184770][ T3838] usb 5-1: new high-speed USB device number 24 using dummy_hcd 10:23:39 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7ef}, 0x10, 0x400, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000140)='autofs\x00', 0x800410, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000080)=[0x5, 0xfffffffb, 0x4, 0xffff], 0x4, 0x80000, 0x0, r2}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) unlink(&(0x7f0000000380)='./file0\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x2}}, 0x80) dup(r3) [ 908.446188][ T3838] usb 5-1: Using ep0 maxpacket: 16 [ 908.586601][ T3838] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 908.586641][ T3838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.586662][ T3838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.586687][ T3838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 10:23:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x5, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c004c00120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 908.687244][ T3838] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 908.687268][ T3838] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 908.687283][ T3838] usb 5-1: Product: syz [ 908.688732][ T3838] usb 5-1: config 0 descriptor?? [ 909.138418][T27546] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 909.214918][ T3838] usbhid 5-1:0.0: can't add hid device: -71 [ 909.221004][ T3838] usbhid: probe of 5-1:0.0 failed with error -71 [ 909.236334][ T3838] usb 5-1: USB disconnect, device number 24 10:23:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x74, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c006000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:41 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r4, 0x65f6f000) dup3(r0, r1, 0x0) 10:23:41 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7ef}, 0x10, 0x400, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000140)='autofs\x00', 0x800410, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"a2e3ad21ed6b52f99cfbf4c087f719b4d04fe7ff7fc6e5539b366e0e8b546a9b376d94370890e0878fdb1ac6e7049b41b4956c409a472a5b67f3988f7ef31952a981ffe8d178708c523c921b1b4d4b0a169b71d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4da0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71bfc31870262f5e801119242ca5b6bfc821e7e20002451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713cf39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987b67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b356f243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0004000000008000bea37ce0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c13800000000492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5307000000d92dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e67d1d7232f17696294378ce716dacfc5e3e03cfffffffffffff001034ef655b253ca509383815b1b6fc6522d4e2d48604665fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b5f668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d767d9a7a508ae54a3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11dbe200000000000000bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebd2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f71c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cdcffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f362815687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bf0129165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b937fe43c06d21e35810d8fe98b0000ea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36de00bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad7084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b33ad61b4f65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b010a3ad0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000080)=[0x5, 0xfffffffb, 0x4, 0xffff], 0x4, 0x80000, 0x0, r2}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) unlink(&(0x7f0000000380)='./file0\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x2}}, 0x80) dup(r3) 10:23:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4002, 0x0) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:23:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 909.653808][T27615] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:41 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r4}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="dc0000000e8f7cd07cac84c5d9565c4cd562a6b89713d3ec4b6a49bb318bbf6b41f59fbb31dca3da0225cd2579c543c27b2e87eca005000000000000002c5d55f8bb8b0b4169de4b8cef8e26f86f2aacf7790e707869b60509da1386781c60150fbb5ae0f0ada84eb8d32ad22e0bab6d9f6238d589d82859eb322303bc33c1db4fc293328b6e71a6d8076a7c131000e5272d80fa13ec441ab6bf0866c166b63a77ebdba1c2886142ea69beee832bb28aae860a4c1343326395c3de6073d2bb1ce43a3cdb5b9e1f9987cf11a6e7e9871b4e595a3c2700ea0f0000000000000000"], &(0x7f0000000180)=0xe4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYBLOB="70000000e518809d2fa910b9f4af7c658f9d919a8715625b59581639eb3cbf336149f5cd35d7cc0b1429c79e5224a180736fefd79e6378eb15ba707d9a202cfccd5061db6928d50bb5d4de32baedf0a775dceb0d4eea1fc59bc2b4b3fced847db7c1ed8656b5ea1c1b4e00"/116], &(0x7f0000000280)=0x78) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendto$inet(r6, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) 10:23:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c006800120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x4, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={r5}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000180)={r5, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) write$P9_RLOCK(r6, &(0x7f0000000040)={0x8, 0x35, 0x2, 0x2b41a5291cbd89ec}, 0x8) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:23:41 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r4, 0x65f6f000) dup3(r0, r1, 0x0) 10:23:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c006c00120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:41 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7ef}, 0x10, 0x400, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000140)='autofs\x00', 0x800410, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000080)=[0x5, 0xfffffffb, 0x4, 0xffff], 0x4, 0x80000, 0x0, r2}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) unlink(&(0x7f0000000380)='./file0\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x2}}, 0x80) dup(r3) [ 910.174955][ T3838] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 910.434874][ T3838] usb 5-1: Using ep0 maxpacket: 16 [ 910.554962][ T3838] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 910.565905][ T3838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.579114][ T3838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.590176][ T3838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 910.695648][ T3838] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 910.706515][ T3838] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 910.716277][ T3838] usb 5-1: Product: syz [ 910.729376][ T3838] usb 5-1: config 0 descriptor?? [ 911.198774][T27632] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 911.275076][ T3838] usbhid 5-1:0.0: can't add hid device: -71 [ 911.281276][ T3838] usbhid: probe of 5-1:0.0 failed with error -71 [ 911.289729][ T3838] usb 5-1: USB disconnect, device number 25 10:23:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x7a, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c007400120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:43 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r5}) dup3(r0, r1, 0x0) 10:23:43 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r4, 0x65f6f000) dup3(r0, r1, 0x0) 10:23:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = accept4$tipc(r3, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10, 0x80800) r5 = accept4(r4, 0x0, 0x0, 0x81800) sendto$inet(r5, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x6, 0x30, 0x3, 0x7}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={r6, 0x4, 0x2, [0x0, 0x7]}, 0xc) 10:23:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x3, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) [ 911.718572][T27673] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_crypto(0x10, 0x3, 0x15) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) read$midi(r1, &(0x7f0000000000)=""/47, 0x2f) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:23:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c007a00120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:43 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r5}) dup3(r0, r1, 0x0) 10:23:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xfffffffffffffe04) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) 10:23:43 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x65f6f000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) dup3(r0, r1, 0x0) 10:23:43 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff, 0x0, r5}) dup3(r0, r1, 0x0) [ 912.235012][ T3838] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 912.484840][ T3838] usb 5-1: Using ep0 maxpacket: 16 [ 912.614937][ T3838] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 912.631925][ T3838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.644302][ T3838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.655158][ T3838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 912.765869][ T3838] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 912.780684][ T3838] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 912.790203][ T3838] usb 5-1: Product: syz [ 912.801534][ T3838] usb 5-1: config 0 descriptor?? [ 913.285175][T27690] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 913.354899][ T3838] usbhid 5-1:0.0: can't add hid device: -71 [ 913.360892][ T3838] usbhid: probe of 5-1:0.0 failed with error -71 [ 913.378513][ T3838] usb 5-1: USB disconnect, device number 26 10:23:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) [ 913.802797][T27728] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000300)="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", 0xffffffffffffff9b, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c06c400120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:45 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:23:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}]}, 0x40}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000000)='\x00', 0x8000, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="f800000016001103000000000000000000000000000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0xf8}, 0x8}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0) 10:23:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x800400a00) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r7, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:23:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00f000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080045940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2000040000000800000000000000101013c5811039e15775027060066fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$FIONCLEX(r4, 0x5450) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:45 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:23:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYRES64], 0xe) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) ftruncate(r2, 0x1000000) r4 = dup(0xffffffffffffffff) r5 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r6 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x7ff) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x4, 0x1c2, &(0x7f0000000200)}) getsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000100)={@private, @broadcast}, 0x0) r7 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r8 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 10:23:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000260001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:45 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) [ 914.353243][T27779] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 914.374821][ T3838] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 914.399807][T27779] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 914.430198][T27779] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 914.439884][T27779] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 914.624767][ T3838] usb 5-1: Using ep0 maxpacket: 16 [ 914.753365][ T3838] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 914.774514][ T3838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.814190][ T3838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.830772][ T3838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 914.955015][ T3838] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 914.964106][ T3838] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 914.973941][ T3838] usb 5-1: Product: syz [ 914.980440][ T3838] usb 5-1: config 0 descriptor?? [ 915.047674][T27775] vivid-001: kernel_thread() failed [ 915.448666][T27743] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 915.534942][ T3838] usbhid 5-1:0.0: can't add hid device: -71 [ 915.540949][ T3838] usbhid: probe of 5-1:0.0 failed with error -71 [ 915.555286][ T3838] usb 5-1: USB disconnect, device number 27 10:23:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) clone(0x140a2100, &(0x7f0000000000)="cb016af745312d4c498cf468854a3e691416fce48dcb8352cd36b30b0f6efe62853d48ef7ce4e56bdf14807df78fe7e5126aaa8b76c5a54afa58d42e8b08cecc0adb37b113b480dc7aae0b88f44cbb49236f578771bbbab6773c187be7e4565710799d474749262b9b94e8e7f4010abe7a7b978ab1b60ca34812ddd280e178f888469c85ff29fdf77123f8f3b0d9ecffda167193bae2ef017f25d8a8bccce86a", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="636555f373c2f4ad0ee3b67309cbba6c94d2715f5b471b8abd433af1c7027da3275b9314d7efa065a6d7a05daba70befbafd1316c2950c462a7bd563ff5d08229289a9c0f340c86dad47969b580b086f936e7e0756dba81addc04e8b40cce72b43015311267112d29d2afb2604a29e5af05555290151f2657811e40eebcf8748b3bef0f337f71ea9fd8a6d9ae878f058eb1a9a67abce5170a5bc3f990eb875e4cbeed7d53bb9ff0f922588389d2578a5a53e1a8943ef5b83d15c54fa3c4b1bba97d22458") r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:23:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYRES64], 0xe) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) ftruncate(r2, 0x1000000) r4 = dup(0xffffffffffffffff) r5 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r6 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x7ff) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x4, 0x1c2, &(0x7f0000000200)}) getsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000100)={@private, @broadcast}, 0x0) r7 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r8 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 10:23:47 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:23:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x80000) openat$cgroup_ro(r3, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000000)=0xd, 0x8) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x34064) sendto$inet(r4, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000670001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 915.974845][T27807] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 916.044086][T27816] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 10:23:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000200120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000000)=0x1) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:23:47 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:23:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000300120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000400120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = accept4(r1, 0x0, 0x0, 0x80000) sendto$inet(r5, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 916.545147][ T2478] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 916.804773][ T2478] usb 5-1: Using ep0 maxpacket: 16 [ 916.934882][ T2478] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 916.945886][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.958711][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.969199][ T2478] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 917.055643][ T2478] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 917.064825][ T2478] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 917.072908][ T2478] usb 5-1: Product: syz [ 917.087596][ T2478] usb 5-1: config 0 descriptor?? [ 917.559669][T27824] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 917.644837][ T2478] usbhid 5-1:0.0: can't add hid device: -71 [ 917.650875][ T2478] usbhid: probe of 5-1:0.0 failed with error -71 [ 917.659472][ T2478] usb 5-1: USB disconnect, device number 28 10:23:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:49 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x2044, 0x4) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f0000000140), 0x8) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0xffff, 0x13, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) keyctl$join(0x1, 0x0) 10:23:49 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) [ 918.083542][T27862] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRESDEC, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) listen(0xffffffffffffffff, 0x4) r8 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000500120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYRES64], 0xe) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) ftruncate(r2, 0x1000000) r4 = dup(0xffffffffffffffff) r5 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r6 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x7ff) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x4, 0x1c2, &(0x7f0000000200)}) getsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000100)={@private, @broadcast}, 0x0) r7 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r8 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 10:23:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000600120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:49 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:23:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:23:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000700120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:49 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, 0xffffffffffffffff, 0x0) 10:23:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x104, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb74}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9f82}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x580}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4810) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 918.605046][ T2478] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 918.844788][ T2478] usb 5-1: Using ep0 maxpacket: 16 [ 918.968982][ T2478] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 918.980012][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.995825][ T2478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.008686][ T2478] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 919.095368][ T2478] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 919.104410][ T2478] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 919.112499][ T2478] usb 5-1: Product: syz [ 919.129287][ T2478] usb 5-1: config 0 descriptor?? [ 919.587722][T27879] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 919.694868][ T2478] usbhid 5-1:0.0: can't add hid device: -71 [ 919.701050][ T2478] usbhid: probe of 5-1:0.0 failed with error -71 [ 919.713878][ T2478] usb 5-1: USB disconnect, device number 29 10:23:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000800120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x5, 0x82) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept4(r2, 0x0, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x101000, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)=ANY=[@ANYBLOB="0400000000000000ff"]) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendfile(r4, r1, &(0x7f0000000100)=0x2, 0xf872) recvmsg$can_j1939(r3, &(0x7f0000001440)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)}, {&(0x7f0000000240)=""/184, 0xb8}, {&(0x7f0000000300)=""/119, 0x77}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x4, &(0x7f0000001400)=""/53, 0x35}, 0x0) accept$phonet_pipe(r5, &(0x7f0000001480), &(0x7f00000014c0)=0x10) 10:23:51 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, 0xffffffffffffffff, 0x0) 10:23:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x240, 0x100, 0x9}, 0x18) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x3, 0x8, 0x10, @remote, @dev={0xfe, 0x80, [], 0x17}, 0x80, 0x80, 0x3f, 0x9}}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000229bd7000fcdbdf251c0000000c009900060000000400000008000300", @ANYRES32=r7, @ANYBLOB="08fd080400000000c73d7a3ce24708000300", @ANYRES32=r4, @ANYBLOB="08000100000000000c0099000100000002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x2) connect$inet(r5, &(0x7f0000000180)={0x2, 0x3, @local}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000380)=@urb_type_interrupt={0x1, {0xd, 0x1}, 0xfffffeff, 0x2, &(0x7f00000001c0)="6a2e7e95476d4e51861c230683a68ad16fec4bfbb4fafdf6f07e019117be43bd46497ebc24667e1891d45e10b8e4bdf0119dcf6b6c91a30c3494ad7ed416171093020fa582affc41f0154ddb1dea44317e01b55ca21602454736c022d7ce24b448e227409b41ed7ca11cd33e048ecbffacef8c0e9f021ad631268676d6ecf1c724ef032104e1751daccdf232b0f85dccc789d2bcff48c548b52cc1222c128e28eca13b7c7d4536ccf09ada479947", 0xae, 0x8001, 0x20, 0x0, 0x7, 0x4, &(0x7f0000000280)="35cef436971d3c0035886072247428ab03b08eaf8c637f175b17edad3d249c91f46c66c23242e3d6c3c8aea5e2df49ea8ea23a48cc5dc1fbf59b0500ae27cdbb1401fe42f4e5ef56d5c415ec2fc9e2b4bd4a64b65c73c9fa710bc0c53e78d96e53c066d4d75db13e214d1f0bba682c813406db7e3bcd2676530dca9caba2ad7adab12dc3936d57e51757d9f0575d3944a70a72726877af8ac687d35c4f9860a50d354a228fa79200f6e2ff52324040052eb7bbc9a7b7587a27084d9add65955fb8320df03fa0648cc78619d70c6fb5636e6f9486eb6ce727cdabcd5217caa5"}) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$P9_RFLUSH(r8, &(0x7f0000000480)={0x7, 0x6d, 0x2}, 0x7) listen(r2, 0x8) r9 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0xfffffffffffffe9e, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:51 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) [ 920.104027][T27918] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000900120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0005, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c866b94d0900000f320f0133f30f01e80f69e8650f01c883dd000f0131ba400c3ef20f2c2b66efbafc0ced", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r6, @ANYBLOB="080002004674596cba664a0567bc6a7aac7b3b24d05d6c17149f839d257b61bd761b0ce06ecc67e49607cf6547cef5f367db94989b0106afafce16d58d8f7de7bbd1079d915233b1f583fc379740b4e48d6bbf433489a8bb7ee08bf05e490a00002e5c1dec31f5a094fafa8dac25ae6dcb20b673e3900e5df479c3b8210ecc3cf3e9816ff6da37a2852c911b05759d28eb19b3c5faa0c0136461e633f3d48fb18484a204ff", @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', r6, 0x4, 0x6, 0x9, 0x2, 0x1c, @local, @local, 0x7, 0x7800, 0x9, 0x4}}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x0, 0x4ca]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10:23:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x40010, r3, 0xfb158000) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r7 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:51 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, 0xffffffffffffffff, 0x0) 10:23:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) r7 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:23:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000a00120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 920.624973][ T3836] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 920.884884][ T3836] usb 5-1: Using ep0 maxpacket: 16 [ 921.015300][ T3836] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 921.026301][ T3836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.038554][ T3836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.049439][ T3836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 921.145567][ T3836] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 921.154802][ T3836] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 921.162837][ T3836] usb 5-1: Product: syz [ 921.173975][ T3836] usb 5-1: config 0 descriptor?? [ 921.639280][T27935] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 921.715001][ T3836] usbhid 5-1:0.0: can't add hid device: -71 [ 921.721064][ T3836] usbhid: probe of 5-1:0.0 failed with error -71 [ 921.736699][ T3836] usb 5-1: USB disconnect, device number 30 10:23:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:53 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(0xffffffffffffffff, r0, 0x0) 10:23:53 executing program 3: r0 = gettid() ptrace(0x10, r0) r1 = getpgid(r0) sched_setscheduler(r1, 0x1, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000001c0)=""/4096) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = socket(0x11, 0x800000003, 0x0) ptrace$pokeuser(0x6, r1, 0x0, 0x7fff) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0) select(0x40, &(0x7f00000011c0)={0x9, 0x6, 0x8, 0x3f, 0x6, 0x1, 0x6, 0x3}, &(0x7f0000001200)={0xfffffffffffffffa, 0x5, 0x100, 0x4, 0x1000, 0x8, 0x5, 0x1000}, &(0x7f0000001240)={0x9, 0x9, 0x1a34, 0x2, 0x80, 0x1, 0x1, 0x20}, &(0x7f0000001280)={0x0, 0x2710}) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000013c0)={0x254, 0x14, 0x8, 0x70bd2a, 0x25dfdbff, {0x10}, [@INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "00c68ac01b22d4cbf21878a9000694f44438f1a84bdc36400fabb824cd46845175a7108f183ee8fa98cf3433cf2685dc439fc714816f2a970da5da2ef72ab6af190b19f8b14429ce9cd1868f1d2b92a6d9ec8fa418723673bb1e3dc83e6c7c8699bdc63b5d710bf2fbb2f468c58790d9854fc467995c2674b2c3cd36d3aff81dde560b5b846457fe1d3ab20c629656e606b34e342c297b07dcdc051b69633a7055301d01daa8b2746aac276c195976084e4ff6e65223838090f276f25b6f2e7d79b162dca83ab23116a7ea2b52b18c569a0961401ceab77b66e5ab"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "c299d8210531fd06f321256f11cc54acb4ade204b3483489e3326c2386b2a9a2e0681e7ec6d4a6f9bae9a6c78aece028a9f34b992f9ee7f05059a490fb75da361083f62294141173797a6c9a8c83d45fc188c50445556ea0bf15e16affe9f69df0880e932e60b9492fde7d94b4bdff298d1643a9dac929c58512b067820941a5320fa0a28e5d4c1e0d5a1427ad0fe6b62552d243bd7d4f2e402cf34861c6491d4ab914"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "6e603976897be2e6c389795de768ccafdf2dd0938a7026abb632a89136c94e96e723ac357561266ae354c57c66a1ca7f866e09ae274e22d4c31573e7195a74c3c7cea6bf11"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "83de52591fd312d45227ebeb1a325aa62f7b9c4351d287213676740ae8d2ef379163aa0358d21b25f7709dac4c1dd4458139d412c3e998566781408dc8684685422f13eda4d54fda9a401387ec3355055160e5afa23de4fa178b0007f184600625cd0c7ed530d2"}]}, 0x254}, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) io_uring_setup(0xafb, &(0x7f0000000080)={0x0, 0x0, 0xa, 0x1, 0x3c7}) preadv(r3, &(0x7f00000017c0), 0x218, 0x0) [ 922.155612][T27997] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000b00120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x500, 0x640, 0x578, 0x240, 0xfffffff9, 0xffffffff, 0x1, 0x2, {0x8001, 0x7f, 0x1}, {0x4, 0x9, 0x1}, {0x1c5, 0x5, 0x1}, {0x10000, 0xcc}, 0x0, 0x40, 0x8000, 0x3, 0x1, 0x35f5ef9, 0x401, 0x1, 0x3, 0x7ff, 0x401, 0xdd, 0x1, 0x2, 0x3, 0x3}) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r7, 0x0) read$rfkill(r7, &(0x7f0000000100), 0x8) sendto$inet(r4, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = socket(0x11, 0x800000003, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x101800, 0x0) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000100)=0xfff, 0x2) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000)=0x1ff, 0xfffffffffffffc3b) r5 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:23:53 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(0xffffffffffffffff, r0, 0x0) 10:23:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000e00120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:54 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000c029128008000100687372001400028008000100dba04f6831afc7064e88ce7bcccf9f38899d4a1e9e4dad235e261b7c2ddfaf269de348a34a5526c27b7d71b085c0a4b296b37454bce1f031028d1e26a4f630c1c181400c7d722637e3070000000000000053e066e7ea3cdd13ba2438701f06e6ed63b7c89fabef3bb23e6e588154ecaa2497f2a23ef69d5eb0188cc30d0387e8c6dd50d1b642b543e25b270fc1f0d8ebd62fde7ebfc0aac2c2d4b89b078c42cde67022e551ce33dc9971a6d80f2f5a521674eca05159a6f928cc204905", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="0a37c9d2e26f96773e8dd190f82c48875db5b0174888762bdcacdff46af4c1554f07a6636817b8bb48740468883b38ad66ce2555306de7dffe56a6d32c4b02c594fdf39d914e43137f136ef6f8071937f2"], 0x40}}, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r6, 0x0) clock_gettime(0x0, &(0x7f0000000100)) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$inet(r9, &(0x7f0000000000)="6fb444b6cd140633193957ba6076c95ec91d89e0c2e53fa5caa27f381ce9dba0960042f1408300e5c0807ed9ffec6c84df4f72bbcc419b434f7522729c237937cf11c90592e151b546815dc757bfe47cc7c0aa060000000000008bafcc3723e0afa56ee720b58e5d98daa9", 0x214, 0x20000010, 0x0, 0xfffffffffffffec7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000f00120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:23:54 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(0xffffffffffffffff, r0, 0x0) [ 922.774854][T19718] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 922.787357][T28039] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 922.847224][T28051] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 923.015041][T19718] usb 5-1: Using ep0 maxpacket: 16 [ 923.135462][T19718] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 923.146369][T19718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.158769][T19718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.169517][T19718] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 923.255525][T19718] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 923.264597][T19718] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 923.273770][T19718] usb 5-1: Product: syz [ 923.287305][T19718] usb 5-1: config 0 descriptor?? [ 923.750033][T28014] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 923.825032][T19718] usbhid 5-1:0.0: can't add hid device: -71 [ 923.831454][T19718] usbhid: probe of 5-1:0.0 failed with error -71 [ 923.840753][T19718] usb 5-1: USB disconnect, device number 31 [ 924.266100][T28067] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) r3 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r4 = geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000c80)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0f82", @ANYRES32=r4, @ANYBLOB="040007000000080800000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0x1000, 0x10001}, {0x6, 0x8}], r4}, 0x18, 0x1) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r5 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:23:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c001000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:55 executing program 3: r0 = gettid() ptrace(0x10, r0) r1 = getpgid(r0) sched_setscheduler(r1, 0x1, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000001c0)=""/4096) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = socket(0x11, 0x800000003, 0x0) ptrace$pokeuser(0x6, r1, 0x0, 0x7fff) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0) select(0x40, &(0x7f00000011c0)={0x9, 0x6, 0x8, 0x3f, 0x6, 0x1, 0x6, 0x3}, &(0x7f0000001200)={0xfffffffffffffffa, 0x5, 0x100, 0x4, 0x1000, 0x8, 0x5, 0x1000}, &(0x7f0000001240)={0x9, 0x9, 0x1a34, 0x2, 0x80, 0x1, 0x1, 0x20}, &(0x7f0000001280)={0x0, 0x2710}) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000013c0)={0x254, 0x14, 0x8, 0x70bd2a, 0x25dfdbff, {0x10}, [@INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "00c68ac01b22d4cbf21878a9000694f44438f1a84bdc36400fabb824cd46845175a7108f183ee8fa98cf3433cf2685dc439fc714816f2a970da5da2ef72ab6af190b19f8b14429ce9cd1868f1d2b92a6d9ec8fa418723673bb1e3dc83e6c7c8699bdc63b5d710bf2fbb2f468c58790d9854fc467995c2674b2c3cd36d3aff81dde560b5b846457fe1d3ab20c629656e606b34e342c297b07dcdc051b69633a7055301d01daa8b2746aac276c195976084e4ff6e65223838090f276f25b6f2e7d79b162dca83ab23116a7ea2b52b18c569a0961401ceab77b66e5ab"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "c299d8210531fd06f321256f11cc54acb4ade204b3483489e3326c2386b2a9a2e0681e7ec6d4a6f9bae9a6c78aece028a9f34b992f9ee7f05059a490fb75da361083f62294141173797a6c9a8c83d45fc188c50445556ea0bf15e16affe9f69df0880e932e60b9492fde7d94b4bdff298d1643a9dac929c58512b067820941a5320fa0a28e5d4c1e0d5a1427ad0fe6b62552d243bd7d4f2e402cf34861c6491d4ab914"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "6e603976897be2e6c389795de768ccafdf2dd0938a7026abb632a89136c94e96e723ac357561266ae354c57c66a1ca7f866e09ae274e22d4c31573e7195a74c3c7cea6bf11"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "83de52591fd312d45227ebeb1a325aa62f7b9c4351d287213676740ae8d2ef379163aa0358d21b25f7709dac4c1dd4458139d412c3e998566781408dc8684685422f13eda4d54fda9a401387ec3355055160e5afa23de4fa178b0007f184600625cd0c7ed530d2"}]}, 0x254}, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) io_uring_setup(0xafb, &(0x7f0000000080)={0x0, 0x0, 0xa, 0x1, 0x3c7}) preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 10:23:55 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:23:55 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252aa2cb18f04000000000000012e0b8d010000000000801a4ce875f2fcff5f0300000011039e15775027ecce66fd792bbf0e5bf5f6531c00010000000000000049740000000000000006ad8e5ecc1f003a02ffc2c65400"}, 0xd) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "23fb0ef73cdfa2e1", "82cda174fa97bd64e045ce71e57081f2e0938c463baa5773a58760c8938d2b8c", "83acd7d0", "82a934e1dcd2bbd9"}, 0x38) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$HIDIOCGCOLLECTIONINFO(r5, 0xc0104811, &(0x7f0000000000)={0x1, 0x1a, 0x100, 0x6}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x6}) listen(r3, 0x8) r6 = accept4(r3, 0x0, 0x0, 0x0) ioctl$IMGETDEVINFO(r6, 0x80044944, &(0x7f0000000100)={0xff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:23:55 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:23:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c001100120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 924.785254][T19718] usb 5-1: new high-speed USB device number 32 using dummy_hcd 10:23:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c001200120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:56 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:23:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000040)=""/172, &(0x7f0000000100)=0xac) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:23:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0xa, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="8be8189bba8973c7ae32085500000000b0f20ee41df085bcfe35154c487c3d5deb2cb7b1a012c35407742df124431f875c7885200b82497c6572397aaeb006f96a056f3510653e8bbfa54858437ac20fe803f88d115252c7d52cda97c9e93f0aed4f56434475fe9684d7ea57971b4a1d21e6c120ac00275315787cae502520c7bc0000"], 0x40}}, 0x0) setsockopt(r4, 0x5, 0x1000, &(0x7f0000000000)="09109097dd", 0x5) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r9, 0x0) ioctl$FIONREAD(r9, 0x541b, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 925.020839][T28110] IPVS: length: 172 != 24 [ 925.034791][T19718] usb 5-1: Using ep0 maxpacket: 16 [ 925.106666][T28110] IPVS: length: 172 != 24 [ 925.154861][T19718] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 925.181211][T19718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.192490][T19718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.202615][T19718] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 925.301776][T19718] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 925.321389][T19718] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 925.352721][T19718] usb 5-1: Product: syz [ 925.384015][T19718] usb 5-1: config 0 descriptor?? [ 925.879203][T28077] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 925.954825][T19718] usbhid 5-1:0.0: can't add hid device: -71 [ 925.961256][T19718] usbhid: probe of 5-1:0.0 failed with error -71 [ 925.975077][T19718] usb 5-1: USB disconnect, device number 32 10:23:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xa00, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:23:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c001300120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:57 executing program 3: syz_usb_connect(0x0, 0x35, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9c, 0x55, 0xe5, 0x40, 0x499, 0x100e, 0x37c4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x42, 0xb, 0x70, 0x0, [@uac_as={[@format_type_i_continuous={0x8}]}], [{{0x9, 0x5, 0x8f, 0x2, 0x20}}]}}]}}]}}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r3, 0x65f6f000) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000400)={0xbc, "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"}) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x13c, r4, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd2e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4b26}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff03e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8771}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) 10:23:57 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:23:57 executing program 0: ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, 0x3}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x208, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xbe344b0f52055c21}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0xffffffffffffff0d, 0x1, r7}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:23:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) [ 926.394960][T28144] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:23:57 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:23:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c003100120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:58 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:23:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() ptrace(0x10, r6) r7 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r8 = geteuid() fsetxattr$system_posix_acl(r7, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000c80)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0f82", @ANYRES32=r8, @ANYBLOB="040007000000080800000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000000)={0x1, 0x3ff, {r6}, {r8}, 0x3, 0x33de}) 10:23:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c004800120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:23:58 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) [ 926.804897][T20572] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 926.964914][T19718] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 927.204733][T19718] usb 5-1: Using ep0 maxpacket: 16 [ 927.234967][T20572] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 32 [ 927.249179][T20572] usb 4-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=37.c4 [ 927.258627][T20572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.272623][T20572] usb 4-1: config 0 descriptor?? [ 927.299201][T28157] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 927.325423][T19718] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 927.343687][T19718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.356521][T19718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.366740][T19718] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 927.455440][T19718] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 927.470904][T19718] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 927.489489][T19718] usb 5-1: Product: syz [ 927.507477][T19718] usb 5-1: config 0 descriptor?? [ 927.559969][ T5] usb 4-1: USB disconnect, device number 3 [ 927.977913][T28165] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 928.054853][T19718] usbhid 5-1:0.0: can't add hid device: -71 [ 928.060989][T19718] usbhid: probe of 5-1:0.0 failed with error -71 [ 928.070452][T19718] usb 5-1: USB disconnect, device number 33 [ 928.374737][ T5] usb 4-1: new high-speed USB device number 4 using dummy_hcd 10:24:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xc00, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c004c00120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 928.502563][T28237] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 928.735074][ T5] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 32 [ 928.745149][ T5] usb 4-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=37.c4 [ 928.754255][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.770166][ T5] usb 4-1: config 0 descriptor?? [ 928.796155][T28157] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 928.978674][T19718] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 929.052957][ T3836] usb 4-1: USB disconnect, device number 4 10:24:00 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r3 = dup2(r2, r0) read$dsp(r3, &(0x7f0000000100)=""/138, 0xaa) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 10:24:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r4, 0x65f6f000) sync_file_range(r1, 0x401, 0x5, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0xffffffffffffffff) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x181081) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000040)={0x1, 0x89, 0x5, 0x2, 0x8}) r7 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:00 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x109c40, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:24:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c006000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 929.228316][T19718] usb 5-1: Using ep0 maxpacket: 16 10:24:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c006800120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:00 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:00 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, 0xffffffffffffffff, 0x65f6f000) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x20, 0x4, 0x4}, 0xfc000000}}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readlinkat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=""/216, 0xd8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:24:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r4, 0x907, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}}, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x5, 0x5c0) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x1010, 0x464, 0x400, 0x70bd25, 0x25dfdbff, "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", ["", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x10040040}, 0x4000000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="200029bd7000fddbdf250200000008001800ac1414aa290e994831cb49060800000000000000c69ae6d3d3bfca13ef6dc7d7b63abf3daac93853533c741dbbe648a33522bceaef99e49847aef65eacf161cf501b76c49fdf745a3d4354c13eb572828fdef13c847f"], 0x1c}}, 0x94) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f0000000140), 0x8) [ 929.355535][T19718] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 929.380047][T19718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:24:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c006c00120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 929.427417][T19718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.464258][T19718] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 929.585730][T19718] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 929.610639][T19718] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 929.644306][T19718] usb 5-1: Product: syz [ 929.670648][T19718] usb 5-1: config 0 descriptor?? [ 930.137794][T28246] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 930.234877][T19718] usbhid 5-1:0.0: can't add hid device: -71 [ 930.241064][T19718] usbhid: probe of 5-1:0.0 failed with error -71 [ 930.251383][T19718] usb 5-1: USB disconnect, device number 34 10:24:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xe00, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:02 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x3) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockname$qrtr(r3, &(0x7f0000000000), &(0x7f0000000040)=0xc) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 10:24:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c007400120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x10001) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) accept$alg(r3, 0x0, 0x0) listen(r2, 0x8) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x402000, 0x0) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000100)={0x0, 0x5cc, 0x8001, 0x7, 0x6, "82ea064fc96cde1db4a0c40d8b3cd5979bd2ab"}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:02 executing program 3: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r10 = socket(0x11, 0x800000003, 0x0) bind(r10, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r10, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r11}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}]}, 0x40}}, 0x0) fchdir(r8) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012002300010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0x3, r4}]}, 0x28}}, 0x0) [ 930.656584][T28334] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:24:02 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r6, 0x65f6f000) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000080)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setregid(0x0, r8) fchownat(0xffffffffffffffff, 0x0, 0x0, r8, 0x1000) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x1, {{0x6, 0x1, 0x1, 0x20, 0x80000001, 0x3, {0x4, 0x7fff, 0x8001, 0x9, 0x9, 0x7, 0x7, 0x3, 0x1, 0x1f, 0x2, r7, r8, 0x3, 0x1}}}}, 0xa0) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x2) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x101002, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) r4 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={r6}, &(0x7f0000000180)=0x10) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0xfffffffffffffee7) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) dup3(0xffffffffffffffff, r1, 0x80000) 10:24:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c007a00120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:02 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:02 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x9, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) [ 931.174792][T20572] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 931.454756][T20572] usb 5-1: Using ep0 maxpacket: 16 [ 931.585040][T20572] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 931.595931][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.606962][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.617110][T20572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 931.734987][T20572] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 931.744088][T20572] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 931.754477][T20572] usb 5-1: Product: syz [ 931.760856][T20572] usb 5-1: config 0 descriptor?? [ 932.228891][T28349] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 932.305030][T20572] usbhid 5-1:0.0: can't add hid device: -71 [ 932.311068][T20572] usbhid: probe of 5-1:0.0 failed with error -71 [ 932.326250][T20572] usb 5-1: USB disconnect, device number 35 10:24:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00f000120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) socket(0x11, 0x800000003, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x11, 0x800000003, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000400)=0x1, 0x4) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendto$rxrpc(r7, &(0x7f00000001c0)="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", 0x1dd, 0x4011, &(0x7f0000000100)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x522, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100}}, 0x24) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) r8 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x3ff, 0x0, 0x2}, 0x8) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:24:04 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:04 executing program 2: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = gettid() ptrace(0x10, r3) ptrace$cont(0x1f, r3, 0x340, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r6, 0x65f6f000) r7 = socket$isdn_base(0x22, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000140)=[r7, r2], 0x2) sendto$inet(r2, &(0x7f0000000040)="4b260f8bb9540f8c3e06688d0ace6813993cec2bfd49b6c1ac91e884bf07e802", 0x20, 0x20000830, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000000)) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) [ 932.745219][T28403] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:24:04 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000003120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_connect(0x8, 0x32e, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x7, 0x2d, 0xf6, 0x8, 0x413c, 0x99c0, 0xe76e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31c, 0x1, 0x9, 0x8d, 0x40, 0x1, [{{0x9, 0x4, 0x5d, 0x2, 0x9, 0xff, 0x1, 0x1, 0x6, [@generic={0x28, 0x10, "b53e3c3f64373989f699db658f846cc269c29b938a7ce96ee68123c6c9e1b6581afb1f4fc1da"}, @hid_hid={0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x8d6}}], [{{0x9, 0x5, 0xf, 0xc, 0x200, 0xc3, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x7}]}}, {{0x9, 0x5, 0x6, 0x11, 0x400, 0xff, 0xc1, 0x3}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x2, 0x0, 0x9, [@generic={0xd5, 0x5, "b2e61d1762686b128f9d986767ac8302b4ee3790925ec7da5a6180f0894dea364f4fb6e4b3a4ebf8fa69dbc74d3cca90c980e8fb38a5cd96bc71bdd2de887015029a288e6f559586f807baf75c61a1953eead1dee97ed6a4a73da0b3eb15c0cc8fe23455e5d8e401c2461a71e5f43a719886245e1535e506bfdea23e8ab855b804207a75bde8687fb63a07a39505c5a794b7cd2dbdf8a993682260d2b6544fba6c82b6e162a5488e1caf185c902121cebc130c3d2232832c1568b8e29dcefc443575b632d6c73a1d68a56b61724ca75bd2bd1a"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x5, 0x7f, 0xa9, [@generic={0x64, 0xe, "e02bdf36751f025a33c4e043cc9e83b6c805c278e93346920e667179bf7546099080d8bf137c2530b593c595bf28d07bd117aa281a17fd2e122d91b8a81b2c1f9fe33e618aca81a383e40f0223781964101b3c6921e705634e386fae4fca291be96b"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x7f, 0x4, 0x14, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x70, 0xad}]}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x1, 0xfc, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x7ff}, @generic={0x36, 0xe, "0cf2bae85f935a6d5318e2e923d2527061aa09272136efc05eb3f7d059e9cafeb8a1231511fe2972db9fb4796fa0d14dccce5194"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x5, 0x80, 0x5}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x7a, 0x1, 0x9, [@generic={0x51, 0x24, "af4e8ea6f14052ddb3c53074f071df091e17c3025980834f7075ded60816b776ad1e9e5ad8d5b80b2d26b3858537a11d5f4b3574d2574f070e5cf96a42bb2be3f78c256d563cafdb1c18d7271047fb"}, @generic={0x8f, 0x30, "ab6fd465dcfc175904d8b6c099e759226ecb2b829d8c360995e244be2ce8e2a3ee2954a154b118a2a25d0163831a1a3980124efc499798004bbc8253579ddcb8b4b3b0be3140bea2f87f90f34b279a11118c7c8cf5b24217ff58e18eb9a6a2c1583f5e7599e35a49c344e4ce1135b0fdd237a58408892f6a9c4dd937ae5e9e6448c608ba7a1823f9de8d779853"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0xff, 0xd2, 0x5, [@generic={0x16, 0x11, "488274cb121f0fda2dc41c1143ac1177a573418f"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7}]}}]}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x0, 0x1f, 0x6, 0x20, 0x6}, 0x81, &(0x7f0000000140)={0x5, 0xf, 0x81, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x5, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c06ec7ef30c9b55cab1e7b076031c84b"}, @generic={0x5e, 0x10, 0xa, "459efe4a6fa3fa5069ba9cc7a271667716ef3b4bc44e11f4b7052188f2de2ee2f6c37a2da66f84188f98ebec68101332638e2ea2941b77bce714384ef61c55917dd98d41d98a3580dd460fa29ade7f1c9735ea84fc9fa82bea944f"}]}, 0x1, [{0x3d, &(0x7f0000000080)=@string={0x3d, 0x3, "e23d20d105a76341088b944264ee665dd4a5cfefe98f46f9be490d17b5af16ca6e508a09d9bf63e0f508aa0e954e421ca72048839a529c9d2ffee6"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x22, {0x4b, 0x0, "eb2b20da341f5b2aae21c107b91850b0b1600ab5c5b31fc6c16e3d012890917f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 10:24:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000005120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:04 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x4) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000080)={0x0, &(0x7f0000000040)="5e2fd96cfca68c65715fe6cbb2be821064da", 0x12}) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f0000000140), 0x8) [ 933.324963][ T5] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 933.445882][ T3836] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 933.574780][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 933.695145][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 933.704851][ T3836] usb 3-1: Using ep0 maxpacket: 8 [ 933.706035][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.721904][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.731754][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 933.825394][ T3836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.825444][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 933.837064][ T3836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.855757][ T3836] usb 3-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.00 [ 933.857375][ T5] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 933.865931][ T3836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.881325][ T5] usb 5-1: Product: syz [ 933.887840][ T3836] usb 3-1: config 0 descriptor?? [ 933.903329][ T5] usb 5-1: config 0 descriptor?? [ 934.367472][ T3836] wacom 0003:056A:FFFF.0009: Unknown device_type for 'HID 056a:ffff'. Ignoring. [ 934.377925][T28423] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 934.454958][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 934.461094][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 934.474631][ T5] usb 5-1: USB disconnect, device number 36 [ 934.579214][ T7898] usb 3-1: USB disconnect, device number 19 10:24:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2000, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:06 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x902) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000080)={0x6, 'veth1\x00', {0xd6}, 0x5}) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x140, 0x0) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x20, 0x3, 0x7}, 0x10) listen(r2, 0x8) r8 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000006120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:06 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) [ 934.907587][T28481] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:24:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c001206120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:06 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) close(r3) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x0, 0x3f, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, [], 0x1}, 0x8000, 0x8000, 0x359, 0x3}}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000140)={@private1, 0x7f, r5}) 10:24:06 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) [ 935.345158][ T5] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 935.414917][ T7898] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 935.594789][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 935.664798][ T7898] usb 5-1: Using ep0 maxpacket: 16 [ 935.715375][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.729251][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.740274][ T5] usb 3-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.00 [ 935.750904][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.762120][ T5] usb 3-1: config 0 descriptor?? [ 935.788118][ T7898] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 935.799045][ T7898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.812569][ T7898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.823303][ T7898] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 935.915299][ T7898] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 935.924352][ T7898] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 935.940877][ T7898] usb 5-1: Product: syz [ 935.951678][ T7898] usb 5-1: config 0 descriptor?? 10:24:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={r5}, &(0x7f0000000180)=0x10) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'hsr0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) read$FUSE(r10, &(0x7f0000000400), 0x1000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r8, @ANYBLOB="000000000000000008e215800400018004001400"], 0x2c}}, 0x0) 10:24:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00c406120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @flat=@binder={0x73622a85, 0x10b, 0x3}, @fda={0x66646185, 0x7, 0x1, 0xb}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x40}, @increfs], 0xa5, 0x0, &(0x7f0000000280)="cdf9c4dc7450e4d9c35c004bf70a3a251bdea8508aac50f0d10175130d597779014ba59a1f77bab9ee3571d11dc8b2eca195e06d950be741896d79b0c7152cef34e89cf1938c872ee18081dd70f1cf32d54ba429e178b76fc94b4781fefa3040f00b6d78d4e03efb71d46a16d23ebb8010eab6f9a76ad93a5c4c155d6ad0f17d507008618f334e1c421b9871d5ec024a8784b672f65ff88c533fa1ce509114ccf51430b4e0"}) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000380), &(0x7f0000000400)=0x4) listen(r2, 0x8) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:07 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) [ 936.174833][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 936.182948][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 936.212522][ T5] usb 3-1: USB disconnect, device number 20 [ 936.306697][T28551] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 936.427350][T28495] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 936.504916][ T7898] usbhid 5-1:0.0: can't add hid device: -71 [ 936.510990][ T7898] usbhid: probe of 5-1:0.0 failed with error -71 [ 936.524156][ T7898] usb 5-1: USB disconnect, device number 37 10:24:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb]}, 0x45c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x4) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0xfffffff9, 0xc, 0x0, 0x1, 0x10}, 0x0, 0x0, r1, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:24:08 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000007120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4(r0, 0x0, &(0x7f0000000740), 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000007c0)=0x18) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x208800, 0x0) ioctl$CAPI_GET_ERRCODE(r3, 0x80024321, &(0x7f0000000100)) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x600182, 0x0) listen(r4, 0x8) getsockname$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f0000000140), 0x8) [ 936.950799][T28562] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:24:08 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000009120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 937.085777][T28572] input: syz0 as /devices/virtual/input/input15 10:24:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc4080, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000180)={0x7fff, 0x8, &(0x7f0000000040)=[0x20, 0xffff, 0xbc6, 0x0, 0x9, 0x40, 0x40, 0xffff], &(0x7f0000000080)=[0x20, 0xb5, 0x9, 0x1, 0x2], &(0x7f00000000c0)=[0x4, 0x1ff, 0x58, 0x8001, 0x8, 0x2, 0x5, 0x4, 0x8000], &(0x7f0000000100)=[0xd000, 0x6, 0x800, 0x1]}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:08 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x10100, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x20) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0x9, 0x4) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x44182) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r4, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r7, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r7) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000023c0)="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"/4183, 0x1057}, {&(0x7f0000000000)="098f6c375abe55173e0010955a13d9dc6b647035dfb7f54b349d62adec84c9520463168cdeb383", 0x27}], 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'team0\x00', r8}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x600, {}, 0x48, {}, 0x0, 0x0, 0x0, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "d66ee438c05a45ff21d7560f000000557cc5e50000a482ebf7888c305bee6fd6"}) 10:24:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb]}, 0x45c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x4) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0xfffffff9, 0xc, 0x0, 0x1, 0x10}, 0x0, 0x0, r1, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:24:08 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000a120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 937.405658][T28599] input: syz0 as /devices/virtual/input/input17 [ 937.514828][ T5] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 937.754758][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 937.875514][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 937.886307][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.898516][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.909177][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 937.995153][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 938.004195][ T5] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 938.013698][ T5] usb 5-1: Product: syz [ 938.029577][ T5] usb 5-1: config 0 descriptor?? [ 938.498291][T28581] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 938.574916][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 938.580991][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 938.590213][ T5] usb 5-1: USB disconnect, device number 38 10:24:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x4800, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x3ff, 0xffffffff, 0x507}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000080)={r6, 0x4}, &(0x7f00000000c0)=0x8) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000047c0)=[{{&(0x7f0000000180)=@l2={0x1f, 0xff, @none, 0xfff, 0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)="45e4657fa32db95d063bf5bbf517e55758f2783b7aa77d1570b6fc4235df3f3ff5", 0x21}, {&(0x7f0000000240)="8bcc4199c54eac1ef8c9cfcdf94507ba7b256d7bcdd7684f92a8e2094214c5611b1a37079d5fe5cf7c315f504a", 0x2d}, {&(0x7f0000000280)="68e5f6403e3572a2e5a62a5c6e13f8a083522b6bd5bc698422433838b7a9a872cde2e9b2d7570b7b8c35ba1edabeb7585a1ff04cafacf2e331e3630a363b2c992aee1ca233ea720a43c8f2cc62cd4263d1e5d3a2e656601eacffd4fd3fad9a486ef10938ca28331da1294308ffe395429cee46a83688a370cfd5530d031e7a3d3d89a53a405a0379e2a0ea82f4f2af0fa6d93bdf1b0d147926093557b5c8073aa5bf4c08906a62aab604e40551633e5adaa5723c67ce4324cf6cdcce098d03d9a07f0f5d", 0xc4}, {&(0x7f0000000400)="aea3cacd42c812e366ef883dfc16736d986f8abd19685835d73d4693ee87b428b230b50d2009599be61d8cc978f94aced88e641c327b5dc2f71fde85635da5c88896d0c1bce564c7d34ecaae00155a47954e261eb138c994f09f89051d", 0x5d}, {&(0x7f0000000380)="959c6785f9771d02264f77ac81334d1dc3d7f7075d6037f1e095a9bca6ee8ea1f617fa4c098e16110eca10779e43e97f2a76995bdf39b774690d9d94847c", 0x3e}], 0x5, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x6ad}}], 0x60}}, {{&(0x7f0000000580)=@l2={0x1f, 0x7, @any, 0x0, 0x1}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000001640)=[@mark={{0x14, 0x1, 0x24, 0xff}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3f}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}], 0x60}}, {{&(0x7f00000016c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x5, 0x9, 0x8, "44b81981981705c411dc39a5cc23acb5c3e3c3f54c402a64fbd2ceee4458035e176204f42eb2ec4ba8316255671f7968eb76249cd16f670d5c20263b2763dd", 0x35}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001740)="f669433c59bf", 0x6}, {&(0x7f0000001780)="ccc09687b16c0b3ac9ca11ac0008dc658ee1766303665871fb8ac585b14703e5adb1f924edaacd9b13dd8089ae2d10c972611d884cbf29b25d6e6e1e6e0abe62d6e92db71c7fb98538f0e40f33cff23edbdff9aa13ee3332bb6b44ba23bf5afbe426d4530921d716847840786820305fe0d8e3269df5967c4a8e846c10653919decf4c49711b118b1d3a2a4ef87889675baa966c556912e07a0dc4ad03a912748853743d7138ed422250fd3669d7532fe1e484a1f05335478aaeced7cdda1354b93afc220d52e0f529", 0xc9}, {&(0x7f0000001880)="587780f1bd5828e9f487cccbabd5b087746bf859cd52ad3fa2464801f3827dcc8ad941e41ef39d3f988365d97470cc64e6a8c2781dfd9396e9344367777178786255609cdbae55dc1d2cdcdfbbdebac3b938759b4503fa76123c7d222bbff9b32eed7e8f16edd5d9fbab363f8dbf7d58746e016ee285a762e65f49e0ddf6ca531b835d8f9e14b4df0a8dff6ae654b1cc34f32c121b22d60f571482c9082efcaf9eb2893a2f46b68edb12d3bd73fe7e39e8dd921489eba39e8992c98b4e252e980bf6c7ac", 0xc4}, {&(0x7f0000001980)="c6e924f1f3fcd71a599ff0b8fe9adc2dcb339cf97eb3fadb080c7351ca80a7a7d8ed9731a5af1e617dcd9c05c6de0293bd72d524098b4306b9d3c82f2c859cfee205fca136a5b8516a37e25c74b8220d6363a662c4738b4f2c1909467e73f9e66f9446e841eba82b4e0aa714d5adfdf44046fba934df7c26aca89fc14411340358a7c66ee9339b1e2e3c451956e81bd8b9d8f0facb2413e119da1c3c6acaf8ef451e439fd3894b39619fa5121a618654", 0xb0}], 0x4}}, {{&(0x7f0000001a80)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}, 0x2}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001b00)="664c16c7c934f801b2d51158baf49186da76b0867d53cdb3adf6a19736eb296aa439a9aee69af3882c66f9a70476a773f05db24426fabc439ca2c9589d9548d0cd46a3a92ae3e0e74e29922e93dd948740ba66cfb4eaf7b4ffc8666e36f055fab0f9c4adb51def96ca9efefce59ec22930b208526e970faf161f0ce20dfbd2e570fe1788be70d0064ae3c149b71f4e8f63cc7687dcd1373953d52b7d", 0x9c}, {&(0x7f0000001bc0)="3758a782890b92e9df94255dd6f6b9329fe4947b4334e3ad54f386bcf37a7f0e5610aa87bc97e0245f76a5bc36d6af1004cd40a4bca6a0d59b5584d27509bc7737928c674492550618c33be08a300effc5ed659af546e333558351f5de2e520e97e1188c54cd249c92b1de131128d8a511ba9228f682a7eebbbbea4bac9ebeee089817f4d2b23c4d81e29b7431ae23c002664f70e93ba6184bfc9b686889891d0a5a4fa792221dc4105e200059f7b24a27db5a460d907f94ad1c4155a549b6b4a4de543d30d8e3e7a753b151a09e7ca7e3d6c3cc8220b49c287fa7301386d14260b2c37c94a093", 0xe7}, {&(0x7f0000001cc0)="0de6b8fc27ac98cf94ef0a84968b2aa63a9bbfe4934c1ac2ffc6f53ad6ad4046c627f5fd7679bf25efd9273829f366ad312b23b5f94def12bab984ce77e96727bbb6e879167df05c0d4cbd624f328f97590130eef8bd736774a2682f32f001b45fca51e803a2e6ccd974a8303a8055226b50b6382e02400ce80fcfd4c209dffd231239ef6255663fa88676876843cacef6f869fa43b15ee9aa8df31b96880796d726b57696ae3426dcb6c75bfd75ae2187ad8f933577a3388222", 0xba}, {&(0x7f0000001d80)="43c17e62acbce38b82005347a55ab53c6c4ec2d36d2aa92c4eb073f2210f42898146832d9a1099db3c8f1a8e", 0x2c}, {&(0x7f0000001dc0)="a597949df449888cc7e74b1d8071b31d133cc98f794e35892d4532be6508a38e5dd7634a8466844e45f779df723e1aed657ed95339692f9d781a8cd529ce7bdf328bac09ad345de6537129b9e99c8f4528c0be04ab2d11c277237ea21b0c271cde260086339ec3e44bfcedef73950b2e32567d7258a3b94f3c872040ddfb7f3a676b43d7", 0x84}, {&(0x7f0000001e80)="23d03bfa8e4f627f3b1919157a804146706acde6d4872c43b28216fc66b9168db9fdb96511c6641e57acc8b9708a2dce180a487e9f8e673494f031de8c694c3071eece40c18e21481d621639ea0112dd9d92fb6409d27868c68481c7127340da0ef1226419df9b727f51ce1e2dd5e495034f3e08439ce9a4b631453c30ceda39ce88e3d5a60e618cf7d12779301226f8ab4cc94e9b8d69ac5a", 0x99}, {&(0x7f0000001f40)="64f8e2d8bfa637a08266f72ac0526d36834add5d37986cd3d3267fcf9a81129a1ba9deb3e5521df9e1125aa65ec6d9de5e5b4dd3da8d3748ed", 0x39}], 0x7, &(0x7f0000002000)=[@timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x25}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002040)="0e6dec9bea90e4cb82df7e1aa2b95cfdb80e18874c9c574a1f06d23656e8a7b20afed4da109c9060e967769ba92e80c647a6a3f640bd5ae0a08d0cfaba9ce93eb81ca290a436ee15725d84c66e893b5f1372bb1cc7d57eb0f242f7976684f1e53d57ba353413d49a19353651839eb738a43ab84a0b9fd2074d18a14d2bd0647fea24ad303c6457610ca05623dbc21c9c15253fded8b4ae28b3d090043b3e38db13578351d07dbd0ab15dd6bd8a6d804801dda2b92d23f001d1bd70bad99df6dd9b10b5c56341a78ae827c0ad672ca03009f074878a8648e0c5f535c1591bc895c8", 0xe1}, {&(0x7f0000002140)="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", 0x1000}, {&(0x7f0000003140)="8807e85aef6cc8b632eb354e3cdb5808413bb406aeb90aff9b008f59bfccb4a4c92fb6bf161ad7f45b6db6b5c535cdf85d82c2a059b2b9756eebfd2ba1b812cb35065b6b42e6cce7c5fa8db79755f0228aecf5d687cfbdc35415592f5886e63c5be4b8bdeff8bf00ff9ca9ab3488d551fc9722e8ba65059dd8b9ac5ddcee163fbce66cf32de1f853e25f997a1d3f2b9de9f355ab0b5b4bdfc0", 0x99}, {&(0x7f0000003200)="cf74c3c8bc66321d31e7d052b8dcd7289b645d70bb52cebd3fac85a9493a2c50e736527727c758d0ccf0dbfaa907eceab700bc9c6d9b5fc5c9b259560cbb72b0fdc7096a75b09ab8ff4b7173caa775ebe99b478e76d909c7debb1207dec8712e35b7e3e66f8d4378b0516e0e8301ce233381e3dced3c9073270b96cda0a9dd32337047fa7de2c5f66f9dc12048053f9282b8a9bd5675cec202eaebe7af5616bb19ffc77ebaf00003a12358855662f5b0f61e96d9", 0xb4}, {&(0x7f00000032c0)="57565be74b1c47d8470c5a2e10244d03d2c6fb849fe022092dd60f24093cdae77e1ec01013f19c705c14bd370564bfc83b47524af159f851b77b4001f37008b69093603d40ecb2c01af00ffe145d30fcc840a90c918d2a5098fe9d727ff3aa27b3d982008b0f29685d304f0330f866caf9e021c320cf35f8051e8d1f1f9f1eae8ae1d348dac4cdfc6cea007fd7785e8871166e5523f388e83317bd607bc9a19c9f4a2cc1c82a8c1c2472cfd7b550907a7ae92a5073b8a6b9139db5d8db", 0xbd}], 0x5, &(0x7f0000003400)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @txtime={{0x18}}, @mark={{0x14}}], 0x60}}, {{&(0x7f0000003480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x7, 0x2, 0x1, 0x4, {0xa, 0x4e21, 0x1, @private0, 0x5}}}, 0x80, &(0x7f0000004680)=[{&(0x7f0000003500)="626f4cd953b18bd0fa1f9f6f7cc9f98ab4ed39f39afd99f5b46b80a7513592e2b59488265f22ed00c7b9dc5724f36f8d0c37f9cb74f9765f48023b7a6a576fe131890153068397fe6c61a7e759a91ee4dace64ac6717ab9982ff27b9d59de505a000c81a4e", 0x65}, {&(0x7f0000003580)="bf9cda7b92d5f335ccdc060c12dc6bd9262b395e4719ab159e69cbcd0a94cc624e1516f43db8a7da861ce2fcbfce871a7f79a402b5b789cf4092071f4eba276fd39aaee5f6a04af02cffa3c044f87a10a4d631466eaa858778193bae721e55f7d63e27fa4e9a1931290764eaf79526a5268c5ddea835f9d504603058a6911b2a618185fc61841d9d3f4e9d2f3e79ce3fa787915a079d97a26da55b71e4deb75aecb3c31483c9866b60e05111cfc24f4cf14324df02fe81a2480a6307b69de884dc64c297626b3459617085882a014546861d1cd2071b1105679494b623cb555eab644a14c276b29ef156d60525cd7f1b9e4d84b01430b942ee16a94b2b86d7bbad749b9715e95a1c0b04c0905595d7a9d618942c330d15f5283de4bc9ca53da91a13ddfa783828aa2afb99c7954b3dd9f4dc40678d3b55195a7ac60aaf995087a68fa30d60e5078c0038f9d2182edbea90a2cfa6ea152d690fcb1e514a25ccc3ea69a42eb359ab045ff178c41f888daa1ac9c70f2d665779adf3a9018942c2e76d511879021a05d08a55f1abd38fbb6c9e19283f10fe39f678a7c2c9b97323fc69010c84ded2794342bb52b014825fe9c674515f67ab88181eaf1fe7ec037610025a00703c90746cfa97e81667cdf68b42689611fd1cc313694c364e05fb9a49d6120286e8c6acca2448054b63e7ea6778e2b5df2ae6dc140d3e2f2ab7b09e7a3b3ebc00790dbb6d30270a4349c57c8c272e1bedcda8cc0fb1932b1fb243969e63b370b91fa29b212d210959b5130485ac568d4752e8195a342c4fa04b2d4aaa3b9bc39a11ab202fe7be272e215a33d386cd4878aa45eba88dc852475676139b876b1e617bde4afa4515d8302eb6fff2ee24c7eb485e6e496d2abe8359ecebdbc031be04c8d441de9590ef68cf105d41611254ce318bea456392743f65faff8f074cfe1fdf5bee66f51c6707c23483c8d39b477a2f635af25d7e69c5ce6a793528ed6ea0f980ddb2208399167d12a89d9c5f38a8a6356578cd2bf08fa783f8570cc865f7961ab90261077c75c8d43b42d1676c0a237f6919707fb9e92a1b41d61b3bf739a9b1513cf45f4ffeec06fd90bd5f1dbffffbb00378942ec0e0314958f0e9c57d5802012d80361c5621f8891cbb7f8578d431a802b5c1d82c240a71afe9f66b50be04870bb00a31746dcb48e8f7bf4cd7cacbee0e46900a52b5f916e04722655e620562f6ad4d59a8dc2e20e9b41b97516f91d472372ad274d56b601a06cc1e40237109994507f254ce96c6dfb701984b3f1eee9b585c9b9e02209803d0051fb4b33918ea7d5c648c6d41e58f31d6f3e9340dc4fe32146db22c8ef86d3177c9fad3db68b9e3d643894e5c1594ffeffd9c0651fa8ba6c98523593ffa15eeb5d93bc3ab06f0cebed6c41f62f09671350776f5cf1032a924d135e8ecd0a443ddec4add9dc3abd5c32fcd6c8905074b6c9b5ee532ca6fec13473b02621600eabdd05a4f7368aa9b61aa968ed7bc8cc187fbc3991c156b7ab7852251bb42602ebe056d3e81fbcd4aba0d3c130e72e9929fd696369a189449e035e8250c458426b4c0c6e586381f3651d4531731863e0e630f33062f151389d96d0beb72cc839c24d5b7f40ab2019441838887daf00d71941370293dcb3dc694a73e811841017a7b9ba9f7604dd6597f8bbdf935f41fd1197ecaf99fe1a5b2cfa4bb0381dc6cfb50386fc87e070a130a449b692c81e791f86211594225d6e4a2599c763938d5c5bdf3c670472f8f1b95325434b6815b2843830bc7adf06a8242fe3bbe1ef2f7e37054e6d1e435064e112b946a6bb4a3408b581cae3790212a3f88fe38e6bf2df5b90c94dfc2e4eaf3862ac54eaa00b36023667690b5ec35d58bf0511a862fc954277e91dd531f7773f62c4df68cfe14c89bc829eda79b6c4c04a4375855e58d258ad9804787d70cf499de21ef239c02e34473c0c19689b1b36511b58561897627d4e16835085d954aa62f8e04758f8802229caae89c0d68c36d6da893f889da04dce4d274b0487b48f7091409ca0139c1c7536675e56e946664d240b610163c413677e0d05c958ff30b7781e9246b908892a1a7009cf13f34e67e1907c94787b3b039868263dc6addd7f627333c18efd75d0932e45fe388ecb7343575ccb9516148f73744e0976ec7e7cf6c7ca3ae24cdd75a88f396e2671abcc3582362d9e61a0a862bf717f173f76dc9d65a4d7abe1cf35613e5d94e8bb478aa840548c0ef683a5e292296a5baf4ab4f0fb40a1da0fe5b9d7460ee85c99b442c1539c73141f1b5e5a5c6b053702f7cd210c15d5d30fac0e8beb211f7c4203cd5e084052386bfb49ec3332a4024125dfb9f8c41ed4bfd23977b854b74d74ccfc8814a47d5be460890db2be4695823d0aa81b705e21c7adb721a6d8d45915b7de02e204f4e28ee818d38ecad04a4e53bb7ea713c4e259f51697e10e56f1f69601763f4b6a707b45d4996b2b39e8680b86e05f4f7d7b81bc72162c34ea0a2fe84167840753d936b7207009232353d0878742e6b6aeb8a6adf13f1d626854a3d6ba2d3ed5810a97406462207fba0f6715f582c85a4496bdf7d1ce06e1cedd616500a3f0f92233f7c0fb9c65b15696a20e7cdde3a86a4e832ec4526d6120128fdf2e70e2da601001152426e5996f5d3dac7d99780ee6a72cd49d194dd56d17eb0b77b0af6808b52ea0755c88097fcea4b4b01238b84b983aa252b2e78205f16b002ae1626bc0b42727cb475cea4c2e7ce791dbe0e485b9d590f317d83c650b65cc70702d69c9307a6535bbaa2459a392b3a9fcf51bd51326c61414fce765fb709f7f03c4cfbb376fa81ba9f866d7abac598ee1cd8833eaa2a51073233bf1b61f3ee6001fe7ed2dc95009996120bcae9990799204241aefe5abed97ce501c69ca1dab82b3e82a62cc1e2c0e34d6cb67956b5ec8cf758e8983b16ae47bff83ad4dcf0795ff6cc2cfd1b18039f434a87caad0c783d7c2882fa9d85429e253e9d5521551c42aaf3d705312a2389066e80c80fcc5e63b2dccacfd76bdb35043bfe108f9e1ffcf95ad5857c5475c9abcecac9eb798ed657713fa746401a3aa1cf22b063f5cf066c4b7322bd094f4dc51edb53c200126321435c0a9d10f11564536e5e2cfb8e5785408a4d533fb4f82ed7377f332ed8c86033cd8dc88f110ecb9909bb76001b23d5754311e70b2475790f9b711505967d7e3a47b19991fc3feafb45c7898d193863ad4285b3ba2d33169c173f329e6f1707e09a4db7081a0723579d25677a36b96f91699c80e7f7c62aeaa6acd759c52a688da7467e2b60d0c8bd8b1fd96d19e1429f609df685ac60fb5e7fbb8c4af56d57ce8548c53d7bc6ede4ec864ec485b9b2b9bbed6ca586d5d05a7ba6cd958487ac957e42e5441bfab08cb8be34b2a04cbbc2853fd61e8de230a532706fe7cba5a143c5b4029835e4e698a4e019f5b99e687ab1bbb7000775500a39439730d3098d1134a60e032f2660c746d845a90e400a22446e5cdf7e4aab5926492505920e46f0b2589624d4924f0055e737af38cf49eb86b7951d5792a6c78454067823a7a88ef9ee37123a9d96d8264b74c31cbd3a8a7cb92e4e07cae4ace21340a74c2881be4b9b94e438b0f96753730639a045b49ae841a013c2bc4cbd91c86006498776c0c4d6fec236c63c8aa2b0a3c89511251b03a2c738cae73d437750b7c889f164814a8beffeb7df1f17c073a9ed4bf4eb29aa1a485fd38dd2b7ce868de7e4c8fb61b815ac46226cd797f71c8086c1c20953c24024a527696666050e74213f97a5a45bc15584654ddb6b790e60e846c271cd41e1cd0537792e6e6352ed923335c6eb754e41fa9e2db3ee605a99b3737dfd651765d0328c3594e19056a5a40cc11cd4f21bd938158386a969b6e745018c691b752fac0cee7f601ac94160c58590408893cdf8af58f961c978e74ad67f90f21cb0b7f7866000bb712be84c86273d0097941ac91f636b1e520b0e0fcefed2680b0b9edb49dd668731e687a2de0201798128b0d0b2218e56557908c87c2a1ffcbad2abe12337afd5d8fbb7b63a46144c6dcd9d33c377b4e2820a01ded101ed9fa706fd451c31ce7c3756f211180452d5857661236366f6e56fdd3501c4a1535965fd39fda30c4d567d44ce7546b02950b199406b8576f026f285df7c8d0281370642524702e461ab5a26065956559d90f715061e48cc245d1bf4b116724ce5ef82d9e2f4c8d06f882e942df01d3b20137ca7fca9eb2c3dc14da0c40945f1c884a214c83a661a4628b819d99eb3eaa2d02fcf78c7e2f0d51805fbe3371964ee0bf1444bcdff24a8039a0c0f171de00ca127c2bfba26acc0c7024a71925bc631604405f1fa48690fc5459b3014a2dd44c21b63a2c3afdb2d66dd181e36dbad4becff39bdcd2844c856daaa7f80ec23d2adf6a809be1bc0cd88fc246f7bd2f7809ec826fbec3b8e5c61c5964aa82af982abeb429ae27dcc2b35d0ab5c2bb25eb8edbdc61775e520b2b477383e3b4a4c18141e3bfcfb336949d7f92ee7970b57d64454536079356cb3339d433da7067f670381913150fee204786bcdd0f3a54a40c73b125e65f1d59edc2ba28299fb3a4746a79885281734a7067f4a15b3b1e04473d5bccca2d15493a3c75c14e648dd966ddf63694da0b4f6b1a2c67ac1e4755c7012119c7dff5b1f437b57e8766a4f2ad9804085456c2dd89763f5a6c38b9bde71b88c92f1475b41a15758f0169f1ce3065360de290fccefb92efb8376162e465f384a10afb22f3c47301e79e4bc6ceed480cd316c2621a691cec1f456ff7c16ee5ead9f901e1c7c3fb3e570f6a20ff81733e3f01a50a6acae6cd4a619a6fc628db6891ee4bfe4545d1c584d3b2eb3d73a166e97c9967476082d7f01ba656a48d3e6c91d1f32e33f22d3b0e422dd20a34312f18724f1ea4f363e9f210ea8f31e0e097fd64d82cd5e3bce5ddfe8f8f81fc63e9c35c1cce8bb0eb960a3463a4e94ac44e1952835648b254a4ec05b64da30f60d16275118c17b8528a6d9a2e9ca159caf32aa6c31015f51d8a91fd01782065485182fe44a24b93b372d6e5bc2503eacb262344d15dbb5072b91e5c3feabae5a18b4367d1d841d8e411c61350768a0851a1b9a454455f5a7d308993661b9ff762fb012f29f8747414213559348aa77df18cc9a3191ce24419eded912360b1d3db01d67c63cdee37e8a2577cbbcd4703d1c24dd39845f6bf14a9de848f6ebbf7df1594dcdc0ed4a31763b8f29e97aa0d773d33cbf0e5fca50b3adffeede38173e7bf08739e0006b3b46422bb71a5ebf6c6a0ddec2b24d4b14cd89474c082a9f0951a461541aae032fe62b899147b1e5dd8d55111ae17e9c3247f79cee925263b2e841dcc9927f3c845332e5cbb33b1f84496e8f5dbeccf419c8654ddf2250cd962de082a94e3579cb1ea89cc41b584a4166e47e21bae900e5deb9c669960997e645388b4b82bde23452404597a4431f8417e55607d2b027e5eb5603aa139dd580e884683bf93a07986e4dca7eacbe291187cb2e114dbfcbc3982b89c0e27384f81f9e12075e6a66883644a164ad147dd5ca430eae227e803bd77a3b16e8a0dac39dfa4ded0674199aedce14fe763d4af7c7010800fcfc357b50ef1f4b95d74e21a5a54062e0b4f09912a803fe6bf42776ec1b80a5555c401f20b638cec61275f24f5b282e695ffcb8e873a2ee496bb855936f8921386e0b1f873466b8441febfb4c241ea88f5887cab249b20258db264a7c0560", 0x1000}, {&(0x7f0000004580)="a10f343855c3eb567e3176d19281470d0233b8e974f6d3415fd615042d0577ac714728fe9195bc3b1e88dd9ba54a0a75f7ba46810001b72bb6dcc7da61c0b00de22c82129ca972d4392c9a3f366ec84e36508bc4f9ec74283a84b293f09a3c598bdf418e1ee101b212af2ab7b0783607fb03f107864c102120365a54ec28e3137191191c08a0105c6f968a00c12c32400dc25839af437e8925f5df383f9242fb1ceca2870475b776b37aa7d9f3a887443d778ea58368f60cb766ed40d6d23105f58e78ebba390a8832d89353e2bd8438db", 0xd1}], 0x3, &(0x7f00000046c0)=[@txtime={{0x18, 0x1, 0x3d, 0x9e42}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0xf4}}, @timestamping={{0x14, 0x1, 0x25, 0xf0}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1000000}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffc1}}], 0xd8}}], 0x6, 0x80) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r6, 0x4) 10:24:10 executing program 3: r0 = socket(0x6, 0x80000, 0x2) r1 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0x2c, [], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=""/44}, &(0x7f0000000240)=0x78) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/nvme-fabrics\x00', 0x2800, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r4}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={r4, 0x85, 0x9}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x1010, r7, 0xe57a5000) r8 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r8, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x1, 0x6, 0x2, 0x1, 0x0, 0x7, 0x40040, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000000, 0x4, @perf_config_ext={0x1000}, 0x700d, 0x10001, 0x6abc6a91, 0x3, 0x7, 0x6, 0x4}, 0x0, 0x4, r8, 0x1) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) 10:24:10 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:10 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x10100, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x20) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0x9, 0x4) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x44182) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r4, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r7, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r7) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000023c0)="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"/4183, 0x1057}, {&(0x7f0000000000)="098f6c375abe55173e0010955a13d9dc6b647035dfb7f54b349d62adec84c9520463168cdeb383", 0x27}], 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'team0\x00', r8}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x600, {}, 0x48, {}, 0x0, 0x0, 0x0, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "d66ee438c05a45ff21d7560f000000557cc5e50000a482ebf7888c305bee6fd6"}) 10:24:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000b120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 939.013812][T28626] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:24:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000e120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="2dfe23ae2e55"}, 0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x29, 0xff, 0x5, 0x1, 0x4, @dev={0xfe, 0x80, [], 0x31}, @mcast2, 0x20, 0x8, 0xa32, 0x4}}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@dellink={0x200, 0x11, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_PHYS_SWITCH_ID={0x22, 0x24, "bf07fb81ed46392df8fae79690ef421258b130112d5ec16a190b5b5e3ec3"}, @IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3d60}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1f}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x300}, @IFLA_PORT_SELF={0x58, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x35}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0e745937309cee2684665af4f397956a"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ip6tnl0\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "01c4794378e9d20c588219da079466ee"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x7fff}]}, @IFLA_VFINFO_LIST={0x128, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xe3d, 0x200000000000}}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffff9, 0x8a0}}, @IFLA_VF_TRUST={0xc, 0x9, {0xffffffff, 0x1}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7fffffff, 0xcdc, 0xffff, 0x88a8}}, {0x14, 0x1, {0x401, 0xd39, 0x9, 0x88a8}}, {0x14, 0x1, {0x3, 0x2c7, 0x5, 0x88a8}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9799, 0x5e}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x401, 0x8001}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x4, 0xc17, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x1000, 0x8000, 0x20}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @random="2246af812c88"}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x578}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0xd10, 0x10001}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x5}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000001, 0x6ab}}]}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x200}}, 0x0) 10:24:10 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="020000202000fedbdf05000200000005000500220000000500020007000000486d5ceadfefce5b7d099ec63fa427dac8f54d0db09975d5739d6988374f55b927092e7d0b3e5a401bd10b33b1c8615b1af904c09aa8b0e8e71a1f365a"], 0x2c}, 0x1, 0x0, 0x0, 0x24004810}, 0x4000011) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0daaf6ef0dfa9d5f6b0cc3e5d585b450eb0d8d412fb3dd1cbd21ee36731c15f5b9e153c6af913ab132cae9684896b40d7a681b", @ANYRES16=0x0, @ANYBLOB="00022abd7000fddbdf250900000018000180140002007465616d3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000000) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000002c0)={0x1, 0x5, 0x8f98, 0xfffffb94, '\x00', 0x4}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100738cc61247d284f98402d7f3a1e119b88994b45f08c3ddc318ceb5be4579b1259c6be8b76eed2334f44813350653b0401fb0ad5129e3acd8a1720d36524b77864040666f4a9d469cca695c9d14c3eea86f1e9b01330d5966adedadde415ce409a97e27c98be2644c3bfe65d91bd9a5d4d1a9a0ae37cb3b3f19d2d9039beaf890c742884ba5c2a9ce545a75b4eeff48d556924a2f6d68bedfe4597a9bffb57fd89499f3895fc3ab06bd589f19bfef844f19a7490a9c1b0308fb530e68ecce0ebc4cb988ab8b9982327fd1df0e871610f454e3aa85953419", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r4, @ANYRES64=r6], 0x40}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x12}, 0x61, r5}) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:10 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000f120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 939.415891][T28656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 939.476159][T28666] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 939.564815][T20572] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 939.834803][T20572] usb 5-1: Using ep0 maxpacket: 16 [ 939.971470][T20572] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 939.983314][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.996228][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.007060][T20572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 940.095323][T20572] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 940.109365][T20572] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 940.118359][T20572] usb 5-1: Product: syz [ 940.123620][T20572] usb 5-1: config 0 descriptor?? [ 940.597753][T28640] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 940.675040][T20572] usbhid 5-1:0.0: can't add hid device: -71 [ 940.681044][T20572] usbhid: probe of 5-1:0.0 failed with error -71 [ 940.695479][T20572] usb 5-1: USB disconnect, device number 39 10:24:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x4c00, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000011120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="01800000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockname$l2tp(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={r5}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={r5, 0x800}, &(0x7f0000000040)=0x8) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x5) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f0000000140), 0x8) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000100)) 10:24:12 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:12 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:12 executing program 3: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) openat$bsg(0xffffffffffffff9c, 0x0, 0x1e1800, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e20, @dev}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x6, 0x0, 0x0, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xffffffffffffffff]}) getpgrp(0x0) [ 941.113514][T28687] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:24:12 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000012120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:12 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x208927, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r2, 0x65f6f000) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x35e, 0xff, 0x27e, 0x7, 0xd, "74b39555928f2743d4164c9775c7c8dd5dabba"}) r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r4, 0xffffffffffffffff, 0x15, &(0x7f00000000c0)={0x32, 0x8, 0x80000400}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/llc/core\x00') write$char_usb(r5, &(0x7f0000000400)="59df73de48427690c249242c71524409c5d73440f66a0e89d2885910b7b0a93de4ce86101a67d2e9101f05878c32bce6b088c2bfdf6f47dc2f0805bf37e0fa82515dcddbc41854a2aa86c51705e6785d7a077432c7bc48d50296f3c894396815ea4c4660697149ecfabcb922e6b0629296334034e96217c70bac5ae1a936593f13e4edcf0aeb0d34b4297755017c43357d337d7fd606c2330fbe7ce21728caf0c0d2271676255434a8bea741a0deb3b4a1f8e2a4d1eb9c2abddd859d785b35c99bfee0263c442a5e500a15", 0xcb) ptrace(0x10, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x4, 0xa4, [], 0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)=""/164}, &(0x7f0000000280)=0x78) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") close(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="0170dfae009202a2a323bb67731cdebfff000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000500)={r7, 0xf016}, 0x8) 10:24:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0xdf}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001500), 0x4000000000002d0, 0x0) 10:24:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x45800) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000008c0)="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", 0x8f4}, {&(0x7f00000019c0)}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x84) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6611, 0x1) bind(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @remote}, 0x4, 0x1, 0x3}}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000300)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000000c0)=0x7f, 0x8) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x44) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x368, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00390340d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) 10:24:12 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) [ 941.553299][T28726] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.560576][T28726] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.571753][T28726] device bridge0 entered promiscuous mode [ 941.635241][ T5] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 941.732518][T28730] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 941.753822][T28730] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.762077][T28730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.772177][T28730] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.780176][T28730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.846715][T28730] device bridge0 left promiscuous mode [ 941.924818][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 941.969819][T28726] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.977023][T28726] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.984377][T28726] device bridge0 entered promiscuous mode [ 942.045639][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 942.063833][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.089099][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.109020][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 942.195576][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 942.204846][ T5] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 942.212926][ T5] usb 5-1: Product: syz [ 942.224056][ T5] usb 5-1: config 0 descriptor?? [ 942.688748][T28703] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 942.764873][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 942.770906][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 942.787228][ T5] usb 5-1: USB disconnect, device number 40 10:24:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x5865, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000612120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:14 executing program 2: r0 = getpid() sched_getaffinity(r0, 0x8, &(0x7f0000000040)) r1 = creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0d24e948b13800000000010108000000000000000005000004080003400000200008000c40000000011400170000000000000000000000000500000000594942f59775b641daa71a2d24869418e21d02d8fd5875c65207002acf3e579231c14b6ebd01040000000000001f393408d79e22ac5b01738fb821f1477cdee18abb6463ce8b6eafc5eac1af09f3f6a4239616263fa06855c67cfa1c05bb14be335b0c08dbf0400a7093b1d078319b0cc937eb98a795e16389fdc0005bc6ff69f98f38a8a3ffff0569f15839e3eec077b918e882e1663512d3c6c79453eb6fad291f99a636a06d2068e4d0c878824bdcf814d173916e74"], 0x38}}, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x200005) sendfile(r2, r3, 0x0, 0x80001d00c0d0) 10:24:14 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x45800) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000008c0)="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", 0x8f4}, {&(0x7f00000019c0)}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x84) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6611, 0x1) bind(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @remote}, 0x4, 0x1, 0x3}}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000300)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000000c0)=0x7f, 0x8) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x44) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x368, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00390340d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) 10:24:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x3, 0x2086) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101100, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) [ 943.210825][T28752] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:24:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e00, @local}, 0x10) listen(r2, 0x8) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f0000000040)=0x1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x0) write$6lowpan_control(r5, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r6 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:14 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) [ 943.340967][ T28] audit: type=1800 audit(1594463054.802:20): pid=28765 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15770 res=0 [ 943.380731][T28762] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. 10:24:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000013120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 943.449439][T28762] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.456962][T28762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.466533][T28762] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.474348][T28762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.514117][T28762] device bridge0 left promiscuous mode [ 943.528205][ T28] audit: type=1800 audit(1594463054.992:21): pid=28765 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15774 res=0 10:24:15 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x45800) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000008c0)="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", 0x8f4}, {&(0x7f00000019c0)}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x84) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6611, 0x1) bind(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @remote}, 0x4, 0x1, 0x3}}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000300)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000000c0)=0x7f, 0x8) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x44) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x368, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00390340d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) 10:24:15 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) [ 943.607422][T28762] syz-executor.3 (28762) used greatest stack depth: 22512 bytes left 10:24:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000020120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 943.730622][T28786] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.737912][T28786] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.750667][T28786] device bridge0 entered promiscuous mode [ 943.814890][ T5] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 943.876351][T19718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 943.898809][T28787] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 943.917022][T28787] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.925226][T28787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.934807][T28787] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.942992][T28787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.987018][T28787] device bridge0 left promiscuous mode [ 944.054892][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 944.194867][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 944.205714][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.218859][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.229538][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 944.322972][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 944.332078][ T5] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 944.341594][ T5] usb 5-1: Product: syz [ 944.350764][ T5] usb 5-1: config 0 descriptor?? [ 944.807641][T28769] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 944.894909][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 944.895053][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 944.914492][ T5] usb 5-1: USB disconnect, device number 41 [ 944.944928][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 10:24:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x6000, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x2) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r7, 0x65f6f000) ioctl$TIOCGPKT(r7, 0x80045438, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020000202000fedbdf05000200000005000500220000000500020007000000486d5ceadfefce5b7d099ec63fa427dac8f54d0db09975d5739d6988374f55b927092e7d0b3e5a401bd10b33b1c8615b1af904c09aa8b0e8e71a1f365a"], 0x2c}, 0x1, 0x0, 0x0, 0x24004810}, 0x4000011) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000aa", @ANYRES16=r4, @ANYBLOB="000167bd7000df251400000008001100080000f66051c2fb4e416900"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:16 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000080)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000031120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:16 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) [ 945.328788][T28802] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:24:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00003f120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:17 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) 10:24:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x44001) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f00000040c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004340)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2002c0bb0000d15d1c6638fd00cba94acbee6c2bd82bd1", @ANYRES16=0x0, @ANYBLOB="000131bd00102600df2501000000080001008b097d678321ca668d9dfbdf2a6a8d2c607cf6ff4a043609b882b4b0ba8000bb7a11a66b7c1e3df3d558722a5ef6d0bc426eb96da0609dbf9c9348f68435b73e50772b6c85febf491b0d78163cdc9315695a5292129d7b0f4a5bbf91058f290ae8c2d1d1619aedca047cec330669872964d29523296f33d2a5f4ef17a2b925f3e5b4c7bad308aba35ed8", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="4201028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000cefd04000500000008000600", @ANYRESOCT, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040000100000380001001e0001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff00000008000100", @ANYRES32=0x0, @ANYBLOB="780002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040013000600", @ANYRES32=r4, @ANYRESHEX], 0x220}, 0x1, 0x0, 0x0, 0x4040005}, 0x4000041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000002f54f0506a57e04a65c011d", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff05000000d7", @ANYRES32, @ANYBLOB="00000000ffffffe2010000006a9aaf00010068"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x98, 0x10, 0xc3b, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x60, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3ff}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x97465}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_LINK={0x8, 0x10}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_TTL={0x5, 0x8, 0x80}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r6 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:24:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x1, @private=0xa010102}, 0x10) listen(r2, 0x90) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000048120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:17 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x2, 0x7, 0x7f, "9d5e04d1"}, 0x800, 0x4, @userptr=0x553fb283, 0xffffffff}) dup3(r0, r1, 0x0) [ 945.691568][T28838] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 945.835188][T28838] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 945.894967][ T5] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 946.164757][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 946.284857][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 946.304764][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.319356][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.329216][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 946.415510][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 946.424621][ T5] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 946.445039][ T5] usb 5-1: Product: syz [ 946.464748][ T5] usb 5-1: config 0 descriptor?? [ 946.940132][T28819] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 947.014947][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 947.021116][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 947.039664][ T5] usb 5-1: USB disconnect, device number 42 10:24:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x6558, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000080)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00004c120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:18 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x109941, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}}, 0x0) r5 = dup(r0) write$nbd(r5, &(0x7f0000000100)=ANY=[], 0x40) 10:24:18 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, r1, 0x0) 10:24:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000080)={0x4}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x850, 0xffffffffffffffff}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) set_robust_list(&(0x7f0000000500)={&(0x7f0000000100), 0x8, &(0x7f0000000380)={&(0x7f0000000340)}}, 0x18) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="ee64713a6bf091c5d88029b656563984a4b64f0d6fb5f5277affeb080902266f3e6d5d35d18951691d12b0d8141547007cc8adab0f165aa3d01aa4834c8a547351ec2ce513ee4b3c04ac599fd14e5da926bdb64a880bc5e003fbab5b789e96319cad034f185464007a6efd09e23e8c774527867eb13f7aeb0abf254448b51e630679b0115ed3d29747cd0a3d28825962c0a3"], 0x40}}, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000000c0)=@buf={0xc6, &(0x7f0000000240)="d6ad93d1dcad65fa02601089535d4b89d29098d8b6802fb8e5a9430cc682df89d0e89ecdb8b9f49bbb9295d0865a8e2a3938e97620fcda428aa8a2289a96f78ddb68276e0d705edd27cf0adbadab73d8fd16d205c557574af3d7392bbde9fb9546e2dbd44c3fe098a4b0136c31631be7f528cf2decdad7b1e8f438056adedccee4668e12a93530eeeac1629e8e8e407662a4a04e8572e6d304b6d30294611c973713041e0929d2d230321f282dcdd924766e2796ed2451fd61e60b987ae2bf6cd56667c68645"}) r7 = socket$inet(0xa, 0x3, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f0000000140), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000180)={{0x5, 0x7}, 'port0\x00', 0x88, 0x18100b, 0xa61, 0x20, 0x800, 0x80000000, 0x10001, 0x0, 0x3, 0xff}) [ 947.462127][T28869] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 947.614078][T28889] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) 10:24:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000060120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:19 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, r1, 0x0) [ 947.845176][T28889] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) 10:24:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000080)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:19 executing program 2: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000540)={0x58b6, 0x0, 0x10000, 0x6149}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x1}], 0x1, 0x0) 10:24:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000068120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x17, 0x4) [ 948.024940][ T3836] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 948.274757][ T3836] usb 5-1: Using ep0 maxpacket: 16 [ 948.395623][ T3836] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 948.412348][ T3836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.434178][ T3836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.454399][ T3836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 948.556544][ T3836] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 948.595190][ T3836] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 948.603246][ T3836] usb 5-1: Product: syz [ 948.615827][ T3836] usb 5-1: config 0 descriptor?? [ 949.077942][T28887] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 949.154861][ T3836] usbhid 5-1:0.0: can't add hid device: -71 [ 949.161012][ T3836] usbhid: probe of 5-1:0.0 failed with error -71 [ 949.174087][ T3836] usb 5-1: USB disconnect, device number 43 10:24:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00006c120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:21 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, r1, 0x0) 10:24:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB="7f1588bfd480bbd9f982c025b57ea5a7fb7949683a222d0eae33c352128b37e8fd1f263ee19cc2300102cc2053720a0a2a7502d5ede37680b6dc80c692818eb73f00d2460bf068095382b6e4a0a14054f850c94acdfed96c748a1ac0e296b2a3b667ae9ace2b049e553b7c131a1f66cddad2769fa79a9ef814e10806f0b512652a0860fc018d0ca93679956a993f2617faf375bedd3b7e2c"], 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000016c0)={0x9, 0x6, 0x7, 0x0, 0x0, [{{r0}, 0xfffffffffffffffc}, {{r2}, 0x8}, {{r2}, 0x4}, {}, {{}, 0x3e8}, {{r6}, 0x9}, {{r2}, 0x5}]}) r10 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000080)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x6800, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:21 executing program 2: r0 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000040)='async\x00', 0x0, 0x0) [ 949.597305][T28943] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:24:21 executing program 2: r0 = socket(0x11, 0x800000003, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x20040010) bind(r0, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x2, 0x2, 0x2, {0xa, 0x4e23, 0x8000, @remote, 0xd24}}}, 0x80) r2 = socket$inet(0x2, 0x5, 0x1022) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000180)={0x0, @bt={0x71196272, 0x0, 0x0, 0x2, 0x6, 0x81, 0x2, 0xffffffff, 0x200, 0x0, 0x8, 0xabb, 0x40, 0x1, 0x4, 0x6, {0x1, 0x1f}, 0x1, 0x6}}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000000)) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/94, 0x5e}, 0x2060) 10:24:21 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 10:24:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000074120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00007a120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000080)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:21 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 10:24:21 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03c50000000000002000128009000100766c616e000000001000028006000100140000000400038008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="ff639a3637697c1be4a98ce03eb6d4b79e89269021607de831ead8acbb7f4a9b67188826f3db4679ff1642b7a81dd0c62fff51f1981d55b615e205e8b07cccd91ddb88fff2f3679924683b715d224aa0b998c18349e7b4f80d97605917c3f5f6af31969869d5253e3b78210370453f0f2bb6f2d0d131e400a2d7efc9e640143da24c97"], 0x50}}, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r6 = dup(r5) getrusage(0xffffffffffffffff, &(0x7f0000000400)) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r6, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000004c0)=""/170) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000180)={0x6, @capture={0x1000, 0x0, {0x7f, 0x9}, 0x3f, 0x3f}}) 10:24:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r0, 0x0, 0x0, 0x9042df6844d79301) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0x0, 0x7}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0006c4120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 950.135157][ T3836] usb 5-1: new high-speed USB device number 44 using dummy_hcd 10:24:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000080)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 950.374008][T28991] device vlan2 entered promiscuous mode [ 950.394791][ T3836] usb 5-1: Using ep0 maxpacket: 16 [ 950.530268][ T3836] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 950.571739][ T3836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.609329][ T3836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.624563][ T3836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 950.640005][T28996] device vlan2 entered promiscuous mode [ 950.734933][ T3836] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 950.745132][ T3836] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 950.753315][ T3836] usb 5-1: Product: syz [ 950.766376][ T3836] usb 5-1: config 0 descriptor?? [ 951.218343][T28958] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 951.304877][ T3836] usbhid 5-1:0.0: can't add hid device: -71 [ 951.311088][ T3836] usbhid: probe of 5-1:0.0 failed with error -71 [ 951.324640][ T3836] usb 5-1: USB disconnect, device number 44 10:24:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x6c00, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:23 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xb2cc, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x68000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100001040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r4, @ANYBLOB="95fcefb94e3e4fa193507c39b62401b76a7d52df795f21ff246967dad4b7c98c3084d8f1f870435e47a76885d0848181a9629e1a17e1f40d4091b1bb9b3ad0f3cd32b4913921360e5d3e0000000000", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x0, 0x0, 0x0) 10:24:23 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 10:24:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000f0120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000080)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open_tree(r4, &(0x7f0000000080)='./file0\x00', 0xc9000) listen(r2, 0x8) r5 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f0000000140), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 951.733597][T29034] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 951.883406][T29042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 951.985702][T29042] batman_adv: Cannot find parent device 10:24:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:23 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 10:24:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) r2 = socket$inet(0xa, 0x801, 0x88) connect$inet(r0, &(0x7f0000000000)={0x2, 0xfffd, @loopback}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f00000001c0)={@any, 0x8}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0xa0000, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000000180)) accept4(r2, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000200)=0x3, 0x8) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000f0001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 952.065900][T29064] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 10:24:23 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xb2cc, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x68000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100001040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r4, @ANYBLOB="95fcefb94e3e4fa193507c39b62401b76a7d52df795f21ff246967dad4b7c98c3084d8f1f870435e47a76885d0848181a9629e1a17e1f40d4091b1bb9b3ad0f3cd32b4913921360e5d3e0000000000", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x0, 0x0, 0x0) [ 952.227732][T29075] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 952.228145][T29071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 952.247551][T20572] usb 5-1: new high-speed USB device number 45 using dummy_hcd 10:24:23 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) [ 952.365641][T29071] batman_adv: Cannot find parent device [ 952.494771][T20572] usb 5-1: Using ep0 maxpacket: 16 [ 952.618962][T20572] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 952.642759][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.654301][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.664256][T20572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 952.754944][T20572] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 952.764087][T20572] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 952.772370][T20572] usb 5-1: Product: syz [ 952.782531][T20572] usb 5-1: config 0 descriptor?? [ 953.248402][T29050] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 953.324918][T20572] usbhid 5-1:0.0: can't add hid device: -71 [ 953.330951][T20572] usbhid: probe of 5-1:0.0 failed with error -71 [ 953.348113][T20572] usb 5-1: USB disconnect, device number 45 10:24:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x7400, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:25 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x0) 10:24:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000002120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:25 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 10:24:25 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x5fa}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x104, 0x7}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0x5}, {&(0x7f0000000840)='\x00', 0x49ed}], 0x2, 0x0, 0x0, 0x1a0}, 0xe869) r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x1, 0x48000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008080}, 0x1) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x800c1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000880)=0x2c) [ 953.768067][T29105] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:24:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000003120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') pipe(&(0x7f0000000080)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc}, 0x9c) r1 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x404080) 10:24:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000180)={0x6, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e20, @remote}}}, 0x108) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:25 executing program 5 (fault-call:4 fault-nth:0): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, r1, 0x0) [ 954.120051][T29138] FAULT_INJECTION: forcing a failure. [ 954.120051][T29138] name failslab, interval 1, probability 0, space 0, times 0 [ 954.144337][T29138] CPU: 0 PID: 29138 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 954.153046][T29138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 954.163098][T29138] Call Trace: [ 954.166402][T29138] dump_stack+0x18f/0x20d [ 954.170747][T29138] should_fail.cold+0x5/0x14 [ 954.175356][T29138] ? tomoyo_realpath_from_path+0xc3/0x620 [ 954.181084][T29138] should_failslab+0x5/0xf [ 954.185531][T29138] __kmalloc+0x27d/0x340 [ 954.189784][T29138] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 954.195345][T29138] tomoyo_realpath_from_path+0xc3/0x620 [ 954.200909][T29138] ? tomoyo_profile+0x42/0x50 [ 954.205603][T29138] tomoyo_path_number_perm+0x1cb/0x4d0 [ 954.211070][T29138] ? tomoyo_path_number_perm+0x183/0x4d0 [ 954.216721][T29138] ? tomoyo_execute_permission+0x470/0x470 [ 954.222549][T29138] ? __lockdep_free_key_range+0x110/0x110 [ 954.228305][T29138] ? __mutex_unlock_slowpath+0xe2/0x610 [ 954.233861][T29138] ? lock_is_held_type+0xb0/0xe0 [ 954.238815][T29138] ? __fget_files+0x294/0x400 [ 954.243521][T29138] security_file_ioctl+0x50/0xb0 [ 954.248475][T29138] ksys_ioctl+0x50/0x180 [ 954.252733][T29138] __x64_sys_ioctl+0x6f/0xb0 [ 954.257354][T29138] ? lockdep_hardirqs_on+0x6a/0xe0 [ 954.262475][T29138] do_syscall_64+0x60/0xe0 [ 954.267474][T29138] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 954.273373][T29138] RIP: 0033:0x45cba9 [ 954.277279][T29138] Code: Bad RIP value. [ 954.281347][T29138] RSP: 002b:00007f9bc1f8dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 954.289766][T29138] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cba9 [ 954.297737][T29138] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 954.305708][T29138] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 10:24:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000004120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 954.313678][T29138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 954.321649][T29138] R13: 0000000000000379 R14: 00000000004c6236 R15: 00007f9bc1f8e6d4 10:24:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x0, 0x9, 0x2}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x100, @loopback}, 0x10) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000040)="94a518aef67ccc6e3ed1382ec33d4ef9f68ec4d37280495773d0e43037c5e7be0dc1cc2fae52a7d7cc980a2f20dcd3002017be36882721191cafc7cf39325283225e510e6a13d24654aa16011f4a02631d8fc0bcb8473baef70ebe20f0202d8676574c286667aace0aff6a192668725dc89391f5d4c58e2543def20ceb22c67418440b1c6955b908df7b8c04e7613b615e39cd38f8ef9f961a6dab990278b429d1d9589d21747c9d668f", 0xf5) listen(r4, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$HIDIOCGRDESCSIZE(r7, 0x80044801, &(0x7f0000000100)) r8 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f0000000140), 0x8) [ 954.504928][T20572] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 954.527613][T29138] ERROR: Out of memory at tomoyo_realpath_from_path. [ 954.744780][T20572] usb 5-1: Using ep0 maxpacket: 16 [ 954.874989][T20572] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 954.885820][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.898311][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.909443][T20572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 955.004929][T20572] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 955.014008][T20572] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 955.022408][T20572] usb 5-1: Product: syz [ 955.030777][T20572] usb 5-1: config 0 descriptor?? [ 955.488412][T29125] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 955.574945][T20572] usbhid 5-1:0.0: can't add hid device: -71 [ 955.580984][T20572] usbhid: probe of 5-1:0.0 failed with error -71 [ 955.598778][T20572] usb 5-1: USB disconnect, device number 46 10:24:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000005120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:27 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003fac5408da04050d0000010204000902120001cdc06c00"], 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getpeername$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 10:24:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x7a00, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:27 executing program 5 (fault-call:4 fault-nth:1): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, r1, 0x0) 10:24:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)={0x3, 0x1, 0x4, 0x40, 0x3, {}, {0x2, 0x8, 0x6, 0x45, 0x4, 0x7f, "da507c54"}, 0x8, 0x3, @planes=&(0x7f0000000000)={0xc8, 0x4, @mem_offset=0x6, 0x6}, 0x4d33, 0x0, r1}) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) [ 956.003415][T29169] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 956.109920][T29182] FAULT_INJECTION: forcing a failure. [ 956.109920][T29182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 956.123151][T29182] CPU: 1 PID: 29182 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 956.131817][T29182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 956.141867][T29182] Call Trace: [ 956.145151][T29182] dump_stack+0x18f/0x20d [ 956.149504][T29182] should_fail.cold+0x5/0x14 [ 956.154120][T29182] __alloc_pages_nodemask+0x1a3/0x930 [ 956.159520][T29182] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 956.166300][T29182] cache_grow_begin+0x8c/0xb20 [ 956.171063][T29182] ? __lockdep_free_key_range+0x110/0x110 [ 956.176795][T29182] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 956.182255][T29182] cache_alloc_refill+0x27b/0x340 [ 956.187285][T29182] ? lockdep_hardirqs_off+0x66/0xa0 [ 956.192496][T29182] ? tomoyo_realpath_from_path+0xc3/0x620 [ 956.198222][T29182] __kmalloc+0x319/0x340 [ 956.202480][T29182] tomoyo_realpath_from_path+0xc3/0x620 [ 956.208057][T29182] ? tomoyo_profile+0x42/0x50 [ 956.212756][T29182] tomoyo_path_number_perm+0x1cb/0x4d0 [ 956.218220][T29182] ? tomoyo_path_number_perm+0x183/0x4d0 [ 956.223868][T29182] ? tomoyo_execute_permission+0x470/0x470 [ 956.229714][T29182] ? __lockdep_free_key_range+0x110/0x110 [ 956.235465][T29182] ? __mutex_unlock_slowpath+0xe2/0x610 [ 956.241020][T29182] ? lock_is_held_type+0xb0/0xe0 [ 956.245969][T29182] ? __fget_files+0x294/0x400 [ 956.250665][T29182] security_file_ioctl+0x50/0xb0 [ 956.255604][T29182] ksys_ioctl+0x50/0x180 [ 956.259849][T29182] __x64_sys_ioctl+0x6f/0xb0 [ 956.264437][T29182] ? lockdep_hardirqs_on+0x6a/0xe0 [ 956.269542][T29182] do_syscall_64+0x60/0xe0 [ 956.273971][T29182] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 956.279875][T29182] RIP: 0033:0x45cba9 [ 956.283753][T29182] Code: Bad RIP value. [ 956.287804][T29182] RSP: 002b:00007f9bc1f8dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 956.296205][T29182] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cba9 [ 956.304164][T29182] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 956.312126][T29182] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 956.320090][T29182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 956.328053][T29182] R13: 0000000000000379 R14: 00000000004c6236 R15: 00007f9bc1f8e6d4 10:24:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000006120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x7, 0x13}) r3 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r3, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000001800)='./file0\x00', 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, @sco={0x1f, @none}, @in={0x2, 0x4e20, @local}, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000100)='gre0\x00', 0x0, 0x3, 0x8001}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="46eda6242efab7a8d48cb341b28ec0df1d240aaa32739721cf0f480d91dfa28206a9eb4e20f9ed066e3c0cfbe2d164fea2420a9f53fd9d1959f077b1c61a80ca4a09fb9f5ffb2d10d8c2ac8cbe62203c4987e1fc398b500b38418d830e965bf34a93c004207ed155e8989b2ea095e20cbb03cd825f68baf0cbc628ba2aae7dba441fd0dc43b9803863decaf4e7a9fc88aa82f19720073b5a289bd9c0d7ba01a500febfd02acc45d04147d821656c621f2c0b5f3acfe499f568ed1edb6dc3b8ae731c416ea945235bb6344100fcb058b2b2f0d4aa7a42fee400f8a6b27e0c245b344a3337bb2ca14ac6e3", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r6, 0x39f, 0x3, 0x8000}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f0000000140)={r7, 0x40000000}, 0x8) 10:24:28 executing program 5 (fault-call:4 fault-nth:2): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, r1, 0x0) [ 956.485348][ T2478] usb 3-1: new high-speed USB device number 21 using dummy_hcd 10:24:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000007120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 956.593788][T29203] FAULT_INJECTION: forcing a failure. [ 956.593788][T29203] name failslab, interval 1, probability 0, space 0, times 0 [ 956.606830][T29203] CPU: 1 PID: 29203 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 956.615506][T29203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 956.625557][T29203] Call Trace: [ 956.628854][T29203] dump_stack+0x18f/0x20d [ 956.633196][T29203] should_fail.cold+0x5/0x14 [ 956.637803][T29203] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 956.643181][T29203] should_failslab+0x5/0xf [ 956.647623][T29203] __kmalloc+0x27d/0x340 [ 956.651875][T29203] ? tomoyo_realpath_from_path+0xc3/0x620 [ 956.657606][T29203] tomoyo_encode2.part.0+0xe9/0x3a0 [ 956.662813][T29203] ? tomoyo_realpath_from_path+0xc3/0x620 [ 956.668544][T29203] tomoyo_encode+0x28/0x50 [ 956.673001][T29203] tomoyo_realpath_from_path+0x186/0x620 [ 956.678654][T29203] tomoyo_path_number_perm+0x1cb/0x4d0 [ 956.684123][T29203] ? tomoyo_path_number_perm+0x183/0x4d0 [ 956.688058][T19718] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 956.689788][T29203] ? tomoyo_execute_permission+0x470/0x470 [ 956.703133][T29203] ? __lockdep_free_key_range+0x110/0x110 [ 956.708893][T29203] ? __mutex_unlock_slowpath+0xe2/0x610 [ 956.714477][T29203] ? lock_is_held_type+0xb0/0xe0 [ 956.719438][T29203] ? __fget_files+0x294/0x400 [ 956.724173][T29203] security_file_ioctl+0x50/0xb0 [ 956.725698][ T2478] usb 3-1: Using ep0 maxpacket: 8 [ 956.729150][T29203] ksys_ioctl+0x50/0x180 [ 956.729169][T29203] __x64_sys_ioctl+0x6f/0xb0 [ 956.729194][T29203] ? lockdep_hardirqs_on+0x6a/0xe0 [ 956.748118][T29203] do_syscall_64+0x60/0xe0 [ 956.752549][T29203] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 956.758453][T29203] RIP: 0033:0x45cba9 [ 956.762354][T29203] Code: Bad RIP value. [ 956.765570][ T2478] usb 3-1: no configurations [ 956.766426][T29203] RSP: 002b:00007f9bc1f8dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 956.771003][ T2478] usb 3-1: can't read configurations, error -22 [ 956.779383][T29203] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cba9 10:24:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000008120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 956.779392][T29203] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 956.779401][T29203] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 956.779408][T29203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 956.779417][T29203] R13: 0000000000000379 R14: 00000000004c6236 R15: 00007f9bc1f8e6d4 10:24:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 956.890680][T29203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 956.947880][T19718] usb 5-1: Using ep0 maxpacket: 16 [ 956.984927][ T2478] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 957.075541][T19718] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 957.096570][T19718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.117241][T19718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.133621][T19718] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 957.235644][T19718] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 957.244978][ T2478] usb 3-1: Using ep0 maxpacket: 8 [ 957.257081][T19718] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 957.277873][T19718] usb 5-1: Product: syz [ 957.292587][ T2478] usb 3-1: no configurations [ 957.305000][ T2478] usb 3-1: can't read configurations, error -22 [ 957.319851][T19718] usb 5-1: config 0 descriptor?? [ 957.329928][ T2478] usb usb3-port1: attempt power cycle [ 957.797425][T29184] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 957.894965][T19718] usbhid 5-1:0.0: can't add hid device: -71 [ 957.901003][T19718] usbhid: probe of 5-1:0.0 failed with error -71 [ 957.911204][T19718] usb 5-1: USB disconnect, device number 47 [ 958.054816][ T2478] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 958.145711][ T2478] usb 3-1: Using ep0 maxpacket: 8 [ 958.189204][ T2478] usb 3-1: no configurations [ 958.193910][ T2478] usb 3-1: can't read configurations, error -22 10:24:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x8100, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000009120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4100, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0x10, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) accept$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) listen(r0, 0x5) r8 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f0000000140), 0x8) [ 958.322918][T29234] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 958.344771][ T2478] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 958.444887][ T2478] usb 3-1: Using ep0 maxpacket: 8 [ 958.485028][ T2478] usb 3-1: no configurations [ 958.489653][ T2478] usb 3-1: can't read configurations, error -22 [ 958.496747][ T2478] usb usb3-port1: unable to enumerate USB device [ 958.785191][T20572] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 959.024790][T20572] usb 5-1: Using ep0 maxpacket: 16 10:24:30 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) sendfile(r1, r0, 0x0, 0xedc0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) 10:24:30 executing program 5 (fault-call:4 fault-nth:3): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, r1, 0x0) 10:24:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000a120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000000)={{0x4000, 0x1, 0x3, 0x6f, 0x17, 0x40, 0x9, 0x3, 0x81, 0x8, 0x20}, {0x4, 0x4000, 0xe, 0x2, 0x6, 0x8, 0x11, 0x80, 0x5, 0x1, 0x20, 0x4e}, {0x10000, 0x4000, 0xe, 0x20, 0x4, 0xff, 0x0, 0x81, 0x8, 0x1, 0x6}, {0x2000, 0xd000, 0x3, 0xc0, 0xb, 0x7, 0x6, 0x5, 0x3f, 0x81, 0x0, 0x3}, {0x1000, 0x10000, 0x10, 0x0, 0x24, 0x3, 0x1, 0x0, 0x1f, 0xd0, 0x3}, {0x100000, 0x1000, 0xf, 0x22, 0xaf, 0x3, 0x3, 0x0, 0x0, 0x9, 0x0, 0x5}, {0x3000, 0x1, 0x4, 0x1, 0xfd, 0x7, 0x9, 0x3f, 0xfc, 0xba, 0xd2, 0x2}, {0x104000, 0x0, 0xe, 0x1, 0x7, 0x81, 0x0, 0x2, 0xfd, 0xf7, 0x9, 0x40}, {0x4, 0x5}, {0x4, 0x4}, 0x80000000, 0x0, 0xd000, 0x2000, 0x0, 0x400, 0xd000, [0x9, 0x3, 0x5, 0x9035]}) r5 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f0000000140), 0x8) [ 959.134421][T29253] FAULT_INJECTION: forcing a failure. [ 959.134421][T29253] name failslab, interval 1, probability 0, space 0, times 0 [ 959.155618][T20572] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 959.190544][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.221172][T29253] CPU: 0 PID: 29253 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 959.229886][T29253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.239960][T29253] Call Trace: [ 959.243278][T29253] dump_stack+0x18f/0x20d [ 959.247621][T29253] should_fail.cold+0x5/0x14 [ 959.252227][T29253] should_failslab+0x5/0xf [ 959.256657][T29253] kmem_cache_alloc_trace+0x240/0x2d0 [ 959.262098][T29253] ion_ioctl+0x2b0/0xd20 [ 959.266361][T29253] ? ion_buffer_destroy+0x2b0/0x2b0 [ 959.267537][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.271583][T29253] ? __fget_files+0x294/0x400 [ 959.285988][T29253] ? ion_buffer_destroy+0x2b0/0x2b0 10:24:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000b120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2001, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000040)={0x9, 0x2, 0x7b9d1b2dc3959f9c, 0x5, 0x1}) r3 = socket$inet(0xa, 0x801, 0x84) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x40000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8810) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r7, 0x65f6f000) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000080)={0x3, 0x4ca3331e, 0x576}) listen(r3, 0x8) r8 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f0000000140), 0x8) [ 959.291194][T29253] ksys_ioctl+0x11a/0x180 [ 959.295529][T29253] __x64_sys_ioctl+0x6f/0xb0 [ 959.300122][T29253] ? lockdep_hardirqs_on+0x6a/0xe0 [ 959.305240][T29253] do_syscall_64+0x60/0xe0 [ 959.309666][T29253] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 959.315565][T29253] RIP: 0033:0x45cba9 [ 959.319456][T29253] Code: Bad RIP value. [ 959.323524][T29253] RSP: 002b:00007f9bc1f8dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 959.331942][T29253] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cba9 [ 959.339924][T29253] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 959.347913][T29253] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 959.355910][T29253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 959.363889][T29253] R13: 0000000000000379 R14: 00000000004c6236 R15: 00007f9bc1f8e6d4 10:24:30 executing program 2: pipe(&(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8442, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x81, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000041400002bbd7000fddbdf2508000100010000000800010002000000080001000000000008000100010000000400000000000000"], 0x38}}, 0x4081) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000600), 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], 0x1f000, 0x200000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 959.380297][T20572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 10:24:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000e120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 959.486180][T20572] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 959.518452][T20572] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 959.575305][T20572] usb 5-1: Product: syz [ 959.610703][T20572] usb 5-1: config 0 descriptor?? [ 960.090455][T29243] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 960.164844][T20572] usbhid 5-1:0.0: can't add hid device: -71 [ 960.170865][T20572] usbhid: probe of 5-1:0.0 failed with error -71 [ 960.187192][T20572] usb 5-1: USB disconnect, device number 48 [ 960.874759][T20572] usb 5-1: new high-speed USB device number 49 using dummy_hcd 10:24:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf000, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40042, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x1d, 0x80003, 0x8) r2 = socket$inet(0xa, 0x80000, 0xbf2c) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x9) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000f120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:32 executing program 5 (fault-call:4 fault-nth:4): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, r1, 0x0) 10:24:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x80000008, 0x0, 0x0, 0x27c, 0x0, 0x0, 0x2}, {0x2}]}) [ 960.952798][T29302] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 961.064391][T29314] FAULT_INJECTION: forcing a failure. [ 961.064391][T29314] name failslab, interval 1, probability 0, space 0, times 0 [ 961.132764][T29314] CPU: 1 PID: 29314 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 961.141478][T29314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 961.151541][T29314] Call Trace: [ 961.154843][T29314] dump_stack+0x18f/0x20d [ 961.159188][T29314] should_fail.cold+0x5/0x14 [ 961.163797][T29314] should_failslab+0x5/0xf [ 961.168227][T29314] kmem_cache_alloc_trace+0x240/0x2d0 [ 961.173618][T29314] ion_system_contig_heap_allocate+0xfd/0x330 10:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x0, 0x5) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001180)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$vhost_msg(r4, &(0x7f00000000c0)={0x1, {&(0x7f00000011c0)=""/136, 0x88, &(0x7f0000000180)=""/4096, 0x2, 0x3}}, 0x48) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x280000, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r7, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x48010, r7, 0x10000000) listen(r2, 0x8) r8 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f0000000140), 0x8) [ 961.179709][T29314] ion_ioctl+0x373/0xd20 [ 961.183977][T29314] ? ion_buffer_destroy+0x2b0/0x2b0 [ 961.189234][T29314] ? __fget_files+0x294/0x400 [ 961.193946][T29314] ? ion_buffer_destroy+0x2b0/0x2b0 [ 961.199152][T29314] ksys_ioctl+0x11a/0x180 [ 961.203489][T29314] __x64_sys_ioctl+0x6f/0xb0 [ 961.208110][T29314] ? lockdep_hardirqs_on+0x6a/0xe0 [ 961.213228][T29314] do_syscall_64+0x60/0xe0 [ 961.217677][T29314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 961.223575][T29314] RIP: 0033:0x45cba9 [ 961.227467][T29314] Code: Bad RIP value. 10:24:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000010120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 961.231536][T29314] RSP: 002b:00007f9bc1f8dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 961.239953][T29314] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cba9 [ 961.247925][T29314] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 961.255894][T29314] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 961.263894][T29314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 961.271852][T29314] R13: 0000000000000379 R14: 00000000004c6236 R15: 00007f9bc1f8e6d4 10:24:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:32 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x40703, 0x0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00000001c0)={0x4, 0x0, [{}, {}, {}, {}]}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}]}, 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x1, @empty, 0x7fff}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000002c0)="b4f8645bd8153fe957bc7cdfdc75dd33583d59709b5aeac2143960462b440ebc51345c219d2d05989ebaedb60879c251baae229293eef6525a7958f479e11fb80060fe7c95bad425f27223fe8517c0692f9e29b733d3642bc323964f58c70db9de82a4d3", 0x64}], 0x1, &(0x7f0000000400)=[@rthdrdstopts={{0x118, 0x29, 0x37, {0x3c, 0x1f, [], [@jumbo, @generic={0x32, 0x9c, "032e8fbaa6ffa9adf6f33621c2be01e9e88d9ad71ba97947d1a3158294b09b228574a49f7f5ddbc079f2c4f7499f60e23d0fd0cd4890d06bfe82f96e616a998611baed11bb8c46d81b1adc5c65d525a4104fefb84f90a57c66a8e9bb62e10a698f8c6ed06916ba955c2c9b1e1cb1380f382100ea4bc11fd1c0c926aa09766d989e4491a0fe0137dc6719bc08d0087d19148fdcd7d8af49d008c11d94"}, @hao={0xc9, 0x10, @ipv4={[], [], @local}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xba}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5, 0x1, [0x181e, 0x3, 0xc5]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x29, 0xe, 0x0, 0x40, 0x0, [@loopback, @ipv4={[], [], @multicast1}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @remote}, @private1, @private1, @private2={0xfc, 0x2, [], 0x1}]}}}], 0x1a0}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0x7ff, @loopback, 0x7ff}, 0x1c, &(0x7f0000000940)=[{&(0x7f00000005c0)="ba1370ef76f3ab941fe80b614618aa934c96554404848bf2372199389b18313c2b0257b2bcf132646c2235c9e0868a6359a10a3fc9708903c72b2035452ddc062e8c0f7b8a249f8d897c2bfffd7f9ba25b0327363df3d6cf0710a007219a92cdee445de89d746b0d859e90cf9020c1b10310ec741c44f0d9b36d665f2ca2b2494288cf", 0x83}, {&(0x7f0000000680)="6438332c6a4045977fa18667dddb395d5a5b552998836ffadc50a08e92798eadc971022222a08b3af49b47920ebae6ac1af42665ef8024942f9df8924bd1f9763e0769220d4e81c4777b78b6a673cc0ba3f99a15c319ca4092a73c832bd933d1f826f18eda02cb678b804cc2eea886cb78fd2114a0cbecac49988e4a82a96cf61863e62446534f4c4bc7dc822129cdf8987ea092aa14c0582ca95d9c32905a54c333c9319b07ceb9dda9d82e30e76d62f0dc1162156ceaa3448b4c422fa416e419034a98ce36b7dadd7729b400b31b09827a4e036eeff6471efc849912f7048684a63b06929a7582042b54ffff4bf95801b1e6a0b96d2b", 0xf7}, {&(0x7f0000000780)="561460db2d6bd4965619154f1a8f83bcb3d1153d97850d1ecd9058065e6248b8b1be89ddc5841e7a2c16f2be2e79704ae83fd2241a8caf014d6a3cdea85c4372b45c21eb92be5c63c42f260c14d2f7649c8ed480e11e037a56f2c42290d9c1026dce7d55ec175c7b634986fbff9634c88acff4a96a97598eb83648ad73a1cc24a1a2f4a25e1f19c7adb9e1797ea9c867072ceabb8f03c3e0867391d06a8499bd5f93fdf76fa5f67f3d21be30b9b18b3512e5155566eeb3631779a1883a598cbe78c8b49a61eeee4ba8b85c509285ac784d8c7e8794c3976ae57324f8eb2f5e988a99a477a7c6", 0xe6}, {&(0x7f0000000880)="5964b407a0da6b92dade177b8f79bbc8d43f2eb3a7bf2f2dabb2bb3c2cbd6dd41b6a9af3b5594f886053294bb76f9cc1764f5a7df795b249c34c9f613613969af88f5685fa05a4bbd8f5c7d19c54268acd1d1358c0465f8f46277099859a359fde39cd", 0x63}, {&(0x7f0000000900)="4682a1d13e2f839710d02a8e53", 0xd}], 0x5, &(0x7f00000009c0)=[@dstopts_2292={{0x178, 0x29, 0x4, {0xa44f896bd83d29f9, 0x2b, [], [@calipso={0x7, 0x10, {0x0, 0x2, 0x3, 0x4, [0x8]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x8}, @generic={0x2, 0xe7, "683c14b6af5dda4f7813402d9d3a060dad47c0fa53fee332cd0a2c0394c21394e20012740607c902139f9094013b88704c58c7b93dbe48275e14a4f1f27b6df0c6d9d88167703b65d9ec1060498348fddc1e3bc2cf36ea7dad267e8f2bc7744436f63a1babc372703f453d330e6e240c33493808c56a386c3fc342ec63dc0de89050975e5e931f1e2d08cfd0ea88553d3841a692b8056a0e65baba3490ac07345a6ebf67497667a8e3b1619909e7859da4f6893ececff94d5642902d1d6892965dec9a5e8f9120c99a3780d5594b65c3f550645ae27cffaa0319ed2ae57aa9e23384d00b02a8eb"}, @calipso={0x7, 0x38, {0x3, 0xc, 0x8, 0x9, [0x7, 0x1ff, 0x3, 0x3f, 0x3, 0xffffffff]}}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7ff}}, @hopopts={{0x20, 0x29, 0x36, {0x33, 0x0, [], [@ra={0x5, 0x2, 0x4}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r8}}}], 0x1d8}}], 0x2, 0x4000000) r9 = dup(r0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000000000)) 10:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x1, 0x4) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000011120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 961.635094][T20572] usb 5-1: Using ep0 maxpacket: 16 [ 961.754917][T20572] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 961.771177][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.786041][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.797841][T20572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 961.895577][T20572] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 961.904781][T20572] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 961.913004][T20572] usb 5-1: Product: syz [ 961.924318][T20572] usb 5-1: config 0 descriptor?? [ 962.399041][T29322] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 962.474832][T20572] usbhid 5-1:0.0: can't add hid device: -71 [ 962.480819][T20572] usbhid: probe of 5-1:0.0 failed with error -71 [ 962.499287][T20572] usb 5-1: USB disconnect, device number 49 10:24:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xfeff, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:34 executing program 5 (fault-call:4 fault-nth:5): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, r1, 0x0) 10:24:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000012120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000000000000000000000a90e26931cfae2d337e5b19eb545e1cf730e0a5e4e65db60a1c9d290b9838a559c19160b22c52897ea63e10a1c315b1a4d0d4ec74f1e5a07131e78bb28fabe8104442a11ffbeff9d326f741381d9883d6ad1e1ce6d730495aa4b5f10cf35c9fcf9418fb99fc430793c446e20117c9790a7bd4d415f6c84aa9a3a982d5eb9cb2aec2ade142cb68a80f55e87e723a654750142c5c0ebf0f547b00eb200334aa6e1a5ea5542c87fbb50414d39035fcad96a27e60c870da5e739963239c8"]) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendto$isdn(r1, &(0x7f0000000080)={0x37, 0x5, "5abd9a9f448ee72a58be8c224fe2192423b204946491bf74159d9fbb20917e6bfc303e90b920613835e82e5fb10ba21303c21f3bb0f484a76651028b7b8b4e5dedbfce9a26c0d53630721c064d48f2b8c37b4f14e74cdedf"}, 0x60, 0x40000080, &(0x7f0000000100)={0x22, 0x7, 0x1, 0x3, 0x6}, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'vlan0\x00', {}, 0x7a28}) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x1d0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xbc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "88d48096f11c40530ade378879f4c522d871f0edaf9e25c38beee02c3fd958e3e8e8c94db961974fa69f0c89e8ea0bcd21fd3865a57a5defd9d26ed3578ce8dc4fe390c46a9f25cbe406e5bbfa47ee8a1e9e204e6ea513a56578fcd56b6315d56f6e786a9b91d89c9f0008c271a92e7df66264282e07073e2ecccaf6260cbea53ab4c423784d77ab50367c425d706e3609360e9a4cca373f5098ce7aa039fc8da273ea3fff7d5dbc41f554acdb9dee6c0c9c2d"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6785}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5d8}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x8020}, 0x8000) listen(r0, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) [ 962.916178][T29386] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 963.067743][T29403] FAULT_INJECTION: forcing a failure. [ 963.067743][T29403] name failslab, interval 1, probability 0, space 0, times 0 [ 963.131472][T29403] CPU: 0 PID: 29403 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 963.140175][T29403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 963.150231][T29403] Call Trace: [ 963.153526][T29403] dump_stack+0x18f/0x20d [ 963.157869][T29403] should_fail.cold+0x5/0x14 [ 963.162472][T29403] ? sg_kmalloc+0x34/0x70 [ 963.166802][T29403] should_failslab+0x5/0xf [ 963.171221][T29403] __kmalloc+0x27d/0x340 [ 963.175472][T29403] sg_kmalloc+0x34/0x70 [ 963.179630][T29403] __sg_alloc_table+0x244/0x380 [ 963.184494][T29403] sg_alloc_table+0x37/0x270 [ 963.189092][T29403] ? sg_alloc_table_from_pages+0x50/0x50 [ 963.194765][T29403] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 963.200329][T29403] ion_system_contig_heap_allocate+0x120/0x330 [ 963.206540][T29403] ion_ioctl+0x373/0xd20 [ 963.210795][T29403] ? ion_buffer_destroy+0x2b0/0x2b0 [ 963.216015][T29403] ? __fget_files+0x294/0x400 [ 963.220717][T29403] ? ion_buffer_destroy+0x2b0/0x2b0 [ 963.225918][T29403] ksys_ioctl+0x11a/0x180 [ 963.230248][T29403] __x64_sys_ioctl+0x6f/0xb0 [ 963.234836][T29403] ? lockdep_hardirqs_on+0x6a/0xe0 [ 963.239947][T29403] do_syscall_64+0x60/0xe0 [ 963.244358][T29403] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 963.250240][T29403] RIP: 0033:0x45cba9 [ 963.254130][T29403] Code: Bad RIP value. [ 963.258183][T29403] RSP: 002b:00007f9bc1f8dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 963.266585][T29403] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cba9 10:24:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) listen(r3, 0x8) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x4e20, @private=0xa010101}, {0x6}, 0x40, {0x2, 0x4e22, @broadcast}, 'bond_slave_0\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f0000000140), 0x8) [ 963.274544][T29403] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 963.282505][T29403] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 963.290478][T29403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 963.298441][T29403] R13: 0000000000000379 R14: 00000000004c6236 R15: 00007f9bc1f8e6d4 10:24:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000013120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000031120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:35 executing program 5 (fault-call:4 fault-nth:6): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, r1, 0x0) [ 963.554989][T20572] usb 5-1: new high-speed USB device number 50 using dummy_hcd 10:24:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000048120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 963.709039][T29432] FAULT_INJECTION: forcing a failure. [ 963.709039][T29432] name failslab, interval 1, probability 0, space 0, times 0 [ 963.742845][T29432] CPU: 0 PID: 29432 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 963.751572][T29432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 963.761640][T29432] Call Trace: [ 963.764945][T29432] dump_stack+0x18f/0x20d [ 963.769292][T29432] should_fail.cold+0x5/0x14 [ 963.773912][T29432] ? sg_kmalloc+0x34/0x70 [ 963.778250][T29432] should_failslab+0x5/0xf [ 963.782673][T29432] __kmalloc+0x27d/0x340 [ 963.786929][T29432] sg_kmalloc+0x34/0x70 [ 963.791091][T29432] __sg_alloc_table+0x244/0x380 [ 963.794817][T20572] usb 5-1: Using ep0 maxpacket: 16 [ 963.795951][T29432] sg_alloc_table+0x37/0x270 [ 963.795981][T29432] ? sg_alloc_table_from_pages+0x50/0x50 [ 963.811268][T29432] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 963.816856][T29432] ion_system_contig_heap_allocate+0x120/0x330 [ 963.823116][T29432] ion_ioctl+0x373/0xd20 [ 963.827373][T29432] ? ion_buffer_destroy+0x2b0/0x2b0 [ 963.832588][T29432] ? __fget_files+0x294/0x400 [ 963.837280][T29432] ? ion_buffer_destroy+0x2b0/0x2b0 [ 963.842478][T29432] ksys_ioctl+0x11a/0x180 [ 963.846816][T29432] __x64_sys_ioctl+0x6f/0xb0 [ 963.851414][T29432] ? lockdep_hardirqs_on+0x6a/0xe0 [ 963.856527][T29432] do_syscall_64+0x60/0xe0 [ 963.860951][T29432] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 963.866842][T29432] RIP: 0033:0x45cba9 [ 963.870733][T29432] Code: Bad RIP value. [ 963.874816][T29432] RSP: 002b:00007f9bc1f8dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 963.883225][T29432] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cba9 [ 963.891217][T29432] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 963.899189][T29432] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 963.907164][T29432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 963.915137][T29432] R13: 0000000000000379 R14: 00000000004c6236 R15: 00007f9bc1f8e6d4 [ 963.915421][T20572] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 963.982205][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.032855][T20572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.044127][T20572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 964.145958][T20572] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 964.167474][T20572] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 964.189588][T20572] usb 5-1: Product: syz [ 964.202358][T20572] usb 5-1: config 0 descriptor?? [ 964.678754][T29402] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 964.754858][T20572] usbhid 5-1:0.0: can't add hid device: -71 [ 964.760921][T20572] usbhid: probe of 5-1:0.0 failed with error -71 [ 964.785872][T20572] usb 5-1: USB disconnect, device number 50 [ 965.479037][ T12] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 965.569788][T29457] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 10:24:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xff0f, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00004c120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:37 executing program 5 (fault-call:4 fault-nth:7): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, r1, 0x0) 10:24:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendto$isdn(r1, &(0x7f0000000080)={0x37, 0x5, "5abd9a9f448ee72a58be8c224fe2192423b204946491bf74159d9fbb20917e6bfc303e90b920613835e82e5fb10ba21303c21f3bb0f484a76651028b7b8b4e5dedbfce9a26c0d53630721c064d48f2b8c37b4f14e74cdedf"}, 0x60, 0x40000080, &(0x7f0000000100)={0x22, 0x7, 0x1, 0x3, 0x6}, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'vlan0\x00', {}, 0x7a28}) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x1d0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xbc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "88d48096f11c40530ade378879f4c522d871f0edaf9e25c38beee02c3fd958e3e8e8c94db961974fa69f0c89e8ea0bcd21fd3865a57a5defd9d26ed3578ce8dc4fe390c46a9f25cbe406e5bbfa47ee8a1e9e204e6ea513a56578fcd56b6315d56f6e786a9b91d89c9f0008c271a92e7df66264282e07073e2ecccaf6260cbea53ab4c423784d77ab50367c425d706e3609360e9a4cca373f5098ce7aa039fc8da273ea3fff7d5dbc41f554acdb9dee6c0c9c2d"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6785}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5d8}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x8020}, 0x8000) listen(r0, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) [ 965.739126][T29465] FAULT_INJECTION: forcing a failure. [ 965.739126][T29465] name failslab, interval 1, probability 0, space 0, times 0 10:24:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000060120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 965.835006][T29465] CPU: 1 PID: 29465 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 965.843708][T29465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.853849][T29465] Call Trace: [ 965.857161][T29465] dump_stack+0x18f/0x20d [ 965.861504][T29465] should_fail.cold+0x5/0x14 [ 965.866106][T29465] ? dma_buf_export+0x274/0xae0 [ 965.870963][T29465] should_failslab+0x5/0xf [ 965.875385][T29465] __kmalloc+0x27d/0x340 [ 965.879643][T29465] dma_buf_export+0x274/0xae0 [ 965.884333][T29465] ion_ioctl+0x560/0xd20 [ 965.888598][T29465] ? ion_buffer_destroy+0x2b0/0x2b0 [ 965.893842][T29465] ? __fget_files+0x294/0x400 [ 965.898542][T29465] ? ion_buffer_destroy+0x2b0/0x2b0 [ 965.903768][T29465] ksys_ioctl+0x11a/0x180 [ 965.909070][T29465] __x64_sys_ioctl+0x6f/0xb0 [ 965.913669][T29465] ? lockdep_hardirqs_on+0x6a/0xe0 [ 965.918789][T29465] do_syscall_64+0x60/0xe0 [ 965.923212][T29465] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 965.929108][T29465] RIP: 0033:0x45cba9 10:24:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x5, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000140), 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="ef2595", 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f0000000080)={r6}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xed25}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000880) [ 965.932996][T29465] Code: Bad RIP value. [ 965.937061][T29465] RSP: 002b:00007f9bc1f8dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 965.945488][T29465] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cba9 [ 965.953462][T29465] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 965.961432][T29465] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 965.969401][T29465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 965.977371][T29465] R13: 0000000000000379 R14: 00000000004c6236 R15: 00007f9bc1f8e6d4 10:24:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = dup(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000068120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:37 executing program 5 (fault-call:4 fault-nth:8): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, r1, 0x0) 10:24:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00006c120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 966.238005][T29496] FAULT_INJECTION: forcing a failure. [ 966.238005][T29496] name failslab, interval 1, probability 0, space 0, times 0 [ 966.269435][T29496] CPU: 0 PID: 29496 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 966.278120][T29496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.288696][T29496] Call Trace: [ 966.291994][T29496] dump_stack+0x18f/0x20d [ 966.296343][T29496] should_fail.cold+0x5/0x14 [ 966.300949][T29496] should_failslab+0x5/0xf [ 966.305375][T29496] kmem_cache_alloc+0x2a9/0x3b0 [ 966.310234][T29496] alloc_inode+0x161/0x230 [ 966.314654][T29496] new_inode_pseudo+0x14/0xe0 [ 966.319344][T29496] alloc_anon_inode+0x22/0x3c0 [ 966.324128][T29496] dma_buf_export+0x548/0xae0 [ 966.328814][T29496] ion_ioctl+0x560/0xd20 [ 966.333159][T29496] ? ion_buffer_destroy+0x2b0/0x2b0 [ 966.338389][T29496] ? __fget_files+0x294/0x400 [ 966.343086][T29496] ? ion_buffer_destroy+0x2b0/0x2b0 [ 966.348309][T29496] ksys_ioctl+0x11a/0x180 [ 966.352650][T29496] __x64_sys_ioctl+0x6f/0xb0 [ 966.357261][T29496] ? lockdep_hardirqs_on+0x6a/0xe0 [ 966.362386][T29496] do_syscall_64+0x60/0xe0 [ 966.366805][T29496] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 966.372694][T29496] RIP: 0033:0x45cba9 [ 966.376580][T29496] Code: Bad RIP value. 10:24:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000074120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 966.380642][T29496] RSP: 002b:00007f9bc1f8dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 966.389053][T29496] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cba9 [ 966.397030][T29496] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 966.404998][T29496] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 966.412986][T29496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 966.420947][T29496] R13: 0000000000000379 R14: 00000000004c6236 R15: 00007f9bc1f8e6d4 [ 966.504792][ T12] usb 5-1: Using ep0 maxpacket: 16 [ 966.625196][ T12] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 966.636045][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.649840][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.660066][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 966.756475][ T12] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 966.765646][ T12] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 966.773666][ T12] usb 5-1: Product: syz [ 966.790957][ T12] usb 5-1: config 0 descriptor?? [ 967.268375][T29471] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 967.344850][ T12] usbhid 5-1:0.0: can't add hid device: -71 [ 967.350910][ T12] usbhid: probe of 5-1:0.0 failed with error -71 [ 967.363512][ T12] usb 5-1: USB disconnect, device number 51 10:24:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000004000109022400010000000009040000490300000009210000000122dc01090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x201d, 0xfffffff8, 0x7, 0x9, 0xfffffffa}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xfffe, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 10:24:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000500006804c0004"], 0x64}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xcc, r8, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc0a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb23}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x27f05ae3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0xcc}}, 0x400d0) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280)='ethtool\x00') sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r9, 0x8c5d7018b2080731, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) r10 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7c, &(0x7f0000000140), 0x8) 10:24:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = dup(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00007a120001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:39 executing program 5 (fault-call:4 fault-nth:9): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, r1, 0x0) 10:24:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendto$isdn(r1, &(0x7f0000000080)={0x37, 0x5, "5abd9a9f448ee72a58be8c224fe2192423b204946491bf74159d9fbb20917e6bfc303e90b920613835e82e5fb10ba21303c21f3bb0f484a76651028b7b8b4e5dedbfce9a26c0d53630721c064d48f2b8c37b4f14e74cdedf"}, 0x60, 0x40000080, &(0x7f0000000100)={0x22, 0x7, 0x1, 0x3, 0x6}, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'vlan0\x00', {}, 0x7a28}) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x1d0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xbc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "88d48096f11c40530ade378879f4c522d871f0edaf9e25c38beee02c3fd958e3e8e8c94db961974fa69f0c89e8ea0bcd21fd3865a57a5defd9d26ed3578ce8dc4fe390c46a9f25cbe406e5bbfa47ee8a1e9e204e6ea513a56578fcd56b6315d56f6e786a9b91d89c9f0008c271a92e7df66264282e07073e2ecccaf6260cbea53ab4c423784d77ab50367c425d706e3609360e9a4cca373f5098ce7aa039fc8da273ea3fff7d5dbc41f554acdb9dee6c0c9c2d"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6785}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5d8}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x8020}, 0x8000) listen(r0, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) [ 967.785162][T29520] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 967.890505][T29530] FAULT_INJECTION: forcing a failure. [ 967.890505][T29530] name failslab, interval 1, probability 0, space 0, times 0 [ 967.904646][T29530] CPU: 0 PID: 29530 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 967.913347][T29530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 967.923411][T29530] Call Trace: [ 967.926709][T29530] dump_stack+0x18f/0x20d [ 967.931052][T29530] should_fail.cold+0x5/0x14 [ 967.935654][T29530] should_failslab+0x5/0xf [ 967.940101][T29530] kmem_cache_alloc+0x2a9/0x3b0 [ 967.944978][T29530] __d_alloc+0x2a/0x920 [ 967.949156][T29530] d_alloc_pseudo+0x19/0x70 [ 967.953674][T29530] alloc_file_pseudo+0xc6/0x250 [ 967.958544][T29530] ? alloc_file+0x5a0/0x5a0 [ 967.963080][T29530] dma_buf_export+0x5d8/0xae0 [ 967.967785][T29530] ion_ioctl+0x560/0xd20 [ 967.972061][T29530] ? ion_buffer_destroy+0x2b0/0x2b0 [ 967.977298][T29530] ? __fget_files+0x294/0x400 [ 967.982025][T29530] ? ion_buffer_destroy+0x2b0/0x2b0 [ 967.987238][T29530] ksys_ioctl+0x11a/0x180 [ 967.991590][T29530] __x64_sys_ioctl+0x6f/0xb0 [ 967.996224][T29530] ? lockdep_hardirqs_on+0x6a/0xe0 [ 968.001358][T29530] do_syscall_64+0x60/0xe0 [ 968.005793][T29530] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 968.011735][T29530] RIP: 0033:0x45cba9 [ 968.015640][T29530] Code: Bad RIP value. [ 968.019711][T29530] RSP: 002b:00007f9bc1f8dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.028131][T29530] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cba9 10:24:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = dup(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 968.036107][T29530] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 968.044087][T29530] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 968.052093][T29530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 968.060073][T29530] R13: 0000000000000379 R14: 00000000004c6236 R15: 00007f9bc1f8e6d4 10:24:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000260001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) 10:24:39 executing program 5 (fault-call:4 fault-nth:10): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup3(r0, r1, 0x0) [ 968.279491][T29559] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 10:24:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000000c00c3ae5726000000000000"], 0x20}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:24:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x208924, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r5, 0x65f6f000) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1}) r6 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x12, r6, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000040)={0x3, 0x8, 0x3f, 0xc0c0c0c0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) mmap$perf(&(0x7f000014a000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r8, 0x2) listen(r2, 0x8) r9 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7c, &(0x7f0000000140), 0x8) [ 968.325961][T29559] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 968.382829][T29563] FAULT_INJECTION: forcing a failure. [ 968.382829][T29563] name failslab, interval 1, probability 0, space 0, times 0 [ 968.418202][T29563] CPU: 0 PID: 29563 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 968.426918][T29563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 968.436990][T29563] Call Trace: [ 968.440296][T29563] dump_stack+0x18f/0x20d [ 968.444644][T29563] should_fail.cold+0x5/0x14 [ 968.449253][T29563] should_failslab+0x5/0xf [ 968.453689][T29563] kmem_cache_alloc+0x2a9/0x3b0 [ 968.458551][T29563] __alloc_file+0x21/0x350 [ 968.462983][T29563] alloc_empty_file+0x6d/0x170 [ 968.467756][T29563] alloc_file+0x5e/0x5a0 [ 968.472014][T29563] alloc_file_pseudo+0x165/0x250 [ 968.476967][T29563] ? alloc_file+0x5a0/0x5a0 10:24:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000670001000000000000000000fe800000000000010000000000000000000000000200000014000d"], 0x3c}, 0x8}, 0x0) [ 968.481491][T29563] dma_buf_export+0x5d8/0xae0 [ 968.486184][T29563] ion_ioctl+0x560/0xd20 [ 968.490446][T29563] ? ion_buffer_destroy+0x2b0/0x2b0 [ 968.495701][T29563] ? __fget_files+0x294/0x400 [ 968.500396][T29563] ? ion_buffer_destroy+0x2b0/0x2b0 [ 968.505619][T29563] ksys_ioctl+0x11a/0x180 [ 968.509961][T29563] __x64_sys_ioctl+0x6f/0xb0 [ 968.514557][T29563] ? lockdep_hardirqs_on+0x6a/0xe0 [ 968.519680][T29563] do_syscall_64+0x60/0xe0 [ 968.524108][T29563] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 968.530011][T29563] RIP: 0033:0x45cba9 [ 968.533900][T29563] Code: Bad RIP value. [ 968.537967][T29563] RSP: 002b:00007f9bc1f8dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.540576][T29569] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 968.546375][T29563] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cba9 [ 968.546386][T29563] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 968.546395][T29563] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 968.546403][T29563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 968.546413][T29563] R13: 0000000000000379 R14: 00000000004c6236 R15: 00007f9bc1f8e6d4 [ 968.685291][T20572] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 968.752129][T29563] general protection fault, probably for non-canonical address 0xdffffc0000000017: 0000 [#1] PREEMPT SMP KASAN [ 968.763897][T29563] KASAN: null-ptr-deref in range [0x00000000000000b8-0x00000000000000bf] [ 968.772307][T29563] CPU: 0 PID: 29563 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 968.780967][T29563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 968.791019][T29563] RIP: 0010:dma_buf_release+0x51/0x3f0 [ 968.796487][T29563] Code: 03 80 3c 02 00 0f 85 30 03 00 00 48 8b ad e8 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bd b8 00 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e3 02 00 00 8b 9d b8 00 00 00 [ 968.816077][T29563] RSP: 0018:ffffc90008a9fb30 EFLAGS: 00010206 [ 968.822141][T29563] RAX: dffffc0000000000 RBX: ffffffff847bc300 RCX: ffffc9001416f000 [ 968.830115][T29563] RDX: 0000000000000017 RSI: ffffffff847bc310 RDI: 00000000000000b8 [ 968.838094][T29563] RBP: 0000000000000000 R08: 0000000000000001 R09: ffff8880512ccc4b [ 968.846063][T29563] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888089bf2df0 [ 968.854018][T29563] R13: ffff888089bf2d78 R14: ffff888089bf2dc0 R15: 0000000000000000 [ 968.862002][T29563] FS: 00007f9bc1f8e700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 968.870938][T29563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 968.877522][T29563] CR2: 0000001b30e31000 CR3: 000000001db9b000 CR4: 00000000001426f0 [ 968.885492][T29563] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 968.893451][T29563] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 968.901412][T29563] Call Trace: [ 968.904718][T29563] ? dma_buf_mmap+0x370/0x370 [ 968.909384][T29563] __dentry_kill+0x42b/0x640 [ 968.913949][T29563] ? dput+0x35/0xbc0 [ 968.917820][T29563] ? dput+0x35/0xbc0 [ 968.921690][T29563] dput+0x725/0xbc0 [ 968.925476][T29563] ? alloc_file+0x3c9/0x5a0 [ 968.929957][T29563] path_put+0x2d/0x60 [ 968.933927][T29563] alloc_file_pseudo+0x20d/0x250 [ 968.938854][T29563] ? alloc_file+0x5a0/0x5a0 [ 968.943347][T29563] dma_buf_export+0x5d8/0xae0 [ 968.948007][T29563] ion_ioctl+0x560/0xd20 [ 968.952231][T29563] ? ion_buffer_destroy+0x2b0/0x2b0 [ 968.957432][T29563] ? __fget_files+0x294/0x400 [ 968.962093][T29563] ? ion_buffer_destroy+0x2b0/0x2b0 [ 968.967272][T29563] ksys_ioctl+0x11a/0x180 [ 968.971581][T29563] __x64_sys_ioctl+0x6f/0xb0 [ 968.976167][T29563] ? lockdep_hardirqs_on+0x6a/0xe0 [ 968.981262][T29563] do_syscall_64+0x60/0xe0 [ 968.985762][T29563] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 968.991635][T29563] RIP: 0033:0x45cba9 [ 968.995506][T29563] Code: Bad RIP value. [ 968.999547][T29563] RSP: 002b:00007f9bc1f8dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 969.007942][T29563] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cba9 [ 969.015913][T29563] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 969.023867][T29563] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 969.031833][T29563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 969.039794][T29563] R13: 0000000000000379 R14: 00000000004c6236 R15: 00007f9bc1f8e6d4 [ 969.047753][T29563] Modules linked in: [ 969.061262][T29563] ---[ end trace e9963673771b44b9 ]--- [ 969.066841][T29563] RIP: 0010:dma_buf_release+0x51/0x3f0 [ 969.072314][T29563] Code: 03 80 3c 02 00 0f 85 30 03 00 00 48 8b ad e8 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bd b8 00 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e3 02 00 00 8b 9d b8 00 00 00 [ 969.092768][T29563] RSP: 0018:ffffc90008a9fb30 EFLAGS: 00010206 [ 969.098915][T29563] RAX: dffffc0000000000 RBX: ffffffff847bc300 RCX: ffffc9001416f000 [ 969.107018][T29563] RDX: 0000000000000017 RSI: ffffffff847bc310 RDI: 00000000000000b8 [ 969.115065][T29563] RBP: 0000000000000000 R08: 0000000000000001 R09: ffff8880512ccc4b [ 969.123037][T29563] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888089bf2df0 [ 969.131103][T29563] R13: ffff888089bf2d78 R14: ffff888089bf2dc0 R15: 0000000000000000 [ 969.139138][T29563] FS: 00007f9bc1f8e700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 969.148142][T29563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 969.154790][T29563] CR2: 0000001b30e31000 CR3: 000000001db9b000 CR4: 00000000001426f0 [ 969.162782][T29563] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 969.172574][T29563] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 969.180629][T29563] Kernel panic - not syncing: Fatal exception [ 969.187376][T29563] Kernel Offset: disabled [ 969.191711][T29563] Rebooting in 86400 seconds..