00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) dup3(r2, r4, 0x0) dup3(r4, r6, 0x0) 14:14:45 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000040)) syz_usb_connect$cdc_ecm(0x6, 0xfffffee2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000140)) readv(r0, &(0x7f0000002600)=[{&(0x7f00000012c0)=""/4095, 0xfff}], 0x1) 14:14:46 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x14f) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773", 0x3e}], 0x2, 0x0, 0x0, 0xffffffe0}}], 0x237, 0x4000000) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r2, 0x8000, 0x9, 0x5}) [ 450.624259][ T9187] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 451.597840][ T49] Bluetooth: hci1: command 0x040f tx timeout 14:14:48 executing program 1: clone(0x8180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0xc, 0x0, "0c9e089c1b4a01860b479037f43d223b3c1b324debec40e57a07f7bd417eb48821996aff1e7154e746be4d7686455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d13"}, 0xd8) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x36, 0x0, "11f6c39e9c871c71db7c23900758ebc615918f97152e01cab6162bd620c735311118e6ecd43bbd93cc039a8662590bb8a425349897ea9947e63933fb583bac2cbcfcf16c7083b7261084885e7aec76b4"}, 0xd8) connect$inet6(r0, &(0x7f0000001600)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 14:14:48 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0xb0003, 0x40) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000100)={'bond_slave_0\x00', 0xfffffffe}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3325}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000001c}, 0x0) fanotify_init(0x0, 0x800) [ 452.736581][ T9199] device batadv0 entered promiscuous mode [ 452.742702][ T9199] device vlan2 entered promiscuous mode [ 452.799268][ T9199] device batadv0 left promiscuous mode [ 453.249562][ T9204] device batadv0 entered promiscuous mode [ 453.255393][ T9204] device vlan2 entered promiscuous mode [ 453.267306][ T9204] device batadv0 left promiscuous mode 14:14:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x101401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) ioctl$CHAR_RAW_PBSZGET(r2, 0x127b, &(0x7f0000000040)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000040)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1a, 0x5, 0x64}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x448002, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000500)={{0x3, 0x0, 0x80, {0xd000, 0x100000}}, "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", "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"}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x80000001, 0x0, 0x0, 0x28}) [ 453.688246][ T49] Bluetooth: hci1: command 0x0419 tx timeout 14:14:49 executing program 0: r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "c6e74ebb43907ef2ccbb84cde5ac7986acbbfdf15a3e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 14:14:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB="000000000408000a00", @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r10, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r11 = pidfd_getfd(0xffffffffffffffff, r10, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000ded854d3fefb33a3000000000000", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n'], 0x28}}, 0x0) [ 454.189350][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 454.210400][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 454.251856][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 14:14:50 executing program 1: chmod(&(0x7f0000000040)='./file0\x00', 0x12) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@updpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xc4}}, 0x0) [ 454.448788][ T49] usb 1-1: new low-speed USB device number 2 using dummy_hcd 14:14:50 executing program 1: chmod(&(0x7f0000000040)='./file0\x00', 0x12) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@updpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xc4}}, 0x0) [ 454.739336][ T49] usb 1-1: device descriptor read/64, error 18 14:14:50 executing program 1: syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12b230ce24b1614dca12000072785ea87bb760662d467b0000effffff70000000000000080020904"], 0x0) [ 455.167596][ T49] usb 1-1: device descriptor read/64, error 18 [ 455.347669][ T8707] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 455.437688][ T49] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 455.618597][ T8707] usb 2-1: device descriptor read/64, error 18 [ 455.707764][ T49] usb 1-1: device descriptor read/64, error 18 [ 456.008202][ T8707] usb 2-1: device descriptor read/64, error 18 [ 456.107625][ T49] usb 1-1: device descriptor read/64, error 18 [ 456.227860][ T49] usb usb1-port1: attempt power cycle [ 456.277516][ T8707] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 456.548113][ T8707] usb 2-1: device descriptor read/64, error 18 [ 456.937576][ T49] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 456.938681][ T8707] usb 2-1: device descriptor read/64, error 18 [ 457.068783][ T8707] usb usb2-port1: attempt power cycle 14:14:52 executing program 0: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000e063051870eb7ad300007d39b5858e06006c171c9e1b8606e795bbfa7fb435002fbf5a58250dbc962013bcafe023", @ANYRES32, @ANYBLOB="d7d5d21500000000000300dd"], 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 457.169190][ T49] usb 1-1: device descriptor read/8, error -71 [ 457.400428][ T49] usb 1-1: device descriptor read/8, error -71 [ 457.798873][ T8707] usb 2-1: new high-speed USB device number 4 using dummy_hcd 14:14:53 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0x1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) dup3(r0, r3, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000040)=0x7) [ 457.968851][ T8707] usb 2-1: device descriptor read/8, error -61 14:14:53 executing program 1: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x401}, &(0x7f0000000080)=0x8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000b40)=""/126, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000180), 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="100026bd7000fddbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000008000100703a31302e30000000000d0087008bb01cceb8016c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200183030303a30303a31302e30ddff00000d0087006c325f64726f707300"/200], 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000007c0)=ANY=[@ANYRES64=r0, @ANYBLOB="6d000000dbed278854af2ca84e8901c9e49602b2695255eeb0d34624dfd27ae2495c856be8bc48d15fd9300042e7ce5b64af4401ea546e43d8e6c5e5c80889be0b5da291b8e999b9e40c658741ed93703f92e39c990efd16cf0a189cf4b3b2f52f7218b5d4e802c2d499a0daf1b24e15c8fccaa8977022b0da3c0fa70ccb08224298aa143c2d3423254fc7b7ef32ec57919b0147d4eb76c84e09f91f92c00d85eee54e673cecb93e219e062f3ac2acac33ffe35d89397fa94587c5635d91696f91bdd03813261c3d88b9b85485e6812d77b5ee2d5aa322774686db25c2ba3e5c565300000000000000000000000000005cd47f4f387a8601fecd4bef9b9855f059b1749cb0d418370fd87470aadc96385c46408bf2427236bd4b9b04a789fe6dccb7"], &(0x7f0000000180)=0x75) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000200)={0x0, 0x3}, 0x8) set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffb, 0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)=""/3, &(0x7f0000000380)=0x3) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x20405) write$binfmt_misc(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="5300000044a6beabc81e1520000000000000001000fff6129edb9820000000000000d403f7ff633b27e526560000000059d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d2740140700000000000000fbea75e16a61fd063f02cc3c1a6ed7360627ec60cb274e08da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc71d61c2b3c65f2f80a61ea6e457ebc93982e20e03b86d4e999bbb53a930ee0ce30e80600cff8ca1496e518e3e6fcfffffffffffffffeb82ee2469fb31bdbb2768d25f196ab6f2d1b94d878d0d9c2a5c74633a687a135308e49ce118c92517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000000000000000000000000000009a583b79ab01f70d85463c57c5bb1f1084e683b591fc2ca01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643db6db0f97fcd41a9eed23ede6634bf57fbe09a7eb84caefecb4e10d4097a01000000000000000beb233e0e40d89147bc67990d3b754ca3b886b8a4c080f2ea4b1fcd8dd58b946c469fb7001340d06a04c9b039bec54854693563080e683a28fc32d6aafe2847078f1d32fdceff9ea5d428ee5b65129f7e6a9f739d8a20c7ed1a0f192bac54dace78644b5949ff010000000000008938ed0393ced6d63dab378ddaffaa5670d78a345fe99e59de26086a3b29d047a032d35ddf8b90283a83cab92e06000000eb327c42e3461236e0280df78c3222c3bacb0a2c2651d47fa7e72d54e7867558e7d80fdf6668c5584edf74c374296322a867da5b6819a63269bbecc42ffd5954890c2c4550cb11ec7e0e17c87f87de91de75c9068fe61131822a7869e7ed24f05d475ed924c9f4e26f947f8639c5c8ed64e447014882b7bca7ab8ca9fdcba1da30765f5c55164cb879f971eb6603af015c334a4af852c28a6ecd78c20eae30c207b32c15dc3effbd547480b1510099de4e052a18496cdfc76fd205f201f2d964f5f9fe18d46cb789d7c52f5c0de5311749ef56244f7c3f11235c9df18f62980babe1583e4b887e71fa7a3780d99f34eae615995609ef08dc05e38f63c693ac0cc6ddd1336d55c1576d5e6700e62d696bf817af863936a650f9f3c8732793bdb2802c1461babf6720b6c551d2ace1929b6880d6e095da065d01b59bc71bb149fd7555cfe486aaa96a8040c5a9c4cae2c6edfd7013488c2056fb83119f81828f4ece4dafb2404c4aadca5c7c3b8bda7852f0a83156ef22705082cff411c6eb602b8228ba2f022183b693db6dfbdbef2e5afc01273e999fe0ed5154679285df88047c1f5162e4c281b33b8f57750595b8e50dcf44653110485eabc8b4510469da2265bb4445a7dcd73b0657ab58002ca2e78c672f80266668cc658bda1996ca1b6ecaeec2ca16e846172f5536134b447ccc685fde720afd531ca1976e78086f00000000000000000000000000000000000000000000000000ec13a2b7dc00c53e6691ec78e71538e0d592fcc2539ff4712943d7ccc39920f196948aa515dec59cb15c5f563c18b803cb5729b8fd7fb2ee39bd54b87b4f30f42800323986592e352a5e5786ef9d9fbcd683e4aa273f947819dd2f4bd731e6907038814d8c5dfd79316dbeb670d0bb5ae50cf208d9829fa7f071c5d88e32c2f8fd028a0c73e39c3f804ed869bd355c5e229bef714bd13d380222"], 0x2fe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1cac83, 0x0) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0e000000000000000681c80040c3b4d4c648d95b5d738a0222d0e193e206498ae3f6e904584eeee75bd972cd715f82102a2e5e916dd262741e94f0eaf0634623626e025d14e8223bc261ce7e2f136f9cf1d7bee2edd913661eb34cda57b5136cdd00e455992038f134326edda62a855d890d3e92dc5ccb7931fc50209b61892c64d76324feff5fc3e76ac5847a01c56fea4e5fd27444e88ddd949c8f670700d60e06b9be675170c8b597b638bf697e6b33a86ddeac36a20454d95ed7bc69de66458c8f13b2b258b54679670fc92ebab83ce203db"], 0xd4) [ 458.179422][ T8707] usb 2-1: device descriptor read/8, error -71 14:14:53 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001c00f540c007011514aa05000001090222000100000000090400000103011200090500000000000000070581bb"], 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'syz_tun\x00'}}) [ 458.311373][ C1] sd 0:0:1:0: [sg0] tag#5302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 458.322039][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB: Test Unit Ready [ 458.328841][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.338779][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.349064][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.358915][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.368759][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.378595][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.378749][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.400711][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.400863][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.420228][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.420378][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.439759][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.449574][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[c0]: 00 00 00 00 00 00 00 00 14:14:54 executing program 2: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x0, 0x3, 0x4, 0x4, 0x8, {}, {0x5, 0x42344718b53cc052, 0x9, 0x24, 0x1, 0x7f, "9337ece7"}, 0x2, 0x1, @offset=0xfff, 0x401, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x92) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000100)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x100, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000180)) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x84) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000280)={0x1, 0x5e, &(0x7f0000000200)=""/94}) r3 = add_key$fscrypt_provisioning(&(0x7f00000002c0)='fscrypt-provisioning\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)={0x1, 0x0, "eb16044e030213005458a3fa6009e31873e659022d7c4eb42d4045a6f74c9630103692441249f92a300a65a240a994f75e340e908f1f5cd36dfc9462ad421b31b3b41afdf5900297f3e640cb5a61feb7bef178db9dd0138fbdc54b2b789e49111874a362e9979471f723f09b7f18f1962df82070fd1547e26dfa6e67c178418190c331985e0abb0d331520c9ee286a9af5f3f73c001f49e9190bef2a374806dc1ac2fde5b5aff78d578c"}, 0xb2, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r3, 0x8b39) r4 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x0, 0x400000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000440)=""/142) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000005c0)={0x1, 0x34, &(0x7f0000000500)="046414ff0abd91a87910d05f6e7b027e8495b118d1ecd8a80efdb910c9d786b3a9e06cc68a86e3dc374f28520c4de97a270e99481ee182aca2daf6892804c1684b79a5be01da0d6eea1ee5001849c2ac93ac8cbe812e1388338543e865cd7d81fb3bb9b2bb0bab537c77c131b73cf4acc8fda688e8758669dfe9ac1f81218248a636b50d8578bc54c5599fda7b4bac1c99e4bbf5d7d3aa9bdd94f131905a1f25a09527b13b", {0x5b0, 0x10620dba, 0x56595559, 0x0, 0x1, 0x8, 0x7, 0x5}}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000600)='/dev/input/mice\x00', 0x400000) setsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f0000000640)=0x507eb46e, 0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r4, &(0x7f0000000680)={0x60000000}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/input/mice\x00', 0x531900) write$proc_mixer(r6, &(0x7f0000000700)=[{'BASS', @val={' \'', 'Synth Capture Switch', '\' '}}, {'LINE1', @val={' \'', 'Line Capture Switch', '\' '}}, {'LINE2', @void}, {'SYNTH', @val={' \'', 'CD Capture Switch', '\' '}}, {'SPEAKER', @val={' \'', 'Synth', '\' '}}, {'SYNTH', @void}, {'LINE3', @void}, {'PHONEIN', @void}, {'VOLUME', @val={' \'', 'CD Capture Switch', '\' '}}], 0x100) ioctl$VIDIOC_ENCODER_CMD(r6, 0xc028564d, &(0x7f0000000800)={0x1, 0x1, [0x1, 0x3, 0x0, 0xc99, 0x3, 0xe, 0x52, 0x4f22]}) close(r5) [ 458.590010][ T9265] IPVS: ftp: loaded support on port[0] = 21 [ 459.783014][ C1] sd 0:0:1:0: [sg0] tag#5303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 459.793974][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB: Test Unit Ready [ 459.800744][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.810640][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.820533][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.830367][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.840263][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.850253][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.860149][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.870040][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.879944][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.889852][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.899748][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.909670][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.919950][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[c0]: 00 00 00 00 00 00 00 00 14:14:55 executing program 1: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x401}, &(0x7f0000000080)=0x8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000b40)=""/126, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000180), 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="100026bd7000fddbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000008000100703a31302e30000000000d0087008bb01cceb8016c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200183030303a30303a31302e30ddff00000d0087006c325f64726f707300"/200], 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000007c0)=ANY=[@ANYRES64=r0, @ANYBLOB="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"], &(0x7f0000000180)=0x75) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000200)={0x0, 0x3}, 0x8) set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffb, 0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)=""/3, &(0x7f0000000380)=0x3) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x20405) write$binfmt_misc(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x2fe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1cac83, 0x0) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0e000000000000000681c80040c3b4d4c648d95b5d738a0222d0e193e206498ae3f6e904584eeee75bd972cd715f82102a2e5e916dd262741e94f0eaf0634623626e025d14e8223bc261ce7e2f136f9cf1d7bee2edd913661eb34cda57b5136cdd00e455992038f134326edda62a855d890d3e92dc5ccb7931fc50209b61892c64d76324feff5fc3e76ac5847a01c56fea4e5fd27444e88ddd949c8f670700d60e06b9be675170c8b597b638bf697e6b33a86ddeac36a20454d95ed7bc69de66458c8f13b2b258b54679670fc92ebab83ce203db"], 0xd4) [ 459.950636][ T9291] IPVS: ftp: loaded support on port[0] = 21 [ 459.998706][ T49] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 460.228698][ T49] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 460.239424][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.250793][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.260830][ T49] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.320375][ C1] sd 0:0:1:0: [sg0] tag#5304 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 460.331047][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB: Test Unit Ready [ 460.337831][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.347996][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.357917][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.367862][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.377756][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.387675][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.397605][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.407584][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.417423][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.427265][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.437099][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.448322][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.458489][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[c0]: 00 00 00 00 00 00 00 00 [ 460.551696][ T49] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=aa.14 [ 460.561185][ T49] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 460.569413][ T49] usb 1-1: Manufacturer: syz [ 460.669514][ T9314] IPVS: ftp: loaded support on port[0] = 21 [ 460.751598][ T49] usb 1-1: config 0 descriptor?? [ 461.028352][ T49] iowarrior 1-1:0.0: IOWarrior product=0x1501, serial= interface=0 now attached to iowarrior0 [ 461.151258][ T49] usb 1-1: USB disconnect, device number 5 [ 461.192185][ T49] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 461.345988][ T8522] tipc: TX() has been purged, node left! 14:14:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x10100) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x8, 0xb5, 0x9, 0x4}]}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r4}, 0x10) [ 461.779355][ T9367] IPVS: ftp: loaded support on port[0] = 21 [ 461.819051][ T49] usb 1-1: new high-speed USB device number 6 using dummy_hcd 14:14:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket(0x18, 0x0, 0x800000000000002) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) [ 462.249357][ T49] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 462.260574][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.271733][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.281807][ T49] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 462.499838][ T9367] chnl_net:caif_netlink_parms(): no params data found [ 462.518883][ T49] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=aa.14 [ 462.528175][ T49] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 462.536257][ T49] usb 1-1: Manufacturer: syz 14:14:58 executing program 1: semop(0x0, &(0x7f00000007c0)=[{0x2, 0x0, 0x1800}, {0x3, 0x3f, 0x1000}, {0x4, 0xfff, 0x1800}, {0x2, 0x9, 0x800}, {0x2, 0x4}, {0x0, 0x1, 0x1000}], 0x6) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000440)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = syz_usb_connect(0x0, 0x3b, &(0x7f00000076c0)=ANY=[@ANYBLOB="120100006d9a3210450c1010c1a5000000010902"], 0x0) syz_usb_disconnect(r1) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000800)="e62c02ebb9efcfb5a65d0455e02f0adc50b240eabcd1bd681e6fa7058f0efbda18539726cf2ba0acd8dba8ed636e23f0363f6abc7a1c1f2720ef58a8284476b35eb380224f8f89482ffa1f8f5c3c2293a060bae3", 0x54) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0xe, 0x35, {0x35, 0x2, "7f77422697dba2e53118a30ad04af96d2e7cb3eb6a056a8d3249d5f6c15919ad500df3eac3418345d5ae3321c5612730da689a"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}, &(0x7f0000000080)={0x0, 0xf, 0x5c, {0x5, 0xf, 0x5c, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa5, 0x7, 0x5, 0x0, 0x7f}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x4, 0xf00, 0x7f, [0x18, 0xffc0c0, 0xf, 0xc000, 0xff00ff, 0x3f30]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x5, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x2, 0x0, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "685874eba953254e60a1c1a4e549efcb"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x9, 0x9, "be3fa1cf", "9d1bf5ab"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0x4, 0x81, 0x6, 0xdd, 0x6eec}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x14, 0xf9, "975a36ed96a3cac77bb88dcbcecfd906e0d483925354e094b298e9e63f8bf3eac70594055f424cda679e18bee47f0bc6fedda8b79df4031d90c344ec99a2a3b720fb4c14eccb5fe81d0f6cbbee0da3f136b2fad6c0ebd693d3aa09859e6911f963125b92572358cf76b7b115f80399b80c59040e9d4bd740eb1e93ddef1dff5da0712d3566ebce32bcac072e152aac8f3dfab755b201d2caae2e824809b3623e382cd656a460d4ea472456d04da53e465262e64c52292f4e05595d4b647f7e6e57ff744e7991dda5b38a3262fea6d5b7f2c7a6319cc9686192fbb800016b116f0949d507b03b6e32ac3472d1f564f5de5610816b86753c8084"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x0, 0x20, [0xff0f]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "ba0f"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0xdd42}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "d6fd"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0xf7}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x7f}}) [ 462.667394][ T49] usb 1-1: config 0 descriptor?? 14:14:58 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x101040, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x713802) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @broadcast, 0x0, 0x0, 'sed\x00', 0x16, 0xcd, 0x804}, 0x2c) [ 462.741118][ T49] usb 1-1: can't set config #0, error -71 [ 462.769861][ T49] usb 1-1: USB disconnect, device number 6 [ 462.911812][ T9367] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.919299][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.929030][ T9367] device bridge_slave_0 entered promiscuous mode [ 463.085780][ T9367] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.093168][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.102945][ T9367] device bridge_slave_1 entered promiscuous mode 14:14:58 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = accept4$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x80000000, @empty}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, @in6={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00', 0x731e000}], 0x48) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 463.269274][ T3223] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 463.316898][ T9367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.374926][ T9367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.519182][ T9367] team0: Port device team_slave_0 added [ 463.528810][ T3223] usb 2-1: Using ep0 maxpacket: 16 [ 463.543264][ T9367] team0: Port device team_slave_1 added [ 463.570101][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 463.597759][ T9174] Bluetooth: hci2: command 0x0409 tx timeout [ 463.659035][ T3223] usb 2-1: config 0 has no interfaces? [ 463.664735][ T3223] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=a5.c1 [ 463.674665][ T3223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.700021][ T9367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.707253][ T9367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.729192][ T3223] usb 2-1: config 0 descriptor?? [ 463.733434][ T9367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.875744][ T9367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.882904][ T9367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.909101][ T9367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.984295][ T3223] usb 2-1: USB disconnect, device number 6 [ 464.120606][ T9367] device hsr_slave_0 entered promiscuous mode [ 464.149362][ T9367] device hsr_slave_1 entered promiscuous mode [ 464.172821][ T9367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.180633][ T9367] Cannot create hsr debugfs directory 14:15:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000206050000000000fffff0000700000005000400000000000900020073797a3000000000050005000a00000005000100040000000400078012000300686173683a6e65742c706f7274000000"], 0x50}}, 0x0) 14:15:00 executing program 0: syz_usb_connect(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000040)={0xfffffff7}) dup(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40640a, 0x0) [ 464.863115][ T9367] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 464.928114][ T9367] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 464.968837][ T4861] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 464.973490][ T9367] netdevsim netdevsim2 netdevsim2: renamed from eth2 14:15:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7d, 0x92, 0x7f, 0x40, 0x1209, 0x2323, 0xc348, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x72, 0x45, 0x8a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat2(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x180, 0x114, 0x4}, 0x18) accept4$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10, 0x800) [ 465.052718][ T9367] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 465.347319][ T9174] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 465.654678][ T9367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.677383][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 465.704247][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 465.713301][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 465.722537][ T4861] usb 2-1: device descriptor read/64, error -71 [ 465.728324][ T9174] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 465.737077][ T9174] usb 1-1: config 0 has no interface number 0 [ 465.743333][ T9174] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 64 [ 465.754405][ T9174] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 465.757341][ T9367] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.763690][ T9174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.818106][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 465.828392][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 465.837717][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.844950][ T8703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.930646][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 465.934434][ T9174] usb 1-1: config 0 descriptor?? [ 465.940181][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 465.953417][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 465.962855][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.970171][ T8703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.970648][ T9622] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 465.979075][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 465.995129][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 466.047595][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 466.058563][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 466.079117][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 466.089156][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 466.099670][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 466.130828][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 466.140522][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 466.220132][ T9367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.233788][ T9367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 466.250533][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 466.260485][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 466.290182][ T4861] usb 2-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=c3.48 [ 466.299645][ T4861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.304128][ T9174] usb 1-1: USB disconnect, device number 7 [ 466.377186][ T4861] usb 2-1: config 0 descriptor?? [ 466.554339][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 466.562677][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 466.634133][ T9367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.859857][ T4861] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 466.938342][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 466.948765][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 467.057255][ T9174] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 467.078370][ T4861] gs_usb 2-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 467.088467][ T4861] gs_usb: probe of 2-1:0.0 failed with error -71 [ 467.128074][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 467.138008][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 467.162788][ T4861] usb 2-1: USB disconnect, device number 7 [ 467.186213][ T9367] device veth0_vlan entered promiscuous mode [ 467.252422][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 467.261723][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 467.333799][ T9367] device veth1_vlan entered promiscuous mode [ 467.442121][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 467.451646][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 467.461085][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 467.470932][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 467.481749][ T9174] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 467.490132][ T9174] usb 1-1: config 0 has no interface number 0 [ 467.496411][ T9174] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 64 [ 467.504549][ T9367] device veth0_macvtap entered promiscuous mode [ 467.507398][ T9174] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 467.522778][ T9174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.546384][ T9174] usb 1-1: config 0 descriptor?? [ 467.553917][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 467.572953][ T9622] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 467.596627][ T9367] device veth1_macvtap entered promiscuous mode [ 467.758302][ T3223] Bluetooth: hci2: command 0x040f tx timeout [ 467.783554][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 467.794590][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.805403][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 467.816000][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.829897][ T9367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.850788][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 467.861351][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 467.935779][ T9174] usb 1-1: USB disconnect, device number 8 [ 468.020548][ T3223] usb 2-1: new high-speed USB device number 8 using dummy_hcd 14:15:03 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b) futex(&(0x7f0000000040)=0x4, 0x3, 0x0, 0x0, 0x0, 0x0) [ 468.156147][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 468.167271][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.177294][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 468.187914][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.201770][ T9367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.228915][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 468.239765][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 468.407485][ T3223] usb 2-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=c3.48 [ 468.416722][ T3223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.445502][ T3223] usb 2-1: config 0 descriptor?? 14:15:04 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x4}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x155) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap$dsp(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b5b083b31000000000000cab8ac0600000000005415f7876c007b9e00400000000000000000000000000000000000000000003800000000000000000500000000000062d064de7705745d520600000000000000000000313f8d5f954bda2e83ba07c75f293500"/124], 0x78) connect$qrtr(0xffffffffffffffff, &(0x7f0000000f80)={0x2a, 0x0, 0x8000}, 0xc) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) fcntl$setown(r1, 0x8, r2) [ 468.847293][ T3223] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 468.854422][ T3223] gs_usb: probe of 2-1:0.0 failed with error -71 [ 468.998804][ T3223] usb 2-1: USB disconnect, device number 8 [ 469.239239][ C1] sd 0:0:1:0: [sg0] tag#5260 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 469.253912][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB: Test Unit Ready [ 469.260761][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.270986][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.280866][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.290730][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.300598][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.310548][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.310677][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.310795][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.310921][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.311051][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r2, 0xab9535e9a6578fc1, 0x0, 0x0, {0x15}, [@NL80211_ATTR_IFINDEX={0x4}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x2, 0xffffffff, 0x0, @mcast2, @private1={0xfc, 0x1, [], 0x1}, 0x80, 0x8000, 0x7ff80, 0xe}}) r4 = timerfd_create(0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x3}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x8}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xb}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa3}]}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40080c1) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$HIDIOCGCOLLECTIONINFO(r5, 0xc0104811, &(0x7f0000000000)={0x80000000, 0x9, 0x4, 0xfbc}) [ 469.311167][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.311297][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.311407][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[c0]: 00 00 00 00 00 00 00 00 [ 469.773067][ T9730] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 469.801472][ T9730] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 469.851234][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 469.915157][ C1] sd 0:0:1:0: [sg0] tag#5261 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 469.925869][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB: Test Unit Ready [ 469.932637][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.942487][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.952340][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.962236][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.972082][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.982015][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.991858][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.001711][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000f8ff080009f6000000ddc3d13c00"}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x721a, 0x0, "2f7dc3b2aa00"}) r2 = syz_open_pts(r1, 0x4000000000000202) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0xa, 0xd}, 0x14) [ 470.011556][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.021389][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.031248][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.041097][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.050928][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000026000106", @ANYBLOB="ef0f1a87554968d900000000000000004f09ce1c602e12f6161d9afa0b2941027881609e8c6e272944fd90bd8da3ed323f1767f517834f91c8d61fc263ab461fdd26acbc2356b1c6aa07185ada8e277796c16a00"/93], 0x28}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}}}, &(0x7f0000000280)=0xe8) r6 = getuid() r7 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0800000000f80000ac35318400000001a7202a89781791f376c0b2395ae61fef78181be0096b2d82ca3366942fe8f189aa26ae8b634be75c19414d52a67327a188e07dba3c25faf8cfc1477f319e58e596e7b02668c3811d731ad0b9a52f8b7f5503763650379cee575ee35ac6733b5cc4f267c1a1da15cec9546e2c1dabefc8f64a4976f460313aad86ad2892027b695d61d237a99f0139cd701d8e6fd390640fae30b387593c007055d03d2945", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) r8 = getuid() r9 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0800000000f80000ac35318400000001a7202a89781791f376c0b2395ae61fef78181be0096b2d82ca3366942fe8f189aa26ae8b634be75c19414d52a67327a188e07dba3c25faf8cfc1477f319e58e596e7b0", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x1c}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x6000, 0x100, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x4}, [{0x2, 0x4, r5}], {0x4, 0x4}, [{0x8, 0x4, 0xee01}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r7}, {0x8, 0x0, r9}, {0x8, 0x6, r10}], {0x10, 0x3}, {0x20, 0x2}}, 0x54, 0x1) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000040a0101000000000000000002000009340008800c00014000000000000000010c00024000000000000000030c00024000000000000000010c00024000000000000000020900010002007a310000000008000540fffffffff600030073797a3200000000"], 0x68}, 0x1, 0x0, 0x0, 0x200008d0}, 0xd7f64688dc40e01c) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f00000005c0)={0x1, 0x5}) [ 470.263061][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 470.294515][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:15:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2323, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="7b0000004a996992b3d2ea39d2aaef38171567b2f790cc638370ff6016b0f7e88f3a42f4725f345f0e60248bf213acf171f7d9d7bf74802714a7f214c51f1a4866cb7731d3700ca14fee0a6e2addbc55716895c4fa2e87313b3fa9fb91f26d08aca00c9c91ed66a2299eeeda6966f650c567530de959d011a0f4671abbb41c263088b0077d10717b53b599333c5656cd32abaee5cfdd9c5254f1723dc65deda4ae7f334e1f0824892f397adf1b43162da965c12a465bed4b7fc7bccbef95815a0636ff77bf589961273937a1a56a740b786c0e0730cf0c52bda6f13d285ff1188f80fa71b4858f31e287f955c5554d5a39d94d345e77d727dedf7de531668e8add4a3f1af9e40d47faab7eaba398c8a37fc79af78912f8f95ea1e19bae44283f7ce94eeb515144355df8700a3e2d0c0afaa9c1eb911d8b13ebd4be25e9"], &(0x7f0000000200)=0x83) set_mempolicy(0x3, &(0x7f0000000040)=0x9b, 0x5) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x36, &(0x7f0000000100)=0xbaa) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x36, &(0x7f0000000100)=0xbaa) rt_tgsigqueueinfo(0x0, r4, 0x10, &(0x7f0000000180)={0x20, 0x2, 0x9}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000140)=0x9, 0x4) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 14:15:06 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) [ 470.317782][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 470.381727][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 470.565626][ T9741] IPVS: ftp: loaded support on port[0] = 21 [ 470.640652][ T9743] batman_adv: batadv0: Adding interface: macvtap1 [ 470.647530][ T9743] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.673442][ T9743] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 471.183581][ T9746] batman_adv: batadv0: Adding interface: macvtap2 [ 471.191099][ T9746] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.210985][ T9766] IPVS: ftp: loaded support on port[0] = 21 [ 471.217177][ T9746] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 471.233416][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:15:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x27) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) r1 = dup2(r0, r0) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="dc732fab03a82bbb1ea7fbd714d1ee000000005b25acfccc6946e9811ac5fb8f2485cab7510a93b62fd20c608ba2f49bcc33b440795b54607ec01b9a53006f14c70e24bbc8eb08292735a678477fd7fbd8f02e166a5f8ba4f94dda9f8e4da91b585558090e4f9c6bcb79426ed1cdd7a331efcb44dfc28672aa75c57fd595e55891a9995922e817ffbb24d2130f72cc2d42cebd974bca37c15591d1035afa96df5bd9e77189e51a33251ecccd85", @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf25180000004c0003800800020019050000080003000600000008000200530a0000080001000600000008000300010000000800030081000000080003000700000008000200e20c0000080002005600000014000980080001009b04000008000100a1060000"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 471.414050][ T8485] tipc: TX() has been purged, node left! 14:15:07 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0xc0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x1, 0x4, 0x6f45, 0x4, 0x600, 0xff800000}) r4 = dup3(r0, r0, 0x80000) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x4fc6f) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r5, r3, 0x0) [ 471.728289][ T9781] input: syz1 as /devices/virtual/input/input5 [ 471.798975][ T9789] input: syz1 as /devices/virtual/input/input6 14:15:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x901, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x84}}, 0x0) 14:15:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x5) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xad, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r6 = socket(0x11, 0x5, 0x10003) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r5}}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', r7}) connect$inet6(r2, &(0x7f0000000080)={0xa, 0xffff, 0x0, @empty}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@flowinfo={{0x14, 0x29, 0x43}}], 0x18}}], 0x1, 0x0) 14:15:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r0, 0xb9) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x80040, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000001c0)=0x40, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000140)={0x0, 0x1, {0x1b, 0xc, 0xc, 0x1f, 0x7, 0x5, 0x3, 0xee, 0xffffffffffffffff}}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff1100000000200000d8000b4824ca805f64009400ff0325010ebc000800008020008000f0fffe00e809005300e21e9fb9000010000100020c10000f00000000000000", 0x58}], 0x1) 14:15:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000290012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@delchain={0x138, 0x28, 0xf35, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x108, 0x2, [@TCA_CGROUP_ACT={0x104, 0x1, [@m_police={0x100, 0x0, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x4}, {0xd1, 0x6, "01f10ac91f87d5ec52cbc6c5c87d4a1f0bb2e132f87ab312a6e0321fbaad91993a82f523c0c14537092b43d9ff58e4a5ba4cd1af63dfaddfbfb06b9e329f22e6c82b8e44e12d834209deab8e8915a077ed1b984537bf71e72f7681461c30590b3f60f5632a29fd14bb980649db56b1cd5d318cfb275c324cc3a4a02e09e5e0bce09962a671726fb95485a3b2dd38e4b5f9f0c6a2b98de5edfb6367b30673c2a2f91469b4ec0f7c759b52cc3b09b41e197464008e8a2800818af26a0d9095ff61632c715d95bb19bf093ac334d3"}, {0xc}, {0xc}}}]}]}}]}, 0x138}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f00000000c0)={'wg1\x00', {0x2, 0x4e24, @multicast2}}) 14:15:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r0, 0xb9) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x80040, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000001c0)=0x40, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000140)={0x0, 0x1, {0x1b, 0xc, 0xc, 0x1f, 0x7, 0x5, 0x3, 0xee, 0xffffffffffffffff}}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff1100000000200000d8000b4824ca805f64009400ff0325010ebc000800008020008000f0fffe00e809005300e21e9fb9000010000100020c10000f00000000000000", 0x58}], 0x1) [ 473.040781][ T9819] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 473.096683][ T9820] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 14:15:08 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x443, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x10c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "122d34a83355eb03081fa880a8b65be208a96c7cda"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ab9c68cd984e0000000000000000000000000000bb702f6c0e48004e71795ebe3378f1a9"}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44080}, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x2]}}}]}, 0x70}}, 0x0) 14:15:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r0, 0xb9) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x80040, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000001c0)=0x40, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000140)={0x0, 0x1, {0x1b, 0xc, 0xc, 0x1f, 0x7, 0x5, 0x3, 0xee, 0xffffffffffffffff}}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff1100000000200000d8000b4824ca805f64009400ff0325010ebc000800008020008000f0fffe00e809005300e21e9fb9000010000100020c10000f00000000000000", 0x58}], 0x1) 14:15:09 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0xc004510e, &(0x7f0000a07fff)) clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KDGKBLED(r0, 0xc004510e, &(0x7f0000a07fff)) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000000)=0x9) 14:15:09 executing program 0: pipe(&(0x7f0000000000)) socket$inet6(0xa, 0x5, 0x0) socket(0x40000000002, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x5012c2}}, 0x50) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000000)=0xc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, r4, 0x0, 0x0, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000480)="da58f20d5e10abef471d4d87519a7155b830b1c51640c41b40307621bc6ac77ee78b2c6deb26d0fb235d82867a904fd0f544239e56abe487c1419b1689865e7ca006318bcb48b1ba16d68e038ae9fe72300575c4899f414a38b1958f199e87df2e8b50c1c9530e49a0ce209e6feb1f5a9124f02781e84958e6153d393cac0b9e6ba73813249a3fb2dc3c4499443e174b0ca4bb9afce24d427e4701ac9d02e77861944574d5164efb04a46f5b3a7a362e1f0aab41eff80b4dfe074cd51c1f6d2ed3961dda6761f9e0c85689521c5882d042594a268c5caad4e2ef4cbe136aae95974fac9eccd5e4a6e4cf", 0xea}, {&(0x7f0000000580)="013437dde9cd6079c1174cd37582df450c2443269e45334643623b6749090e734c9525741e2ad225186d7c94e6d5abfb0edb89167ce6bd2957bdaf74aa878f7054b7b88167652e6c3c664af07d89733ef4768daf63932f0dd6c64c262099c34ba817a484534b5d39bcd8344fff0cfb42ace74bcab3f2f10284591e39722574242fee3b068506545d6c892105980195e0d09b01d8543ef94900075dfa3e780b3aca865c4b36216c118d247da654c98ab51d727a80526a74a1cbb2304eb89f19f8c62bff43f69319dad07c7bde5d106852be267fa8562acd42cc82e715c8ff8a7eaa3ebe4f9028f1db07a2c18e68d98e2ca5d7b5cf1e6264d5d2bc5e11302a66d27571de4c8eac9d613e65980d900d5de0a34e592be6f63e7e0fd820bb78003a84b9c8260f1dc05edebc8dc99789c77305d186bd93847fc84834462b4347a77c354f850a6b30883983d82a6bb31d57bc2756b36043dfcbe6082907b7c0a21ecaa561ddd70ef0205b8d948748f6e16ef8587a93f1fd7760aa6de5ab20519d875d96b301a07b7b780831c6a0994eb094e2deecaed5c632f3f27a2d68ad7f871f7b252fa19046fcf394a52d88c89f95540292994627637dc1edb5c2483b5434575373b38fa37ff517f314e316ebe1e348b9b77fa6598a93b85d6de9191d4afefc7f537219b7a4997dabb58b2568fc52023c378948a96587a34c8b1bb97efed3021dcd43f1e45a8bb85f4623143aa512ddc769b9edd273910281b4b03a693c7deb47d817d26d63d728e6378a5dd628074d1c5af1e79cbd2cf728bfd89c551f20dbe4cb87a2c916deaa0c25f309281a9005bae7e4e41d5a18ce540f677e0f3acf94eabd5c8e914a114044a82075da2d438163d7c9a404755324679ef0d0ee92ffefe145eda0070f274a86c2db6240062748836c713c171c6139a260ef761544d63f053696a42f3c2c615f2fe078582a09fb5d709cbd51f4d92c016b6b7aafe93859a0aba93eca7baedafbaa8df7973b61309aff5aff595672e71a776d01505d07576ce8a5bbacdf91e716caf70b1fb54c94dc50ef73f20ce293c7acbde91fa7755e3d06bee694df87f4b5daaf9860d3c75eb73b40be7136c4005a2bf95362f3452cd58e94b831c907abdd51312b18c74ce53e06fe967bc48ea56ab3b971739f2792cbc798b0372de51ed32f62992bbef8af0889a33d72e7794280dee2511b5945f7d73058c231ac06b6309374008c9f482c758e0cb5ba784150bf54804030522d7d061ca0f0b42236b202232cb967775972f4b3cbaa348b8ff092bb0807a687aea37ed2f27ca848a49bbd7a8a5a29339b92675beaf7e80f07136a89369838fb49d3a0bf4e73cb411435b995f2b470905731b11b3f9a3b42dc5948e155ae4835c2bfc64d01fa7ad5cf7b19e018075001f2e93658967b81dfd284624332a48aa7d5c7b90cf280b9ee007738f5348688b5fc78f0d64ce54912a175a97722eaed952a1bd16bcbe43e674eb7143d42e434463bfee35534ee43c4816418c76b4e7617c3cc39b020b53a1441395af6d9226ec6a163c955104115bfd132a9eee9e197ffc0167d4b7b8797fea0d989a3f21df72d360d60911d2b35c2af886ae0cdde3d098b90058c607a1991a1288749b15768389f4ad8f8043cade1195e72dac082d888533d3e7b5695c112369b1685c53122368c688a62b710d7c016f8ab25f99a95f8c7864fc3ea7c41f94f4cbb8afe11c57c7cacaa6a6453e81f667cd4a966e1476f8039769fbc46aa638c631b234495b4707d452b388a1916dc0f71db08572d4b2641f720cdfdc6b8ae4032b342bc8acf94a2333856c94374931a01e3a46fe36fc00e9c2499151761f8ec9d1f376fb9254ec5c41b2b6a253bb14e682f813f92423b9ea8e78910e0ced5ac982e0fd28b04c2aba01d282412c21da808e518dff8c9e424df69873ba5219db4860c598749b45f5d7851bd0aecbe5bfefb0483f655103c590c9bf54a4ef53c6d8dda9b0ce5a689efca960323db3ea7370cdb41ba24f790ca6b1270a83c6992ffed8ed474ec40d1385bc7e1b8c87d3b55b679f8d7e08b672d6498e324e8bcde76468b1f25863add253c145c78a4f482490ea03bca2f63f3f983c94a5a19751ed168a00063cd58a1e275ec4249f0d239531f1f242aea1d6213fc171eb43261bb78ccec66628060e7b8a8530ac4e5d5c0c1aabbe9dbf585186743f287c9958589c9d497d659e074c7f2c0b8633450593e51347f75e5b8efe80d8b121c26e4fb0a2c674947888f933525d5017e0492c0a0590fdc60b45d32d98a65ad0fa8de00c295e0fe1a9e68aec55c15b6b66d85b7c3125dfe2e4474dfdf7a2ee31da248540c13123946682b9c4c3b3d62cfe38d1376a1865446ea82fc6956287bb7b95ef080e09202b46329eb99f493c022b2bdfc3ac5a8dc77b60ceb01e7b5a7426850c71d14de5a6c15ce0ec2748ef5b60f5aab6c66e12759fe6290c56e2ac975d6913695aad15852933367033ed27bcd8707fa8e7d434360823b56acdf20f043d70b0209d469a5e4564d21a9cb9e5ecf2e8bf277b423f2e501f778286d086b3d8706df250c7c35bafba07102c512ad57dab2b4eb059d7dfdb7a150f401685f74a9deb4e6a16d58c30a9a286c2d39c39c353cc10a7b0870a075d4b6d42c45a2ff44bc4100d30c5198eb84f2d40dc3bb77521d711ac379846dfd0e29bd6280afcbcdce7da36032946de869c3a4a4965a4d42ddf9a375439478d9ab673af523c773afb162c00ecf9527d1ee44a80a74509fc97b7c9889c6aae2ad2d0d10785e1bfbc7d45ab0c1d10263c16b6b497a3973b22f26acc518186251c2260b68ce0f834005049718f9417d333ea4ec7f90052ded5114386da1861213768ac4326e5042230af19af97c0c18b84dc30d8e08a701a90c544657bf4e617cc5e1b44e0e648283b7eb6968be4043176c3bd59e658264e3e17b892934acb8ffe95f946b858e5d08704fd18554a69de1cb10423269eeaaa9647c170706c09283ae27fd3c68455778ce97f839d7676ed220d6bb6e7c805066e51a7c02ab8ff62d8d709c5918ff4a840cd7a63aee5b4fde4d71d61b7d1ae3e31c270cced8e0a77a25d752d130b7b280323de7260bbf8b1d086de08c0ff6a1cb066f52bbcfeb30498503c7cf0db783f97dca3d127987e0484b5bf36a252e1488807e976d0dbf0046d8a04ae6785d5715fb8433bfd8515fca7c5e7346a631de66cd197b389e4e8767b63b0e43a80bbce74c419419ffa43b763c6223b8c52f72f5e1062c5fa25884cec439c5f443b0ea6afad3725b361abb774ad4a329dd041b91dd6258d04ae6994179fc0143c82ff73b75171134fa8cff4b335162d23d015be4106ade4ec99707201d21bc22525a3182b56785ec71aba5e8d0cfd1c8dac7158604c10fac5dc94d70ca99fe2977e8bdd76cc440897fe049f1cdff73616cc6572536c0c3acd76c58067f9d66d783dd8f8dc1d00eae3c30a3b2144d447f0af453e8bdf448622e7b5f00f1be410dd1b1f5e688477025c821831bcd77d8d592c82fd616efe4018bfdf4de57741956ebd5fae257fe22f8a0a22ce9b09c45ef7cd2ab99f2f427a9036dca3875e398686a6da58e1830da8a0834755855fbe318b7f8aa8562c8da1ddfa987e8a34a729c17e12a3aca3cb7ed31a4bb46392f823f2eb6621a91a6998a74986b7d9d553c723860442195757b5111c71ad7e6667c9149f61c4850ad84b3ba0d9f76d6f883d122802466d6ab645a5ae15054e32aafc5c954043dd6fbbf453bd2276bca841de02d5d4acc716e2acdeca0e1b9aba03763abdccb9e53f5ed743638e03350616af9f0c9cec77407461753754d2417c2d0cfc52e86f309d9d7146fceb351da1289adc5626c227fb52d20ca9d4d80d6ad2dbe8d2218da01054a1cb4be4e118c6ad1f0d4dc4d3baebd2ad35cdadc42502d8f9670ceb8160a63cdfbd9471c51c0026d75a62e53ded7da1b32688e8ad2a65570a75f0b39abfe6aeca975387efa5c1dcaf0d03bf2284fa0da53a4c0f2d24497b498ca2c69abb861a9c4ac32ea94e68415fa9d85cc5d9ec46672dcd362e7db109ce3a417c7123a10ad1a9f992ed013f5a9249c05dd6889e4c78457f584dcd8fab149009475056c020b07b3dfb0148da81ff375b3befe114957f55ff64a723f6dadfbe448ee272fc93f74b485e25bb6ade40092a21741b66429e80035841484b333a7fa4baedf3153560faf5a956b46d4e4232af6b13c5b8fc548c014b68321acda6474dae871e38e628aea170d181ad4d7a4a74af9859f418ecafdfeb01c10ffcc3db62b0184fc716a0240b5e15be0b6041374005c7ae61912092b7cfa319f05827869fa1710d21f3d49adc88f7c90e862425955f2c1f36f8fb4cbf8544c7234f25cb90011081734a26551999f49465ded9f6dc40ec0aadb5a4967d81b9a302c7492cd481fbe52c56d69dfa60cd7cb7379065049a5df42149bb64e15f183cbf60e601d478b40316402a72ddfde27264a96c82a2bce404224ef3cab6f25ea440fe84da9d8cd4fa5aad4cb8eca73e8c87ce0e65b286a849cab1b503bce5dc9c1323e2df7afeb67ef3b18e4f6a0ab5a0c078456271fb2848a96aeb1f1ffae7995f599ad772e3488371ad4001be78080083e8c08c1bea75adf0d5c4e2bcbd1b9b95238828173e94d7a8db5c402de31017e7af9bc0785f3768c4389bd778edaf81db086c942fbf36653be2e81d7dfced54328b247dad61c96c6003f07e6fb48652abea6ef647130f3c63e8b44731a09e0b64324c739073cc0c64108fe402ddcf077d6f45e6e26da192477d63391842adc9d9da21ac12027f6986df8d6f86979b22d3c1bd81289f5a34a2ebe10efcc104da196e7de9c0f70dbe10bb7a7671fb222bfdbe260f493d787a2ece89b6f96030c6f5a0a85d375356c140b1db09ff1b24ef8655f84fd223aa4954ac5bbe9699f71be6b57db32d517754cb6bf6fda7a7c8354bd5085ea9d251f87969d6190a1133c21b4e90f61352d45d18f1033f76659bfeeb6397051b0e6d6241e8210d40d2687669d52ca2599b49fb1a475b6fa86f2b5b4b122f308b66425c9e25338170cf920cc02d4b0c0f3374ef51906ee958e63ef811e8d2722c3470025288a291ef414633a01634e3a5ef6cf345509894223361adf8381dbf33a8b3832304348b42189bca77be9695ecba0c132368002b08cb6cae11f160b15d831f915d5b7a59e87e60a9a907e752d054be913d9e389084319828293f2a1dfad18870f837108400769f980ac7b4f2503548163fc3650748a313338e3ecd7cef23487318275fc57acc97ec2716cb0cda2027db9300114d1dbed6b68cccc7523be1548d94f5ded4fb8a2a3ceea867ab1b9dd674376d348d0b58b574c0a0292e72f85d2f0a55a9efe6a4e223cce9c9599bb348382406fbddf32d6e8baa5cb49791001a3dac9886b56a5e1febd39084913bb3befbb77944437c6858e1665af4bdff57b6f69c91a22d5160f6b2e0d274ee6c91e270e8177b6f5efadcdb57383e4c123ab715dea1a0b677424b495d8408861e6b1177cbbeebbd68e19a76d2d452b645231f47f60b757e17f61f9f39467f0e2326ff8f955dd9da1e6ed10c84180e2e75df811279f1e56a31223d0c6a75a2ba81b6edec91781b1351cf7e0cf750aea75001c78f83930c7d49f66ced1dafeadf8f5e9cdf529586d65d05ff6bade4a7e3ac3464cab7840f0e1e1298e014fab68849399f65490f6c50c01db617fb04b7a0e88417f532c1142dfd3c1fbb2568fd5081c9b99", 0x1000}], 0x2, &(0x7f0000002d00)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}], 0x80, 0xc800}, 0x85) dup(r0) pipe(&(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xc80, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r8, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="fffffffe00000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB="080bc4fe636bf23112e27d8779eab43c52fb1ccd85f41a12f5604cc91018c3bd321d126b0d9915ee3428116d763140576926fea25b60e25bafbb96a7fbb0c83c31e2f7183457a0392be037c27ae4b32a82a89841262b6cfbe75d6f5086b517b332ca9a43914bf7e37ba70b9cd7403bcaf83448893320005263aa43db7732cc52713fd9a6c56617aea9feb99ede3a0c97ccee6f96e002007818ba3bd426fb0cd3c37ae8670eb4c9dd9702ccc0182fe4e52a9f84b9849841f50fc2dd46f649d64eff7874a11d4b7ca0489d9de18a343b3cf972b3d42ddcb607706e4c07de47573e8b5554e323803603d3d3", @ANYRES32], 0x44}}, 0x0) [ 473.992274][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 474.044173][ T9831] device ip6gretap0 entered promiscuous mode [ 474.050456][ T9831] device macvtap3 entered promiscuous mode 14:15:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r0, 0xb9) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x80040, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000001c0)=0x40, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000140)={0x0, 0x1, {0x1b, 0xc, 0xc, 0x1f, 0x7, 0x5, 0x3, 0xee, 0xffffffffffffffff}}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff1100000000200000d8000b4824ca805f64009400ff0325010ebc000800008020008000f0fffe00e809005300e21e9fb9000010000100020c10000f00000000000000", 0x58}], 0x1) 14:15:10 executing program 0: socket$nl_audit(0x10, 0x3, 0x9) r0 = clone3(&(0x7f0000000340)={0xc7002000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='map_files\x00') lseek(r1, 0xffb5, 0x1) r2 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/100) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)=0x1d) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x1, &(0x7f0000000240)=""/25, &(0x7f0000000040)=0x19) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000180)={0x800, 0x6529, 0x0, 'queue1\x00', 0xd0}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000140)={0x0, 0x2315, [0x80000001, 0x0, 0x9, 0x8, 0x4, 0x1]}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = gettid() clone(0x8003400, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(0x0, 0x0, 0x0, 0x0) 14:15:10 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8000000000001ff, 0x8000) r2 = socket(0x10, 0x3, 0x0) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0xeb, 0x40, 0x3, 0x0, 0x53a, 0x3, 0x6, 0xa9, 0x16c, 0x38, 0x1d, 0x7, 0xfff8, 0x20, 0x1, 0x7, 0x7, 0x6}, [{0x3, 0x3, 0x6, 0x2, 0xb0ded679, 0x7, 0x7, 0xffffffff}], "1ff41c30f049b6136dd94f96747b7bc7e32b75f7736d0b", [[], [], [], [], []]}, 0x56f) r3 = pidfd_getfd(r1, r2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000009c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000a40)=ANY=[@ANYBLOB="24000096860018caa096ebb3705fcdd1e6179427ff956ff755851d431b95de86957b48ec1215daa3f5718f436334eca96dad2a81fec135ea52d6fb9b2dc7d2a54aabbd834089124f6623986856f728b8076b985b399cacc603728885d601eb14fe17149892b6367c5837524ae7cba02689f78252fa185a7a331dfa1525027d5e823ad7a793138f80a5a031cfde0d51d47e9f0ebaee46e1454ddac5dfde862f08355c9e28fc36cd91fb368ee7432d68a83341fa5d6580b39edf7bc7ee1404b6de9ce81a84e66b43a4c7421d0a45", @ANYRES16=r4, @ANYBLOB="080029bd7000fddbdf251100000008003a00f91b00000500330002000000"], 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20008000) clone(0x8100000, &(0x7f0000000140), &(0x7f0000000180), 0x0, &(0x7f0000000200)) r5 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000140)='/dev/vcs#\x00', 0xfffffffffffffffe) keyctl$assume_authority(0x10, r5) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a00)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, 0xc) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000001c0)=@buf={0xe5, &(0x7f0000000800)="1112c5fc1721903f89bd579b948017a5bcb9892dbff1e3b13a38d35b763c91ff26b13f98bbbc197d1be1be4001476d0cf1f87a8b882bcbc49c7c27faaad8f05765d3e0682f5dde120656b4ac9c5c3012c6dbe23ef5d942562a65025a4d4e69ee8bcddae772bc35acf993feca6ffee4f6828d1957dcd8042916794a3f288dab0da6cf9a3a2967c6ea4557318ce2791b4c48cf8cbb73574695f69e4e46089545f4abe91ea1c600864a63c626065d4ca2d9b2eeae9202385ad83a28b8f2285f258712da1fd8ae74da311b0dffa30f007b177ff0e9853b3ee3b9abba4c941c6751589e1fc3cd63"}) [ 474.589817][ T9845] IPVS: ftp: loaded support on port[0] = 21 14:15:10 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x1000000) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x100, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) sendfile(r0, r1, 0x0, 0xeefffdef) ppoll(&(0x7f0000000180)=[{r0, 0x240c}], 0x1, 0x0, 0x0, 0x0) [ 475.112606][ T9845] IPVS: ftp: loaded support on port[0] = 21 14:15:10 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x6, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000041}, 0x20040000) [ 475.293091][ T8485] tipc: TX() has been purged, node left! 14:15:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$isdn(0x22, 0x3, 0x23) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) epoll_create(0x15f792c) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r4, &(0x7f00000001c0)={@val, @void, @eth={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @empty, @empty}}}}}}}, 0x66) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x381, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x2, 0x1}, 0x10) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x18102, 0x0) 14:15:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000002c0)=ANY=[@ANYBLOB="4600000047db601e88027ed206e5550100000001abaaa7b79632c5f50caf8af9b2b31574b1f01aebd2c5ff8f9621a4e7aed2bb1dfd669e8e83d6c944bc73d1c60e0e6d70a00f29bc495ba0be96588b361382316b07363a07dd5249f340853116b9f670dcff2ef937eb93a5d5b21fdde6b97b24e24a78e457e09e7976b8b173be5e43a24bc954f1070a0ddc7a0f7d2969211cb562d53fecc4f479dee58d440412a538b51b0807f5bb824b3d89af33f2e588928029f942b9c48c9fb3aa96ca2f59ef790f55684792eeab4b78e44527cb0597c421719626a273a4e62425dd5c80e589a31322e000c4837de6dee71328f5ff97"]) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x3c}}, 0x0) [ 475.766796][ T9912] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) 14:15:11 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000fffffffffffd00000000000086dd60bdc8ae00611105fe8000000000000000000000000000bbff02000000000000000000000000000100000000004890"], 0x82) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x18102, 0x0) 14:15:11 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xdc, 0x4c, 0xf5, 0x40, 0x1bc7, 0x9010, 0x1821, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x0, 0xbd, 0x68, 0xe3}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x72, 0xf9, 0x7d}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000080)=@string={0x2}}, {0xb8, &(0x7f0000000180)=@string={0xb8, 0x3, "8e58e0db4e92f306fca4ec48e0be127461650b55b07d9e6602ab08dbbaceaafa32f53943b6dd621b42a177f968f4d1e31cb05484d0461c746b73e650243d603967e573f554a5b249157c0f94753aa6c077f599eca8ebdd71daae48122ab28efbe86c3699d20092753609f1ca075b24a2eca0d14b39831d8133cd0f72a8fd9e297a9dabbcaedb9220b0b2e6ee21dcd97d1fb910aeee64fa365adab814b5883e362cc07837209c0c16959b90bb7dbd32ba031ad32eacdb"}}]}) r0 = socket$inet6(0xa, 0x800, 0x3933) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) [ 476.387617][ T8704] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 476.748275][ T8704] usb 3-1: config 0 has an invalid interface number: 186 but max is 1 [ 476.756821][ T8704] usb 3-1: config 0 has no interface number 1 [ 476.801327][ T8704] usb 3-1: language id specifier not provided by device, defaulting to English [ 476.928041][ T8704] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=18.21 [ 476.937385][ T8704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.945510][ T8704] usb 3-1: Product: syz [ 476.950037][ T8704] usb 3-1: Manufacturer: 墎鉎۳ꓼ䣬뻠琒敡唋綰暞ꬂ캺着䌹᭢ꅂ亮뀜葔䛐琜獫僦㴤㥠ꕔ䦲簕鐏㩵삦燝껚ቈ눪ﮎ注餶Ò疒श쫱嬇ꈤꃬ䯑茹脝촳爏ﶨ⦞鵺벫ₒ늰緙뤟긐擮㛺ᒸ袵㘾쀬㝸鰠ᘌ鮕뮐뵽먲ᨃ⻓ [ 476.978508][ T8704] usb 3-1: SerialNumber: syz [ 477.097064][ T8704] usb 3-1: config 0 descriptor?? [ 477.142928][ T8704] option 3-1:0.186: GSM modem (1-port) converter detected [ 477.159107][ T8704] option 3-1:0.0: GSM modem (1-port) converter detected 14:15:12 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000018105e05da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0xffffffffffffff3f, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0022220000009623137502091fefad48c2c206e52a90d07a9de420d0bdb29f2a3d15567ea8647894"], 0x0}, 0x0) r1 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\'!\x00', 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f00000000c0)='\x80^+{,{\x00', &(0x7f0000000100)) [ 477.342045][ T8704] usb 3-1: USB disconnect, device number 2 [ 477.349990][ T8704] option 3-1:0.186: device disconnected [ 477.359879][ T8704] option 3-1:0.0: device disconnected [ 477.686667][ T8702] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 477.927364][ T8702] usb 1-1: Using ep0 maxpacket: 16 [ 478.048033][ T8702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.059416][ T8702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.069486][ T8702] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 478.082699][ T8702] usb 1-1: New USB device found, idVendor=055e, idProduct=07da, bcdDevice= 0.00 14:15:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000380)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x80000) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000b40)={{r2}, "18cf1bcd4ac628eb14c9ea666b2f884357e8b0a005c36daf3ee074bee52746b4e0daa28ca8871cfd4e57ce8368139515d92364723f136a820187ef1a6b3a438f2583ad67e77001a13eea439a3476d7ecac5a2f6d5236e8987b53e5dc1ebb8218c0e29af2b5abb6039b265e2f62f296bd7235c36aebd70e02c63cbf7893e5de3d8874eee393bd9ab859c013d52c9024291919d7d0d8f67bd2e502e224bf8710a16fc189ec7cd4301f2b291afa6df2c34366063664fd45e5ccff8182ad065a46dd77a88641bf85d069774bfb6c7b4c4064342aaab7d7095cb4b2110b4da8ca83557fa957d30209df29c5a06fe67da6f01018340faa397b4ff47395f37ab0b3c5baa0329f9b46efab56b2232f1d6c4694eb194adbfc2373ea5cb23af04406b6541af0eaf267d1e28bd4f626819daa8eca9da5fdbdc1dcdbf4887103672a6bc258a98dd89348a61b0ecd3c338568eca8511d7a0e78e58ed0a3c5d9241da8fcd6d890a8b536c88f8c88c85609d780ccd85d813762e92a7b029674c703842d5b0465bfd17bbd8947007ce92742d471eb688f0aba2b9b98340902c0c387742be5480ee470d2b7ad42e119d268dcc3e72bcc548ece93911503d1607cc87c52ac0523582479a62b0196c10e18f05be02128fbac0e2917bc9df16048e2d8cacb81234030a50169276c640ffb2b5b6a51b64b8cd9c0f578ed57aa5150bdded1c1c58f7ee87ca0d915acff15581932abe2c78e57ce5f120641d752852e2f73d0ff37331e0b4a965f25c065d4a2c5aae06b0e543f6e4712131e4d01a16309c899c18cf6d8a7661a88ce8d5591d974927730e86b6818423dc229a1485e88065ee89e2c5308a169ec96dcc2acb6bbb88ec38b89d8841a307959563b8bfd3cc6a9cac8bca8138d3d5bdaef91b297ffe4cb9687ed41f0193ee236eefc9db1827e71165d40ac2ff8b48e6892830836ab41aa0722a8a2bc35bb3fa0400ae42a7995264eb9e2a2ade41570698646c0b9d5fca227acb59e9be0ca5a3d1116d8a4c4d555afd474070738358218fb4f5b8b19a2a3ec9ff812486949bfd939ff63dfe2e02e3d8f103d5c2d48817f656a2cda707be7f9cc2fb852c24e83d73e12f1e5e2589ab559e921d53445079848015c22eea57b6e3c7b8473833f754017fcc9c18955d6b62d14d9d794eef16ae62156e0cb29aa38803f32e6e8c09a2a330708a4854c0985f1e09c3023b974dd5d7091f3b53b2a8e060a73e7f3bab4c792ff3696136ef27f08923f2c9f0b1b6cc1271d16d233ed2a68734b72b0323b199ccb6ca61f71e833c1f2b0999aa716767f9417ab7ebfb1f67f4ae9fe4c73c3064d2153acfb8566c8af1e7f7a4ddd707568d0976cf3d09efecf85bbff2f1c785a940148572d9dff275407b9035bb24617c65816548eeb182a21bfdc9612f3601eb02f595e4bdc2a17178440202dda1c77867ce17cb24bbdf225badc92eafcdc1294683c8c5739f83aa5d15311763bf5aed8d4d400fed2b47ad682e5cde35d5dc4363961a505c76f46f060bbb41984a99cad7b0cc4ede4bf276c79a0b3978966dfc19173a79ea9fb6cfe0fbd1b63899ab0d6331d61beb8f8ec4c80376b9035bfb6b4aff5bf23280b29c639297f32891ad987f7d4d85cbd4e5e8e5cd1ad74b21f3ab9c2c881209accafb75e4bf3d8caba09a6f15d451bb1e9181c2c5bc9dbd76a4017c7f2a0b2dca84f23d2528a6738099fc9f9d70f648a49f15188a399abc737c7b0f4cdd3329c9a67ba7898483d8bf767eb4699483cf933861596f8d3423de83414630999d3ff02766bceeed44ba05bf3a1b96505a0f6e34cbfb94175db6c7b5c826aa65a11d99a76d4c767c1a75b66625855221189fa61a4ef436d33dcd17806c5b17999d6548289efdd891d026575581392c47a48a8b30f3f03a825fed95ee39b105beea51c224f37a9d5cefb1908cc4aee6ce42285a2c79bb6618069e660d8c2c818ffb9586d51d66e566cb098ce08b711d2e4649e9748a44aadacbfa7ca31d651b95d2e33747c726734669b661c065b10a394aacad34deeea4433b373f4ee10af95e3922536daf9b95d7e8250b5c7b0a8bba8dbdc6bae5a97ba45451c009b9eff90eb7d5709518491b442a4c733f8eece0aa00620c602da06ea497a78a4933358edb8b9242df478c62f927b59b468c92c0f885984f681c054cc3b470ea7a914f465618a06be936b3f348f534ce1e32d19d7992ab0d76afc8fc797dd1fb5fa64a0ac50ae8822b6aba847c9e522e83f5edc060785ef7ea348cc739b11638426886df10f5772bfcb947f23d5001a51e45f7c8d0e3a620e4709143bc0cbd82b9c35867ac31d1bc04799efc8d8bc5e9439ad97c917d16dd343d3bb3c3ac90e5c054119b6d7acd4e588a860ffc731684377ade316a641ee5ae0f6121bccef0245de97cfb7413da537d15cac05a7bd4d23cb212d10549b8a12835b3124edb442076977a667ded0e60531e78416eccf5ff5879373d8eca9ccb597ae563e29f5c301edbbb7502b3bd3cf7e6125fac21435814a84909d096aa23d4921d38f0b6ae599cb2fbcccc16501d4195412df337351ad70a2ec03caecd4f8101b0ed8df578a1392d7fbed0935c51892e295d80522d487a141fee9e849e20f374ca37c8906ce57fda36875d9068765ea7137a1be3b6c5725dfee7291063bbf7f84d6f5ff417b77d34f05d79fe7d4d9e30f71d5e31c313b83f1579804bd7fbfaf8b0722a4a9356559ea2630a06b54f6c2215cd93e9f3e6770980594fe7f60e4248b5085fea08f4bdf8808d1bbc3633d928acce116e5f8cf8fcc03b3dac7e06dd388be2c6f8d1d26e6943a2dc9ac08dce8f2b19dd585834abf7a498acc7c682eaa7b9530d5949a91ccd84dd0061f1d4928ffe3bcda8f11c95dfe5e4bfbf60e20bd68a559ad36092392f91a73302ea17d37027f52115b1fad4a73ea64a79dd0af2fb10f58254f73ec4c7033d88121f6257ca1d0517da78a830261e29bf42afcc8f299ccde527dc667baf92fb6a30c76d788fd7b36f7e3bb372029b2f1ce5efc09253e3d73e9cde2166b194450fc97c5ce2abeb865484b225fa4ed269f024fbe3ed573d608b303d22ba0249ea7478cdf356b58d3d008c79274c436f12eb58feaf83f8f95f8eaa22464efdd8915eb713f2b78a4ae258619f274aa5c16160c1ed2ab46a7c68cacef1195041547c6d1f5872806c25096e8ce2257d37d5d51fe37804cb0a32eeb67e3e2898bd8312137a162f0d70a7b5c623dd8123eafeef412f57afd3f3b1aafacddd5ef612cb5a089a12ddf7d6a6d4d17fb59d445c0096e0fba4125d868266d0754638824f1dac9358ea30197b3c8fb288545fb80c0481f814dd78dd4d3e0fa4641a8783eb9b20ed6c8f97a2918938ff288ff11ec4b973821454ac0f95b8d86a0dc7d8666dcf57357d032165e381e71e73a7b53b8581c0f3cd18fd5ea399798bcd35fb537a0da30d5c86751216a4bdb2a878a736c9e0e86f1299c17810fd45cd7d71e8f172cabcb343df4d4697730543357f94944de4f1b1b2730beb04f99ae660190c5c3b034b5fee0f7b5bab87ca9a8dd2a95875bae4b8450b537b40ee5f53f1d337c42faaefdbd532e436e0d7c6d8ba64a5221916d30a09785867b279079fdf289b79b4781aab776320d870b1c3195a5ac64bc64df90686a0e00673b96dddb35223f697fedd31b189729178a06fcf38a9e22036e7ca7469dbd4d7d2ce39d90c21612d4cd914f3f9f96ff8db78fbb89580b06769d04ad04e4e9b7e3cf7241c5fbac910a06bec767c2c381c278ae9fe2bf8ac7f951419c11287f61c86d9043c15b27c7c3ec309d3032f70c76bb8a153f47566116193bcf5ad2905aeaed499e59f1ef456d9c54b19367002415fc45cb40920e3eb8c91e7a2931461a13a7ea1921166d6562882e4cb3e0f55a7d68b4e2fa896135b2ea4f3705bd1fcd2991c02fac7b09cab92503f5d86485208f87deedbcd292f7b23328638da74b6ed20305670faf0b3a2faba659a1dfc2fe2a2a4c1693ef663314b15d8dc8892179b44e98c921a63ab17a032bb185f09215c3b8d17fabfd8cf5bdc7d1ec0b9b6447cd45756ddfd5132afa348fb348a88d9458f98946db68d454c2c3c1a344ba9cd63aa8673c985e486c332c3e8e4e32c46621511c893d1fd0f1511474cd82a8e79ce9e9e6b5f34548afb9d41a762bb52a16159068b8c80756a7870b0bb2eb08c0cbdf57b5d157e8c0951ac8281197544db9737d7d3c265802db9004d476f7dd27fa80a283e5a8bd18751bae3d754a5c48a4523219d1539c6926be7f986a1d43b6e094150171b5593e98d68d1b24ff6d0e4038746cebb736ee7668c8acf41e747b062f63e4b5c5da61a9245efe5da1827cb5e6025738be09f84f187fc6c280d29e724dc4d8b31823b52ae349675c6ec03fdb3130f741a64b3cc20c284faf013a274623a8ad119ddf7acef06bc58e3f3adfd25449b201132a2734bb6864304acd2f08bbe973873864206f9b436d791a76c724e257dafde145c304d113bca6f85d322ca1b82ef7be5f5f3a713ee890e519d2fe26f0e5d93f92684b1d357c6013e802a843f92ef97bdf192b75185a4b5182074e836f123e2962ef37331f762cf6800c3089e5bf4338d3ea0ce14fcc3c38ba5fea732e4266a5328512c75c4a4f9dcabd1011e376da2c7a642c12ee1dc89d144f2c9b1e2a41b90cba55b2115c76f68fc8f82e8213c6dca67c5b12bd793f5c1f999103742f2447d4191a7342d9278fe89c905cd01b784e2b6f5bd846cb7aa2762d1cdb01a6d23d7959671533806d198d8d686cf260a3bcb016f6e70f1d2714865bb6cd029669e42fd72d0219cf52368aa8b1d659b1c2b01e6457e062c106100dcb5a3208ff06769e983521f9d136033bf07b727a20fba41cf63d08fcc442968a73f5e47338daf54a551c01422af42b4a619f449c5dc5af53bd637fade8c409a07c5ba1cd3f09615034dcee37bc9f05ee5842f6eaacab9d72cf226371aec55ebae72e81a56efc6309c43b21561c4ee51f5748d459e435acede23ee7e1d27604c8e1d2a07a9c3fe28322eb371ea109d15de02f8450f0822a79a2d51eda23f4ca44493b76acbe391ede810c60e733701d83191934865ad8e1604934c8b1b82383d78cefc276a26f15b8522dda70b1e9bd5856c131dd735b2b7c112ff530587fda28cec6dcd9dd17daab267ebe94043c9c8f8c8a1ab1b75b4345d9fb8b007770d4b23f8eb42d926fcca96d7dd6a72441d8ae80181e0bbc182a2cc97b7e89563ff6421721ac6abcc746e0df036657acc57dbed1979e9285d5ba6f194588c6d0692e0a1db6e9f79d70efd68879cbe3dd339238a938441554776e82bfcf1f5bb0d615cc133a9ad1e88ef06076a1352018a62391e688e7b09d2c5bc243357a09e60268b71e7d39b93324c8143800736342e55e077024ccce74171efcae98049269f28bd8ab639f968f1ae419b0d5f594071975d774d22036f0f60d09eb635b2c236c2b7c6e8d4776ed000b66731090130156ed41e79ed33851cfe979e4641cf8394efe0d85f2e05c1e2c68e6d2c44152a64f0ea321fd48f09fb9be5607393c37d3605c352190ff49d5ff2f5d604d3e6428065871439c5fcfa6e19b3b0445c3a221c6b806cb5c1ac4ddf9928493deaefef66fcd84aa84130d0e78775dd6c713837fc04bd8749f9934fb6905919c1b5f571806f4d6bcf3109aba4d8e542e68db8ceaee415d92dc40441ccb1606b7e1c9f192b312064885b5bbcc8cabe79e7f9df962ae319687"}) sendto$inet(r0, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881) [ 478.091983][ T8702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.206938][ T8704] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 478.295312][ T8702] usb 1-1: config 0 descriptor?? [ 478.567932][ T8704] usb 3-1: config 0 has an invalid interface number: 186 but max is 1 [ 478.576554][ T8704] usb 3-1: config 0 has no interface number 1 [ 478.619544][ T8704] usb 3-1: language id specifier not provided by device, defaulting to English 14:15:14 executing program 1: mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x7fffffff, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f000034f000)) migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x1901) [ 478.776342][ T8702] hid-generic 0003:055E:07DA.0001: unknown main item tag 0xd [ 478.784894][ T8702] hid-generic 0003:055E:07DA.0001: unknown main item tag 0x2 [ 478.792759][ T8702] hid-generic 0003:055E:07DA.0001: unknown main item tag 0xd [ 478.801769][ T8704] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=18.21 [ 478.811072][ T8704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.819301][ T8704] usb 3-1: Product: syz [ 478.823650][ T8704] usb 3-1: Manufacturer: 墎鉎۳ꓼ䣬뻠琒敡唋綰暞ꬂ캺着䌹᭢ꅂ亮뀜葔䛐琜獫僦㴤㥠ꕔ䦲簕鐏㩵삦燝껚ቈ눪ﮎ注餶Ò疒श쫱嬇ꈤꃬ䯑茹脝촳爏ﶨ⦞鵺벫ₒ늰緙뤟긐擮㛺ᒸ袵㘾쀬㝸鰠ᘌ鮕뮐뵽먲ᨃ⻓ [ 478.853885][ T8704] usb 3-1: SerialNumber: syz [ 478.946231][ T8702] hid-generic 0003:055E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 055e:07da] on usb-dummy_hcd.0-1/input0 [ 479.002049][ T8702] usb 1-1: USB disconnect, device number 9 [ 479.049236][ T8704] usb 3-1: config 0 descriptor?? [ 479.094023][ T8704] option 3-1:0.186: GSM modem (1-port) converter detected [ 479.125460][ T8704] option 3-1:0.0: GSM modem (1-port) converter detected 14:15:14 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) [ 479.209811][ T8704] usb 3-1: USB disconnect, device number 3 [ 479.217712][ T8704] option 3-1:0.186: device disconnected [ 479.226629][ T8704] option 3-1:0.0: device disconnected [ 479.746500][ T8702] usb 1-1: new high-speed USB device number 10 using dummy_hcd 14:15:15 executing program 2: r0 = fsopen(&(0x7f0000000080)='fuseblk\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x10000}, &(0x7f0000000040)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r0, 0x0) [ 480.017288][ T8702] usb 1-1: Using ep0 maxpacket: 16 [ 480.148414][ T8702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.159574][ T8702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.169742][ T8702] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 480.182856][ T8702] usb 1-1: New USB device found, idVendor=055e, idProduct=07da, bcdDevice= 0.00 [ 480.192159][ T8702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.311609][ T8702] usb 1-1: config 0 descriptor?? 14:15:16 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x4000003) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r1, r2) 14:15:16 executing program 1: syz_usb_connect$hid(0x0, 0x6, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x501a, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{}]}}}]}}]}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000300)={0x6, 0x1}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f00000002c0)={0x9}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000280)) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00g'], 0x0, 0x0, 0x0, 0x0}, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v1={0x2, "f6778f3253ffd1450cba787b088b82"}, 0x10, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xae}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x575f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 14:15:16 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r3, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000004c0), 0x1, 0x0, 0xfffffef6}}], 0x1, 0x120, 0x0) [ 480.635155][T10024] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 480.647403][ T8702] usbhid 1-1:0.0: can't add hid device: -71 [ 480.653717][ T8702] usbhid: probe of 1-1:0.0 failed with error -71 [ 480.801195][ T8702] usb 1-1: USB disconnect, device number 10 14:15:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x541402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x800401) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, 0x0) clone(0x2000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x4, &(0x7f0000000000)=0x3, 0x4) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x310, 0x0, 0x98, 0x310, 0x0, 0x3e0, 0x198, 0x198, 0x3e0, 0x198, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf0={{0x230, 'bpf\x00'}, {0x2e, [{0x5, 0x1, 0x0, 0x1000}, {}, {0xfff7, 0x0, 0x6}, {0x3, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x558}, {0x70}, {0x800, 0x0, 0x20, 0x1}, {0x0, 0x0, 0x0, 0x8}, {0x90, 0xcb, 0x8}, {0xfffb, 0x5}, {}, {0x0, 0x7, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}, {0x3f, 0x8}, {0x0, 0xff, 0xff, 0x1ff}, {0x0, 0x0, 0x5e, 0x7fffffff}, {0x7}, {0x9, 0x0, 0x7, 0x3}, {0x0, 0x0, 0x3, 0x7}, {}, {0x3f, 0xfa, 0x7, 0x101}, {0x0, 0x0, 0x0, 0x2}, {0x10}, {0x0, 0x14, 0x7f, 0x4}, {0x5}, {0x5, 0x8}, {}, {0xae, 0x3}, {0x0, 0x0, 0x0, 0x8}, {}, {0x80, 0x0, 0xde}, {}, {}, {0x3ff, 0x7, 0x66, 0x10000}, {0x0, 0x0, 0x0, 0x1}, {0x3, 0x4}, {0x0, 0x0, 0x2, 0x2}, {0x8, 0x8}, {0x0, 0x80, 0x6, 0x5}, {0x0, 0x3f}, {}, {0x3f, 0x0, 0x3f, 0x1}, {0x0, 0x2, 0x0, 0x1a52}, {}, {}, {0x4, 0x0, 0x73, 0x800}, {0x0, 0x0, 0x80}, {0x0, 0x4d, 0x1, 0xfffffffa}, {}, {}, {0xfff9, 0x5, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x4}, {0x7, 0x5}, {0xb7, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0xd9}, {}, {0x9, 0x3, 0xfc}, {0x0, 0x4, 0x40, 0xea47}, {}, {0x0, 0x6e, 0xcd}]}}, @common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'lo\x00', 'veth1_macvtap\x00', {}, {}, 0x21, 0x2}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "d652"}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4d8) 14:15:16 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0xffffac35, 0x8, 0x26d, 0x81, 0x4, 0x200}) get_robust_list(0x0, &(0x7f0000000380)=&(0x7f0000000200)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f00000001c0)}, &(0x7f00000003c0)=0x18) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x1a3) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="91fe", @ANYRES16=0x0], 0x34}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @raw_data=[0x1, 0x2, 0x3, 0x0, 0x0, 0xa44, 0x100, 0x4, 0xffffffe0, 0x6, 0x7ff, 0x0, 0x3, 0x1, 0x1000, 0x80000001, 0x2, 0xa, 0x800, 0x10001, 0x820e, 0x1, 0x9, 0x54cd, 0x4, 0x7, 0x8, 0x7ff, 0x0, 0x80, 0x5, 0xffffffff]}) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x0, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r1, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001140)={r1, &(0x7f00000011c0)="d2", &(0x7f00000031c0)=""/246}, 0x20) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)=0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000040)=""/149) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 481.043882][T10040] xt_bpf: check failed: parse error [ 481.150259][ T8704] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 481.163284][ C0] sd 0:0:1:0: [sg0] tag#5270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 481.174159][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB: Test Unit Ready [ 481.181130][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.191049][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.200997][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.210990][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.220866][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.230761][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.240638][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.250529][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.260405][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.270291][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.280214][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.290079][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.299964][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[c0]: 00 00 00 00 00 00 00 00 [ 481.399960][T10044] IPVS: ftp: loaded support on port[0] = 21 [ 481.953022][T10068] sg_write: process 51 (syz-executor.2) changed security contexts after opening file descriptor, this is not allowed. [ 481.978014][ T8704] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 481.986510][ T8704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 14:15:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x1, 0x40040) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ptrace$setregs(0xd, r1, 0x2, &(0x7f0000000200)) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0xffffffffffffff00}, 0x4020, 0x0, 0x7, 0x5, 0x2, 0x7beb}, r1, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000100000000000012"], 0x1}}, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0266000000030000000000000000007663616e30000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c1) [ 481.997795][ T8704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.008068][ T8704] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.40 [ 482.017739][ T8704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:15:17 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x5, 0x4, 0x7, 0x3, 0x4, 0x1, 0x7, 0x2, 0x6, 0x0, {0x10001, 0x7}, 0x6, 0x40}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000801010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000c, 0x4000010, r3, 0x100000000) r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) fstatfs(r4, &(0x7f0000000180)=""/3) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000340)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) accept(r1, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80) [ 482.055504][T10068] IPVS: ftp: loaded support on port[0] = 21 [ 482.155365][ T8704] usb 2-1: config 0 descriptor?? 14:15:18 executing program 0: syz_usb_connect$uac1(0x0, 0x9b, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}, @input_terminal={0xc}, @selector_unit={0x8, 0x24, 0x5, 0x0, 0x0, "de7bbc"}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "fde7d09e56"}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_FP_MODE(0x2d, 0x1) [ 482.422602][T10098] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 482.433485][T10098] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.2'. [ 482.641197][ T8704] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 482.648345][ T8704] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 482.655341][ T8704] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 482.662528][ T8704] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 482.669637][ T8704] kye 0003:0458:501A.0002: unknown main item tag 0x0 14:15:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x400001, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xa0000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$FIONREAD(r0, 0x5423, &(0x7f0000000000)) [ 482.697857][ T8704] kye 0003:0458:501A.0002: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 482.709218][ T8704] kye 0003:0458:501A.0002: tablet-enabling feature report not found [ 482.718983][ T8704] kye 0003:0458:501A.0002: tablet enabling failed [ 482.828688][ T4861] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 482.845586][ T8704] usb 2-1: USB disconnect, device number 9 [ 483.076642][ T4861] usb 1-1: Using ep0 maxpacket: 16 [ 483.198007][ T4861] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 483.208777][ T4861] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.218039][ T4861] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 14:15:18 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c0bb9b40b72040158fef00000001090212000100000000090ef58e7906708329"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000140)={0x1, 0x0, 0xc5}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x21, 0x1}}) r4 = gettid() ptrace(0x4206, r4) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rt_sigprocmask(0x1, &(0x7f0000000380), &(0x7f00000003c0), 0x8) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={r4, 0xee01, r5}, 0xc) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18010000", @ANYRESHEX=0x0, @ANYRESOCT], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x21, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f00000002c0)={0x1}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0}) [ 483.387606][ T4861] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.396972][ T4861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.405057][ T4861] usb 1-1: Product: syz [ 483.409516][ T4861] usb 1-1: Manufacturer: syz [ 483.414210][ T4861] usb 1-1: SerialNumber: syz [ 483.647264][ T9174] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 483.707525][ T8704] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 483.808406][ T4861] usb 1-1: 0:2 : does not exist 14:15:19 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32], 0x0) [ 483.866269][ T4861] usb 1-1: USB disconnect, device number 11 [ 484.009079][ T9174] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 484.018386][ T9174] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 484.028175][ T9174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.078141][ T9174] usb 3-1: config 0 descriptor?? [ 484.526795][ T4861] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 484.598665][ T8704] usb 2-1: device descriptor read/all, error -61 [ 484.768514][ T4861] usb 1-1: Using ep0 maxpacket: 16 [ 484.774016][ T8704] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 484.897476][ T4861] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 484.907963][ T4861] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.917193][ T4861] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 485.090377][ T8704] usb 2-1: device descriptor read/64, error 18 [ 485.228893][ T4861] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 485.238506][ T4861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.246779][ T4861] usb 1-1: Product: syz [ 485.251030][ T4861] usb 1-1: Manufacturer: syz [ 485.255807][ T4861] usb 1-1: SerialNumber: syz [ 485.508425][ T8704] usb 2-1: device descriptor read/64, error 18 [ 485.626839][ T8704] usb usb2-port1: attempt power cycle [ 485.688800][ T4861] usb 1-1: can't set config #1, error -71 [ 485.705549][ T4861] usb 1-1: USB disconnect, device number 12 14:15:21 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x15}, [@NL80211_ATTR_IFINDEX={0x4}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) [ 486.327936][ T4861] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 486.367258][ T8704] usb 2-1: new high-speed USB device number 12 using dummy_hcd 14:15:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'\x00', {0x2, 0x0, @loopback}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) [ 486.494754][ T8703] usb 3-1: USB disconnect, device number 4 [ 486.536434][ T8704] usb 2-1: device descriptor read/8, error -61 [ 486.576307][ T4861] usb 1-1: Using ep0 maxpacket: 8 [ 486.697457][ T4861] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 486.705650][ T4861] usb 1-1: config 0 has no interface number 0 [ 486.713327][ T4861] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 486.725618][ T4861] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 486.735856][ T4861] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 486.745874][ T4861] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 486.755142][ T4861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.792680][ T4861] usb 1-1: config 0 descriptor?? [ 486.818274][T10164] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 486.825816][T10164] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 486.889554][ T8704] usb 2-1: device descriptor read/8, error -61 [ 487.157187][ T8704] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 487.159961][T10191] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 487.245505][ T3223] usb 1-1: USB disconnect, device number 13 14:15:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000280)='U', 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000480)='asymmetric\x00', 0x0) keyctl$chown(0x4, r1, 0xee00, 0xee00) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002d000511d25a80648c63940d0224fc60100009400a0002000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 487.327142][ T8704] usb 2-1: device descriptor read/8, error -71 [ 487.537002][ T8704] usb 2-1: device descriptor read/8, error -71 [ 487.657171][ T8704] usb usb2-port1: unable to enumerate USB device [ 487.664113][T10213] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 14:15:23 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000000c0)={'bridge0\x00', 0x1}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 14:15:23 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000001c0)={[], 0x9, 0x8, 0x0, 0x0, 0xa80c, 0x0, 0x4, [], 0x10001}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_freezer_state(r3, &(0x7f0000000000)='FROZEN\x00', 0x7) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_EDID(r6, 0xc0285628, &(0x7f0000000100)={0x0, 0x7, 0x7ff, [], &(0x7f0000000040)=0xe8}) r7 = dup2(r4, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x801, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1384}}, 0x20}}, 0x0) [ 488.028085][ T3223] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 488.267591][ T3223] usb 1-1: Using ep0 maxpacket: 8 [ 488.404727][ T3223] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 488.413037][ T3223] usb 1-1: config 0 has no interface number 0 [ 488.419610][ T3223] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 488.430799][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 488.440956][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 14:15:24 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0xe200) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x31, "c68c67325568749336fd00eb3f80563e23e27e88f634277b4af957c9890e1cb51bfaeba5d28b4d654516c69835f68f04b5"}, &(0x7f0000000080)=0x39) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip6gre0\x00', r2, 0x2, 0x4, 0x9, 0x80, 0x16, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x7800, 0x8, 0x7}}) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x5, 0x0, 0x1, 0xfff, 0x50d0}, 0x14) [ 488.450891][ T3223] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 488.460121][ T3223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.527490][ T3223] usb 1-1: config 0 descriptor?? [ 488.549556][T10164] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 488.569692][T10164] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 488.878430][T10197] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 14:15:24 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0xed) close(r0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvram\x00', 0x202080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d12, &(0x7f00000001c0)) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="ad02baf5f6e58603120c395e09b07bb020251a8946afbb9ded3fcff2f90eb965fc4be9bd1219437d360e12c80590b3b753715ffc263c71915ed5a7fe2b7326e13593614f586c4af3e2215ef61d34b4949c272efc1498cf9d1e72315b0a00"/103], 0x3e) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x10800, 0x0) recvfrom$inet6(r6, &(0x7f0000000080)=""/97, 0x61, 0x10042, &(0x7f0000000140)={0xa, 0x4e23, 0x2f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffff8}, 0x1c) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 14:15:24 executing program 3: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x124, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0xc}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x13}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1b80}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xed2f}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000004) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x100201) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000680)='/dev/cachefiles\x00', 0x220002, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r3, 0x3, 0x8) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000700)={0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000740)={0x0, r4}) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000780)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_elf32(r5, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3, 0x0, 0x30, 0x23f, 0x2, 0x6, 0x2, 0x3c5, 0x38, 0x344, 0x22, 0x2, 0x20, 0x2, 0x80, 0x7, 0x6}, [{0x1, 0x20, 0x1, 0xff, 0x1, 0x93, 0x9, 0x1}], "b231823b01e63c1eeabf5aae95ce62dc06a31c0080bd77164268a1b2cf4a1b79dd412540a9806891597e63747f04ea3d64a70b830d7e8b0ce4cbbcf236ad0effd899e4dbda79e67a278c4c9d3adb9535af8b82db92f16df2470e4eedba176ff3657adf1df3d0a3834226cf64ce94040492b4a1db1360a2b2afe106b50a51ccb71ba300c2b315b5", [[], [], []]}, 0x3df) r6 = openat(r0, &(0x7f0000000bc0)='./file0\x00', 0x0, 0x94) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000c00)=@dstopts={0x2e, 0x1e, [], [@ra={0x5, 0x2, 0x8ef4}, @generic={0x0, 0x6b, "e6cde32253c1a76ec7620c1c99871dd8398b1b4e372f5c19d546a1e79056e8a56381eac9f9151e42625c7408d44c0c26c9985299bac0e5858a6c809c5e4cc9f2a80224fed7f8ba79443d2e205dbdad0e2064c3745b26043f9fbfc2c670c75f2282d82eab9095cbb5068f27"}, @generic={0x1f, 0xf, "08867e994baa868a009b56c4c1976d"}, @jumbo={0xc2, 0x4, 0x200}, @calipso={0x7, 0x50, {0x3, 0x12, 0xae, 0x7f, [0x9, 0x7, 0x3, 0x1, 0xc8f8, 0xfffffffffffff248, 0x101, 0x80000, 0x3]}}, @hao={0xc9, 0x10, @ipv4={[], [], @multicast1}}, @jumbo={0xc2, 0x4, 0x80}]}, 0x100) r7 = syz_open_dev$sndmidi(&(0x7f0000000d00)='/dev/snd/midiC#D#\x00', 0xfffffffffffffe1a, 0xb3de25c453a3879d) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r7, 0x40045730, &(0x7f0000000d40)=0xff) r8 = inotify_init() vmsplice(r8, &(0x7f0000001140)=[{&(0x7f0000000d80)="865ed2cd40a2126d4be672126efd4a0d225eeb9581b30a994339baab276a91d3608da4f64d0c3dfe3f3ebf020a6caa1116f837a226f42b2cf4fa8fd5dcdecba8995a8b144f3818dafe40443f299f57ba70be8f52c0b9f6cf70c9536335518102179d87b0b90dd58eb94302c5b1c34561cb20ceccce5773de79ddec3e56a00ecd1d145adb8cd2bea8d115b716aeb814ced34f525bb9bce0bc67c219b66e5ea28c1572e956b29249a67f452f42fd6c1bd33bc6cac655a86d3399da200147399a41ffb7b902aeac7bfbafb9b6343b45e68d77569759db69cc8d15aa38b24d716c833e709f91054ca762b7c68650b787e0683974ff4ffd4b43", 0xf7}, {&(0x7f0000000e80)="2ce15ac29de702b6e9d8519a5c8a1874908eb99eaf84a7686488d8926eca88efe635c683b3a482fe4420f45122ae5dee7cf4344a8bd6ed5141d3ab19815d4533a581b14f4ecbe9d97ef1dfc46cbe4e4b8b71aa50719a42ec60e710fd8de17e04a672400bdec2a13ea1b1a681616496d2d570fcbc6e593ca3b9d5e7e86aee63ffe5ea5607abebc54c0b97c5e475b540d551f412a2ac3496b666f4954cb743323e965375fb810776d6745132b2765900a5f139142b0bb1ad7a365e", 0xba}, {&(0x7f0000000f40)="89463f07f6b2c4cc3d5613f57657ea73233928029865bd8d9c4f5dcfc80b352a14465a404135d69cab4e0fc39ba00f1f5d249017b018bb9c1f13e68d6478cec54875f84335f474803f914dfa5ca1b707dc3f4159e5130968d63c8fe691690fe66f35c9a256ea3a303a5e0e0c204666cf801e5f62debbcf9a97f877c9b53222595db1d2131267a93cf1874f9475a6fd35c1a90999977c14", 0x97}, {&(0x7f0000001000)="5d5b8449654a2bae01f1c97e7c48f8f915baa089236ad8c7f116146f8a1901218cd42365b01aa59e517dfddb8e90cfe6e19a06e225e7aa2d2202ef570019c1e3fcee328cf0106ab0d0ab2dd2dd4b468f22cab52cae27b584767ebff3ccb5f2c60628340a2881e7225409268b952e234f342aef6c876650cc4904b8b9f825975e24dfc4cecac9ed0026665938738aaab1aa395b9bc9ddfc29fe70eff949a46ffba06a7d5880cb87203d47860fbb48b292fc3c3ff7c175458da43a40a20f48bb065c134f040feba0b75f42a01fad4a678ef592943ee40b9628ecfddd9cd0c7a890f568e88a12", 0xe5}, {&(0x7f0000001100)="5712af4f2852d9089708ce02d98510233723cb9a48127665869f92c1e942b77cd5ebf35a1afb1195cf36", 0x2a}], 0x5, 0xe) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000011c0)={0x0, @in6={{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x1d}, 0x28c}}, 0x1, 0x80000000, 0x9, 0x1, 0x7}, &(0x7f0000001280)=0x98) read$FUSE(r0, &(0x7f00000012c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getsig(0x4202, r9, 0x5, &(0x7f0000003300)) 14:15:24 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080), 0x200000000000029c) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:selinux_config_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}]}, 0x7c}}, 0x0) 14:15:24 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x15}, [@NL80211_ATTR_IFINDEX={0x4}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) [ 489.218766][ T3223] usb 1-1: USB disconnect, device number 14 14:15:25 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000340)={{0x3f, 0xe4}, 'port1\x00', 0x8c, 0x100030, 0x7fffffff, 0x2, 0x401, 0xf0eb, 0x1, 0x0, 0x4, 0xdd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000240)={0x3, &(0x7f00000000c0)=[0x3, 0x4, 0x7e8]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)) 14:15:25 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010003572d2408a67a99050d0000ad000000090902120001000010000904f10000e56cf200"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460801038003000000000000000200030005000000ce030000380000008a00000000000000ff072000020007000101ff7f00000000000000700300000003000000020000000200000004000000feffffffffffffff05000000ffffffffffffff7f01000100ff030000030000000300000008000000cc71af1004f14b6053a082ded7e94427839afd6246ef2de8ccb614b49f2d228e4105e357c26a9e77becb7afb0ddd9cad782ed7483ae53d720243540cff19b83d389e071de8c774847534c3985a0c52290763d24862d03cd5642cc2b17944a0b585641e541d5d16235b532530c2ff4aaa20ddbeac8c49aececdf81b01f816e02af1d2b58f48ebd0f70797c38d64fddf7bda91132e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6ffffffffffffff00"/780], 0x30c) lgetxattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@random={'user.', '\x00'}, &(0x7f0000000500)=""/241, 0xf1) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0xc0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000640)) 14:15:25 executing program 1: ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x6) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000429bd7000fcdbdf2509000000080001007063690011000200303030303a30303a31302eef8b250f1af3300000000008000300030000000800090007000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000041}, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x7d, 0x23, 0xc4, 0x20, 0xa12, 0x5d10, 0x65a0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x71, 0xe9, 0xf}}]}}]}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x210000, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x3, 0x7, [0x480, 0x479a, 0x0, 0x101, 0x8, 0x101, 0x8000]}, 0x16) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000001c0)) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x4000, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x128, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x20008001}, 0x800) r6 = fcntl$dupfd(r2, 0x406, r5) symlinkat(&(0x7f0000000500)='./file0\x00', r6, &(0x7f0000000540)='./file0\x00') write$cgroup_devices(r4, &(0x7f0000000180)={'b', ' *:* ', 'rwm\x00'}, 0xa) [ 489.858572][ T3223] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 490.106148][ T3223] usb 1-1: Using ep0 maxpacket: 8 [ 490.227169][ T8707] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 490.244333][ T3223] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 490.252779][ T3223] usb 1-1: config 0 has no interface number 0 [ 490.259510][ T3223] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 490.271161][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 490.281608][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 490.291675][ T3223] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 490.301052][ T3223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.311101][ T8705] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 490.403664][ T3223] usb 1-1: config 0 descriptor?? [ 490.428464][T10267] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 490.436320][T10267] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 490.467422][ T8707] usb 3-1: Using ep0 maxpacket: 8 [ 490.567752][ T8705] usb 2-1: Using ep0 maxpacket: 32 [ 490.586490][ T8707] usb 3-1: unable to get BOS descriptor or descriptor too short [ 490.595114][ T8707] usb 3-1: no configurations [ 490.600748][ T8707] usb 3-1: can't read configurations, error -22 [ 490.874635][T10267] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 490.909002][ T8705] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=65.a0 [ 490.918440][ T8705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.926795][ T8705] usb 2-1: Product: syz [ 490.931116][ T8705] usb 2-1: Manufacturer: syz [ 490.935988][ T8705] usb 2-1: SerialNumber: syz [ 490.947193][ T8704] usb 1-1: USB disconnect, device number 15 [ 491.168515][ T8705] usb 2-1: config 0 descriptor?? [ 491.432801][ T8705] usb 2-1: USB disconnect, device number 14 [ 491.527232][ T8707] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 491.766111][ T8707] usb 3-1: Using ep0 maxpacket: 8 [ 491.887075][ T8707] usb 3-1: unable to get BOS descriptor or descriptor too short [ 491.895043][ T8707] usb 3-1: no configurations [ 491.900211][ T8707] usb 3-1: can't read configurations, error -22 14:15:27 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x15}, [@NL80211_ATTR_IFINDEX={0x4}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) [ 492.068921][ T8707] usb usb3-port1: attempt power cycle [ 492.138227][T10327] IPVS: ftp: loaded support on port[0] = 21 14:15:27 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000002a7b0000000000000001000000000300120000000000000000000000000000000000feffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6201e1c90fed90ac0000000c5d9a7d54c37920ce2dc7ed45b600a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1b6) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev={[], 0x34}, 'macvlan1\x00'}}, 0x1e) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = fcntl$dupfd(r2, 0x0, r3) sendmmsg(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom(r4, 0x0, 0x0, 0x60ff, 0x0, 0x0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 14:15:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x1, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [0xc0000101, 0x0, 0x3, 0x2, 0xc001020a]}) dup2(r5, r4) [ 492.618203][ T3223] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 492.752896][T10327] chnl_net:caif_netlink_parms(): no params data found [ 492.893413][T10436] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 492.897627][ T3223] usb 1-1: Using ep0 maxpacket: 8 [ 493.067244][ T3223] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 493.076060][ T3223] usb 1-1: config 0 has no interface number 0 [ 493.082438][ T3223] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 493.094050][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 493.104370][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 493.114375][ T3223] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 493.123758][ T3223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.217990][ T3223] usb 1-1: config 0 descriptor?? [ 493.237896][T10337] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 493.245795][T10337] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 493.457344][T10327] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.466534][T10327] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.476420][T10327] device bridge_slave_0 entered promiscuous mode 14:15:29 executing program 1: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x2000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177b9f70000000000000000000000000000000000000000000000000000000200000003000000880400000000000098000000000000009800000500000000f0030000f0030000f0030000f0030000f00300000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000010000070000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e6400000065716c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001003580300000000000000000000000000000000000000005001686173686c696d697400000000000000000000000000000000000000000269705f7674693000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000fcffffff0e0000600000000000000000000000005001686173686c696d697400000001000000000000000000000000000000000276657468305f746f5f7b737200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000006e00000000000000000000000900000008000000000000000000000000000000480054454500000000000000000000ba60eabc545ffd22000000000000000001ac1414bb0000000000000000000000007465716c3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x2000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400ca7623b958376e0d4f6a742a00"/32, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028006000900e5d10000"], 0x3c}}, 0x0) [ 493.604294][T10327] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.613333][T10327] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.623359][T10327] device bridge_slave_1 entered promiscuous mode [ 493.679175][ T3223] Bluetooth: hci3: command 0x0409 tx timeout 14:15:29 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x48, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c638c0d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfea7) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000200)={'macsec0\x00', @ifru_ivalue=0x6}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x9c140, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000380)=0x11, 0x4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x115000, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000001040102020000000004a5115400000005001b040500c583040000c05293994505db7f771a991c55ae6e0340000000eb08400000000408000540000000020000000003000000e143400bce7427240500010003000000060006400006000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x218000, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000280)) syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$IOCTL_STATUS_ACCEL_DEV(r5, 0x40046103, &(0x7f0000000100)={0x0, 0x2, 0x11, 0xd7, 0x9, 0x9, 0xab, 0x5, 0x8, 0x81, 0x2, "2a573f6b822b10b7e3d0eaed3d271ec5ab7219ef26827bf5b47c43ba2d3f710f"}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) socket$bt_rfcomm(0x1f, 0x1, 0x3) close(r0) [ 493.730787][T10493] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 493.785137][ T3223] usb 1-1: USB disconnect, device number 16 [ 493.914371][T10327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.951758][T10518] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 494.143378][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 494.160057][T10327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.264263][T10541] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 494.329618][T10518] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 494.438777][T10327] team0: Port device team_slave_0 added 14:15:30 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x15}, [@NL80211_ATTR_IFINDEX={0x4}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) [ 494.496260][T10327] team0: Port device team_slave_1 added [ 494.659394][T10327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.666923][T10327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.694278][T10327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.811791][T10327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.819771][T10327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.846360][T10327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.017100][T10327] device hsr_slave_0 entered promiscuous mode [ 495.050183][T10327] device hsr_slave_1 entered promiscuous mode [ 495.069652][ T3223] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 495.080043][T10327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.088270][T10327] Cannot create hsr debugfs directory [ 495.316011][ T3223] usb 1-1: Using ep0 maxpacket: 8 [ 495.447817][ T3223] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 495.456301][ T3223] usb 1-1: config 0 has no interface number 0 [ 495.462592][ T3223] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 495.474228][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 495.484937][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 495.495423][ T3223] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 495.505203][ T3223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.557427][T10327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 495.622515][T10327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 495.660233][ T3223] usb 1-1: config 0 descriptor?? [ 495.685501][T10327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 495.698893][T10578] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 495.715923][T10578] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 495.739734][T10327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 495.761592][ T8705] Bluetooth: hci3: command 0x041b tx timeout [ 496.232561][T10650] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 496.341356][ T8705] usb 1-1: USB disconnect, device number 17 [ 497.001432][T10327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.060552][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 497.070010][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 497.098834][T10327] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.150359][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 497.160378][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 497.169845][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.177527][ T8705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.246728][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 497.256001][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 497.266260][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.275902][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.283144][ T8705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.371565][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 497.477482][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 497.532203][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 497.543010][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 497.624695][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 497.634924][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 497.646088][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 497.656668][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 497.666705][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.696173][T10327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.710317][T10327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 497.751561][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 497.762581][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 497.797984][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.806047][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.840506][T10327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.851402][ T8705] Bluetooth: hci3: command 0x040f tx timeout [ 497.933242][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 497.944488][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 498.013282][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 498.023736][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 498.090105][T10327] device veth0_vlan entered promiscuous mode [ 498.138310][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 498.147714][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 498.216567][T10327] device veth1_vlan entered promiscuous mode [ 498.426744][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 498.437073][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 498.471597][T10327] device veth0_macvtap entered promiscuous mode [ 498.515390][T10327] device veth1_macvtap entered promiscuous mode [ 498.572375][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 498.583882][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.594185][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 498.604997][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.615283][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 498.625868][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.640667][T10327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.649199][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 498.659311][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 498.669091][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 498.679232][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.748598][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 498.759684][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.769900][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 498.780889][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.791369][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 498.803230][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.817392][T10327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.832970][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 498.843425][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:15:35 executing program 1: getpgrp(0x0) r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000140)=""/61) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x0, 0x6, 0x1, 'queue0\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, 0x0, 0xd7e767b95e4ae04c, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x69}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x18}}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd62}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}]}]}, 0xa4}}, 0x20000002) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x81, 0x80080) connect$packet(r3, &(0x7f0000000180)={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @dev={[], 0x3e}}, 0x14) rt_sigqueueinfo(0x0, 0x1c, &(0x7f0000000040)={0x36, 0x0, 0x7}) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc4, 0xf0, 0x75, 0x20, 0x1608, 0x7, 0xc968, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x8b, 0xff, 0x22, 0x0, [], [{{0x9, 0x5, 0x8d, 0x1f}}, {{0x9, 0x5, 0x5, 0x2}}, {{0x9, 0x5, 0x8f, 0x1e}}]}}]}}]}}, 0x0) 14:15:35 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000002c0)=0x18, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x80, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', r3}) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000080)=0x80000000) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 14:15:35 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x15}, [@NL80211_ATTR_IFINDEX={0x4}]}, 0x1c}}, 0x0) 14:15:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x2d, 0x109801) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getlink={0x28, 0x12, 0x309, 0x70bd27, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000100)) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000700)=@delqdisc={0x268, 0x25, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0x5, 0xfff2}, {0xfff1, 0xffe0}}, [@TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x7, 0x9, 0x4, 0x2, 0x9, 0x0, 0x5}}, {0xe, 0x2, [0x4, 0x401, 0x4, 0x7, 0x81]}}, {{0x1c, 0x1, {0x5, 0x80, 0x0, 0x7, 0x2, 0x7, 0x8, 0x8}}, {0x14, 0x2, [0x4, 0x3f, 0x20, 0x0, 0x0, 0x3, 0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_RATE={0x6, 0x5, {0x5, 0x3f}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x800}, @TCA_INGRESS_BLOCK={0x12, 0xd, 0x136c4d56}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x1b4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x6d, 0x3, 0x800, 0x2, 0x7, 0x6465, 0x6}}, {0x10, 0x2, [0x101, 0x101, 0x4faa, 0x6, 0x0, 0x1ff]}}, {{0x1c, 0x1, {0x6, 0x8, 0x1c, 0xfffffffb, 0x1, 0x7f, 0x177, 0x4}}, {0xc, 0x2, [0x2, 0x5, 0x8b8a, 0x8]}}, {{0x1c, 0x1, {0xfa, 0x40, 0x81, 0x7f, 0x0, 0x7, 0x6, 0x8}}, {0x14, 0x2, [0x4, 0xff, 0x4, 0xec7, 0x6, 0x4, 0x6, 0x3]}}, {{0x1c, 0x1, {0x3a, 0x8, 0x0, 0x26, 0x2, 0x5, 0x7fff}}, {0x4, 0x2, [0x400, 0x1, 0xfffa]}}, {{0x1c, 0x1, {0x1, 0x0, 0x200, 0x7, 0x2, 0x1, 0x2, 0x5}}, {0xe, 0x2, [0x3, 0x4, 0x1, 0x4, 0x4]}}, {{0x1c, 0x1, {0x5, 0x9, 0x8, 0x3, 0x1, 0x1, 0x9, 0x5}}, {0xe, 0x2, [0x2, 0xa5ac, 0x3, 0x1008, 0x7]}}, {{0x1c, 0x1, {0x40, 0x1, 0x34a0, 0x9, 0x0, 0x82, 0x0, 0x8}}, {0x14, 0x2, [0x40, 0x80, 0x6, 0x2, 0x1, 0xffff, 0x0, 0x6]}}, {{0x1c, 0x1, {0x8, 0x6, 0xf96f, 0x8001, 0x0, 0x2, 0x1, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x7, 0x4, 0x7, 0x8e7, 0x1, 0x7f, 0xb604, 0xa}}, {0x18, 0x2, [0x1, 0x7f, 0x6, 0x28, 0x5, 0xd2a3, 0x1, 0x0, 0xfffc, 0x2]}}, {{0x1c, 0x1, {0x81, 0x3, 0xe596, 0xffffffff, 0x0, 0x787c, 0x2, 0x6}}, {0x10, 0x2, [0xe, 0x20, 0x0, 0x2, 0x400, 0x20]}}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x88c0}, 0x1) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f00000000c0)) [ 499.598202][T10677] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 499.806784][T10687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 499.845809][ T8707] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 499.866489][ T8705] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 499.926676][ T49] Bluetooth: hci3: command 0x0419 tx timeout 14:15:35 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x6c}, {0x2}, {0x6}]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x2) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") 14:15:35 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000002c0)=0x18, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x80, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', r3}) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000080)=0x80000000) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 500.086060][ T8707] usb 1-1: Using ep0 maxpacket: 8 [ 500.106111][ T8705] usb 2-1: Using ep0 maxpacket: 32 [ 500.208245][ T8707] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 500.216589][ T8707] usb 1-1: config 0 has no interface number 0 [ 500.222856][ T8707] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 500.234189][ T8707] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 500.244451][ T8707] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 500.247832][ T8705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 500.254504][ T8707] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 500.265694][ T8705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 500.265830][ T8705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 500.274821][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.284718][ T8705] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 500.312214][ T8705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 500.322212][ T8705] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 500.332208][ T8705] usb 2-1: New USB device found, idVendor=1608, idProduct=0007, bcdDevice=c9.68 [ 500.341465][ T8705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.550947][T10696] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 500.711664][ T27] audit: type=1326 audit(1598883336.365:2): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10691 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 500.782640][ T8707] usb 1-1: config 0 descriptor?? [ 500.804860][ T8705] usb 2-1: config 0 descriptor?? [ 500.807542][T10676] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 500.842024][T10676] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 500.862045][ T8705] io_edgeport 2-1:0.0: Edgeport 2 port adapter converter detected [ 500.870906][ T8705] usb 2-1: detected 14:15:36 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="8800000024000bb8186153e1476692c6b0c300008f05d6d20aebd12e2609b8ffd6b668e3c9f1fe6b2980803aaf99c72340ba0d82f9cca134524306d02053f8facd5fb0de615603a116f941fe569a2c0321a67d1d592776d48e5a5da6a18a91ea0f707f08895c02f5e6661b08939feb84d0a93caec8a17f03156dcafc831ad7d2352162af097164bb027071b07aabe4c3a7566a64b5793b42", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f0000580002000c00000000001000"/112], 0x88}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x4) [ 501.007026][ T27] audit: type=1326 audit(1598883336.665:3): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10691 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 501.087002][ T8705] usb 2-1: error in getting manufacturer descriptor: -71 [ 501.107892][ T8705] usb 2-1: error in getting boot descriptor: -71 [ 501.114482][ T8705] usb 2-1: Device Reported 0 serial ports vs. core thinking we have 2 ports, email greg@kroah.com this information. [ 501.229389][T10721] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 501.253602][ T8705] usb 2-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 501.262839][ T8705] usb 2-1: Failed to load image "edgeport/down.fw" err -2 [ 501.271173][ T8705] usb 2-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 501.280106][ T8705] usb 2-1: Failed to load image "edgeport/boot.fw" err -2 [ 501.295732][ T8705] usb 2-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 501.313868][ T8705] usb 2-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 501.318066][ T8707] usb 1-1: USB disconnect, device number 18 [ 501.332692][ T8705] usb 2-1: USB disconnect, device number 15 [ 501.352508][T10723] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. 14:15:37 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040ac0572024000010203010902240001010000000904000000030102000981030000000000"], 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7fff, 0x400) [ 501.388179][ T8705] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 501.466010][ T8705] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 501.474027][T10736] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 501.476973][ T8705] io_edgeport 2-1:0.0: device disconnected 14:15:37 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2323, 0x0, 0x9, 0x0, 0x8, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x9b, 0x5) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x90400, 0x0) write$P9_RSETATTR(r2, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)='veth1_to_team\x00', 0x5, 0xfffffffe, 0xa98f}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$tipc(r1, &(0x7f0000000100), &(0x7f0000000000)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000380)={0x5, @raw_data="bd71c4cc5404919501bf3f5502cf936533b0ecaf6f745c17bf509fd89cf925070c6cae947f34ad70a693e01fd2b8586b3594ff1ee2db5dd4cfffe030de61fd49a849129a4208d091fc932b9931a6193563c58549391edb0d86db93eed6a5a5ae618f0d635e67f352cff9b92e3688018dd12c677204bcb37535f1690215d32a340223a059e11919a10bc7a803e90cade5712c7bc4f3636eee853b3352d33b7b2ab5561b64cdf1f8a3b84e274ea54151645b16d2814cb383526e78f55fc8e66f002ecfa3817b01a805"}) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000140)) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) [ 502.007460][ T8707] usb 4-1: new high-speed USB device number 2 using dummy_hcd 14:15:37 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') [ 502.074226][T10765] IPVS: ftp: loaded support on port[0] = 21 [ 502.366338][ T8707] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.536489][ T8707] usb 4-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 502.545926][ T8707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.554049][ T8707] usb 4-1: Product: syz [ 502.558724][ T8707] usb 4-1: Manufacturer: syz [ 502.563493][ T8707] usb 4-1: SerialNumber: syz [ 502.661197][T10791] IPVS: ftp: loaded support on port[0] = 21 14:15:38 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x3, 0xc, 0x5, 0x20, 0x0, 0x0, "63122a3c"}, 0x0, 0x0, @userptr}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x40400000}, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x400) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3800) msgctl$IPC_RMID(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000180)=""/76) msgctl$IPC_RMID(0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 14:15:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7ff, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x106a, &(0x7f0000001340)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x17, 0x4, 0x1, 0x2, 0x105c, 0x67, 0x0, 0xff, 0x11, 0x0, @multicast1, @multicast1, {[@generic={0x86, 0x3, 'r'}, @rr={0x7, 0x1b, 0xb2, [@dev={0xac, 0x14, 0x14, 0x3f}, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @empty, @multicast1]}, @timestamp={0x44, 0x28, 0x59, 0x0, 0x4, [0x11, 0xfff, 0x5, 0x17, 0x9, 0x5, 0x20, 0xffff, 0x1ff]}]}}, "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"}}}}, 0x0) [ 502.804070][T10176] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 502.837551][ T8707] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input7 [ 503.035153][ T8707] usb 4-1: USB disconnect, device number 2 [ 503.082782][T10176] usb 1-1: Using ep0 maxpacket: 8 [ 503.118768][T10831] IPVS: ftp: loaded support on port[0] = 21 [ 503.245857][T10176] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 503.254032][T10176] usb 1-1: config 0 has no interface number 0 [ 503.260481][T10176] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 503.271709][T10176] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 503.281874][T10176] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 503.291835][T10176] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 503.301065][T10176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.343839][T10176] usb 1-1: config 0 descriptor?? 14:15:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x200000000000004) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x20000100) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="480000001400190d09004bb5050d8c56028447000bffe0064e230f00000000a2bc5603b700000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 503.368124][T10784] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 503.375907][T10784] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 503.455207][T10860] IPVS: ftp: loaded support on port[0] = 21 14:15:39 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x800) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000080)={0x0, 0x8, 0x8, 0x8, 0xd10c, 0xbc7}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x0, 0xac, 0x4, 0x3, 0x62e, 0x8, 0x8}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) [ 503.838525][T10176] usb 1-1: USB disconnect, device number 19 [ 503.957052][ T8704] usb 4-1: new high-speed USB device number 3 using dummy_hcd 14:15:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002040)=ANY=[@ANYBLOB="1201000000000008381010149ac1e41d030109021a00709721aa90299989000103010000092100000001224d04090581030000000000"], &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2], 0xd4}, 0x1, 0x0, 0x0, 0x24004000}, 0x40440c1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$CHAR_RAW_DISCARD(r1, 0x1277, &(0x7f0000000200)=0x1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x40000, 0x0) write$char_usb(r3, &(0x7f00000000c0)="db6cc134119007bdf28b53fcb6efaac62f64a82ea7cf46273f0b47088bd0e5b123f4a29461da28354017ef471559594fb6a531503e9beb2222f944328d504f50b77bd228caf7c1d2b9ea98d8ce694aa53a586b8d2a4d673135627517e001c4307baa3917ae3b89b41dd85057682c0ddfae60d7", 0x73) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x20, 0x23, 0x15, {0x15, 0x30, "88b9fa1f7b0000000000000000000000002000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 14:15:39 executing program 1: syz_emit_ethernet(0x466, &(0x7f0000000000)=ANY=[], 0x0) [ 504.326466][ T8704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 14:15:40 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32, @ANYRES64, @ANYRES32, @ANYBLOB="08000400", @ANYRESDEC], 0x70}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 14:15:40 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) [ 504.509943][ T8704] usb 4-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 504.519365][ T8704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.527701][ T8704] usb 4-1: Product: syz [ 504.532002][ T8704] usb 4-1: Manufacturer: syz [ 504.536840][ T8704] usb 4-1: SerialNumber: syz [ 504.545674][T10176] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 504.603239][ T8704] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8 [ 504.672684][T10934] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 504.711814][T10940] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 504.742953][ T8704] usb 4-1: USB disconnect, device number 3 14:15:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000000000)=ANY=[], 0x0) [ 504.795636][T10176] usb 3-1: Using ep0 maxpacket: 8 [ 504.918556][T10176] usb 3-1: config 151 has too many interfaces: 112, using maximum allowed: 32 [ 504.927842][T10176] usb 3-1: config 151 has an invalid descriptor of length 41, skipping remainder of the config [ 504.938941][T10176] usb 3-1: config 151 has 0 interfaces, different from the descriptor's value: 112 14:15:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff6d, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r4, &(0x7f0000000280)={r8, r4, 0x2}) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg\x00', 0x400000, 0x0) getsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[], 0xd8}}, 0x41) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="24000000110000df00"/20, @ANYRES32=r5, @ANYBLOB='\x00'/12], 0x24}}, 0x0) [ 505.006963][ T49] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 505.245251][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 505.282942][T10176] usb 3-1: string descriptor 0 read error: -22 [ 505.289611][T10176] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice=c1.9a [ 505.299171][T10176] usb 3-1: New USB device strings: Mfr=228, Product=29, SerialNumber=3 [ 505.376328][ T49] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 505.384532][ T49] usb 1-1: config 0 has no interface number 0 [ 505.390942][ T49] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 505.402206][ T49] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 505.407071][ T8704] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 505.412387][ T49] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 505.429681][ T49] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 505.439139][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:15:41 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109023b0001010000000904000002020e0000052406"], 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) [ 505.695823][ T8704] usb 4-1: device descriptor read/64, error 18 [ 505.705148][ T49] usb 1-1: config 0 descriptor?? [ 505.737201][T10941] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 505.744790][T10941] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 506.045888][T10176] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 506.087189][ T8704] usb 4-1: device descriptor read/64, error 18 [ 506.149519][ T49] usb 1-1: USB disconnect, device number 20 [ 506.297315][T10176] usb 2-1: Using ep0 maxpacket: 8 [ 506.358452][ T8704] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 506.418807][T10176] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.429441][T10176] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 506.637021][T10176] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 506.646554][T10176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.654707][T10176] usb 2-1: Product: syz [ 506.659240][T10176] usb 2-1: Manufacturer: syz [ 506.663966][T10176] usb 2-1: SerialNumber: syz [ 506.670271][ T8704] usb 4-1: device descriptor read/64, error 18 [ 506.818723][T10176] cdc_mbim 2-1:1.0: bind() failure 14:15:42 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 507.026606][T10176] usb 2-1: USB disconnect, device number 16 [ 507.075009][ T8704] usb 4-1: device descriptor read/64, error 18 [ 507.195705][ T8704] usb usb4-port1: attempt power cycle [ 507.375661][ T8707] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 507.615240][ T8707] usb 1-1: Using ep0 maxpacket: 8 [ 507.736386][ T8707] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 507.744948][ T8707] usb 1-1: config 0 has no interface number 0 [ 507.751219][ T8707] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 507.762616][ T8707] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 507.772871][ T8707] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 507.782854][ T8707] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 507.792662][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.875193][T10176] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 507.905200][ T8704] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 507.946095][ T8707] usb 1-1: config 0 descriptor?? [ 507.967354][T11003] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 507.975469][T11003] raw-gadget gadget: fail, usb_ep_enable returned -22 14:15:43 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) [ 508.136607][T10176] usb 2-1: Using ep0 maxpacket: 8 [ 508.165984][ T8704] usb 4-1: device descriptor read/8, error -71 [ 508.257705][T10176] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.268238][T10176] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 14:15:44 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000038000000000001907864010101ac1414aa03059078037a0000384500000000000000002f0000ac1414aaac14140002006558000000ea5a30a96e"], 0x0) [ 508.304545][ T8707] usb 3-1: USB disconnect, device number 8 [ 508.374988][ T8704] usb 4-1: device descriptor read/8, error -71 [ 508.457096][ T4861] usb 1-1: USB disconnect, device number 21 [ 508.485036][T10176] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.494362][T10176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.502899][T10176] usb 2-1: Product: syz [ 508.507347][T10176] usb 2-1: Manufacturer: syz [ 508.512091][T10176] usb 2-1: SerialNumber: syz [ 508.688454][T10176] cdc_mbim 2-1:1.0: bind() failure 14:15:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x4000000000035}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0xb, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:15:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0xcd7d, &(0x7f0000000000)={'bond0\x00', @ifru_names='macvlan0\x00'}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x840, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x80000001, @empty, 0x8000}, @in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, @in6={0xa, 0x4e22, 0x4de7f474, @local, 0x2}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @rand_addr=0x64010102}], 0x74) arch_prctl$ARCH_GET_CPUID(0x1011) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x4) [ 508.799344][T10176] usb 2-1: USB disconnect, device number 17 [ 508.884857][ T8704] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 508.975588][ T8704] usb 4-1: Using ep0 maxpacket: 8 14:15:44 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) dup(r2) [ 509.047458][T11056] input: syz1 as /devices/virtual/input/input9 [ 509.097027][ T8704] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 509.105465][ T8704] usb 4-1: config 0 has no interface number 0 [ 509.111905][ T8704] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 509.124832][ T8704] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 509.135048][ T8704] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 14:15:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r1, 0xec25dbe8a05c37af, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10008881}, 0x20000000) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x80000) r4 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000440)={{0x2, 0x0, @descriptor="08c01ece52ff742d"}}) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000340)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000380)=0x28) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3325}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x64}}, 0x0) r9 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 509.145077][ T8704] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 509.154815][ T8704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:15:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002480)=[{&(0x7f0000000080)=""/129, 0x81}], 0x1, 0x0, 0x0) r1 = inotify_init1(0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r3, 0x80000000, 0x1, 0x6}) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2}, 0x0) [ 509.352771][ T8704] usb 4-1: config 0 descriptor?? [ 509.377780][T11030] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 509.418129][T11067] device vlan2 entered promiscuous mode [ 509.423778][T11067] device batadv0 entered promiscuous mode [ 509.443811][T11030] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 509.520206][T11067] device batadv0 left promiscuous mode 14:15:45 executing program 2: bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x8, 0xfe, 0x3}, 0x6) syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x9, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x5, 0x5, 0x1, 0x0, [{@multicast2}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) [ 509.610648][ T3223] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 509.855900][ T3223] usb 1-1: Using ep0 maxpacket: 8 [ 509.903273][T10176] usb 4-1: USB disconnect, device number 7 [ 509.951984][T11067] device vlan2 entered promiscuous mode [ 509.957727][T11067] device batadv0 entered promiscuous mode [ 509.988513][ T3223] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 509.997856][ T3223] usb 1-1: config 0 has no interface number 0 [ 510.004137][ T3223] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 510.015430][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 510.025647][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 510.035998][ T3223] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 14:15:45 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x5, 0xffffffff, 0x20}, 0x10) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x4d9, 0xa067, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x140f, 0x800, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) syz_usb_control_io$hid(r1, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xa, "3c94"}]}}, 0x0}, 0x0) [ 510.045379][ T3223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:15:45 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000780)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x5, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x1, &(0x7f0000000040), 0x2) socket(0x25, 0x5, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xed) getitimer(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f00000001c0), 0x0) ioctl$int_out(r1, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2=0xe000000f, 0x0, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x0, 'netdevsim0\x00'}, 0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x8, 0x20}, 0xc) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 510.230821][ T3223] usb 1-1: config 0 descriptor?? [ 510.274789][T11066] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 510.282883][T11066] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 510.506071][ C0] sd 0:0:1:0: [sg0] tag#5265 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 510.516820][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB: Test Unit Ready [ 510.523517][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.533589][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.543551][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.553506][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.563402][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.573394][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.583379][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.593285][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.603431][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.606770][ T8705] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 510.613302][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.630962][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.640898][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.651202][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[c0]: 00 00 00 00 00 00 00 00 [ 510.681300][T11128] IPVS: ftp: loaded support on port[0] = 21 14:15:46 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:15:46 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fe0109003c0800040042ef420000010109021b01017600230009040000010209bd0007058107"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000100)={0x7, 0x5000}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000000)="2f92665b45893174cfcc7f2001d63d7062110aea88d1fe4348859b6ddb10ce4dd5f0ec704c40d9a9e44ad566f090d05566b1302dbcfb6b31f9f0f1eacf478c7255b6cb855e05d9342adf5f56d31990b42e8a5e8ccc39d84673c20e6d94b23c5a9c6569634ee93385283db53f4a221e0abfb346d2aa02ac130953cf23ce0bedf68c25958087af072201ad9b38b6b992dcf886f102da400512916425b956c3d29e49b45c95dcdcb23d92b0d91692fb4aa215c9") [ 510.903831][T11146] IPVS: ftp: loaded support on port[0] = 21 [ 510.944486][T10176] usb 1-1: USB disconnect, device number 22 [ 511.155789][ T8705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.167069][ T8705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.177609][ T8705] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.40 [ 511.186880][ T8705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:15:46 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 511.278723][ T8705] usb 3-1: config 0 descriptor?? [ 511.374908][ T8704] usb 4-1: new high-speed USB device number 8 using dummy_hcd 14:15:47 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:15:47 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) [ 511.615477][ T8704] usb 4-1: Using ep0 maxpacket: 8 14:15:47 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 511.735641][ T8704] usb 4-1: config index 0 descriptor too short (expected 283, got 27) [ 511.744339][ T8705] holtek_mouse 0003:04D9:A067.0003: item fetching failed at offset 0/1 [ 511.744429][ T8704] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 511.744583][ T8704] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.753314][ T8705] holtek_mouse: probe of 0003:04D9:A067.0003 failed with error -22 [ 511.763260][ T8704] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 14:15:47 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 511.942251][ T49] usb 3-1: USB disconnect, device number 9 [ 511.998006][T10176] usb 1-1: new high-speed USB device number 23 using dummy_hcd 14:15:47 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 512.106252][ T8704] usb 4-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 512.116993][ T8704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 512.125357][ T8704] usb 4-1: SerialNumber: syz 14:15:47 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 512.236560][ T8704] hub 4-1:118.0: bad descriptor, ignoring hub [ 512.242898][ T8704] hub: probe of 4-1:118.0 failed with error -5 [ 512.265977][T10176] usb 1-1: Using ep0 maxpacket: 8 [ 512.337145][ T8704] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device [ 512.386015][T10176] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 512.394327][T10176] usb 1-1: config 0 has no interface number 0 [ 512.400613][T10176] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 512.411894][T10176] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 512.422284][T10176] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 512.432893][T10176] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 512.442266][T10176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.486135][ T8704] usb 4-1: USB disconnect, device number 8 14:15:48 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 512.616188][T10176] usb 1-1: config 0 descriptor?? [ 512.636455][T11205] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 512.644501][T11205] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 512.755119][ T49] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 513.041933][ T8704] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 513.081878][T10176] usb 1-1: USB disconnect, device number 23 [ 513.187019][ T49] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 513.196203][ T49] usb 3-1: can't read configurations, error -71 14:15:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xffffffffffffffe8, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0x28}]}, 0x40}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) 14:15:48 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:15:49 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 513.407215][ T8704] usb 4-1: config index 0 descriptor too short (expected 283, got 27) [ 513.415888][ T8704] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 513.426429][T11283] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 513.430048][T11283] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 513.436613][ T8704] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 513.436742][ T8704] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.614932][ T8704] usb 4-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 513.624425][ T8704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 513.632565][ T8704] usb 4-1: SerialNumber: syz [ 513.756375][ T8704] hub 4-1:118.0: bad descriptor, ignoring hub [ 513.762700][ T8704] hub: probe of 4-1:118.0 failed with error -5 [ 513.790365][ T8704] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device [ 514.085613][ T8704] usb 4-1: USB disconnect, device number 9 [ 514.754093][T10176] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 514.994527][T10176] usb 4-1: Using ep0 maxpacket: 8 [ 515.119518][T10176] usb 4-1: config index 0 descriptor too short (expected 283, got 27) [ 515.127985][T10176] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 515.138598][T10176] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.149881][T10176] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 14:15:50 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000100)=@buf) 14:15:50 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:15:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0x28}]}, 0x40}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x5) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x4, 0x2, "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"}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x2203, 0x0) 14:15:50 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 515.326593][T10176] usb 4-1: string descriptor 0 read error: -71 [ 515.332996][T10176] usb 4-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 515.342475][T10176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 515.437134][T10176] usb 4-1: can't set config #118, error -71 [ 515.472365][T10176] usb 4-1: USB disconnect, device number 10 14:15:51 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0xa808) socket$netlink(0x10, 0x3, 0x10) 14:15:51 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 515.693947][ T8705] usb 1-1: new high-speed USB device number 24 using dummy_hcd 14:15:51 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @private=0xa010100}, 0x10) sendmmsg$sock(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@mark={{0x14}}, @timestamping={{0x14}}], 0x30}}], 0x1, 0x0) 14:15:51 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 515.934746][ T8705] usb 1-1: Using ep0 maxpacket: 8 14:15:51 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80003, 0x3) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 516.067032][ T8705] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 516.067156][ T8705] usb 1-1: config 0 has no interface number 0 14:15:51 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80003, 0x3) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 516.067339][ T8705] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 516.067484][ T8705] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 516.067623][ T8705] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 516.067735][ T8705] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 516.067807][ T8705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.071072][ T8705] usb 1-1: config 0 descriptor?? [ 516.096507][T11319] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 516.097144][T11319] raw-gadget gadget: fail, usb_ep_enable returned -22 14:15:52 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80003, 0x3) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 516.468430][ T4861] usb 1-1: USB disconnect, device number 24 14:15:52 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/ptype\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x20200, 0x20) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000480)={0x3, 0x2, 0x18}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x8000, 0x400) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r8, 0xab9535e9a6578fc1, 0x0, 0x0, {0x15}, [@NL80211_ATTR_IFINDEX={0x4}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000e07f0000080000000019e25e1e3264b6805005a461aadbd77ccc", @ANYRES16=r8, @ANYBLOB="040028bd7000fedbdf250600000008000100ffffffff080001000200000008000100040000000800010003000000140004007866726d300000000000000000000000140004007663616e3000"/86], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x24000000) getsockopt$netlink(r5, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a3061d1aafc0bacd31514813acbfe2d1d01c25fcd8a265b3703bede95604b59d5d333d7ac896286d57fbb9336ff6a12d4d3002549195c230da559792cebced3eb7a96c262a0c6532d946bdc71bfb27dde6edf9fc6ddd7840080646c7a1abc0dc4cacf1f650a3d3ab08b"], 0x5e) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES16=r9, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xb8ec235626dfcf91) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x420a00, 0x0) preadv(r0, &(0x7f0000001540), 0x0, 0x6, 0x0) [ 516.741913][T11387] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 516.770127][T11387] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 14:15:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80800, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0f85403, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @broadcast}, {0x0, @broadcast}, 0x48, {0x2, 0x4e21, @multicast1}, 'veth1\x00'}) recvmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 14:15:52 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:15:52 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) dup(r0) 14:15:52 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 517.596430][ T4861] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 517.834508][ T4861] usb 1-1: Using ep0 maxpacket: 8 [ 517.954873][ T4861] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 517.955150][ T4861] usb 1-1: config 0 has no interface number 0 [ 517.955290][ T4861] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 517.955424][ T4861] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 517.955561][ T4861] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 517.955668][ T4861] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 517.955739][ T4861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.959305][ T4861] usb 1-1: config 0 descriptor?? [ 517.976458][T11400] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 517.977093][T11400] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 518.318155][ T49] usb 1-1: USB disconnect, device number 25 14:15:54 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x95, 0x4, 0xcf, 0x10, 0x1908, 0x1315, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x27, 0x87, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f2208996ec7c06"}]}}]}}]}}]}}, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x80a8, 0x8000) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000080)="161955fd40eecb5e098d9d6b27d26424f9ba3a9f067be33d48db65924e85157fd8cf5a6ed647d1dcce81466cd93e5ef48f5ce3a49c467770a7f67b01fea89f022af78dfd5c521a14eb63fd8a8e8a47a209f245de783aefad9e12cbbbbc0236e8d11d038cb2962f4fbfab22ce59f2268ffa324db7d95fb8cfde4d744355a66ebe2cbd853b", &(0x7f0000000140)=""/79}, 0x20) 14:15:54 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:15:54 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) 14:15:54 executing program 4: ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f0000000000)=0x20) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x4e22, @loopback}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000100)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x408240, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x8) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x10, r0, 0x10000000) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, &(0x7f0000000200)) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000640)={0x3, 0x1, 0x12, 0x8, 0x15a, &(0x7f0000000240)}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000680)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000006c0)=0x2c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000700)={r1, @in={{0x2, 0x4e23, @broadcast}}}, 0x84) prctl$PR_GET_FPEXC(0xb, &(0x7f00000007c0)) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000800)=""/251) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000900)='/dev/input/mice\x00', 0x8000) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x6, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x400d4) r3 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000a40), &(0x7f0000000a80)=0x30) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000ac0)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x0) 14:15:54 executing program 1: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:15:54 executing program 2: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010a030109023b000101000000090400000202060000052406000005240000000d240f01000000136e0000000009058202ff03000000090503020004"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2641, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0x4, 0x24, [0x8, 0x5, 0x8, 0x3f0, 0x1, 0x4, 0x0, 0x4, 0x401]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 14:15:54 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) dup(r0) [ 519.003753][T10176] usb 4-1: new high-speed USB device number 11 using dummy_hcd 14:15:54 executing program 1: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 519.254235][T10176] usb 4-1: Using ep0 maxpacket: 16 14:15:55 executing program 1: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 519.363277][ T8705] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 519.374901][T10176] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 519.387925][T10176] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 519.434434][ T49] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 519.575880][T10176] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 519.585447][T10176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.593812][T10176] usb 4-1: Product: syz [ 519.598118][T10176] usb 4-1: Manufacturer: syz [ 519.603208][T10176] usb 4-1: SerialNumber: syz [ 519.619362][T10176] usb 4-1: config 0 descriptor?? 14:15:55 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 519.667988][T10176] usb-storage 4-1:0.0: USB Mass Storage device detected [ 519.685477][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 519.697266][T10176] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 519.755771][ T8705] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 519.766097][ T8705] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 519.827701][ T49] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 519.827814][ T49] usb 1-1: config 0 has no interface number 0 [ 519.827964][ T49] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 519.853430][ T49] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 519.863590][ T49] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 519.873533][ T49] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 519.882176][T10176] usb 4-1: USB disconnect, device number 11 [ 519.882744][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.044395][ T8705] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.053954][ T8705] usb 3-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 520.063260][ T8705] usb 3-1: Product: syz [ 520.067558][ T8705] usb 3-1: Manufacturer: syz [ 520.072312][ T8705] usb 3-1: SerialNumber: syz [ 520.104893][ T49] usb 1-1: config 0 descriptor?? [ 520.125620][T11453] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 520.133383][T11453] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 520.215844][T11449] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 520.265532][T11449] raw-gadget gadget: fail, usb_ep_enable returned -22 14:15:56 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 520.508538][ T49] usb 1-1: USB disconnect, device number 26 [ 520.528118][T11449] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 520.565781][T11449] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 520.654030][ T4861] usb 4-1: new high-speed USB device number 12 using dummy_hcd 14:15:56 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 520.893708][ T4861] usb 4-1: Using ep0 maxpacket: 16 [ 521.013861][ T4861] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242 [ 521.026690][ T4861] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 521.072365][ T8705] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 521.233951][ T4861] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 521.243309][ T4861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.251461][ T4861] usb 4-1: Product: syz [ 521.255964][ T4861] usb 4-1: Manufacturer: syz [ 521.260698][ T4861] usb 4-1: SerialNumber: syz [ 521.458909][ T4861] usb 4-1: config 0 descriptor?? [ 521.467679][T10176] usb 3-1: USB disconnect, device number 12 [ 521.471688][T11523] IPVS: ftp: loaded support on port[0] = 21 [ 521.476096][T10176] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 521.516315][ T4861] usb-storage 4-1:0.0: USB Mass Storage device detected [ 521.567607][ T4861] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 14:15:57 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x0, 0x1, 0x1f, 0x0, 0x5, 0x0, 0x7, 0x0, 0x4, 0x1, 0x7, 0x2, 0x6, 0x0, {0x10001, 0x7}, 0x6, 0x40}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000001e00000008000a00da7bf3e2e83af4320800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) fstatfs(r2, &(0x7f0000000180)=""/3) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000340)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = accept(r1, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000ac0)={0x0, "d926a96f52ab28944b171ef6238c9f08"}) recvmmsg(r3, &(0x7f0000000500), 0x0, 0x40000100, &(0x7f0000000540)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000005c0)={r4, 0x3, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x8, 0x55], 0x2, 0x80000}) 14:15:57 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) dup(r0) 14:15:57 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 521.853378][ T8704] usb 4-1: USB disconnect, device number 12 [ 522.175477][T10176] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 522.263478][ T4861] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 522.295145][T11578] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.3'. [ 522.445180][T11523] chnl_net:caif_netlink_parms(): no params data found [ 522.515927][ T4861] usb 1-1: Using ep0 maxpacket: 8 [ 522.556563][T10176] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 522.567680][T10176] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 522.661926][ T4861] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 522.670277][ T4861] usb 1-1: config 0 has no interface number 0 [ 522.676756][ T4861] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 522.688040][ T4861] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 522.698250][ T4861] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 522.708310][ T4861] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 522.717631][ T4861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.733846][ T4861] usb 1-1: config 0 descriptor?? [ 522.755160][T11566] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 522.763381][T11566] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 522.812915][T10176] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.822819][T10176] usb 3-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 522.825385][T11523] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.831023][T10176] usb 3-1: Product: syz [ 522.838589][T11523] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.842483][T10176] usb 3-1: Manufacturer: syz [ 522.851819][T11523] device bridge_slave_0 entered promiscuous mode [ 522.854210][T10176] usb 3-1: SerialNumber: syz [ 522.937173][T10176] usb 3-1: can't set config #1, error -71 [ 522.946496][T10176] usb 3-1: USB disconnect, device number 13 [ 522.991781][T11523] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.999713][T11523] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.010860][T11523] device bridge_slave_1 entered promiscuous mode [ 523.127049][T11523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.140715][ T8705] usb 1-1: USB disconnect, device number 27 [ 523.156678][T11523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.262051][T11523] team0: Port device team_slave_0 added [ 523.301414][T11523] team0: Port device team_slave_1 added [ 523.354450][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 523.397639][T11523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.404887][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.431148][T11523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.459445][T11523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.466701][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.493117][T11523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.587294][T11523] device hsr_slave_0 entered promiscuous mode [ 523.630893][T11523] device hsr_slave_1 entered promiscuous mode [ 523.661961][T11523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.670332][T11523] Cannot create hsr debugfs directory [ 524.110820][T11523] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 524.167974][T11523] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 524.214393][T11523] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 524.254776][T11523] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 524.754769][T11523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.795904][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 524.805625][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 524.830641][T11523] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.862603][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 524.874892][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.884225][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.891478][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.949210][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 524.958940][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 524.968969][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.978384][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.985731][ T8705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.994883][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 525.005866][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 525.043973][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 525.054747][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 525.103628][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 525.113725][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 525.124440][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 525.190263][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 525.200457][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.210298][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 525.220156][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.241992][T11523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 525.309106][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 525.319559][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 525.355250][T11523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.413996][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 525.424063][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.490663][ T4861] Bluetooth: hci4: command 0x041b tx timeout [ 525.528749][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 525.538576][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.558287][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 525.568758][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.616725][T11523] device veth0_vlan entered promiscuous mode [ 525.681523][T11523] device veth1_vlan entered promiscuous mode [ 525.807684][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 525.817272][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 525.826846][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 525.837374][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 525.863433][T11523] device veth0_macvtap entered promiscuous mode [ 525.888595][T11523] device veth1_macvtap entered promiscuous mode [ 525.958704][T11523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 525.969360][T11523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.979432][T11523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 525.990050][T11523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.002663][T11523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 526.013253][T11523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.023278][T11523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 526.033871][T11523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.047884][T11523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.061974][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 526.071478][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 526.080965][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 526.090986][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 526.166688][T11523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 526.177662][T11523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.188128][T11523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 526.198733][T11523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.208782][T11523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 526.219397][T11523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.229598][T11523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 526.240191][T11523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.254388][T11523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.267642][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 526.277805][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:16:03 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="66643d623619c4e38b3e16b3374394403bdcea3f536ca21c97179a7320b03350de47bacfe8ce34f40388a84ba3dd05cec468d7e65c023c38112c33aba5f052d37042902d2df8307bafef1aa4662d34a355f26227ca7d8312e6e5eca8a819f1e62cce9d5201ee7cf98ffb37eafc1a1c3aed7ae0c6e218f0ba5d35f473890c20c2a95666583cc27a11d7ff1ae12fb6c567152fa9b3887334ea659af11d38dcc23b48b0391368c77464a61243aadf846978a042790cbecd3aef71decba70713005dcd5adfb723f40640e6903da5c09d83dfdc000000000000000000", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f00000000c0)='./file1/file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) getpeername(r2, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x80) socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) dup3(r3, r0, 0x80000) 14:16:03 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$security_evm(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xa) r1 = socket$inet6(0xa, 0x2, 0x0) dup3(r1, r0, 0x0) 14:16:03 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:03 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000001700)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000380)={0x0, 0x0, 0xf, "4a3852f8f1c48e7d30f6e31ee8cfca"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:16:03 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 527.512185][T10176] Bluetooth: hci4: command 0x040f tx timeout 14:16:03 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 527.682587][T11826] fuse: Bad value for 'fd' [ 527.872272][ T49] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 527.903700][ T3223] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 527.976303][T11833] fuse: Bad value for 'fd' [ 528.016759][T11833] fuse: Bad value for 'fd' [ 528.132153][ T49] usb 1-1: Using ep0 maxpacket: 8 14:16:03 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840)}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1c2) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8002}, 0x4048841) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000000)=0x9c) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x7c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfa}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xbc}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x9]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000a00)=ANY=[@ANYBLOB="dd5cd5cd49640b0c15ad8122bc8d5aab9fbc860b11a4545a4b1e0152b953b4d1dd1899bcf1b35ff3827bdae0022216b339f1c6a2b31599c93d5ba3b9a86d6e03cda01f573af6c3700606f31fa93128e7da3c2c78099125ffa383dbe6b8becf4582374891228fa7020d0614b3992d5373036825bb0807b8000317abdf4bb78a41400000b1d41d192ac89c03cd75194ffa765867d7cea90a0d33d5b97a1e5886bc8a05b90704e1a6085eabc7de5bed014d90f74d0bfc9d54184d99cd1b01944976c1ffb62843f0f2e88a035e3290e6a54d71e32d503af96245", @ANYRES16, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x44090) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[@ANYBLOB="7f454c460706070801000000000000000200060007000000cd00000038000000fa010000810000000008200001000900030000020000000005000000080000001f0000000008000004000000080000000400000001040000c62d9cbcecd0c5d20eb100000000000000000000000000000000000100000000000000000000000000000000000000000000000000000d000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6530000000000000000000000000000000000000000000000000000000000003ced14801dde376d2fdd1d8fa8ee5bc54bb82eb1d1f8e7f2d3c221d4329c60b4c9d272644f6fec8bf1424b8489fa8b9254269fddef3cbb5c0a5815d8a9291a1fab5a970a1e1071c86a0ca581691a7b80a59ea732444c99f19198f9fa7b23b740278e7dbcf2b3ff468e140151429ff2ba9e50dc3b66d9a0e111490bf2bdc6f77615126fcea757c633dd644752726703d74e6f364a42a73ea68cb8cd4dadf0b36795"], 0x162) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r2, r3, 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000100)={0x4, 0x0, 0x2, 0x1f, 'syz1\x00', 0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="7c0f0000", @ANYRES16=0x0, @ANYBLOB="ec0e000000680f178005100100"], 0xfaa}}, 0x0) [ 528.255028][ T49] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 528.263465][ T49] usb 1-1: config 0 has no interface number 0 [ 528.269719][ T49] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 528.281137][ T49] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 528.291330][ T49] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 528.301327][ T49] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 528.310620][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.320496][ T3223] usb 3-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 528.329841][ T3223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.370479][ T3223] usb 3-1: config 0 descriptor?? [ 528.415717][ T3223] cp210x 3-1:0.0: cp210x converter detected 14:16:04 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 528.683720][ T49] usb 1-1: config 0 descriptor?? 14:16:04 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x80, 0xff, 0x3, 0x6, 0x1c, 0x20, 0x9, 0xa1, 0x1, 0x3, 0x6, 0x2, 0x7, 0x5}, 0xe) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r5 = fsmount(r2, 0x0, 0x82) ioctl$VIDIOC_G_AUDIO(r5, 0x80345621, &(0x7f00000000c0)) sendmmsg$inet_sctp(r0, &(0x7f000001c840)=[{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c, 0x0}], 0x37, 0x0) [ 528.704099][T11820] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 528.711705][T11820] raw-gadget gadget: fail, usb_ep_enable returned -22 14:16:04 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 528.832849][ T3223] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: 0 [ 528.840424][ T3223] cp210x 3-1:0.0: GPIO initialisation failed: -5 14:16:04 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 529.282066][ T3223] cp210x ttyUSB0: failed set request 0x3 status: -71 [ 529.289242][ T3223] cp210x: probe of ttyUSB0 failed with error -71 [ 529.366972][ T49] usb 1-1: USB disconnect, device number 28 [ 529.378037][ T3223] usb 3-1: USB disconnect, device number 14 [ 529.386559][ T3223] cp210x 3-1:0.0: device disconnected 14:16:05 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840)}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1c2) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8002}, 0x4048841) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000000)=0x9c) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x7c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfa}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xbc}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x9]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000a00)=ANY=[@ANYBLOB="dd5cd5cd49640b0c15ad8122bc8d5aab9fbc860b11a4545a4b1e0152b953b4d1dd1899bcf1b35ff3827bdae0022216b339f1c6a2b31599c93d5ba3b9a86d6e03cda01f573af6c3700606f31fa93128e7da3c2c78099125ffa383dbe6b8becf4582374891228fa7020d0614b3992d5373036825bb0807b8000317abdf4bb78a41400000b1d41d192ac89c03cd75194ffa765867d7cea90a0d33d5b97a1e5886bc8a05b90704e1a6085eabc7de5bed014d90f74d0bfc9d54184d99cd1b01944976c1ffb62843f0f2e88a035e3290e6a54d71e32d503af96245", @ANYRES16, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x44090) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[@ANYBLOB="7f454c460706070801000000000000000200060007000000cd00000038000000fa010000810000000008200001000900030000020000000005000000080000001f0000000008000004000000080000000400000001040000c62d9cbcecd0c5d20eb100000000000000000000000000000000000100000000000000000000000000000000000000000000000000000d000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6530000000000000000000000000000000000000000000000000000000000003ced14801dde376d2fdd1d8fa8ee5bc54bb82eb1d1f8e7f2d3c221d4329c60b4c9d272644f6fec8bf1424b8489fa8b9254269fddef3cbb5c0a5815d8a9291a1fab5a970a1e1071c86a0ca581691a7b80a59ea732444c99f19198f9fa7b23b740278e7dbcf2b3ff468e140151429ff2ba9e50dc3b66d9a0e111490bf2bdc6f77615126fcea757c633dd644752726703d74e6f364a42a73ea68cb8cd4dadf0b36795"], 0x162) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r2, r3, 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000100)={0x4, 0x0, 0x2, 0x1f, 'syz1\x00', 0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="7c0f0000", @ANYRES16=0x0, @ANYBLOB="ec0e000000680f178005100100"], 0xfaa}}, 0x0) 14:16:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a3000000000050005000a00000005000100060000000c000780080006400000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x80000001, 0x200082) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c015}, 0x40000c1) [ 529.592368][T10176] Bluetooth: hci4: command 0x0419 tx timeout [ 529.793366][ C0] sd 0:0:1:0: [sg0] tag#5277 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 529.804112][ C0] sd 0:0:1:0: [sg0] tag#5277 CDB: Test Unit Ready [ 529.810780][ C0] sd 0:0:1:0: [sg0] tag#5277 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.820749][ C0] sd 0:0:1:0: [sg0] tag#5277 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.830678][ C0] sd 0:0:1:0: [sg0] tag#5277 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.840744][ C0] sd 0:0:1:0: [sg0] tag#5277 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.850671][ C0] sd 0:0:1:0: [sg0] tag#5277 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.860632][ C0] sd 0:0:1:0: [sg0] tag#5277 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.870545][ C0] sd 0:0:1:0: [sg0] tag#5277 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.880415][ C0] sd 0:0:1:0: [sg0] tag#5277 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:05 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 529.890276][ C0] sd 0:0:1:0: [sg0] tag#5277 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.900150][ C0] sd 0:0:1:0: [sg0] tag#5277 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.910015][ C0] sd 0:0:1:0: [sg0] tag#5277 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.919936][ C0] sd 0:0:1:0: [sg0] tag#5277 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.932406][ C0] sd 0:0:1:0: [sg0] tag#5277 CDB[c0]: 00 00 00 00 00 00 00 00 [ 529.973664][T11904] hub 9-0:1.0: USB hub found [ 529.979602][T11904] hub 9-0:1.0: 8 ports detected 14:16:05 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 530.064982][ T49] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 530.451994][ T49] usb 3-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 530.461225][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.546429][ T49] usb 3-1: config 0 descriptor?? [ 530.595594][ T49] cp210x 3-1:0.0: cp210x converter detected 14:16:06 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 14:16:06 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 14:16:06 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840)}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1c2) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8002}, 0x4048841) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000000)=0x9c) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x7c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfa}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xbc}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x9]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000a00)=ANY=[@ANYBLOB="dd5cd5cd49640b0c15ad8122bc8d5aab9fbc860b11a4545a4b1e0152b953b4d1dd1899bcf1b35ff3827bdae0022216b339f1c6a2b31599c93d5ba3b9a86d6e03cda01f573af6c3700606f31fa93128e7da3c2c78099125ffa383dbe6b8becf4582374891228fa7020d0614b3992d5373036825bb0807b8000317abdf4bb78a41400000b1d41d192ac89c03cd75194ffa765867d7cea90a0d33d5b97a1e5886bc8a05b90704e1a6085eabc7de5bed014d90f74d0bfc9d54184d99cd1b01944976c1ffb62843f0f2e88a035e3290e6a54d71e32d503af96245", @ANYRES16, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x44090) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x162) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r2, r3, 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000100)={0x4, 0x0, 0x2, 0x1f, 'syz1\x00', 0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="7c0f0000", @ANYRES16=0x0, @ANYBLOB="ec0e000000680f178005100100"], 0xfaa}}, 0x0) 14:16:06 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a3000000000050005000a00000005000100060000000c000780080006400000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x80000001, 0x200082) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c015}, 0x40000c1) [ 530.943615][ T49] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 530.951355][ T49] cp210x 3-1:0.0: querying part number failed [ 531.011850][ T49] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 531.019141][ T49] cp210x: probe of ttyUSB0 failed with error -71 [ 531.100019][ T49] usb 3-1: USB disconnect, device number 15 [ 531.108612][ T49] cp210x 3-1:0.0: device disconnected [ 531.188835][ C0] sd 0:0:1:0: [sg0] tag#5278 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 531.199616][ C0] sd 0:0:1:0: [sg0] tag#5278 CDB: Test Unit Ready [ 531.206458][ C0] sd 0:0:1:0: [sg0] tag#5278 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.216367][ C0] sd 0:0:1:0: [sg0] tag#5278 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.226452][ C0] sd 0:0:1:0: [sg0] tag#5278 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.236425][ C0] sd 0:0:1:0: [sg0] tag#5278 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.246347][ C0] sd 0:0:1:0: [sg0] tag#5278 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.256265][ C0] sd 0:0:1:0: [sg0] tag#5278 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.266216][ C0] sd 0:0:1:0: [sg0] tag#5278 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.276139][ C0] sd 0:0:1:0: [sg0] tag#5278 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:07 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 531.286090][ C0] sd 0:0:1:0: [sg0] tag#5278 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.296009][ C0] sd 0:0:1:0: [sg0] tag#5278 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.305953][ C0] sd 0:0:1:0: [sg0] tag#5278 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.315968][ C0] sd 0:0:1:0: [sg0] tag#5278 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.325907][ C0] sd 0:0:1:0: [sg0] tag#5278 CDB[c0]: 00 00 00 00 00 00 00 00 [ 531.392552][ T8705] usb 1-1: new high-speed USB device number 29 using dummy_hcd 14:16:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='overlay\x00', 0x101003a, &(0x7f0000000380)='\x97$}$%\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x108, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xd8, 0x2, {{}, [@TCA_NETEM_LOSS={0xbc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_REORDER={0xc}, @TCA_NETEM_JITTER64={0xc}]}}}]}, 0x108}}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x108, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xd8, 0x2, {{}, [@TCA_NETEM_LOSS={0xbc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_REORDER={0xc}, @TCA_NETEM_JITTER64={0xc}]}}}]}, 0x108}}, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) 14:16:07 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:07 executing program 4: syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x93, 0x4f, 0xa7, 0x40, 0x12d1, 0x88f8, 0xd5e5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x74, 0x0, 0x1, 0xff, 0x3, 0x3b, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1c09, 0xa44e, 0x40}, {0x6, 0x24, 0x1a, 0xf2, 0x14}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x7ff, 0x0, 0x100}]}, @hid_hid={0x9, 0x21, 0xfff8, 0x0, 0x1, {0x22, 0xd84}}], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0xfe, 0x0, 0x0, [@generic={0x8, 0xb, "099f723a36a0"}]}}]}}]}}]}}, 0x0) [ 531.662021][ T49] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 531.682795][ T8705] usb 1-1: Using ep0 maxpacket: 8 [ 531.813719][ T8705] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 531.822004][ T8705] usb 1-1: config 0 has no interface number 0 [ 531.828278][ T8705] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 531.839742][ T8705] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 531.850042][ T8705] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 531.860129][ T8705] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 531.869382][ T8705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:16:07 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 531.942851][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 532.072439][ T49] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 532.080614][ T49] usb 3-1: config 0 has no interface number 0 [ 532.087156][ T49] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 532.098428][ T49] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 532.108650][ T49] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 532.118699][ T49] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 532.128110][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:16:07 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 532.220147][ T8705] usb 1-1: config 0 descriptor?? [ 532.244699][T11933] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 532.266487][T11933] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 532.441753][ T8800] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 532.452965][ T49] usb 3-1: config 0 descriptor?? [ 532.474792][T11944] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 532.512185][T11944] raw-gadget gadget: fail, usb_ep_enable returned -22 14:16:08 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 532.685662][ T8705] usb 1-1: USB disconnect, device number 29 [ 532.822462][ T8800] usb 5-1: config index 0 descriptor too short (expected 102, got 70) [ 532.830874][ T8800] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 532.839574][ T8800] usb 5-1: config 0 has an invalid descriptor of length 8, skipping remainder of the config [ 532.849878][ T8800] usb 5-1: config 0 has no interface number 0 [ 532.856216][ T8800] usb 5-1: config 0 interface 116 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 532.869510][ T8800] usb 5-1: New USB device found, idVendor=12d1, idProduct=88f8, bcdDevice=d5.e5 [ 532.878779][ T8800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.039782][ T3223] usb 3-1: USB disconnect, device number 16 [ 533.182403][ T8800] usb 5-1: config 0 descriptor?? [ 533.232185][ T8800] option 5-1:0.116: GSM modem (1-port) converter detected [ 533.430811][T10176] usb 5-1: USB disconnect, device number 2 [ 533.439209][T10176] option 5-1:0.116: device disconnected [ 533.480172][T11955] netem: unknown loss type 12 [ 533.487270][T11955] netem: change failed 14:16:09 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0x99, 0x48, 0x40, 0x557, 0x2002, 0x9427, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xda, 0xb2, 0x22}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="0000c5000054a72194680c4017d2867fd000"], &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x80}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x1}}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x2, @private1, 0xffff}}, 0x20, 0x2}, 0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 14:16:09 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:09 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 14:16:09 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) 14:16:09 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) [ 534.022231][T11955] netem: unknown loss type 12 [ 534.027627][T11955] netem: change failed [ 534.111468][ T8707] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 534.201603][ T8800] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 534.236064][ T3223] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 534.352537][ T8707] usb 1-1: Using ep0 maxpacket: 8 14:16:10 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) [ 534.473324][ T8707] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 534.481706][ T8707] usb 1-1: config 0 has no interface number 0 [ 534.488066][ T8707] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 534.499587][ T8707] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 534.510568][ T8707] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 534.520558][ T8707] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 534.529802][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.565758][ T8800] usb 3-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=94.27 [ 534.575608][ T8800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.632763][ T3223] usb 5-1: config index 0 descriptor too short (expected 102, got 70) [ 534.641296][ T3223] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 534.649629][ T3223] usb 5-1: config 0 has an invalid descriptor of length 8, skipping remainder of the config [ 534.660047][ T3223] usb 5-1: config 0 has no interface number 0 [ 534.666437][ T3223] usb 5-1: config 0 interface 116 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.679818][ T3223] usb 5-1: New USB device found, idVendor=12d1, idProduct=88f8, bcdDevice=d5.e5 [ 534.690191][ T3223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.728407][ T8800] usb 3-1: config 0 descriptor?? [ 535.011591][ T8800] kaweth 3-1:0.0: Firmware present in device. [ 535.136275][ T8707] usb 1-1: config 0 descriptor?? [ 535.163989][T12040] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 535.171781][T12040] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 535.211951][ T8800] kaweth 3-1:0.0: Statistics collection: 0 [ 535.218012][ T8800] kaweth 3-1:0.0: Multicast filter limit: 0 [ 535.224567][ T8800] kaweth 3-1:0.0: MTU: 0 [ 535.229028][ T8800] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 535.334247][ T3223] usb 5-1: config 0 descriptor?? [ 535.351774][ T3223] usb 5-1: can't set config #0, error -71 [ 535.439038][ T3223] usb 5-1: USB disconnect, device number 3 [ 535.768674][ T8707] usb 1-1: USB disconnect, device number 30 [ 535.841326][ T8800] kaweth 3-1:0.0: Error setting receive filter [ 535.848411][ T8800] kaweth: probe of 3-1:0.0 failed with error -5 [ 535.924876][ T8800] usb 3-1: USB disconnect, device number 17 [ 536.642395][ T8704] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 537.002209][ T8704] usb 3-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=94.27 [ 537.011690][ T8704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.148259][ T8704] usb 3-1: config 0 descriptor?? [ 537.551468][ T8704] kaweth 3-1:0.0: Firmware present in device. [ 537.604983][ T8704] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 537.614826][ T8704] kaweth: probe of 3-1:0.0 failed with error -5 14:16:13 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'syz_tun\x00', 0x2000000000000001}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 14:16:13 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 14:16:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [0x122, 0x0, 0x3, 0x2, 0x40000072]}) r6 = dup2(r5, r4) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000980)={{r4}, r9, 0x2, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0xff, 0x6, {0x10, 0x2, 0x4, 0x7fffffff, 0x6}, [0x8, 0xb57, 0x3, 0x9]}}, @subvolid=0x7}) 14:16:13 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:16:13 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 537.707340][ T8704] usb 3-1: USB disconnect, device number 18 14:16:13 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) [ 538.037495][T12109] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 538.301091][ T8705] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 538.431682][ T3223] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 538.575757][ T8705] usb 1-1: Using ep0 maxpacket: 8 [ 538.701917][ T3223] usb 3-1: Using ep0 maxpacket: 8 [ 538.722666][ T8705] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 538.730971][ T8705] usb 1-1: config 0 has no interface number 0 [ 538.737319][ T8705] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 538.748828][ T8705] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 538.759005][ T8705] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 538.768956][ T8705] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 538.778329][ T8705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.861549][ T3223] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 538.869758][ T3223] usb 3-1: config 0 has no interface number 0 [ 538.876312][ T3223] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 538.887592][ T3223] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 538.897756][ T3223] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 14:16:14 executing program 4: r0 = syz_usb_connect(0x6, 0xfffffffffffffcf6, &(0x7f0000000140)=ANY=[@ANYBLOB="120100022b379040070700025b0000000001090212000100ca003f09046300008726e20000210d0f030122630300303bea839ed90c46c4de5af2c779ad59f061c77ca6933ae6d8cfa9a6cd06e5a2a8d21c744049beeba7152b19e94b4ada909e745429ebf45cec13b1c94d2b16abf704e4a229784e05892ff137ee9d6358560b758ea7cbecc9b914c67bf19215aaa3813f055b921db3f116f9a788f954f16d1647bec3b440b9ba2b987f937114261bbc89ba7b3f48879129682b08c8f017182b41"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 538.907776][ T3223] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 538.917045][ T3223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:16:14 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80040, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000100)) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="2011c6000000c607a7953887f6a932bc1737bcecb90fd0bead852d2b3670b67a4d853b5b9b330f6ccc13ccdcdf2f7700d7db76845b4c43fd684368252376d134b7068e1156cf1919a6dd3dd9d62e30b300006d3cf033dabeb8fb7c3ef2e1c85974428ead4f62300a03f3929c87db0c06945a06ebe7115aa5aa185a9e946fd649524857"], 0x0}, 0x0) 14:16:14 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) [ 539.273251][ T8705] usb 1-1: config 0 descriptor?? [ 539.292664][T12115] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 539.300220][T12115] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 539.313035][ T3223] usb 3-1: config 0 descriptor?? [ 539.333399][T12120] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 539.341150][T12120] raw-gadget gadget: fail, usb_ep_enable returned -22 14:16:15 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:15 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 539.590028][T12156] xt_hashlimit: overflow, try lower: 0/0 [ 539.630992][ T9174] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 539.787371][ T3223] usb 1-1: USB disconnect, device number 31 [ 539.901126][ T9174] usb 4-1: Using ep0 maxpacket: 16 [ 539.974394][T12177] xt_hashlimit: overflow, try lower: 0/0 [ 540.034444][ T9174] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 540.042911][ T9174] usb 4-1: config 0 has no interface number 0 [ 540.049859][ T9174] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 540.060197][ T9174] usb 4-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 540.069526][ T9174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:16:15 executing program 4: prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='/dev/sg#\x00') r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x704c0202}, 0xc, &(0x7f0000000300)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4800, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_flash={0x33, 0x10000, './file0\x00'}}) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42b1, 0x0, @perf_bp={&(0x7f0000000400), 0x8}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x259) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f00000004c0)='./file0\x00'}, 0x10) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) clone(0x68880000, 0x0, 0x0, 0x0, 0x0) 14:16:15 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 540.263058][ T8704] usb 3-1: USB disconnect, device number 19 [ 540.276476][ T9174] usb 4-1: config 0 descriptor?? 14:16:16 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 540.532530][ T9174] input: GTCO_CalComp as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.219/input/input11 [ 540.609429][ C0] sd 0:0:1:0: [sg0] tag#5288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 540.620198][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB: Verify(10) [ 540.626546][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[00]: 2f 64 65 76 2f 73 67 23 00 00 00 00 00 00 00 00 [ 540.636451][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.646348][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.656281][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.656927][T12212] xt_hashlimit: overflow, try lower: 0/0 [ 540.666306][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[40]: 2f 64 65 76 2f 76 67 61 5f 61 72 62 69 74 65 72 [ 540.666428][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.666549][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.666667][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.712246][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.722140][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.732026][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.741908][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.751773][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[c0]: 2f 64 65 76 2f 73 67 23 [ 540.756864][ T9174] usb 4-1: USB disconnect, device number 13 [ 540.893374][ T9174] gtco 4-1:0.219: gtco driver disconnected [ 540.932680][T12214] IPVS: ftp: loaded support on port[0] = 21 14:16:16 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:16 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000035426140b4040055e45a0102030000ec424c00"/36], 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000140)={0x20, 0x4, 0x380d82, 0x3}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r1, 0xab9535e9a6578fc1, 0x0, 0x0, {0x15}, [@NL80211_ATTR_IFINDEX={0x4}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "4b180a1a14ce0273a3ea"}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "384a9a9cf3ceccb4d042d3e3b7ed"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x44810}, 0x4004041) 14:16:17 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 541.363158][ T8704] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 541.620688][ T8704] usb 1-1: Using ep0 maxpacket: 8 [ 541.640648][ T3223] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 541.741441][ T8704] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 541.749628][ T8704] usb 1-1: config 0 has no interface number 0 [ 541.756141][ T8704] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 541.767373][ T8704] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 541.777726][ T8704] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 541.787737][ T8704] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 541.796990][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.806978][ T8707] usb 3-1: new high-speed USB device number 20 using dummy_hcd 14:16:17 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 541.900530][ T3223] usb 4-1: Using ep0 maxpacket: 16 [ 542.022295][ T3223] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 542.030780][ T3223] usb 4-1: config 0 has no interface number 0 [ 542.037030][ T3223] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 542.047723][ T3223] usb 4-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 542.056980][ T3223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.091667][ T8707] usb 3-1: no configurations [ 542.096565][ T8707] usb 3-1: can't read configurations, error -22 [ 542.136193][T12205] IPVS: ftp: loaded support on port[0] = 21 [ 542.380665][ T8707] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 542.488497][ T3223] usb 4-1: config 0 descriptor?? [ 542.497142][ T1476] tipc: TX() has been purged, node left! 14:16:18 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 542.544138][ T8704] usb 1-1: config 0 descriptor?? [ 542.562710][T12226] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 542.570391][T12226] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 542.671591][ T8707] usb 3-1: no configurations [ 542.676383][ T8707] usb 3-1: can't read configurations, error -22 [ 542.760803][ T8707] usb usb3-port1: attempt power cycle 14:16:18 executing program 3: r0 = memfd_create(&(0x7f0000000240)='zDN\xf8){\x86\x87T<\xf6i\xbe{\x14\x10\x1f\xa6J\xa3W\x03\xe3 <\t\xe9\xd2\t%\xdctr\xc65\xba\xcc\x84^\x15\x1dDR\x8c\xaf^\r\xc0V\xf5=\xf1W\x1aF\xcaX\x87\x8c\a\x8a]G5\xf8L\r\xa2\xc8\x90\xc2(hW\\\x96\xd6\xa2~%\x06\x95R\xcd\v\xd7\x98=3b1\xb30xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000080)=""/153) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) write$9p(r3, &(0x7f0000000140)="b3339b3af27bcedb6e1f66", 0xb) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x88) syz_usb_control_io$printer(r0, 0x0, 0x0) 14:16:21 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) [ 545.294328][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.304230][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.314223][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.324133][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[c0]: 00 00 00 00 00 00 00 00 [ 545.416431][ T8707] usb 1-1: config 0 descriptor?? [ 545.442865][T12352] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 545.480870][T12352] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 545.583636][ C1] sd 0:0:1:0: [sg0] tag#5293 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 545.594349][ C1] sd 0:0:1:0: [sg0] tag#5293 CDB: Test Unit Ready [ 545.601166][ C1] sd 0:0:1:0: [sg0] tag#5293 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.611090][ C1] sd 0:0:1:0: [sg0] tag#5293 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.620992][ C1] sd 0:0:1:0: [sg0] tag#5293 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.630912][ C1] sd 0:0:1:0: [sg0] tag#5293 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.640807][ C1] sd 0:0:1:0: [sg0] tag#5293 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.650690][ C1] sd 0:0:1:0: [sg0] tag#5293 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.660695][ C1] sd 0:0:1:0: [sg0] tag#5293 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.670570][ C1] sd 0:0:1:0: [sg0] tag#5293 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:21 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 545.680450][ C1] sd 0:0:1:0: [sg0] tag#5293 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.692255][ C1] sd 0:0:1:0: [sg0] tag#5293 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.702276][ C1] sd 0:0:1:0: [sg0] tag#5293 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.712195][ C1] sd 0:0:1:0: [sg0] tag#5293 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.722087][ C1] sd 0:0:1:0: [sg0] tag#5293 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, {0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x4}}, &(0x7f0000000780)=0xb0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_bp={0x0}, 0xc98, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x3, &(0x7f0000000040)=0x8, 0xce) socket(0x2c, 0x80000, 0x80002) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x101005) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/1649], 0x155) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x80, @remote}, {0x2, 0x0, @broadcast}, {0x2, 0x4e21, @empty}, 0x9c96a42f48eba6fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001fffc, 0x0, 0x3}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000380)={0x0, 0x0, [], @bt={0x86ea, 0x101, 0x7d7, 0xa7, 0x3, 0x6, 0x8, 0x8}}) bind(r3, &(0x7f0000000080)=@in={0x2, 0x4e20, @dev}, 0x80) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x2380, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4, 0x9, @private2, 0x1f}]}, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @adiantum, 0x10, "ef0ed9c000ba9a6b"}) [ 545.868241][ T8707] usb 1-1: USB disconnect, device number 33 [ 545.959249][T12391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 546.010842][ T3223] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 546.229797][ T9174] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 546.257139][ C0] sd 0:0:1:0: [sg0] tag#5294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 546.267826][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB: Test Unit Ready [ 546.274731][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.284624][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.294513][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.304378][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.314267][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.324125][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.333998][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.334840][ T9174] usb 4-1: Invalid ep0 maxpacket: 512 [ 546.343861][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.343982][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.344099][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.344225][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.344341][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.398648][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[c0]: 00 00 00 00 00 00 00 00 [ 546.410831][ T3223] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 546.420132][ T3223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.554714][ T3223] usb 3-1: config 0 descriptor?? [ 546.600217][ T9174] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 546.622660][ T3223] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 546.710676][ T9174] usb 4-1: Invalid ep0 maxpacket: 512 [ 546.716751][ T9174] usb usb4-port1: unable to enumerate USB device [ 546.866740][ T8522] tipc: TX() has been purged, node left! 14:16:22 executing program 3: syz_usb_connect(0x3, 0x2d8, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x85, 0xe2, 0xce, 0x10, 0x1b3d, 0x11d, 0xa5b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c6, 0x3, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x28, 0x0, 0x4, 0x37, 0x75, 0xf8, 0x6, [], [{{0x9, 0x5, 0x7, 0x2, 0x10, 0x3, 0x7f, 0x0, [@generic={0xa, 0x0, "a05689f25097cdbc"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x3, 0x8, 0xff}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x1, 0xff, 0x20}}, {{0x9, 0x5, 0x7, 0x1, 0x40, 0xa5, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x1d83}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x8}]}}]}}, {{0x9, 0x4, 0x9c, 0x4b, 0x3, 0xe5, 0x7e, 0x89, 0x8c, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "c29b89260311"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x101, 0x5, 0x35}, {0x6, 0x24, 0x1a, 0x574, 0x8}}, @uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x8, 0x4, "a29cb58e657ae0284b"}]}], [{{0x9, 0x5, 0x5, 0x8, 0x10, 0x0, 0x2, 0x0, [@generic={0x50, 0xa, "f7e0e81c6eadad09007514097e1bab65e37c4638fef689ecfe692fda2ba9db739d24caeefd645ffbff037c814cfb4e0817ad7a732792db02bd6bb20932336766412ee895714f3bdaaca56d52b2b7"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0xff, 0x34, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x13d2}]}}, {{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x6, 0xff, 0x6}}]}}, {{0x9, 0x4, 0x5, 0x2, 0x5, 0xc6, 0x95, 0x6, 0x1, [], [{{0x9, 0x5, 0x1, 0x1, 0x200, 0x7, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xc8e}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x8, 0x0, 0x7, [@generic={0xe1, 0xc, "7eae4021ed41a31b9b215665adf22df8dc7e543a0675eb59bf7da3196e766a1b8cfb182b55c9a52f8d3649c4ef88597b401fbda8c59a53d53f56d5fbeae45d7cc2179ef0e7480c644ab9eba26d9cdc49725cc283bc2bf5bded596414da4982e93abae9494ebb02dd872052913333f0b8af150bf46e056bca30f63e2465dc75eaeda8cf3ee0006345938bd392890e2f5d2a195b2a07796036813e743b421c30c0244e3f28c0d2c03ab2012eb7d9500e33b6da1b63837ae318d747f1b3fa6dc8952484012f99eb2c48651731aadad948d2b5581aa359d0e06d3ae684a353078a"}, @generic={0x84, 0xe, "632f354c1b5d1a5b08c134519fbf67b34fd43df146d61e96789682a39ae48de4eb18132a4a4f4fabd4a24689b2862bf1d1851f36dcfa0c8f0e2c9c824026c8713a812684a9dc09ff901f9edfe6b0b35f3fe094e84d23d519622bbd50bbe9a72399e42e5399bf5aab4d59b9dff026564f25f2f71cdec43275788cad16f9c1544a82d1"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x1f, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0xfffd}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x80, 0x3, 0x28}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x1, 0x2, 0x40, [@generic={0x11, 0xb, "050542ae7fbf2d52b2aa43ee69c68c"}]}}]}}]}}]}}, 0x0) 14:16:22 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:22 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 14:16:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, {0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x4}}, &(0x7f0000000780)=0xb0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_bp={0x0}, 0xc98, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x3, &(0x7f0000000040)=0x8, 0xce) socket(0x2c, 0x80000, 0x80002) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x101005) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/1649], 0x155) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x80, @remote}, {0x2, 0x0, @broadcast}, {0x2, 0x4e21, @empty}, 0x9c96a42f48eba6fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001fffc, 0x0, 0x3}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000380)={0x0, 0x0, [], @bt={0x86ea, 0x101, 0x7d7, 0xa7, 0x3, 0x6, 0x8, 0x8}}) bind(r3, &(0x7f0000000080)=@in={0x2, 0x4e20, @dev}, 0x80) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x2380, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4, 0x9, @private2, 0x1f}]}, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @adiantum, 0x10, "ef0ed9c000ba9a6b"}) 14:16:23 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 547.389012][ C0] sd 0:0:1:0: [sg0] tag#5295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 547.400065][ C0] sd 0:0:1:0: [sg0] tag#5295 CDB: Test Unit Ready [ 547.406728][ C0] sd 0:0:1:0: [sg0] tag#5295 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.416659][ C0] sd 0:0:1:0: [sg0] tag#5295 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.426558][ C0] sd 0:0:1:0: [sg0] tag#5295 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.436492][ C0] sd 0:0:1:0: [sg0] tag#5295 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.446393][ C0] sd 0:0:1:0: [sg0] tag#5295 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.456289][ C0] sd 0:0:1:0: [sg0] tag#5295 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.466179][ C0] sd 0:0:1:0: [sg0] tag#5295 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.476186][ C0] sd 0:0:1:0: [sg0] tag#5295 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.486072][ C0] sd 0:0:1:0: [sg0] tag#5295 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.495976][ C0] sd 0:0:1:0: [sg0] tag#5295 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.505916][ C0] sd 0:0:1:0: [sg0] tag#5295 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.515783][ C0] sd 0:0:1:0: [sg0] tag#5295 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.525674][ C0] sd 0:0:1:0: [sg0] tag#5295 CDB[c0]: 00 00 00 00 00 00 00 00 [ 547.731613][T12428] xt_CT: You must specify a L4 protocol and not use inversions on it 14:16:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, {0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x4}}, &(0x7f0000000780)=0xb0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_bp={0x0}, 0xc98, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x3, &(0x7f0000000040)=0x8, 0xce) socket(0x2c, 0x80000, 0x80002) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x101005) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/1649], 0x155) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x80, @remote}, {0x2, 0x0, @broadcast}, {0x2, 0x4e21, @empty}, 0x9c96a42f48eba6fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001fffc, 0x0, 0x3}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000380)={0x0, 0x0, [], @bt={0x86ea, 0x101, 0x7d7, 0xa7, 0x3, 0x6, 0x8, 0x8}}) bind(r3, &(0x7f0000000080)=@in={0x2, 0x4e20, @dev}, 0x80) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x2380, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4, 0x9, @private2, 0x1f}]}, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @adiantum, 0x10, "ef0ed9c000ba9a6b"}) [ 547.790982][ T9174] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 548.029908][ T9174] usb 4-1: Using ep0 maxpacket: 16 [ 548.075556][ C0] sd 0:0:1:0: [sg0] tag#5296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 548.086344][ C0] sd 0:0:1:0: [sg0] tag#5296 CDB: Test Unit Ready [ 548.093221][ C0] sd 0:0:1:0: [sg0] tag#5296 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.103279][ C0] sd 0:0:1:0: [sg0] tag#5296 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.113277][ C0] sd 0:0:1:0: [sg0] tag#5296 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.123287][ C0] sd 0:0:1:0: [sg0] tag#5296 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.133301][ C0] sd 0:0:1:0: [sg0] tag#5296 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.143313][ C0] sd 0:0:1:0: [sg0] tag#5296 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.153313][ C0] sd 0:0:1:0: [sg0] tag#5296 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.161555][ T9174] usb 4-1: config 0 has an invalid interface number: 40 but max is 2 [ 548.163528][ C0] sd 0:0:1:0: [sg0] tag#5296 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.171683][ T9174] usb 4-1: config 0 has an invalid interface number: 156 but max is 2 [ 548.181349][ C0] sd 0:0:1:0: [sg0] tag#5296 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.189709][ T9174] usb 4-1: config 0 has an invalid interface number: 5 but max is 2 [ 548.199300][ C0] sd 0:0:1:0: [sg0] tag#5296 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.207379][ T9174] usb 4-1: config 0 has no interface number 0 [ 548.217055][ C0] sd 0:0:1:0: [sg0] tag#5296 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.223328][ T9174] usb 4-1: config 0 has no interface number 1 [ 548.232986][ C0] sd 0:0:1:0: [sg0] tag#5296 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.239191][ T9174] usb 4-1: config 0 has no interface number 2 [ 548.248845][ C0] sd 0:0:1:0: [sg0] tag#5296 CDB[c0]: 00 00 00 00 00 00 00 00 [ 548.255097][ T9174] usb 4-1: config 0 interface 40 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 548.272591][ T9174] usb 4-1: config 0 interface 40 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 548.283882][ T9174] usb 4-1: config 0 interface 40 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 548.294738][ T9174] usb 4-1: config 0 interface 156 altsetting 75 has an invalid endpoint with address 0x80, skipping [ 548.306137][ T9174] usb 4-1: config 0 interface 5 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 548.316985][ T9174] usb 4-1: config 0 interface 5 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 548.327826][ T9174] usb 4-1: config 0 interface 5 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 548.338632][ T9174] usb 4-1: config 0 interface 156 has no altsetting 0 [ 548.345936][ T9174] usb 4-1: config 0 interface 5 has no altsetting 0 [ 548.439836][ T4861] usb 1-1: new high-speed USB device number 34 using dummy_hcd 14:16:24 executing program 1 (fault-call:5 fault-nth:0): clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 548.680075][ T4861] usb 1-1: Using ep0 maxpacket: 8 14:16:24 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaa000070a2f83d9abb86dd6080000000108400fe8000000000000000000000000000aafe8000000000000100000000000100000001000000d01a5e0b8e435f44fda12e"], 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="c15e89fa007b000000fef7000040", 0xfffffffffffffcb7, 0x2) [ 548.747322][T12437] FAULT_INJECTION: forcing a failure. [ 548.747322][T12437] name failslab, interval 1, probability 0, space 0, times 1 [ 548.760749][T12437] CPU: 1 PID: 12437 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 548.769496][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.779696][T12437] Call Trace: [ 548.783183][T12437] dump_stack+0x21c/0x280 [ 548.787682][T12437] should_fail+0x8b7/0x9e0 [ 548.792268][T12437] __should_failslab+0x1f6/0x290 [ 548.797373][T12437] should_failslab+0x29/0x70 [ 548.801109][ T4861] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 548.802125][T12437] __kmalloc_node+0x1b3/0x1280 [ 548.810457][ T4861] usb 1-1: config 0 has no interface number 0 [ 548.814923][T12437] ? kvmalloc_node+0x205/0x490 [ 548.821280][ T4861] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 548.825733][T12437] ? kmsan_set_origin_checked+0x95/0xf0 [ 548.836874][ T4861] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 548.842229][T12437] kvmalloc_node+0x205/0x490 [ 548.842386][T12437] xt_alloc_table_info+0xda/0x1b0 [ 548.852449][ T4861] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 548.856885][T12437] do_ip6t_set_ctl+0x4bc/0xaf0 [ 548.862026][ T4861] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 548.871592][T12437] ? cleanup_entry+0x5f0/0x5f0 [ 548.871709][T12437] nf_setsockopt+0x578/0x5d0 [ 548.871852][T12437] ipv6_setsockopt+0x248/0x3d0 [ 548.871937][T12437] udpv6_setsockopt+0x130/0x1e0 [ 548.872019][T12437] ? udpv6_destroy_sock+0x370/0x370 [ 548.872121][T12437] sock_common_setsockopt+0x136/0x170 [ 548.872185][T12437] __sys_setsockopt+0x9c8/0xae0 [ 548.872270][T12437] ? sock_common_recvmsg+0x2a0/0x2a0 [ 548.872339][T12437] __se_sys_setsockopt+0xdd/0x100 [ 548.872405][T12437] __x64_sys_setsockopt+0x62/0x80 [ 548.872504][T12437] do_syscall_64+0xad/0x160 [ 548.872594][T12437] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 548.872636][T12437] RIP: 0033:0x45d5b9 [ 548.872663][T12437] Code: Bad RIP value. [ 548.872697][T12437] RSP: 002b:00007fa0f39ddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 548.872787][T12437] RAX: ffffffffffffffda RBX: 000000000002dd00 RCX: 000000000045d5b9 [ 548.872823][T12437] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 548.872864][T12437] RBP: 00007fa0f39ddca0 R08: 0000000000000468 R09: 0000000000000000 [ 548.872901][T12437] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000000 [ 548.872942][T12437] R13: 000000000169fb6f R14: 00007fa0f39de9c0 R15: 000000000118cf4c [ 549.006286][ T4861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.550087][ T3223] gspca_stk1135: reg_w 0x350 err -71 [ 549.556571][ T3223] gspca_stk1135: serial bus timeout: status=0x00 [ 549.563150][ T3223] gspca_stk1135: Sensor write failed [ 549.568590][ T3223] gspca_stk1135: serial bus timeout: status=0x00 [ 549.575048][ T3223] gspca_stk1135: Sensor write failed [ 549.580606][ T3223] gspca_stk1135: serial bus timeout: status=0x00 [ 549.587041][ T3223] gspca_stk1135: Sensor read failed [ 549.592691][ T3223] gspca_stk1135: serial bus timeout: status=0x00 [ 549.599111][ T3223] gspca_stk1135: Sensor read failed [ 549.604596][ T3223] gspca_stk1135: Detected sensor type unknown (0x0) [ 549.611557][ T3223] gspca_stk1135: serial bus timeout: status=0x00 [ 549.617939][ T3223] gspca_stk1135: Sensor read failed [ 549.623464][ T3223] gspca_stk1135: serial bus timeout: status=0x00 [ 549.630155][ T3223] gspca_stk1135: Sensor read failed [ 549.635522][ T3223] gspca_stk1135: serial bus timeout: status=0x00 [ 549.642118][ T3223] gspca_stk1135: Sensor write failed [ 549.647660][ T3223] gspca_stk1135: serial bus timeout: status=0x00 [ 549.654470][ T3223] gspca_stk1135: Sensor write failed [ 549.660224][ T3223] stk1135: probe of 3-1:0.0 failed with error -71 [ 549.722363][ T4861] usb 1-1: config 0 descriptor?? [ 549.741594][T12419] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 549.749110][T12419] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 549.870388][ T9174] usb 4-1: New USB device found, idVendor=1b3d, idProduct=011d, bcdDevice=a5.b2 [ 549.879902][ T9174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.888080][ T9174] usb 4-1: Product: syz [ 549.892579][ T9174] usb 4-1: Manufacturer: syz [ 549.897328][ T9174] usb 4-1: SerialNumber: syz [ 549.975742][ T9174] usb 4-1: config 0 descriptor?? [ 550.001088][T12424] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 550.084425][ T3223] usb 3-1: USB disconnect, device number 24 [ 550.203581][ T8707] usb 1-1: USB disconnect, device number 34 [ 550.294624][ T9174] ftdi_sio 4-1:0.40: FTDI USB Serial Device converter detected [ 550.304318][ T9174] usb 4-1: Detected FT2232C [ 550.381121][ T9174] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 550.403763][ T9174] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 550.439081][ T9174] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 550.491660][ T3223] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 550.545036][ T9174] ftdi_sio 4-1:0.156: FTDI USB Serial Device converter detected [ 550.554986][ T9174] usb 4-1: Detected FT2232C [ 550.619829][ T9174] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 550.651775][ T9174] ftdi_sio ttyUSB1: Unable to write latency timer: -71 14:16:26 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x9, 0x18, [0x0, 0x4, 0x3f, 0x0, 0x6, 0x1800]}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x2}}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x68}}, 0x0) 14:16:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000001000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff}}]}}]}, 0x3c}}, 0x0) 14:16:26 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 550.678663][ T9174] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 550.772932][ T9174] ftdi_sio 4-1:0.5: FTDI USB Serial Device converter detected [ 550.781857][ T9174] usb 4-1: Detected FT2232C [ 550.836930][ T9174] ftdi_sio ttyUSB2: Unable to read latency timer: -71 [ 550.884994][T12495] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 550.901595][ T9174] ftdi_sio ttyUSB2: Unable to write latency timer: -71 14:16:26 executing program 1: clone(0x200000009500f180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'bridge_slave_0\x00', {0xffffffff}, 0xcf}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 550.934628][ T9174] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB2 [ 550.955927][T12498] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 551.005017][ T9174] usb 4-1: USB disconnect, device number 19 [ 551.035373][T12498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 551.071115][ T9174] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 551.081911][ T9174] ftdi_sio 4-1:0.40: device disconnected [ 551.097296][T12495] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 551.215958][ T9174] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 551.226719][ T9174] ftdi_sio 4-1:0.156: device disconnected [ 551.345693][ T9174] ftdi_sio ttyUSB2: FTDI USB Serial Device converter now disconnected from ttyUSB2 [ 551.356848][ T9174] ftdi_sio 4-1:0.5: device disconnected 14:16:27 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x2c, 0x40}, {0x2}, {0x6, 0x1, 0xfc}]}) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r2, 0x1ff, 0x100}, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:16:27 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:16:27 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb61b47", 0xc}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000000)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000000c0)=0x2000000000000074, 0x4) bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000002240)=""/4096, 0x1000}], 0x3}, 0xa702}, {{&(0x7f0000000480)=@sco, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000006c0)=""/130, 0x82}], 0x3, &(0x7f0000000780)=""/246, 0xf6}, 0x7ff}], 0x2, 0x10000, &(0x7f0000000400)={0x0, 0x989680}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x0) bind(r2, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x54e7547e02afa628, @hyper}, 0x80) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) [ 551.833052][ T9174] usb 4-1: new high-speed USB device number 20 using dummy_hcd 14:16:27 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="127b72406bc509a700020000407d1eb42d4000000300010902a400010000000009040000010301000009210000004a3071d31d372c01220100090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0xf, 0x0, 0xfffffbff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="ff0100000e6860082d080001a3f2000000010902120001010000000904"], 0x0) syz_usb_disconnect(r3) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x0}, 0x0) 14:16:27 executing program 1: clone(0x2000000002100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400204) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 552.098269][ T27] audit: type=1326 audit(1598883387.752:4): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12533 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 552.340351][ T3223] usb 1-1: new high-speed USB device number 35 using dummy_hcd 14:16:28 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x44a400, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 552.629791][ T3223] usb 1-1: Using ep0 maxpacket: 8 [ 552.764177][ T3223] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 552.772443][ T3223] usb 1-1: config 0 has no interface number 0 [ 552.778804][ T3223] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 552.790181][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 552.800381][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 552.810324][ T3223] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 552.819536][ T3223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.838262][ T27] audit: type=1326 audit(1598883388.492:5): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12533 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 14:16:28 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000000)={0x4, 0x0, 'client1\x00', 0x1, "000000000600", "d8450001b29088d94e823a2da4a98c0bc668a9fd74c730e24e2c9fc54887104a", 0x2, 0x100}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'system.', 'snmp_trap\x00'}, &(0x7f0000000140)='TCPMSS\x00', 0x7, 0x2) [ 552.899550][ T9174] usb 4-1: device descriptor read/64, error -71 14:16:28 executing program 4: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000100)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000040)={0x8000, 0x2, 0x8, 0x7, &(0x7f0000000000)=[{0x5e, 0x4, 0x8000, 0x401}, {0x2, 0x8, 0x7, 0x6f}, {0x6, 0xfffe, 0xfe35, 0x7ff}, {0x1ff, 0x7, 0x7ff, 0x7}, {0x89a, 0x1, 0x4, 0x1cb3}, {0x8d, 0x6, 0x1ff, 0x6}, {0x4, 0x1000, 0x80, 0x4}]}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="03020000000000002800128009000100766c616e000000001800028006000100020000000c0002000e0000000a00000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00'], 0x58}}, 0x0) 14:16:28 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={r2, 0x3ff, 0x1, 0x4}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000040)={0x8, 0x6, 0x4, 0x100, 0x8, {0x77359400}, {0x4, 0x2, 0x27, 0x0, 0xa7, 0x2, "dda220ef"}, 0x4, 0x4, @planes=&(0x7f0000000000)={0x6, 0x7, @userptr=0x7, 0x3b}, 0xfffffc01, 0x0, r0}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 553.158349][ T3223] usb 1-1: config 0 descriptor?? 14:16:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x1, 0x3, "fee6e5"}, 0x0}) r2 = syz_usb_connect(0x3, 0xc44, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x90, 0x10, 0xb6, 0x8, 0xc45, 0x60a8, 0xf4d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc32, 0x3, 0x0, 0x46, 0x80, 0x5, [{{0x9, 0x4, 0x1, 0x0, 0x10, 0x34, 0x27, 0x7b, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x8}, [@mixer_unit={0x9, 0x24, 0x4, 0x4, 0x7, "c6b0c1e4"}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x1, 0x1, [0x7], 0xeb}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x2, 0x1, 0x5, 0x3f}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x5, 0xd3, 0x6, 0x1, 0x12}]}], [{{0x9, 0x5, 0xd, 0x8, 0x40, 0x40, 0x81, 0x2}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x1e, 0x5, 0x1}}, {{0x9, 0x5, 0x6, 0x1, 0x68, 0x8, 0x3f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf9, 0x3ff}, @generic={0x6d, 0x8, "d43026b11fb136b9ccada1c9433d1b6f8b1410eaae9c63074857c9718464a261741bb1f005902115d032734faffbeab16de50f26cc423f860e0d1b16d0ea2cc04ccee32115b7aa8e7e97f0284f2b42cf3bbd99229c12852d8c2b515764e5155d717b015cddfe9434e66cf0"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x3b, 0x1f, 0x1, [@generic={0xdb, 0x2, "203d5c52ca045f960374124469ef3764e7e129f931ec61d19c259486befe1d4766b7a2f8f45a5b290daa197dfab75cdda2860cddd1df9b37e815344b9d34b02099136a176cfc5452d9a733415f7ccb4350f44b25045bd90b3894097fd64aac0259bbc546a28c4dd7485652bbc8721671d1743f078e18785558d6708b0fe166b41f454ecd44bc5b38779f65b0120f9d2d0d0b11f3040cd76fff2ae997887a912634a8ff370b6f3aa6f4a33d9732d258569cbbb00c66986ea070240ec6116ae91569d160d0552e58d44ff38c46c62c81fc30ae30ccfed84410f2"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x1, 0x30, 0x7, [@generic={0xf, 0xd, "28c9a9254f0dba4f71b9818f0c"}, @generic={0x22, 0x3, "b32806428b31dc77dbae2e09c6b22d0f9bd3ad8a847874d978de4c364cc9643d"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x7, 0x98, 0x6, [@generic={0xc6, 0x21, "7b9d22b873658acc4b9234a26bb6be1ca0a24313865f9d8a703a971f51659f9ac36f19e32cf134b808dfb5eb4dd98e5586a47d96c0c7d78feb36e4dbd2d0e87c105d8f38be8e5b836f1b05413563bbc8adf06e68f193410c69b7b31cb0cb15a4b3cda707097b1ad53381aa2a83d1234ab4bf52e2f7381b09c7a08a2c7ef6f89c126b63185bd7162f9894b67824c74ac874958fcdc1fa0648ea280037c677e7667ed389f978dc1ebc5ab34333825c50590e1d36697b5d343d8053b4cda4ab78c1e5c45e47"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x20, 0x6e, 0x2}}, {{0x9, 0x5, 0x4, 0x1, 0x7df, 0x7, 0x1, 0x4, [@generic={0x37, 0x4c, "4134290211a3a6034112338c79ac8fac45dcec149a88cfd63f15bd87cbe910776abbef1bca71e771a3554e50d82623c224439fefb5"}, @generic={0x3b, 0xe, "0e6ff45db77044b29e969bc82ffe55a9fea25efb0688707920eceb4973893943fc267c21254b62c45eec3a4e156ecfe9da2f6f3c781b7527f8"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x5, 0x7f, 0xb9}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x2, 0x78, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x0, 0x4, 0xff, [@generic={0x36, 0x22, "7e01bbad2fe70e29e97ffafdd0478ec87541d0445380a6382ca0bf2bc5eee8906890bbb1707c9fbe105f12185100cf1bac074e47"}]}}, {{0x9, 0x5, 0x0, 0x0, 0xc0, 0x5e, 0x6, 0x46, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x81, 0xe5}, @generic={0x9b, 0xb, "9966cd15e9b561add9f5cbff5ed712d151ad209fbb0b299ceed77132f1419fd1563fccccb0da04837c744040ebbd1f40c4e43a61c61eab8a5f8af3a40710d6bba5d1aab1c27536e6a6663c2235427aef3cb180d1fedc80ef6d3a3f990da301f4999233178965fc8af829cb127e4efa0cebfee56498ae7e05e1f4bbd163a1de7525c4b5b6f3941419e0630426559fd2c3577feddde4f95fefeb"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x6, 0x1f, 0x7f, [@generic={0x77, 0x2, "220b6fbf893b1ee0f82d6cee169eb8efb7f1a923d0db58ee77dd3183e442f1d1bc6d103912778a713680e8ec7d0e4a236333ece52c41d3a4bc1eb00592ca12ec7947b66c44c0a3db9a4a53691909ecc7fc4bf5de43ba29843d3184190a888729c02349bb6810ba867c100d922dc082ca68c2937b82"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x6, 0x94, 0x30}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x6c, 0x4, 0x7}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xae, 0x9b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x8454}]}}]}}, {{0x9, 0x4, 0xb5, 0x7, 0xf, 0xed, 0x54, 0x46, 0x3, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "2d090ee3"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x5, 0x6, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x7ff}]}], [{{0x9, 0x5, 0x1, 0x0, 0x360, 0x4, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x6}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x1, 0x12, 0x20}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xc0, 0x6, 0x2, [@generic={0xaa, 0x22, "a7dfe7b6c2e882e96f189df0389d6d4a904e8bfc91d65c5f29449cee41ef08c8d46f30a2bb299134da76ee73bf10ed440f1590402230286b61293476e62bb3c547cffbe04395a8a50cac1279a3064b10cd8004a69aafa5a7cc0dcc939e02cee9263d6e8bb07b100c7f8ed75fab5809ef19a2540b99d1247e393f933cc44047b6fc2ea253ad3a8833e565837566d2e8ef43a8af2d82483c028656ff03a45dec608d41c18c11458d30"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8}]}}, {{0x9, 0x5, 0xa, 0x4, 0x0, 0x18, 0x0, 0x3}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x5, 0x7f, 0x9, [@generic={0x3a, 0x0, "55c18638b47aa6519863e38c66423b941b4e620474d03e01ee8623a2e04725b46d88232677615e91934bb79cb618526d6dbc725c710b57cb"}, @generic={0xc1, 0xf, "63cea56fbd46dc7c7931b13ae69bec6a908ae32670973a2cdfe7a72e017f2bcc78fd86d8d51c45ed7b2b56cfd95dea12d2885e7afc9580fe4dfc48bd1861d912bbb2622b2dafa33a45f9fe66887ad3c3c00c1faf19cde244082baec2c56da0cf083dd347468863b773184482533aa60f9080e65fd199e9969b0168d7a094ccf33df4dfe8792ae26d94c961799d68ad5dae5ac4fdbab991b51e11427635bfd7c29edf89046fcc6f53b239836a02f936e96b3f17ed073eef7751e97ae6ab3ecd"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x5, 0x6, 0x7f}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x5, 0x7, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x9ce0}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x1f, 0x8}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x86, 0xdc, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x6c, 0x40, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x2}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x7, 0x5, 0x7, [@generic={0xab, 0x3b, "d7a4637e7818fb68cc2af6fee4ae0af4f96ae091a71578f53f2031d779a363fae7675dfa6ab05013760db539923f41e6153a0088743c5c9e5615c44d6693974ca5bb84a894569e1b0be10923ad4218c136fed25b5916c3801f159086bca7277e69306a7db13c39d623083c6420d4d3fb21f3a3de01f8a429d0c8cbe7aac1d0bba3611afc247411f9822e19e26818966de4010f1fbd831a75bfd11bf39d15f97211bb320e70843a8baa"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x3, 0x6, 0x20, [@generic={0x5e, 0x1, "1f85a6f3bdf1b056204679ba9283295d518efbf9fa699b78390e2ecb40e3bb405a4d8c3d26ca1355358a397e21ea1620f82cac6a05dc290dd39732c8381e01e62576aac39028b0b8766428053ce015507ed717d5c924a0a3e8f71533"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0xb2, 0x20, 0x8, [@generic={0x1c, 0x10, "910b6bfd2db2b1df21d226b4bfdc1258560c09f9cca973b77d00"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x3, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x5}]}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0x0, 0x8, 0x3, [@generic={0xd9, 0x23, "411679360d4eab20ac4f0fe14b0622067c9c2e970c352e30e50e5a54739b76c3cc7ee9495a7cc684dc9770fe0a16b172b82c116946a68b1e15b422cd6be952ab2cb3d8455e430b393ec6c144aec2be911dab27d0a81a9e3369c3cd0c13ec5a1866b2280448e96a2c92d4433bfe392ab9faf75e9bf3779b71859df05dd827954946b016ff6fa6451c4ce536b7d86394d742506141e2891bb357a3ca768c94b68fef190821ac1bc0b2793b2cb51c33892d85ac5dc690da14786b8878dabe35fc460dd14ca286ea0a4fc43284862d3cfffd0aa5e9adf1b990"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x5, 0x2, 0x81}}]}}, {{0x9, 0x4, 0x9e, 0x8, 0x5, 0xe, 0xb6, 0x2e, 0x8, [], [{{0x9, 0x5, 0xf, 0x10, 0x10, 0x15, 0x4, 0x8, [@generic={0x1a, 0x23, "9c7b0e454eee6929d01444b76a61e2785c5a16afd5f460d2"}, @generic={0xbc, 0x9, "0f51a8527a09b1b36b891d42930240cb016886c5b769fca8894974ffd0de0b6e86f9a2bedb6c938ae3623e35f9a3c53134068d67345b56b1dfeb7c9bfef2a99f7b3a507d91915b3c4512e321de3fbee515e894091aa81d997d1a74391cbc6747667d3027e8fcd502f813448ae55729d06ea473fafbac736c0c21342d4c30b9be8f88df72160ab61607e4f46a218d25c24cb0ce6626981b2c744c74c55b583f133dab73324282ade833de25fbcaf09b5246d5b563df377c549ccd"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0x7, 0x3, 0x7, [@generic={0xf8, 0x23, "aeff7fe4505428309d10bef8d1e6013c848fda7e96093bf768cd80f29d41cf730c01b56541484ddaf3526220fb3a01027a40455ff6fd9ab600c24cd42465997fdcf99875bbf4e74f0b02ddbc0f7694aa8958d0531f855f482bfbe26d55e66b5bf2439d4c33f352700ad4ac5766edaa1f5d77c1989389cacf22fd8ac1a5e06f5c6a0ce690aea74e11e066892d6093352219706bc51991158eaa4634117db59e52212f0998eb966c32115d6afa5cc295766ad58ef885b732579c4dbfbc57fff8d075248e925882d9efbef7ead8087beb48581b5f578ef2f4fce815e8fa5884f77548b00d66907857a204cc768c29f395b0405340343d0a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x2, 0x8, 0x0, [@generic={0x68, 0x9, "127d347dc31a7a3db1b1aff73f1201aac6bf6675634aeb95c705617520cd5fa6dfd761cbb04d456a07130f9613840043d6b934d2f200c6e0f58d01b42b69ce5a54a9fdf78c7b5f2371a79d6862222117ada2c9ac753d2751702eae2013139d3a7d3bab1acd54"}, @generic={0x39, 0x5, "18a3f69b29db89fe3e9ea4a912132aa08625a0720c84690b217ad08627bc71cc46ed1d11fdd905f94f6c34f2a4250c8917136e9cae31e0"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x3, 0x8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x9}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0xaa, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8}, @generic={0x4, 0x24, "5f03"}]}}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x1, 0x6, 0x46, 0x40, 0x9}, 0x12, &(0x7f0000000080)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x2, 0xc526}]}, 0x9, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c09}}, {0x52, &(0x7f0000000180)=@string={0x52, 0x3, "78e5eaff93e928fc7a6632b0ffcf519b557ada4f777c6d132474f0641fb6f8f2be5440f3a36ec9acb33db99553e7356c266fd6c00af328e9cced673ffb127fd9f606ccb72ae8fca41a9b6618561a723d"}}, {0xb0, &(0x7f0000000200)=@string={0xb0, 0x3, "02cff7ed850e9ecd6ffd2119215e666ecf1729cfc1b86a7e9f5d03898859510234f795b1eabdbc4026aa12074f9c75f1bc3f9b87d27276d7136c86b70a2d33f3414941cea40c18728fbc5725d75166a86e29978f9440012fd39d420e64d72fc3ed94d8c195e5869fb728d9436049467214ec88583389bcf04862909ba90909177c6b2cc0a435866bb743f89fec0a0f0bfc84e0699c15ab5536ba71756834934506302c2594dc75b78d2b9d0b38cd"}}, {0x6a, &(0x7f00000002c0)=@string={0x6a, 0x3, "cb09cc4fe30522e3cb6be6b1e0887729b0a5d0000b53784e93e2f53a73e8230a7b8797117bcc59c19e33916844149c78ccc65057cfd122e187f3c47ee14550fb7d77347fe2f1ada9b480050a56cf910fb7453bed3df68d7fc29219f8a24e89f7b35f51558beb80fa"}}, {0x8d, &(0x7f0000000340)=@string={0x8d, 0x3, "a3c2bb4fdb4acf7ded3b0b346a23f00fe01a544d4997bd5cb393827d2b446258256c14e80e13fd3ecf0868df2aeadee1bb243665d6064903363fe258c9b0ab13fcaef2ca42df88c2e59d6945606f3cb13411eb3dfcfc1c71bad39f6d3d65bd2df23d676cdc16a040611772654aa6d509a93eaaa860bf223df5668e2113ffc8f84f4be3e3602c26618a5d36"}}, {0xaf, &(0x7f0000000540)=@string={0xaf, 0x3, "87f48573db44eb73729ce2cbaa3ef7a1b6fdcd01b1717980c3ed99107043e8b4450ddfa9fbda76c6ce75a13f27af400da45b800d2632070c86cc5eab47e3d19310c51086e3d7feab0b11aa61c626b2a6dd7a4643cc1864e891ea268f9f8098f47ecb0b76e9f53bbc8e92e2f99ce290741062ad6ca4c4700b84dd3e4e3b12be1c9d4f75f808709eb6b259627a0b2a2de337cae642b48892cfdb8d8a8949e36f4a55c987af4f266917b10c3176b6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x812}}]}) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x1, 0xd, "baa3cb92cb52f7000000000000"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="200182"], 0x0}) [ 553.181518][T12538] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 553.189582][T12538] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 553.321433][ T9174] usb 4-1: device descriptor read/64, error 18 [ 553.589677][ T9174] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 553.664751][ T3223] usb 1-1: USB disconnect, device number 35 14:16:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000040)={0x2, 0xfffffffb}) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000200003041dfffd946f6105000200000a1f000008001008000800180020001200", 0x24}], 0x1}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0xc70, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}}, 0x84) 14:16:29 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 553.879775][ T8707] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 553.899996][ T9174] usb 4-1: device descriptor read/64, error 18 14:16:29 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 554.240271][ T8707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.251841][ T8707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.261943][ T8707] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 554.271323][ T8707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.311623][ T9174] usb 4-1: device descriptor read/64, error 18 14:16:30 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:16:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100)="1347fc0193604cbd5a171faa403b94abd534c1255797f41207f48512efc382d26694d39699abcdda61dc9341c2f72e89ec4272fa4db68768f4f3736981", 0x3d, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000400)="3420f923f1406290b2954299f1ed32a3cfc090eb239b5442db52cd6b0cfd7258f25f11c974a9222fac727a702c838c9b4caaf4711e1f415acfe334224cb6eecc18ee29aaa1eb828d82d262fd8d452e1bf9eb5713ff0cf99130974b288c69117f1dcc00382794a33c1bc8f70b6137c7df691269df340c5a7d84", 0x79, r4) keyctl$dh_compute(0x17, &(0x7f0000000300)={r2, r3, r5}, &(0x7f0000000540)=""/243, 0xf3, &(0x7f0000000140)={&(0x7f0000000240)={'crc32-generic\x00'}}) [ 554.439996][ T9174] usb usb4-port1: attempt power cycle [ 554.487710][ T8707] usb 3-1: config 0 descriptor?? [ 554.831315][ T8707] usbhid 3-1:0.0: can't add hid device: -71 [ 554.837809][ T8707] usbhid: probe of 3-1:0.0 failed with error -71 [ 554.887658][ T8707] usb 3-1: USB disconnect, device number 26 [ 555.173840][ T9174] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 555.320630][ T8707] usb 3-1: new high-speed USB device number 27 using dummy_hcd 14:16:31 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x0, 0x8, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b0aedee7"}, 0x0, 0x0, @planes=0x0}) 14:16:31 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:16:31 executing program 5: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0xb68c1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1000, 0x22800) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d00, &(0x7f00000000c0)) read$rfkill(r1, &(0x7f0000000100), 0x8) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000180)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r2, 0x2, 0x1, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80984120, &(0x7f0000000200)) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0xc0800, 0x0) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000300)) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) getpriority(0x1, 0xffffffffffffffff) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ocfs2_control\x00', 0x2400, 0x0) ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f0000000380)={0x4, 0x2, 0x8}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f00000024c0)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x10000, 0xfffffffffffff801, 0x7d59b32b, 0x1f, {0x1, 0xfffffffffffffacc, 0x6, 0x5, 0x712, 0xa98a, 0x10001, 0x7, 0x6, 0xc000, 0x68, 0x0, 0xee01, 0x6, 0x6}}, {0x0, 0x14}}}, 0xa0) 14:16:31 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000180)=""/153, 0x99) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x88) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000801) [ 555.519648][ T9174] usb 4-1: device descriptor read/8, error -71 [ 555.689708][ T8707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.700886][ T8707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.711081][ T8707] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 555.720454][ T8707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.749065][ T9174] usb 4-1: device descriptor read/8, error -71 14:16:31 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 555.865247][ T8707] usb 3-1: config 0 descriptor?? 14:16:31 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x110, 0x4c, 0x274, 0x0, 0x0, 0x230, 0x318, 0x318, 0x230, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x19, 0x200, 0x72c, 0x7fffffff, 'syz0\x00', 'syz0\x00', {0x400}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x5}}, @common=@mh={{0x28, 'mh\x00'}, {'\x00', 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x0, 0x6}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) [ 556.342427][ T8707] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 556.349860][ T8707] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 556.357109][ T8707] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 556.364837][ T8707] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 556.372235][ T8707] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 556.513496][ T8707] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 556.630089][ T8707] cp2112 0003:10C4:EA90.0004: Part Number: 0xE6 Device Version: 0xE5 [ 556.841544][T12594] udc-core: couldn't find an available UDC or it's busy [ 556.848812][T12594] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 556.940081][ T8707] cp2112 0003:10C4:EA90.0004: error requesting SMBus config [ 556.966944][ T8707] cp2112: probe of 0003:10C4:EA90.0004 failed with error -32 14:16:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x50, r1, 0x401, 0x0, 0x0, {0x13}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x50}}, 0x0) 14:16:34 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 14:16:34 executing program 0: syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:16:34 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) pidfd_getfd(r1, r0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7, 0x2100) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000100)={0x6, "0b07acf2a5734d054a3682ffbc8524f129791e3cc2e4942d2b252d395fc53e9c", 0x5, 0x80, 0x5, 0x2, 0x2, 0x4, 0x1ff, 0x7}) [ 558.347283][ T9174] usb 3-1: USB disconnect, device number 27 14:16:34 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)=""/192, &(0x7f00000000c0)=0xc0) r0 = socket$netlink(0x10, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x1, 0x4, {0xa, 0x4e21, 0xfffffff7, @loopback, 0x400}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="540662429a20a4101763b7cf3507665de51a58524166afcd1eb5bb51103186f4b3c2e255fb49f0a3da2649632d292bf0e76e1446ba0b49d78a1c3a432a47bf797f1bab37d9acce8e862ea39bb82876bed229efb8b87b147c28cd4ee4a6bb380000c85361b065971427fd85d864a5f7a4cd4ac1ee5b5ad98a10d5fbd5e948b7d51151628d5a98810c3c5fe5b049f38466af46e39756ed8efff1", 0x99}, {&(0x7f0000000240)="e064de7748d3e391b59504c00117efa791b4930ba91c95c90c0cdd184803cede77da0df86260d2c2006e31d09a4aae4fe0c2a26be397e9d85d1f459f00711e6c3d1c49ad125775db4b86461ae97e54", 0x4f}], 0x2, &(0x7f0000000300)}, 0x20000000) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 558.624893][T12679] IPVS: ftp: loaded support on port[0] = 21 [ 559.428861][ T4861] Bluetooth: hci0: command 0x0406 tx timeout [ 559.697440][T12679] chnl_net:caif_netlink_parms(): no params data found [ 560.000871][T12679] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.008330][T12679] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.017927][T12679] device bridge_slave_0 entered promiscuous mode [ 560.146028][T12679] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.153381][T12679] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.163502][T12679] device bridge_slave_1 entered promiscuous mode 14:16:35 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 14:16:35 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) 14:16:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @private}}}, 0x84) 14:16:35 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x4c, 0x274, 0x138, 0x0, 0x260, 0x318, 0x318, 0x260, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@hl={{0x28, 'hl\x00'}, {0x0, 0x3}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xfe, 0x26, {0x1}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@frag={{0x30, 'frag\x00'}, {[0xccf, 0xb16], 0x2, 0x14, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) [ 560.308727][ T49] Bluetooth: hci5: command 0x0409 tx timeout [ 560.413574][T12847] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 560.491925][T12679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.728682][T12679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.229568][T12679] team0: Port device team_slave_0 added [ 561.270962][T12679] team0: Port device team_slave_1 added [ 561.373618][T12679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.381779][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.408082][T12679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.434948][T12679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.442290][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.468775][T12679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.545012][T12679] device hsr_slave_0 entered promiscuous mode [ 561.554699][T12679] device hsr_slave_1 entered promiscuous mode [ 561.569500][T12679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.577124][T12679] Cannot create hsr debugfs directory [ 562.124439][T12679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 562.195184][T12679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 562.261206][T12679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 562.340952][T12679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 562.388726][ T49] Bluetooth: hci5: command 0x041b tx timeout [ 564.005329][T12679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.275417][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 564.284737][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 564.330916][T12679] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.396636][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 564.407102][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 564.416742][ T8707] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.424055][ T8707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.469472][ T49] Bluetooth: hci5: command 0x040f tx timeout [ 564.757701][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 564.767064][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 564.778325][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 564.789839][ T8707] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.797094][ T8707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.806317][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 564.817665][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 564.828837][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 564.839517][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 565.019882][T12679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 565.031997][T12679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 565.446959][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 565.457201][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 565.468065][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 565.478961][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 565.488667][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 565.499153][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 565.510698][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 565.520446][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 565.528336][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 565.556118][T12679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.824887][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 565.834994][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 565.845163][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 565.918020][T12679] device veth0_vlan entered promiscuous mode [ 565.999040][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 566.008959][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 566.048414][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 566.058011][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 566.103492][T12679] device veth1_vlan entered promiscuous mode [ 566.361525][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 566.371136][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 566.380650][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 566.390717][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 566.433202][T12679] device veth0_macvtap entered promiscuous mode [ 566.463725][T12679] device veth1_macvtap entered promiscuous mode [ 566.485177][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 566.494929][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 566.550553][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 566.584038][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 566.594844][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.605252][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 566.616240][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.626261][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 566.636929][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.646947][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 566.657668][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.667941][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 566.678514][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.692597][T12679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.702636][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 566.712753][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 566.889321][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 566.900416][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.910563][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 566.921179][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.931224][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 566.941834][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.952248][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 566.962852][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.972895][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 566.983494][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.997766][T12679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.006312][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 567.016293][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:16:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7, 0x0, &(0x7f0000000300)) 14:16:43 executing program 0: syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:16:43 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$qrtr(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x2a, 0x1, 0x3fff}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000140)="55f8a6c40152ffca3973fb64bd42a7b341a36e9563a466c56b4eb26a886f9cab8ef07ea4677ca20afbc089484b188d5cc3c62c8fe0e3586903988efd518c8280c61797185d90f0a8885092841e2ea41d86ae8253e000a602b8abe33e02292a77ff9a9a313110589f04d5ebad14cfa3b64eab2d85deeffc84dcd4f351a912250374d123e83628abf851bafcd7e9720e13db1a465484e59a8aa2cd78d7f6b1097ba2eff8554a6fd0d7b812bfb146bd26d9f5e930018ca4ce91051fdf9c2e1dc731126ccdab55929e74acce3711f6b1845d22efbf36c4c090ccc1f546ba5014da1c311171fcb18a0a21", 0xe8}, {&(0x7f0000000240)="8c285c0b27db085061555d373a43d3b2fcacccb2464dade569004848eef7222dde232211a33a67680938e94f5011a6be6173b8c7eaf44be0342cb679e30820ef09b9de246463eddde4894283814d5e8ca6eb1400969a23da1f7d494ec7e6406d983f8d13eba05b764e5f0053a4d1c31f1c72565bca624ec34213ea33f4b35be0f22a472006cea67c3f6f9714745b025e15df16b8e0d209903af5ff3bbf0188c3f2799056305e2d49038feb2d96db8ff49325196abda3e0a6f61b22becf240deb104cd8ade315bd32621c35e19a1a4890c548f02eb8be76f941863673aa23f6f62fc1c361c8baaff4a7768b41", 0xec}], 0x2, &(0x7f0000000380)=[{0x48, 0x115, 0x10000, "18b03241761d784571af2c080847a890b69383bd9a6824e8bd8fa4289ddb92288f6cda24cf765235819090c6d52cd0c70fd5"}], 0x48, 0x84}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x4c, 0x274, 0xf0, 0x0, 0x1c0, 0x318, 0x318, 0x1c0, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x8, 0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x5, 0x9a, &(0x7f0000000000)="6a1e9775e1fbd9991a4269c7eb71c942907e0597a97192e581101084a9cfdc91f1d74f24954300889d87d9ca35ae4e183fff9ab1f3967a45e265785c6e581f658080d6bef45cd50fd7f6d6abdf2b886293637b98bf60837d4d948b30d23234a0e0fcc45689b4de4a78284767c7c78c6f9cfea72464c274986a762832a9ef63ae2c86a2b74f6133115fbff918a7845b71f67783ad4b9fa56c9285"}) 14:16:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x1b, &(0x7f00000002c0), &(0x7f0000000300)=0x10) 14:16:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c0dda63ef5609a49955102a0fa3d5c934f989c"}) 14:16:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0x0) 14:16:43 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400600) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:43 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioprio_set$uid(0x0, 0xee01, 0x2000) 14:16:44 executing program 3: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x84, 0x72, 0x0, &(0x7f000000a980)=0x300) 14:16:44 executing program 4: add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) 14:16:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000000)={0x2}) 14:16:44 executing program 0: syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:16:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80004506, 0x0) 14:16:44 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x800) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x408200, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0x400, 0x3f}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$sock(r0, &(0x7f0000005c00)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002440)=[{&(0x7f0000000080)='7', 0x1}], 0x1}}], 0x1, 0x0) 14:16:44 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) 14:16:44 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0xa10000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xa10908, 0x0, [], @ptr}}) 14:16:45 executing program 2: add_key$user(&(0x7f00000006c0)='user\x00', 0x0, 0x0, 0x0, 0x0) 14:16:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000001100000018"], 0x2c}}, 0x0) 14:16:45 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800, 0xd2) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev, 0x1}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r2}, 0x8) 14:16:45 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x2, 0x0) 14:16:45 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 569.667723][ T49] Bluetooth: hci1: command 0x0406 tx timeout 14:16:45 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={[], 0x10}}, 0xa) 14:16:45 executing program 2: r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 14:16:45 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8108551b, 0x0) 14:16:45 executing program 5: openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) 14:16:46 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) pidfd_getfd(r0, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x906, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe2b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c010}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) socket$bt_bnep(0x1f, 0x3, 0x4) [ 570.307619][ T9174] usb 1-1: new high-speed USB device number 36 using dummy_hcd 14:16:46 executing program 2: socket(0x2, 0x0, 0x10000) [ 570.608175][ T9174] usb 1-1: device descriptor read/64, error 18 14:16:46 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000900)=""/4096) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:46 executing program 3: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x4c, 0x0, &(0x7f000000a980)) 14:16:46 executing program 5: setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) 14:16:46 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x890b, 0x0) [ 571.018520][ T9174] usb 1-1: device descriptor read/64, error 18 14:16:46 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80000, 0xdbc) r2 = dup(r1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x14, r3, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x374, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x29bd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4e8ba55b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x203}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x89b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x48000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x45, 0x3, "049a92b8ac0c59933dc98f406c0e29336ac9eff585a3570071b901f981aa92821127e8fd8ae6d910fe6165d77af0c4d05e14b2847f3560bec3ae097e19cc2d95c7"}, @TIPC_NLA_NODE_ID={0x6d, 0x3, "17586ed6b6bf9142f34a26241ce535c4b1ddd675375757df4161ee98271b0a800730b29b89365e699ec57cc18b7ea40116913700fdd6ab60c14fcd1ffed452510e70605bfe60e93e042f4fe65af33043baf5432694aa519fca6ae73fb5385751c25c6e40c1aa1f87a2"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "9511502bca5718890686e594c0f0eb7223707a90a936a8cfda2060cd3d09f93c1b34c0c3"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "200316071789c9ca7f7e2689fb0a3aa6a8cecaae475d083e030909a71c07252e70c49276"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "c40874af3821faaa164fbd838ed34b0f026650b13036c8af728549c38b4a9cbf2a"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3ab64b3a40e51c62a1bb2cad2e2e8c23810ab41aa7098361c0a3"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5ee3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x4002002}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000000)={0x1000, "851f60d21eaa6d6727dea0f7c411cc3ebfdc8ccff2cc0917754202205755afec", 0x4, 0x4, 0x5, 0x10, 0x5}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 571.290474][ T9174] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 571.598198][ T9174] usb 1-1: device descriptor read/64, error 18 [ 571.997076][ T9174] usb 1-1: device descriptor read/64, error 18 [ 572.117817][ T9174] usb usb1-port1: attempt power cycle [ 572.827033][ T9174] usb 1-1: new high-speed USB device number 38 using dummy_hcd 14:16:48 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:16:48 executing program 2: sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) 14:16:48 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0xc0505609, 0x0) 14:16:48 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) 14:16:48 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="ad873e769b38c22e08457edadce82e90722185db258e65e9c0823925839a3f947bf42568bab751cd18d96e24ee0af6965944bb7a7f2f1ef77aeaf70b50ef3c8271c2b6c57cc0eb0e0a9552aa7b79b168269d1c014ffb8191d302d3b7fa2a190b408c4c15befaefde3a67915b012326e5bd55ff36626968e4c78a85a582a6262d1f97fd4171dfaa4208ea5d58c63c84e45e37bc39bbc2ad31ad8e6c4fcce4361ed4b8e7fc94a9f8be6cd868b62d627dc50ad724eb838538630aaa6186f6993750f0e37290d175e6cf05fb8a00da7daf005ab872dac44f87deafb7164176d0", 0xde}], 0x1) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:48 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x75, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) [ 573.086967][ T9174] usb 1-1: device descriptor read/8, error -71 14:16:48 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x52000, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000400)) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x160, 0x4c, 0x274, 0x160, 0x0, 0x250, 0x318, 0x318, 0x250, 0x318, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, [], 0x1}, @private2, [0xffffff00, 0xff000000, 0xffffff00, 0xff], [0xffffffff, 0x0, 0xff, 0xffffffff], 'wg0\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0xff, 0x4, 0x7, 0x40}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x0, 'rpfilter\x00'}, {0x2}}, @common=@inet=@set1={{0x28, 'set\x00'}, {{0x0, 0x3, 0x1}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x18, 0x40, 0x40, 0x9, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan1\x00', {0x92e}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xff35) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000440)=""/166) 14:16:49 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 573.320703][ T9174] usb 1-1: device descriptor read/8, error -71 14:16:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000000)=@ethtool_rxfh={0xb, 0x0, 0x0, 0x0, 0x0, "137ada"}}) 14:16:49 executing program 5: r0 = socket(0x11, 0x3, 0x0) recvmmsg(r0, &(0x7f0000015bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) 14:16:49 executing program 4: prctl$PR_GET_FPEXC(0x1e, 0x0) 14:16:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x54, r1, 0x90d, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}, {0x8}, {0x5}}]}, 0x54}}, 0x0) [ 573.816866][ T9174] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 573.997085][ T9174] usb 1-1: device descriptor read/8, error -61 [ 574.287050][ T9174] usb 1-1: device descriptor read/8, error -61 [ 574.408137][ T9174] usb usb1-port1: unable to enumerate USB device [ 575.270579][ T0] NOHZ: local_softirq_pending 08 14:16:51 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:16:51 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) r0 = socket$inet6(0xa, 0x3, 0x80000003) r1 = dup(r0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x96, 0x40, 0x6, 0x1, 0x0, 0x4, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x7c, 0xffffffffffffffff}, 0x93, 0xeeaf, 0xfffffffd, 0x4, 0x2, 0x100, 0x5}, 0x0, 0x1, r2, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:51 executing program 5: r0 = socket(0x1e, 0x2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x101d0) 14:16:51 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, 0x0, 0x0) 14:16:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008"], 0x2c}}, 0x0) 14:16:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x8) [ 576.432958][T13107] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 576.492242][T13111] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:16:52 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@get={0x1, 0x0, 0x80000000}) 14:16:52 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0xa, 0x1d) r1 = userfaultfd(0x80800) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:52 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x5414, 0x0) 14:16:52 executing program 5: r0 = socket(0x1e, 0x5, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 14:16:52 executing program 4: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) [ 576.896556][ T49] usb 1-1: new high-speed USB device number 40 using dummy_hcd 14:16:52 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080)=0x3ff, 0x2) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8000, 0x2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x288, 0x4c, 0x274, 0x0, 0x0, 0x350, 0x318, 0x318, 0x350, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@dst={{0x0, 'dst\x00'}, {0x800, 0x2, 0x1, [0x1000, 0x68, 0x7, 0x8001, 0x8001, 0x6, 0x7ff, 0x1f, 0x7f, 0x3, 0xb0c, 0x5, 0x7, 0xff00, 0x6d2, 0x7fff], 0xf}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}, {0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00', {0x2}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@TRACE={0x0, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b9) [ 577.188515][ T49] usb 1-1: device descriptor read/64, error 18 [ 577.588093][ T49] usb 1-1: device descriptor read/64, error 18 [ 577.866633][ T49] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 578.156409][ T49] usb 1-1: device descriptor read/64, error 18 [ 578.576213][ T49] usb 1-1: device descriptor read/64, error 18 [ 578.696418][ T49] usb usb1-port1: attempt power cycle [ 579.406108][ T49] usb 1-1: new high-speed USB device number 42 using dummy_hcd 14:16:55 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:16:55 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000700), 0x4) 14:16:55 executing program 5: r0 = gettid() ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 14:16:55 executing program 3: r0 = socket(0x2, 0x3, 0x5) connect$netlink(r0, 0x0, 0x0) 14:16:55 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) read$dsp(r0, &(0x7f0000000100)=""/46, 0x2e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x5012c2}}, 0x50) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000000)=0xc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,u{er_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x5012c2}}, 0x50) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000000)=0xc) syz_fuse_handle_req(r6, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x1}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x4}, {}, {0x2, 0x3, r5}, {0x2, 0x5, r9}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1, 0xffffffffffffffff}], {}, [{0x8, 0x2}, {0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x2}}, 0x74, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:55 executing program 4: r0 = socket(0x2, 0x3, 0x5) connect$l2tp(r0, &(0x7f0000002780)={0x2, 0x0, @empty}, 0x10) bind$l2tp(r0, 0x0, 0x0) [ 579.586771][ T49] usb 1-1: device descriptor read/8, error -71 [ 579.806525][ T49] usb 1-1: device descriptor read/8, error -71 14:16:55 executing program 3: clone3(&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x58) 14:16:55 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:55 executing program 2: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x84, 0x25, 0x0, &(0x7f000000a980)=0x300) 14:16:55 executing program 4: r0 = socket(0x2, 0x1, 0x0) sendmsg$xdp(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x10, 0x0}, 0x20040800) 14:16:55 executing program 5: r0 = socket(0x1d, 0x2, 0x2) connect$packet(r0, &(0x7f0000006140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000009780)={0x0, 0x0, &(0x7f0000009740)={&(0x7f0000009600)={0x108, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x108}}, 0x0) 14:16:55 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 580.306948][ T49] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 580.477240][ T49] usb 1-1: device descriptor read/8, error -61 [ 580.751669][ T49] usb 1-1: device descriptor read/8, error -61 [ 580.876425][ T49] usb usb1-port1: unable to enumerate USB device 14:16:58 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:16:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, 0x0, 0xaff45d677b1c7f2a) 14:16:58 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x41) 14:16:58 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U-', 0x1}, 0x16, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:16:58 executing program 5: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x84, 0xa, 0x0, &(0x7f000000a980)) 14:16:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x1e, &(0x7f0000000040)=""/37, &(0x7f0000000080)=0x25) 14:16:58 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) 14:16:58 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0505609, &(0x7f0000000040)={0x0, 0x0, [], {0x0, @reserved}}) 14:16:58 executing program 4: ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x0, 0x0) 14:16:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='net/psched\x00') read$snapshot(r0, 0x0, 0x0) 14:16:58 executing program 5: r0 = socket(0x2a, 0x2, 0x0) bind$alg(r0, 0x0, 0x0) [ 583.435947][ T8702] usb 1-1: new high-speed USB device number 44 using dummy_hcd 14:16:59 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x2000) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 583.716765][ T8702] usb 1-1: device descriptor read/64, error 18 [ 584.125978][ T8702] usb 1-1: device descriptor read/64, error 18 [ 584.395808][ T8702] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 584.675555][ T8702] usb 1-1: device descriptor read/64, error 18 [ 585.025488][ T4861] Bluetooth: hci2: command 0x0406 tx timeout [ 585.065523][ T8702] usb 1-1: device descriptor read/64, error 18 [ 585.189458][ T8702] usb usb1-port1: attempt power cycle [ 585.895691][ T8702] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 586.066171][ T8702] usb 1-1: device descriptor read/8, error -61 14:17:01 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:01 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$char_raw(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0xdc00) 14:17:01 executing program 3: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) 14:17:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x5452, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 14:17:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000480)={0xc0, 0x25}, 0x4c}}, 0x0) 14:17:01 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) dup(r2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) [ 586.285767][ T8702] usb 1-1: device descriptor read/8, error -71 14:17:02 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x4, 0x7ff) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xa, &(0x7f00000000c0)={&(0x7f0000000900)={0x438, 0x3f4, 0x8, 0x70bd2d, 0x25dfdbfb, {0x4, 0x2, 0x8, [0x9, 0x4, 0x2, 0x1, 0x1d5, 0x7, 0x401, 0x80, 0x7, 0x7, 0x10000, 0x2, 0x1000, 0x1ff, 0xd63, 0x10000, 0x6, 0x7, 0x0, 0x6, 0x5, 0x1fbb5b90, 0x1, 0x8000, 0x9, 0x3, 0xff, 0x7fffffff, 0x8, 0x6, 0x80, 0x3ff, 0x2, 0xffffac89, 0x3, 0x2, 0x400, 0x5, 0x0, 0x7, 0x7b, 0x1f, 0xffffff7f, 0x200, 0x8, 0x7fffffff, 0x100, 0x1, 0x4, 0x0, 0xfffffffc, 0xa4, 0x4, 0x7, 0x4, 0x7fffffff, 0x7, 0xe6, 0xff, 0x7, 0xfffffffb, 0x9, 0x81, 0x101], [0xffffffff, 0xfffffffd, 0x4, 0x400, 0x7, 0x20, 0x5, 0x6, 0x1ff, 0x7, 0x24, 0x2, 0x400, 0x6, 0x6, 0x7, 0x7, 0x3, 0xfffffff8, 0x0, 0xc1b8, 0x2, 0x1c, 0x800, 0x7, 0x0, 0xffffffc0, 0x83, 0x7, 0x9, 0x3, 0x1, 0x956, 0x401, 0x101, 0x80, 0x6, 0x5, 0x3, 0xfffffffa, 0x3, 0x9e, 0xff800, 0xcd, 0x101, 0x1, 0x6, 0x8, 0x4000, 0x2, 0x5, 0xd3af, 0x5, 0x7, 0x100, 0x7f, 0x5, 0x3f, 0x88, 0xde25, 0xffff, 0xffff, 0x2], [0x3ff, 0x1, 0xffff220a, 0x839, 0x6, 0x6, 0x0, 0x5, 0x80000001, 0x8000, 0xcf1c, 0x6, 0x5d0d, 0xffffff81, 0x9, 0x0, 0x1, 0x3800000, 0x1, 0x400, 0x5, 0x2, 0x1, 0x0, 0xfffffffe, 0x3f, 0x8001, 0x8, 0x800, 0x1c, 0x5d7, 0xffff000, 0x346, 0x8, 0x0, 0x3, 0x7fffffff, 0xe93d, 0x200, 0x9, 0x9, 0x9, 0x0, 0xac2, 0x1f, 0x6, 0x6, 0xd, 0xc00, 0x6, 0x0, 0x2, 0x3, 0x4, 0xffff, 0xe0, 0xfff, 0x6, 0x2, 0x3, 0xffff615d, 0xffffff33, 0x25d25555, 0x9], [0x8, 0x4, 0xf31, 0x4, 0xf0c5, 0x8001, 0x1, 0x30, 0xff, 0x5, 0xff, 0x200, 0x1, 0x0, 0x7, 0x3, 0x800, 0x200, 0x80000000, 0xbb, 0x1, 0x800, 0x8, 0x4, 0x2, 0x5, 0x3, 0x8, 0x80000000, 0x3ad, 0x7fffffff, 0x9, 0xfff, 0x8, 0x7f, 0x3f, 0x1000, 0x6, 0x80, 0x2, 0x4, 0x0, 0x3, 0x8, 0xffffffff, 0x1000, 0x4, 0x81, 0x0, 0xba8, 0x3, 0x400, 0x5, 0x4, 0x80000001, 0x200, 0x4, 0x2, 0x7, 0x7, 0x81, 0x4, 0x10001, 0xe58], 0x16, ['#$,{&$-\x00', 'snmp_trap\x00', 'raw\x00']}, [""]}, 0x438}, 0x1, 0x0, 0x0, 0x20000010}, 0x4044010) close(r4) linkat(r3, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x1400) 14:17:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 14:17:02 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000080)={'nr0\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) 14:17:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x80, 0x0}, 0x0) [ 586.855692][ T8702] usb 1-1: new high-speed USB device number 47 using dummy_hcd 14:17:02 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) [ 587.047011][ T8702] usb 1-1: device descriptor read/8, error -61 [ 587.085593][ T27] audit: type=1326 audit(1598883422.746:6): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7fc00000 [ 587.107068][ T27] audit: type=1326 audit(1598883422.746:7): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 [ 587.128914][ T27] audit: type=1326 audit(1598883422.746:8): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 [ 587.149846][ T27] audit: type=1326 audit(1598883422.746:9): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=231 compat=0 ip=0x45d5b9 code=0x7fc00000 [ 587.319193][ T8702] usb 1-1: device descriptor read/8, error -61 [ 587.445995][ T8702] usb usb1-port1: unable to enumerate USB device [ 587.581403][ T27] audit: type=1326 audit(1598883422.866:10): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7fc00000 14:17:05 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:05 executing program 5: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 14:17:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0205647, &(0x7f0000000200)={0x0, 0xe, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "80002000"}, 0x0, 0x0, @fd}) 14:17:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x80085504, &(0x7f0000000100)=@urb_type_control={0x2, {0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:17:05 executing program 2: semctl$SETALL(0x0, 0x0, 0xf, 0x0) 14:17:05 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000080)={0x40002002}) ioctl(r3, 0x2, &(0x7f0000000900)="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") setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:05 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r4}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001180)={'syztnl1\x00', &(0x7f00000010c0)={'gretap0\x00', 0x0, 0x8000, 0x80b0, 0x8, 0x3, {{0x1b, 0x4, 0x1, 0x3b, 0x6c, 0x64, 0x0, 0x20, 0x2f, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x34, 0x3e, 0x3, 0x4, [{@loopback}, {@multicast1, 0x9}, {@private=0xa010100}, {@local, 0x5}, {@empty, 0xbe4}, {@local, 0x9}]}, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x2, 0x8, "f1d923cd9bc0"}, {0x0, 0xd, "2d7ee43d287257dee580cb"}]}, @generic={0x44, 0x6, "2270e05c"}]}}}}}) sendmmsg$inet(r2, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffff001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @dev={0xac, 0x14, 0x14, 0x42}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x98}}, {{&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@noop, @cipso={0x86, 0x30, 0x3, [{0x2, 0x10, "097bfc9f8e569c665ea274ae888b"}, {0x7, 0x12, "9ad4056f5ee33ea825977e97be185fd9"}, {0x1, 0x5, "f0bfd5"}, {0x0, 0x3, 'r'}]}, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x0, 0xc, "03257c921d7adf66b6a9"}, {0x0, 0x12, "18f10e5dd78c8dcb79a8c63f6922b5af"}]}, @end, @lsrr={0x83, 0x7, 0x60, [@empty]}, @generic={0x44, 0xe, "0438bb3f9cae0e2936e8141b"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc0}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x52, 0x1, 0x2, [{@local, 0x96e5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0xed87}]}, @noop, @cipso={0x86, 0x1c, 0x0, [{0x0, 0x4, "3795"}, {0x0, 0x12, "81c903a4f9700b272b5c8fa860da83fd"}]}, @rr={0x7, 0x23, 0x8b, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x25}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x23}]}, @lsrr={0x83, 0x3, 0x81}, @end]}}}], 0x120}}, {{&(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)="858f7370c167e31f7fe573ec95ea4ca25febc7733d71151765d704cedf8a769dfaf2eb6071658f4874e3ae292966e8f385e362d31fe2acc07390657862dd747267e0a064aa61aae888ff914cddc1b01e3d4acd5ace7c77dc853fb80ac12365332e721f224d1d95fb92ca2d0a6f06dc490a42f77f56aa74c3f460cafa9ee2", 0x7e}], 0x1, &(0x7f0000000400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x18}}, {{&(0x7f0000000440)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000900)="126decfaf04df06b5e9b9b2ce4966d4c39c3b8300321db706981ddb256", 0x1d}, {&(0x7f0000000940)="438367bbac1d56c53ab07215f54c104310763188567559831921fdc1921c73e781abfe9e48fa22cf0fce713c7c5660546ae1d22392f2a25f9e85976e0ecd7731c71cb1b72a8ddd475a98cfda4be1dfdfdbee4a2cac63f39a32d0eb2ec83f64ce84031f776d49a5bb7ed02832add1ee3a11a46e023e63705338fe296fa5806fb8b807e249e81d880da590191d62f991374285774fcadc8c360764313d78d7c0070991d9fb983a67cebf9a3b174060a57ced7b0101d2d584a18a1cdc8cd8da4bf6c35c1484d88ae2fc93a8c3b30836e9796024d2cbac849b4e911298a290170e3bc6bc", 0xe2}, {&(0x7f0000000a40)="ef4e3d36a031590758350c5539e383bfb29406629c56074a3fa2a086fbcdd32e4189c6d5d29c627535d09a969086f4b6e187e79c0b255ca2f3de889c66d49f302774129f00ca748799e0ff9f55c1c5ed80902e92e6689b3149d72a580edb", 0x5e}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="46e671f20c44507683a1cd75a3f5be3512988440518986860cd1eb57fa8df67a8b8109bf930e635ed947b7ca7280a52dd79d1e5a322087523e4a9885b2d57f0e5523e447b79e67ede5adcec1175e18f4be1f1e5904f3f8c6acbc7775bee5a1b58cf3a5ad3a3ea32789764ce72e25b4701f85038a7ed1bb93525206cfb260fb3f850fc8ed4a3fdb3f3740c2ae02f1caf0198b25862819963ad4b437440f620fc1f9f239063a79b9234ebb04283cb1ff5c74eaffb4d6d4ade9db799b8d81d5f93a910e752a985d379c19c5fadd9d476510df1493e1ccdf455d8bf050ef54c4dacd4f63f16013b8fcff4bc18b332ec066", 0xef}], 0x5, &(0x7f0000000c80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9c6b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0x98}}, {{&(0x7f0000000d40)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000d80)="749f131a74ba878b692562dc8b27117305a5c332b2bfe966849f9cd75b9e5eb8b0c3986a0039e3cfe710d869db68581772a0babce41208c2a64600e3958ce9a385995133d479b8e26002559169400699f968f4b5485d03f7e2218129e0370f965a0a37ee1f185f5c1cb2237f14d0456974f2366b11c742824afd4a543f900a7199978b2b605952c128ebdc4c701122", 0x8f}], 0x1, &(0x7f0000000e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe6}}], 0x30}}, {{&(0x7f0000000ec0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="d58aa355ed66f2f3096f4f7eb872271f7b816cf7076829d991ca850c2c500f1064a7e54d8a1f355d8cd53f1d0cbae46d1fedd0ff5a1c2e6e727eb385185ad2f52e72b3053b9404ca81b0d93001d257c54ed5c31da7e1edd4ad07321ae6d0226610421ad476dc3b45644ce4df9a45689195a92501baeb17b53ef6105fea256c127b505c94ca4848d9bc8ac06adbb8fb2f64685fd3a3f4a97a4ff376669c", 0x9d}], 0x1, &(0x7f00000011c0)=[@ip_retopts={{0x28, 0x0, 0x7, {[@end, @lsrr={0x83, 0xb, 0xb6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp={0x44, 0xc, 0xe0, 0x0, 0xa, [0x4b2, 0x7]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x78}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000001240)}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="aad09afe49c8ad6176515674f2bb10f31a43e2d32141c7d82439557d4653b263f4f2e6267bc208e1383888ae65ef218df12b36174e47ca47030b13985095ba61643d74cae2fe46e157dcb1ed7d8733d8039236020e0785", 0x57}, {&(0x7f0000002300)="fb2efe79adac985653acad839f5fc40c72ccc94f0706847f1185c387410855a742f64fac2e26431ac837ea94a6c9af9c22e444bc11719899ab8fa315b35679ce5c5f21e37632a92fbf237daba386c9f9ad3fdd6e8ee94bf78f3b745fd2d57ad6c170a59d3355c32ddbf3f1a82f3c89cc5922fb2eeeeaac3ee6e9d06c3d2409aac83d834c7bc71ac6873aa601d1b3c16013815ad1dfe5e368f35252ae2e824e0a6398acdd4bc88f0b3fb35fbd84063dab412a298580a7909f2761ed8175f0f976f7bd5727", 0xc4}, {&(0x7f0000002400)="5b6c4a0c5b4d0756839a24fd11a56329096e13f2a36366c365da888e6579237dd265345359062a5f8b1134698f7df6679283138ac01a4a60a1582f94ffa25a753ffac409287a538898f9d6f919f1b11f", 0x50}, {&(0x7f0000002480)="64c27fa32f86a1924b757233fbdc86b74494", 0x12}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="a0f33861a02d5bddd181dc56ef98ad71066b8e1f98353373c3f5910683698973e1a96841c129637b61879c2ba2a65c041dea63fc15948d6cdae79e8780fe4dc96678eb812ccf76bcc4c82eb40296c592f887e196d6f64b61afed7ad780d0196bf0", 0x61}], 0x8, &(0x7f00000035c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @local}}}], 0x20}}], 0x7, 0x200088a0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80085504, &(0x7f0000000000)) 14:17:05 executing program 3: r0 = socket(0x10, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10163) 14:17:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x4, 0x0, 0x0) 14:17:05 executing program 5: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8953, &(0x7f0000000100)=@buf) [ 590.105126][ T9174] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 590.197409][T13331] usb usb2: usbfs: process 13331 (syz-executor.4) did not claim interface 0 before use 14:17:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8906, 0x0) [ 590.345057][ T9174] usb 1-1: Using ep0 maxpacket: 8 [ 590.466059][ T9174] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.476681][ T9174] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 590.485950][ T9174] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 590.495362][ T9174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.643451][ T9174] usb 1-1: config 0 descriptor?? [ 590.908445][ T3223] usb 1-1: USB disconnect, device number 48 14:17:07 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:07 executing program 3: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x84, 0x72, 0x0, &(0x7f000000a980)) 14:17:07 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0xf0, 0x4c, 0x274, 0xf0, 0x0, 0x1f8, 0x318, 0x318, 0x1f8, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00', {0x3}}}}, {{@ipv6={@private2, @loopback, [0xffffff00, 0x0, 0xffffff00, 0xffffff00], [0x0, 0xff000000, 0xffffff00], 'tunl0\x00', 'macvlan1\x00', {}, {}, 0x89, 0x40, 0x7, 0x8}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0x0, 0xff, 0xff, 0xff000000], 0x4e25, 0x4e22, 0x4e24, 0x4e20, 0x5, 0x1f, 0x400, 0x5, 0x80000000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 14:17:07 executing program 4: r0 = socket(0x1e, 0x2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x1e, 0x3}, 0x2000000c, &(0x7f0000000040)={0x0, 0x101d0}}, 0x0) 14:17:07 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stack\x00') read$snapshot(r0, 0x0, 0x0) 14:17:07 executing program 2: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 14:17:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7d, &(0x7f00000002c0), &(0x7f0000000300)=0x10) 14:17:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:17:07 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) 14:17:07 executing program 4: r0 = socket(0xa, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006e00)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r2}, 0xc) 14:17:07 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in6=@ipv4={[], [], @loopback}, 0x4e23, 0x5, 0x4e23, 0x4, 0x2, 0x80, 0xa0, 0x2b}, {0x100000000, 0x5, 0x2, 0xdf6, 0x80, 0x6e, 0x6, 0x46ff}, {0x1, 0x7, 0x6, 0x52}, 0x5362, 0x0, 0x0, 0x0, 0x2, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3507, 0x4, 0x3, 0x81, 0x2, 0x8001, 0x7f}}, 0xe8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 592.174843][ T8702] usb 1-1: new high-speed USB device number 49 using dummy_hcd 14:17:08 executing program 5: r0 = io_uring_setup(0x192b, &(0x7f0000000080)) r1 = io_uring_setup(0x1e2a, &(0x7f00000005c0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) [ 592.417631][ T8702] usb 1-1: Using ep0 maxpacket: 8 [ 592.537955][ T8702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.551350][ T8702] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 592.560666][ T8702] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 592.569901][ T8702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.694140][ T8702] usb 1-1: config 0 descriptor?? [ 592.953500][ T8702] usb 1-1: USB disconnect, device number 49 14:17:09 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x107, 0x1, 0x0, 0x404f00) 14:17:09 executing program 1: syz_emit_ethernet(0xfffffffffffffee0, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\\<\x00', 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, [], 0x3c}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x8, 0x88c0, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {0x8, 0x22eb, 0x8000000}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKRAGET(r3, 0x1263, &(0x7f00000002c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB='\x00'/14], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="51b403a6", @ANYRES16=r5, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x4041055}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x4181, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 14:17:09 executing program 2: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x541b, &(0x7f0000000180)={0xfec0, @qipcrtr, @nfc, @xdp, 0x0, 0x0, 0x0, 0x600}) 14:17:09 executing program 4: r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 14:17:09 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x18, 0x0, &(0x7f0000000300)) 14:17:09 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000200)={'veth1_macvtap\x00', @ifru_hwaddr=@multicast}) 14:17:09 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010042, 0x0) 14:17:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x24, 0x0, &(0x7f0000000300)) 14:17:09 executing program 5: r0 = socket(0x2, 0x3, 0xa2) ioctl$sock_SIOCADDRT(r0, 0x8910, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @multicast2}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, @isdn}) [ 594.234954][ T8702] usb 1-1: new high-speed USB device number 50 using dummy_hcd 14:17:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}}, 0x0) [ 594.474801][ T8702] usb 1-1: Using ep0 maxpacket: 8 [ 594.595686][ T8702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.606397][ T8702] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 594.615709][ T8702] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 594.626438][ T8702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.768639][ T8702] usb 1-1: config 0 descriptor?? [ 595.014067][ T9174] usb 1-1: USB disconnect, device number 50 14:17:11 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:11 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) read$fb(0xffffffffffffffff, &(0x7f0000000000)=""/96, 0x60) 14:17:11 executing program 4: r0 = socket(0x28, 0x1, 0x0) connect$pppl2tp(r0, 0x0, 0x0) 14:17:11 executing program 5: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x84, 0x1a, 0x0, &(0x7f000000a980)=0x8300) 14:17:11 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 14:17:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), 0x4) 14:17:11 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7ff, @loopback, 0x7f}, 0x1c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x83, &(0x7f0000000040)=""/37, &(0x7f0000000080)=0x25) 14:17:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000500)={0x4c, 0x25, 0x1}, 0x4c}}, 0x0) 14:17:11 executing program 2: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x11, 0x0, &(0x7f000000a980)) 14:17:11 executing program 5: bpf$OBJ_GET_PROG(0x1e, 0x0, 0x0) [ 596.184411][ T49] usb 1-1: new high-speed USB device number 51 using dummy_hcd 14:17:12 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 596.314056][T13475] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 596.447788][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 596.578043][ T49] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 596.586383][ T49] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.597059][ T49] usb 1-1: config 0 has no interface number 0 [ 596.604177][ T49] usb 1-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 596.615168][ T49] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 596.628239][ T49] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 596.637620][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.668464][ T49] usb 1-1: config 0 descriptor?? [ 596.715534][ T49] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 596.919525][ T8704] usb 1-1: USB disconnect, device number 51 14:17:13 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:13 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCDELRT(r0, 0x541b, 0x0) 14:17:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100), &(0x7f00000000c0)=0x8) 14:17:13 executing program 2: r0 = socket(0x15, 0x5, 0x0) connect$l2tp(r0, &(0x7f0000000000)={0xa, 0x0, @multicast1}, 0x10) 14:17:13 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000080)=""/113, 0x71}}, 0x120) write$UHID_INPUT2(r0, &(0x7f0000000200), 0x6) 14:17:13 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 597.639977][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.648116][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.655925][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.663681][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.672718][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.680421][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.688132][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.695806][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.703400][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.711080][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.718952][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.726717][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.734392][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.741993][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.749661][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.757330][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.765000][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.772608][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.780300][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.788499][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.796170][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.803777][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.811459][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.819658][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.827334][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.834999][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.842610][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.850287][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.858569][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.866330][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.873935][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.881634][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 14:17:13 executing program 2: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x8905, &(0x7f0000000040)) 14:17:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x5, 0x0, 0x0) [ 597.889322][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.896997][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.904664][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.912256][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.920010][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.927862][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.935522][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.943166][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.950918][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.958596][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.966291][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.974001][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.981691][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.989371][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 597.997074][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.004775][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.014460][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.022088][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.029855][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 14:17:13 executing program 3: r0 = open(&(0x7f0000002440)='./file1\x00', 0x169040, 0x0) read$FUSE(r0, 0x0, 0x0) [ 598.037624][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.045302][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.045468][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.045626][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.045791][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.075615][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.083342][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 14:17:13 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x224001, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r2, 0x0, 0x4000, 0x1000}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 598.091035][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.098712][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.106390][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.113998][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.121673][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.129893][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.137564][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.145238][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.152851][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.160590][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.168230][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.175898][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.183495][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.191187][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.198852][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.206603][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.214283][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.221919][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.229593][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.237381][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.247836][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.255506][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.263103][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.270751][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.278401][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.286055][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.293663][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.301358][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.309024][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.316688][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.324360][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.331966][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.339641][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.347410][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.356115][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.363727][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.371407][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.379102][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.386773][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.394425][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.402025][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.409691][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.417365][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.425029][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.432725][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.440399][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.448077][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.455751][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.463362][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.471042][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.478740][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.486454][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.494148][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.501765][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.509437][ T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 598.554270][ T49] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 14:17:14 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x76, &(0x7f0000000040)=""/37, &(0x7f0000000080)=0x25) 14:17:14 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x10040, 0x0) [ 598.824219][ T3223] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 599.064423][ T3223] usb 1-1: Using ep0 maxpacket: 8 [ 599.185438][ T3223] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 599.193631][ T3223] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.204057][ T3223] usb 1-1: config 0 has no interface number 0 [ 599.210313][ T3223] usb 1-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 599.221058][ T3223] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 599.234063][ T3223] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 599.243187][ T3223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.395777][ T3223] usb 1-1: config 0 descriptor?? [ 599.464086][ T3223] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 599.665040][ T8707] usb 1-1: USB disconnect, device number 52 14:17:15 executing program 3: openat$binder_debug(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) 14:17:15 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000001680)) 14:17:15 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:15 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x128200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4000000000400200) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0xe0000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) 14:17:15 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 14:17:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001500)={0x14}, 0x33fe0}}, 0x0) 14:17:16 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) 14:17:16 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x541b, 0x0) 14:17:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001500)={0x14}, 0x20001514}}, 0x0) 14:17:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80084503, 0x0) 14:17:16 executing program 5: r0 = socket(0x28, 0x80001, 0x0) connect$netlink(r0, 0x0, 0x0) [ 600.804123][ T8707] usb 1-1: new high-speed USB device number 53 using dummy_hcd 14:17:16 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x107f00, 0x0) [ 601.044282][ T8707] usb 1-1: Using ep0 maxpacket: 8 14:17:16 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x2, 0x0) dup(r2) getsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 601.165011][ T8707] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 601.173277][ T8707] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.183982][ T8707] usb 1-1: config 0 has no interface number 0 [ 601.190240][ T8707] usb 1-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 601.200939][ T8707] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 14:17:16 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') fcntl$getownex(r0, 0x40e, &(0x7f0000000580)) [ 601.214268][ T8707] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 601.223402][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.245488][ T8707] usb 1-1: config 0 descriptor?? [ 601.294401][ T8707] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 601.527078][ T8707] usb 1-1: USB disconnect, device number 53 14:17:17 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:17 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0xf, &(0x7f0000000580)) 14:17:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:17:17 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x5) sendmsg$AUDIT_USER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x3ed, 0x20, 0x70bd2b, 0x25dfdbfb, "627492cb80777f06fd9b85d636d1dca0beaf174411f9716f0bd940c20d49ee03e29868ec03b370dd072a921df7f4e94c948b906c6a00a0b978905eb88122c2dd57ebec4d7c5a404b535be2fdbb03da6dc860c2baffdc6606b614283c8c862bcc5c719a9d3158ab384f7682b8f485e9bcc1e1d2932dadae4e59621a0152", ["", "", "", "", "", ""]}, 0x90}, 0x1, 0x0, 0x0, 0x4004015}, 0x8010) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0xc) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x7) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000180)={0x1f, 0xfffffffb, {}, {0xffffffffffffffff}, 0x0, 0x6}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:17 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1407, 0xf439cd4c3bd65977}, 0x10}}, 0x0) 14:17:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0xc0189436, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_ivalue}) 14:17:18 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:18 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:17:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) tkill(0x0, 0xb) 14:17:18 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x800005, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000001c0)=0x1) 14:17:18 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x40485404, &(0x7f0000000000)) 14:17:18 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x6, &(0x7f0000000000)=0x5, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 602.724349][ T8704] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 602.963968][ T8704] usb 1-1: Using ep0 maxpacket: 8 [ 603.085318][ T8704] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 603.093961][ T8704] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.104408][ T8704] usb 1-1: config 0 has no interface number 0 [ 603.111816][ T8704] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 603.123189][ T8704] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 603.133429][ T8704] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 603.146556][ T8704] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 603.155826][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.395210][ T8704] usb 1-1: config 0 descriptor?? [ 603.416163][T13618] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 603.544199][ T8704] usb 1-1: invalid MIDI in EP 0 [ 603.551806][ T8704] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 603.719187][ T3223] usb 1-1: USB disconnect, device number 54 14:17:19 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:19 executing program 5: r0 = socket(0xa, 0x3, 0x200000000000ff) ioctl$sock_SIOCADDRT(r0, 0x8946, &(0x7f0000000180)={0xfec0, @qipcrtr, @nfc, @ax25={0x3, @default}, 0x0, 0x0, 0x0, 0x600}) 14:17:19 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x20200004, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0405602, &(0x7f0000000200)={0xfffffffc, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "80002000"}, 0x0, 0x0, @fd}) 14:17:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x7, 0x0, 0x0) 14:17:19 executing program 4: r0 = socket(0x23, 0x2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 14:17:19 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$char_usb(0xffffffffffffffff, &(0x7f0000000140)="ec285e6fb590083a674bffdf7b4fdd20b2c330c292779643709844f666d43ffc1c6c6ef6d1666c032f8968b1a929f0c7eb693fbc6467b66d790787cf5ba5666df3f1066cac4ae721653f4e282ff12e431bf724383ae65c1f28cb0541d31074db94848d5c214cc0845b93887e4dea4d0e291834e7da110037a03c7b7f55fee3d962484aa725c8e6706adc64fafff866fcb3373db9458fe27eac34d98645133322220a23522c035f3d344faeb7c4b0db5c0e1447fdbcb2a992fff9463630c9787d9e6c2fec5f4980d34c974717cee85d56890c9d1e3e", 0xd5) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x17, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x6000) r1 = dup(0xffffffffffffffff) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000400)='syz1\x00') r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x1, 0x4100) r3 = openat$cgroup_ro(r2, &(0x7f0000000440)='pids.current\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000009c0)={&(0x7f0000000900), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004040) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000240)='./file0\x00', 0x220400, 0x2) r7 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x63eb, 0x420200) r8 = fsmount(r0, 0x0, 0x0) r9 = openat$cgroup_ro(r2, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x110, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4000}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xd}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x34}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, [], 0x1}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}]}]}, 0x110}}, 0x24000000) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000008000000", @ANYRES32=r6, @ANYBLOB="0000000000000000010000000000000001000000", @ANYRES32=r7, @ANYBLOB="0000000000000000000000000000000000000100", @ANYRES32=r2, @ANYBLOB="000000fb00200000000000000000010000000000", @ANYRES32, @ANYBLOB="00000000000001000000000000f0ffff00000000", @ANYRES32=r8, @ANYBLOB="00060000000000f0ffffffff95983ead00f0ffff", @ANYRES32=r2, @ANYBLOB="0000000000f0ffff000000000020000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000001000000000000000100", @ANYRES32=r9, @ANYBLOB="0000000000f0ffff0000000000f0ffffffffffff"]) 14:17:20 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:20 executing program 5: r0 = socket(0x2, 0x3, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={0x0, 0xffff0000}}, 0x0) 14:17:20 executing program 4: r0 = socket(0xa, 0x3, 0x9) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 14:17:20 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xc4000, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:20 executing program 2: socket$inet6_sctp(0xa, 0xffa2e21a6ac5c657, 0x84) 14:17:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_dccp_int(r0, 0x10e, 0xb, 0x0, 0x0) [ 604.776829][ T8707] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 605.025538][ T8707] usb 1-1: Using ep0 maxpacket: 8 [ 605.144674][ T8707] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 605.152864][ T8707] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.163518][ T8707] usb 1-1: config 0 has no interface number 0 [ 605.169870][ T8707] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 605.181090][ T8707] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 605.191284][ T8707] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 605.204299][ T8707] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 605.213515][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.443883][ T8707] usb 1-1: config 0 descriptor?? [ 605.465870][T13666] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 605.534321][ T8707] usb 1-1: invalid MIDI in EP 0 [ 605.542118][ T8707] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 605.709997][ T8707] usb 1-1: USB disconnect, device number 55 14:17:22 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 14:17:22 executing program 5: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x80047437, 0x0) 14:17:22 executing program 3: r0 = socket(0x29, 0x5, 0x0) getsockname$packet(r0, 0x0, 0x0) 14:17:22 executing program 2: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x84, 0x14, 0x0, &(0x7f000000a980)) 14:17:22 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)) 14:17:22 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x4000) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x10000005) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 14:17:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001, 0x14}, 0x2c) 14:17:22 executing program 5: r0 = socket(0x2, 0x3, 0xa2) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0xffb2) 14:17:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={0x0, @in, @l2={0x1f, 0x0, @fixed}, @can}) 14:17:22 executing program 3: r0 = socket(0xa, 0x3, 0x200000000000ff) bind$tipc(r0, 0x0, 0x0) 14:17:22 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 606.993423][ T8707] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 607.233931][ T8707] usb 1-1: Using ep0 maxpacket: 8 [ 607.355794][ T8707] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 607.364155][ T8707] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.374564][ T8707] usb 1-1: config 0 has no interface number 0 [ 607.380827][ T8707] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 607.392071][ T8707] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 607.402288][ T8707] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 607.415334][ T8707] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 607.424599][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.525030][ T8707] usb 1-1: config 0 descriptor?? [ 607.545994][T13719] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 607.613939][ T8707] usb 1-1: invalid MIDI in EP 0 [ 607.621683][ T8707] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 607.795987][ T8707] usb 1-1: USB disconnect, device number 56 14:17:24 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:24 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x9, 0x80}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x6, 0x0, 0x4, 0x10000, 0x6, {0x77359400}, {0x4, 0x0, 0x8, 0x9, 0x9f, 0xfd, "0124e482"}, 0x0, 0x3, @planes=&(0x7f0000000080)={0xbf, 0x3f, @mem_offset=0x9a, 0x9}, 0x3, 0x0, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000000)={0x4fb, 0x3, 0x151}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:24 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 14:17:24 executing program 4: r0 = socket(0x2, 0x3, 0x4) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x78) 14:17:24 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) 14:17:24 executing program 5: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x84, 0x6d, 0x0, &(0x7f000000a980)=0x300) 14:17:24 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105500, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:17:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045510, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:17:24 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000000000)={0x3, 0x100, 0x5, 0x7, 0x80000001, 0x3}) 14:17:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x7d, &(0x7f0000000280)={r2}, &(0x7f00000002c0)=0x8) 14:17:24 executing program 2: r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) [ 608.783558][ T8707] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 609.023681][ T8707] usb 1-1: Using ep0 maxpacket: 8 [ 609.144554][ T8707] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 609.152731][ T8707] usb 1-1: config 0 has no interface number 0 [ 609.159463][ T8707] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 609.170753][ T8707] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 609.180961][ T8707] usb 1-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 609.193181][ T8707] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 609.202307][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.261600][ T8707] usb 1-1: config 0 descriptor?? [ 609.285539][T13769] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 609.373626][ T8707] usb 1-1: invalid MIDI in EP 0 [ 609.381289][ T8707] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 609.534864][ T8702] usb 1-1: USB disconnect, device number 57 14:17:25 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:25 executing program 3: prlimit64(0x0, 0xf00, 0x0, 0x0) 14:17:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x80085504, 0x0) 14:17:25 executing program 2: r0 = socket(0x2, 0x3, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x5000}, 0x0) 14:17:25 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x4c, 0x274, 0xf0, 0x0, 0x1c0, 0x318, 0x318, 0x1c0, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', {0x800}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 14:17:25 executing program 4: r0 = socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) [ 610.366572][T13816] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 14:17:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000500)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0) 14:17:26 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000140)={0x0}}, 0x0) 14:17:26 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4305, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 14:17:26 executing program 2: r0 = fsopen(&(0x7f0000000580)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x29, 0x0, 0x0, 0x0) 14:17:26 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x400000800000ffff, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000000)={0x2, 0x1, 0x0, {0x40008, 0x20, 0x2, 0xffffffff}}) r2 = gettid() ptrace(0x4206, r2) tkill(r2, 0x800000009) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x400, 0x0) tkill(r2, 0x2b) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) r3 = socket$inet6(0xa, 0x80806, 0x3) r4 = dup(r3) timerfd_create(0x4, 0x80800) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x100000000) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 610.823152][ T8800] usb 1-1: new high-speed USB device number 58 using dummy_hcd 14:17:26 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x5460, 0x0) [ 611.073940][ T8800] usb 1-1: Using ep0 maxpacket: 8 [ 611.195049][ T8800] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 611.204551][ T8800] usb 1-1: config 0 has no interface number 0 [ 611.210860][ T8800] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 611.222119][ T8800] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 611.232268][ T8800] usb 1-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 611.242926][ T8800] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 611.252140][ T8800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.465333][ T8800] usb 1-1: config 0 descriptor?? [ 611.486281][T13822] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 611.604284][ T8800] usb 1-1: invalid MIDI in EP 0 [ 611.611316][ T8800] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 611.759886][ T8704] usb 1-1: USB disconnect, device number 58 14:17:28 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:28 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0xa, 0x44b) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x503}, 0x14}}, 0x0) 14:17:28 executing program 2: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x84, 0x24, 0x0, &(0x7f000000a980)=0x300) 14:17:28 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x5411, 0x0) 14:17:28 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 14:17:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') read$rfkill(r0, 0x0, 0x0) 14:17:28 executing program 4: bpf$BPF_LSM_PROG_LOAD(0x1e, &(0x7f0000000580)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:17:28 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@generic) 14:17:28 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, &(0x7f0000000240)="058f", 0x2, 0x4044890, &(0x7f0000000280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xfffffffffffffda3) 14:17:28 executing program 1: clone(0x2000000088830100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) delete_module(&(0x7f0000000000)='@\\^@$}\x00', 0x800) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fddbdf25010000000000000009410000004c00180000580e73797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe6a9645a0c71b"], 0x68}}, 0x884c) r4 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000080)={{0x32, @local, 0x4e23, 0x2, 'ovf\x00', 0x2c, 0x83f, 0x1}, {@empty, 0x4e23, 0x4, 0xff, 0x408040, 0xe3}}, 0x44) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="28000000056f026a899120c0b1066dadf5071961fcb8a9ef1a75ce58e092d9158fe11286897989521d82c8a9fefa704a51a4846cfde5f92b61e30e816dca379abff18139c14147baa07d53daa04358c512dc246025ba724b64c371976491eb8cd8bad9f297e02ea070251eddf14fd35b3e8b9f2ece716b02eb705112b194510d21", @ANYRES16, @ANYBLOB="2af884841ac28cc3e424f3fab5e3351163069536f90dc9fad46bf94f95d4ebb29ec2d1ac05f18b5a651c5dc4526cd9fd72da1a5201aaabf9021aa495d687674c4d5f0bbf939768d962d6e7eafabf53229cf6666b4693f25768c9f5855e31e3b6ac9d960f0ce6ea3bdac9b722bcc604d867311b645c0bdd819e8a30baa91e1d8f7211c49e284e2d2abf04078c89f5cdb676030000000000000000"], 0x28}}, 0x0) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x188, 0x0, 0xfb9647e505e99e39, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x686}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x34}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc41}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x900}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @rand_addr=0x64010100}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20044840}, 0x4000894) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 612.903331][ T8704] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 613.143028][ T8704] usb 1-1: Using ep0 maxpacket: 8 14:17:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x71010000}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) [ 613.264216][ T8704] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 613.272798][ T8704] usb 1-1: config 0 has no interface number 0 [ 613.279120][ T8704] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 613.290609][ T8704] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 613.300942][ T8704] usb 1-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 613.311816][ T8704] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 613.321337][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.483834][ T8704] usb 1-1: config 0 descriptor?? [ 613.505144][T13870] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 613.598295][ T8704] usb 1-1: invalid MIDI in EP 0 [ 613.622974][ T8704] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 613.762882][ T8704] usb 1-1: USB disconnect, device number 59 14:17:30 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0189436, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:17:30 executing program 3: r0 = syz_io_uring_setup(0x2e3, &(0x7f00000000c0), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x42110, r0, 0x0) 14:17:30 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000000)=""/104, 0x68, 0x12000, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$inet6(0xa, 0x5, 0x69) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:30 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000002e00), 0x4) 14:17:30 executing program 5: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x84, 0x9, 0x0, &(0x7f000000a980)=0x9b) 14:17:30 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000280)='U', 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000480)='asymmetric\x00', 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', ':@{', 0x20, 0xf0b, 0x20, [0x64, 0x63, 0x31, 0x31, 0x31]}, 0x35, r0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x594}}, 0x10) r3 = dup(r2) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r4, 0x0) r5 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r4, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000140)) readv(r5, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000100)="26e7b53ef8c144c8b2100e01f1401d0e", 0x10) 14:17:30 executing program 4: syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) 14:17:30 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='net/psched\x00') write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 14:17:30 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) 14:17:30 executing program 3: r0 = socket(0xa, 0x3, 0x200000000000ff) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @qipcrtr={0x2a, 0x3, 0x8000}, @nfc={0x27, 0x1, 0x2, 0x4}, @ax25={0x3, @default}, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x200000000000, 0x1, 0x4}) r1 = socket(0x11, 0x2, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20080, 0x0) setsockopt$packet_buf(r1, 0x107, 0xa, 0x0, 0x4) r2 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000006b00)={'sit0\x00', 0x0}) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000100)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x8000000}, @generic={0x18, "127a66e3a3c441ef7bfa83a33cba"}, @nfc={0x27, 0x1, 0x1, 0x2}, 0x9, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='ip6erspan0\x00', 0x40, 0x2, 0x8}) [ 615.004329][ T8704] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 615.253624][ T8704] usb 1-1: Using ep0 maxpacket: 8 [ 615.373952][ T8704] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 615.382432][ T8704] usb 1-1: config 0 has no interface number 0 [ 615.389009][ T8704] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 615.400272][ T8704] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 615.410489][ T8704] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 14:17:31 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$binfmt_script(r0, 0x0, 0x0) [ 615.420682][ T8704] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 615.432242][ T8704] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 615.441598][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.654015][ T8704] usb 1-1: config 0 descriptor?? [ 615.674983][T13919] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 615.743193][ T9174] Bluetooth: hci3: command 0x0406 tx timeout [ 615.776578][ T8704] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 615.964642][ T9174] usb 1-1: USB disconnect, device number 60 14:17:32 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:32 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) 14:17:32 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x5, 0x0, "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"}) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x2) 14:17:32 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) 14:17:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2) r1 = socket(0x0, 0x5, 0x202) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffffbd) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 14:17:32 executing program 4: r0 = socket(0x1e, 0x2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000040)={0x0}}, 0x0) 14:17:32 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x14, 0x0, &(0x7f0000000080)) 14:17:32 executing program 2: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x12, 0x0, &(0x7f000000a980)) 14:17:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8108551b, 0x0) 14:17:32 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @ipv4={[], [], @multicast2}, 0x80000000}, 0x1c) [ 617.003990][ T8704] usb 1-1: new high-speed USB device number 61 using dummy_hcd 14:17:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x1000000}, 0x40) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) 14:17:32 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000008fbc0)={0x3aab, [], 0x0, "3795853be77a5f"}) [ 617.242805][ T8704] usb 1-1: Using ep0 maxpacket: 8 [ 617.363524][ T8704] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 617.372908][ T8704] usb 1-1: config 0 has no interface number 0 [ 617.379289][ T8704] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 617.390814][ T8704] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 617.401213][ T8704] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 617.411654][ T8704] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 617.421691][ T8704] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 617.431177][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.724387][ T8704] usb 1-1: config 0 descriptor?? [ 617.744710][T13966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 617.815521][ T8704] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 617.975098][ T8704] usb 1-1: USB disconnect, device number 61 14:17:34 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:34 executing program 1: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) set_tid_address(&(0x7f0000000000)) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x6, 0x6, 0x6}) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c020400", @ANYRES16=r4, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 14:17:34 executing program 4: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'sit0\x00'}) 14:17:34 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x410000, 0x0) 14:17:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}, 0x0) 14:17:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x12, 0x0, &(0x7f0000000300)) 14:17:34 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x5451, 0x0) 14:17:34 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDELRT(r0, 0x8953, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @private}, {0x2, 0x0, @broadcast}}) 14:17:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 14:17:34 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x40800) 14:17:34 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 619.052619][ T3223] usb 1-1: new high-speed USB device number 62 using dummy_hcd 14:17:34 executing program 4: r0 = socket(0x2, 0x3, 0x5) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000001c0)={'veth0\x00', 0x7fff}) [ 619.322519][ T3223] usb 1-1: Using ep0 maxpacket: 8 [ 619.473766][ T3223] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 619.481973][ T3223] usb 1-1: config 0 has no interface number 0 [ 619.488416][ T3223] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 619.499603][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 619.509763][ T3223] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 619.519739][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 619.529682][ T3223] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 619.538884][ T3223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.624361][ T3223] usb 1-1: config 0 descriptor?? [ 619.654546][T14019] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 619.715392][ T3223] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 619.895986][ T3223] usb 1-1: USB disconnect, device number 62 14:17:36 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:36 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xc0189436, 0x0) 14:17:36 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000940)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85513, &(0x7f0000000980)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}}) 14:17:36 executing program 3: waitid(0x0, 0x0, 0x0, 0x21000008, 0x0) 14:17:36 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)={0x0, &(0x7f00000001c0)="804cbbbef80998a887e357c0c94a6e79755b961d129b522e081506a952683b7e29e46301db8c4a2af81b4118709538af6bc075b0009165e3b4efb5caa3a3c04c5c", 0x41}) 14:17:36 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7ff, 0x0) ioctl$EVIOCGKEY(r0, 0x40305828, 0x0) 14:17:36 executing program 3: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000009c0), &(0x7f0000000a00)=0x8) 14:17:36 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000380)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc008561c, &(0x7f0000000000)) 14:17:36 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x5514, 0x0) [ 621.182556][ T8704] usb 1-1: new high-speed USB device number 63 using dummy_hcd 14:17:36 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x40c, &(0x7f0000000580)) [ 621.422652][ T8704] usb 1-1: Using ep0 maxpacket: 8 [ 621.543061][ T8704] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 621.551228][ T8704] usb 1-1: config 0 has no interface number 0 [ 621.557716][ T8704] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 621.568966][ T8704] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 621.579183][ T8704] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 621.589315][ T8704] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 621.598566][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.734085][ T8704] usb 1-1: config 0 descriptor?? [ 621.754081][T14069] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 621.761614][T14069] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 621.999950][ T8704] usb 1-1: USB disconnect, device number 63 14:17:38 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:38 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000380)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0945662, &(0x7f0000000000)) 14:17:38 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r3 = accept4$unix(r0, 0x0, &(0x7f0000000400), 0x80000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r3, 0x762da000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x441, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000900)={0x3, 0x3}) getsockopt$netlink(r4, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) 14:17:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000380)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc050565d, 0x0) 14:17:38 executing program 4: openat$ion(0xffffffffffffff9c, 0x0, 0x402000, 0x0) 14:17:38 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0205649, &(0x7f0000000140)={0xf010000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32e0d3a6"}, 0x0, 0x0, @planes=0x0}) 14:17:38 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x8) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 14:17:39 executing program 4: r0 = socket(0x25, 0x1, 0x0) connect$l2tp(r0, &(0x7f0000000000), 0x10) 14:17:39 executing program 2: r0 = socket(0xa, 0x3, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:17:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001200b9e9"], 0x14}}, 0x0) recvmsg(r0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x0) 14:17:39 executing program 1: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={0xffffffffffffffff, 0x7ff, 0x6, 0x1f}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@ipx={0x4, 0x400, 0x6, "7661b58b42f8", 0x80}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="401cd58e9e0b938e0a04d4b9d45e981315264457c44cc36776cf061a49629f33c7bf1dae57f563f6c3b7f852f1bd7244b0bbb2f4f8e3c56e2cb0e9ff36e26d8558ef6e955bb0f3683b3b2b75ded9e8d47a6b47e96fee60be6866a6c7336829ce9d4862c26d39fffcecc2f91ab531e806d4772dc56878685213908a190c8c9766db7cc2fff4a28ef636eaa009bddf00a68cad2ca9f248dd55a12f9ece165ac95e63e8551eea88a03cfcd99a50ece4cfd641e38c29137e09f16d68ac6d7e0fb34f748468", 0xc3}, {&(0x7f0000000180)="50e35687869fdbefa3f1afce509de66c6a56b276e847d08df778eaaa37678dfcb709f2d100698044e2b6a38d56b0d7c4abbc15bb5f27e0b894f37def7348aee2e5c665bf968b0852415f783cd89887ef6f8c41997e3f2942c52e261ccac2fac1a58f017ec039a9e313df407d4b5d5143fcaef6535c7c8984df5bb3ee46cd1818b6d40415f7555312589bc5e359dd19934ef32807df5628993d32132b3b3586b24e4d31272d573e674a113ba20cd1f3278dd26e409724d5db5571e190f1a8be6c990b26505b54ccfe94a8e6c55dfb349398cba50718d2d57f8389223d8f051550edcfce9d4eb9835552abc32d95", 0xed}, {&(0x7f0000000280)="6a7528d4ffaca2588438e8b06c18bfa0e071c305dc", 0x15}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="4eafb37ff88d0a8188eaa9e96be284cce68809302b8b30071cad908733a56582564e4761a89efbc063449109b48888e8e8cee27d274cf9", 0x37}], 0x5}, 0x4000) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 623.522213][ T3223] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 623.771915][ T3223] usb 1-1: Using ep0 maxpacket: 8 [ 623.909934][ T3223] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 623.918283][ T3223] usb 1-1: config 0 has no interface number 0 [ 623.926810][ T3223] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 623.938070][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 623.948370][ T3223] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 623.958617][ T3223] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 623.967863][ T3223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.154577][ T3223] usb 1-1: config 0 descriptor?? [ 624.173729][T14139] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 624.181238][T14139] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 624.440898][ T3223] usb 1-1: USB disconnect, device number 64 14:17:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f9ffff7f0000000000000b"], 0x2c}}, 0x0) 14:17:40 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:'}) keyctl$update(0x2, r0, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r0, 0x94, 0x25}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'sha224-ce\x00'}}, &(0x7f00000000c0)="aa4504e8ca5847f78d697fb532bfd12d25f6f6778d54ba793729539ab17c93cbb105a5ef47dbc7b15180c70e20e3f3f9a7f95b031090ad59c7117b86ab3dada6b1976a7e790506a2af22a3c16ed352b21123b0f59b17178b3883605c318165b44bf22cac2a075339c82e3d94c3cdf1f347787dee173489ae5a7ef53e2c46feae6586062d8aa1ea6d0d22503435e8997dfd641476", &(0x7f0000000180)="087421bbb24aeacdb8ae582408dfa3422c12b0fba74e81f3685bbfb192498ab804b3703202") pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:40 executing program 4: r0 = socket(0x21, 0x2, 0x2) read$alg(r0, &(0x7f0000000000)=""/23, 0x17) 14:17:40 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x4008b100, 0x0) 14:17:40 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:40 executing program 5: r0 = socket(0x15, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 14:17:41 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x0, 0x4c, 0x274, 0x0, 0x0, 0x370, 0x318, 0x318, 0x370, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x9, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0xa, {0x4}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) [ 625.365268][T14214] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:17:41 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8906, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 14:17:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x9, &(0x7f0000000000)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f00000001c0)="32280a4369c5", 0x6}]) syz_open_dev$vim2m(0x0, 0x0, 0x2) [ 625.467835][T14217] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:17:41 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0xf, 0x1}, 0x10}}, 0x0) 14:17:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xffffffff}, &(0x7f0000000040)=0x8) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:41 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/ipc\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) [ 625.711802][ T8702] usb 1-1: new high-speed USB device number 65 using dummy_hcd 14:17:41 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) read$FUSE(r0, &(0x7f0000002500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getregset(0x4204, r2, 0x200, &(0x7f00000000c0)={&(0x7f0000000080)=""/6, 0x6}) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) r3 = socket$inet6(0xa, 0x1, 0x89a) r4 = dup(r3) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000024c0)=ANY=[@ANYBLOB="e0000001640101020100000009000000ffffffffac1414bbe000000200000000e0000001ac1414bbac1414bbe0000002e0000001"], 0x34) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 625.951994][ T8702] usb 1-1: Using ep0 maxpacket: 8 14:17:41 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) [ 626.073116][ T8702] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 626.081299][ T8702] usb 1-1: config 0 has no interface number 0 [ 626.087976][ T8702] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 626.099348][ T8702] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 626.109614][ T8702] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 626.119692][ T8702] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 626.129137][ T8702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.398477][ T8702] usb 1-1: config 0 descriptor?? [ 626.423688][T14215] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 626.437176][T14215] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 626.726072][ T8800] usb 1-1: USB disconnect, device number 65 14:17:42 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffffbd) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 14:17:42 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffe01, 0x0) 14:17:42 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af61, &(0x7f0000000000)={0x2}) 14:17:42 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r4, 0xab9535e9a6578fc1, 0x0, 0x0, {0x15}, [@NL80211_ATTR_IFINDEX={0x4}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x100}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1157}]}]}, 0x60}}, 0x10) 14:17:42 executing program 5: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x24c740}, 0x18) [ 627.478869][T14289] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 627.578424][T14297] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 14:17:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002400)=[{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x6c]}, 0x11}, 0x1c, 0x0}], 0x1, 0x0) 14:17:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 14:17:43 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000380)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x4020565b, &(0x7f0000000000)={0x2}) [ 627.885722][ T8800] usb 1-1: new high-speed USB device number 66 using dummy_hcd 14:17:43 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getrlimit(0x0, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x46140, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$6lowpan_control(r3, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r4 = getpgid(0x0) ptrace$peek(0x3, r4, &(0x7f0000000080)) [ 628.151813][ T8800] usb 1-1: Using ep0 maxpacket: 8 14:17:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x10, &(0x7f00000002c0), &(0x7f0000000300)=0x10) [ 628.272644][ T8800] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 628.280886][ T8800] usb 1-1: config 0 has no interface number 0 [ 628.287376][ T8800] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 628.298646][ T8800] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 628.308810][ T8800] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 14:17:44 executing program 2: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x5411, &(0x7f0000000180)={0xfec0, @qipcrtr, @nfc, @xdp, 0x0, 0x0, 0x0, 0x600}) [ 628.318770][ T8800] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 628.328051][ T8800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.709143][ T8800] usb 1-1: config 0 descriptor?? [ 628.743580][T14298] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 628.759630][T14298] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 629.087130][ T8800] usb 1-1: USB disconnect, device number 66 14:17:45 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$CHAR_RAW_RRPART(r0, 0x4c01, 0x0) 14:17:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x63, 0xfffffffffffffffd, &(0x7f0000000040)=0x1e) 14:17:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000140)={'batadv0\x00', @ifru_data=0x0}) 14:17:45 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:45 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af61, &(0x7f0000000000)) 14:17:45 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x5, {{0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x19}, 0xfaaf}}}, 0x88) 14:17:45 executing program 2: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x84, 0x15, 0x0, &(0x7f000000a980)) 14:17:45 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1b, 0x0, &(0x7f0000000080)) 14:17:45 executing program 4: r0 = socket(0x11, 0x2, 0x0) setsockopt$packet_buf(r0, 0x107, 0xe, 0x0, 0x0) 14:17:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 14:17:45 executing program 1: ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000040)=0xffff) clone(0x200800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'syz_tun\x00', {0xfffff000}, 0xfbbe}) [ 630.302186][T10176] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 630.541515][T10176] usb 1-1: Using ep0 maxpacket: 8 [ 630.662647][T10176] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 630.670926][T10176] usb 1-1: config 0 has no interface number 0 [ 630.677442][T10176] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 630.688729][T10176] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 630.699011][T10176] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 630.709035][T10176] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 630.718365][T10176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.793169][T10176] usb 1-1: config 0 descriptor?? [ 630.813498][T14360] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 630.821667][T14360] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 631.068658][ T3223] usb 1-1: USB disconnect, device number 67 14:17:47 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:17:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, 0x0, 0x0) 14:17:47 executing program 4: connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 14:17:47 executing program 2: r0 = socket(0x2, 0x3, 0x4) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1b8}}, 0x20000001) 14:17:47 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000a40)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) process_vm_writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000040)=""/199, 0xc7}, {&(0x7f0000000140)=""/152, 0x98}], 0x3, &(0x7f0000000900)=[{&(0x7f0000000240)=""/196, 0xc4}, {&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000380)=""/206, 0xce}], 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000940)={0x42d2, 0x0, [], {0x0, @reserved}}) 14:17:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0xd, 0x0, 0x0) 14:17:47 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8000}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x404c040) 14:17:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x9, &(0x7f0000000000)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f00000001c0)="32280a4369c5", 0x6}]) 14:17:47 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 14:17:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001200b9e9"], 0x14}}, 0x0) recvmsg(r0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) 14:17:47 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8004551a, &(0x7f0000000300)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:17:47 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000a80)={{r5, 0x5, 0x81, 0x8, 0x5, 0x3ff, 0x7, 0xfff, 0x8, 0x9, 0x5, 0x0, 0x1, 0x2, 0x7}}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000009c0)={r5, 0xffff}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000940)='/dev/cachefiles\x00', 0x0, 0x0) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78, 0x0, 0x0, {0x2, 0x3b, 0x0, {0x6, 0xd41, 0x6, 0x40, 0x0, 0x5, 0x0, 0x100, 0x6ec20a9d, 0xa000, 0x8, 0xffffffffffffffff, r7, 0x3, 0x7fffffff}}}, 0x78) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000980)=0x80009, 0x4) [ 632.291451][T10176] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 632.531763][T10176] usb 1-1: Using ep0 maxpacket: 8 [ 632.651357][T10176] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 632.659706][T10176] usb 1-1: config 0 has no interface number 0 [ 632.666332][T10176] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 632.677712][T10176] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 632.688122][T10176] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 632.698192][T10176] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 632.707522][T10176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.811292][T10176] usb 1-1: config 0 descriptor?? [ 632.833656][T14426] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 632.853130][T14426] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 633.124527][T10176] usb 1-1: USB disconnect, device number 68 14:17:49 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 14:17:49 executing program 5: r0 = socket(0x25, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) 14:17:49 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:49 executing program 3: socketpair(0x0, 0xcbed143778102b3b, 0x0, 0x0) 14:17:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x11, 0x0, &(0x7f0000000080)) 14:17:49 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/rt6_stats\x00') read$snapshot(r0, 0x0, 0x0) 14:17:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xd, &(0x7f00000002c0), &(0x7f0000000300)=0x10) 14:17:50 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3f, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc040564a, &(0x7f0000000000)={0x12300000}) 14:17:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$CHAR_RAW_RRPART(r0, 0x7709, 0x0) 14:17:50 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x111001) unshare(0x20400) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f00000030c0)={0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:50 executing program 2: r0 = getpid() ptrace$setregs(0x10, r0, 0x0, 0x0) [ 634.680994][ T8800] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 634.931123][ T8800] usb 1-1: Using ep0 maxpacket: 8 14:17:50 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40000810) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"236bb60a905805175fa518df4c52e684", 0x0, 0x0, {0x81a6, 0x80}, {0x7, 0xfff00000}, 0x6, [0x0, 0xd4, 0x400, 0x7fffffff, 0x80000001, 0x7ff, 0x5, 0x10001, 0xfffffffffffffeff, 0x5, 0x8, 0xfffffffffffffff9, 0x400, 0x3c1d2612, 0x8001, 0x1]}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 635.086766][ T8800] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 635.095321][ T8800] usb 1-1: config 0 has no interface number 0 [ 635.101811][ T8800] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 635.113143][ T8800] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 635.123328][ T8800] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 635.133283][ T8800] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 635.142503][ T8800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.275559][ T8800] usb 1-1: config 0 descriptor?? [ 635.303000][T14498] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 635.311318][T14498] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 635.657936][ T8800] usb 1-1: USB disconnect, device number 69 14:17:52 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 14:17:52 executing program 2: prctl$PR_GET_FPEXC(0x24, 0x0) 14:17:52 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:52 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0xa, &(0x7f0000000580)) 14:17:52 executing program 4: r0 = getpgid(0x0) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x3, 0xffffffffffffffff, 0x0) 14:17:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x4020940d, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) 14:17:52 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="194cf9181f9e2ed494e83934398f6a7c28cdc3f0a69267d6caf3887595d41c6c47338fc895e367b53125261ff0ebc4442f05db83d2160c68b0a41d4f75325bd1161289f8470d88661aa996d527146003212b1a23540a7ce148f89094ccb29e563542ecb4664dea802d11042e9a45462921eb0be40c04f113468f1f14650a6e7d13296a6b177ddcf14fd8fb6a953d12ecbed2b24e9cf95b2d8c0f50716d04f336b20f3fc3d887ec3686717e424162e417938d48dbbe770fea8b394608a1e65a", 0xbf}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:52 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/timer\x00', 0x0) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000300)={0x9}, 0x0, 0x0) 14:17:52 executing program 2: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x1a, &(0x7f00000009c0), &(0x7f0000000a00)=0x8) 14:17:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0x12, 0x4, 0x81000000004, 0x8000000007}, 0x40) socketpair(0x1e, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f00000000c0)=@tcp6=r1}, 0x20) 14:17:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x1a, &(0x7f00000002c0), &(0x7f0000000300)=0x10) 14:17:52 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 637.121086][ T8702] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 637.361174][ T8702] usb 1-1: Using ep0 maxpacket: 8 [ 637.483715][ T8702] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 637.492364][ T8702] usb 1-1: config 0 has no interface number 0 [ 637.498743][ T8702] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 637.510284][ T8702] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 637.520685][ T8702] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 637.530714][ T8702] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 637.539858][ T8702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.610561][ T8702] usb 1-1: config 0 descriptor?? [ 637.637166][T14564] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 637.656605][T14564] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 638.017045][ T8702] usb 1-1: USB disconnect, device number 70 14:17:54 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 14:17:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) accept$alg(r0, 0x0, 0x0) 14:17:54 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3f, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3002}) 14:17:54 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) write$char_raw(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xdc00) 14:17:54 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x401, 0x1100) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/85) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) pidfd_getfd(r0, r1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = gettid() ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000900)="9cff170db35004fbabb9cfa7a462381b4ef7d6fbd96d88719dea6f300cb6d59ac9d6e28a978b6c4f0d2cd96ec2819a7ea2f4fb6c92ae865b50a9fff328ff9995fe8bcec3a2a42ce339318186a4a1") r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4c000}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000000)) 14:17:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:17:54 executing program 4: r0 = socket(0x23, 0x5, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:17:54 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0xa, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) accept4(r4, 0x0, &(0x7f0000000100), 0x80800) pidfd_getfd(r2, r3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) 14:17:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7c, &(0x7f00000002c0), &(0x7f0000000300)=0x10) 14:17:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) accept$alg(r0, 0x0, 0x0) 14:17:54 executing program 5: clone3(&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, {0x2000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:17:54 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x9}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 639.210733][ T8800] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 639.480966][ T8800] usb 1-1: Using ep0 maxpacket: 8 [ 639.621602][ T8800] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 639.629792][ T8800] usb 1-1: config 0 has no interface number 0 [ 639.636266][ T8800] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 639.647799][ T8800] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 639.658068][ T8800] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 639.668146][ T8800] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 639.677425][ T8800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.802261][ T8800] usb 1-1: config 0 descriptor?? [ 639.822520][T14633] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 639.830106][T14633] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 640.155123][ T8707] usb 1-1: USB disconnect, device number 71 14:17:56 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 14:17:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:smartcard_device_t:s0\x00'}]}, 0x40}}, 0x0) 14:17:56 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'vlan0\x00', {0x40d}, 0x81}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) accept$alg(r0, 0x0, 0x0) 14:17:56 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x40305829, 0x0) 14:17:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$sock(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000000)="fa", 0x1}], 0x1}}], 0x1, 0x4000) 14:17:56 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000000)={{0x2, 0x0, @descriptor="b4374e1783298aff"}}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:57 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000000)={'hsr0\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=0x0}}) 14:17:57 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x17, 0x0) 14:17:57 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x0, r1}) 14:17:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) accept$alg(r0, 0x0, 0x0) 14:17:57 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000440)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000900)=0x2c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 641.750440][ T8800] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 642.020862][ T8800] usb 1-1: Using ep0 maxpacket: 8 [ 642.142459][ T8800] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 642.150746][ T8800] usb 1-1: config 0 has no interface number 0 [ 642.157009][ T8800] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 642.168285][ T8800] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 642.178509][ T8800] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 642.188472][ T8800] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 642.197753][ T8800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.315125][ T8800] usb 1-1: config 0 descriptor?? [ 642.342556][T14699] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 642.350393][T14699] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 642.693978][ T8800] usb 1-1: USB disconnect, device number 72 14:17:58 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 14:17:58 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 14:17:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) 14:17:58 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000001500)) 14:17:58 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000900)={0x0, 0x1}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x268, 0x4c, 0x274, 0x268, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_0\x00', {0x0, 0x3c, 0x0, 0x0, 0x0, 0x7, 0x1ff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffd, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 14:17:58 executing program 3: open(&(0x7f0000002440)='./file1\x00', 0x169040, 0x0) lremovexattr(&(0x7f00000021c0)='./file1\x00', 0x0) 14:17:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000002000000004"], 0x0, 0x26}, 0x20) 14:17:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) 14:17:59 executing program 3: r0 = socket(0x2, 0x3, 0x4) accept4$inet(r0, 0x0, 0x0, 0x0) 14:17:59 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 14:17:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000200)) 14:17:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000380)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 643.960607][ T8707] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 644.200357][ T8707] usb 1-1: Using ep0 maxpacket: 8 [ 644.320361][ T8707] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 644.328577][ T8707] usb 1-1: config 0 has no interface number 0 [ 644.335290][ T8707] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 644.346623][ T8707] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 644.359474][ T8707] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 644.369468][ T8707] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 644.378717][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.593019][ T8707] usb 1-1: config 0 descriptor?? [ 644.612281][T14764] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 644.619833][T14764] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 644.996413][T10176] usb 1-1: USB disconnect, device number 73 14:18:01 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 14:18:01 executing program 5: r0 = socket(0x15, 0x5, 0x0) sendmsg$sock(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@isdn={0x2, 0x0, 0x0, 0xe0}, 0x80, 0x0}, 0x0) 14:18:01 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000180)={0x0, [0x5, 0x79a, 0xba9], [{0x0, 0x0, 0x0, 0x1}], 0x157b}) 14:18:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x66, 0x0, &(0x7f0000000080)) 14:18:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) 14:18:01 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x280182, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x8}, &(0x7f00000001c0), 0x0) 14:18:01 executing program 4: ioperm(0x0, 0x6, 0x5) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 14:18:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x7c, 0x0, &(0x7f0000000080)) 14:18:01 executing program 3: getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0) 14:18:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) 14:18:01 executing program 5: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x84, 0x7d, 0x0, &(0x7f000000a980)=0x8300) [ 646.131322][ T49] usb 1-1: new high-speed USB device number 74 using dummy_hcd 14:18:02 executing program 1: r0 = socket(0xa, 0x3, 0x200000000000ff) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0xfc, @qipcrtr, @nfc, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x400}, 0x0, 0x0, 0x0, 0x600}) [ 646.380505][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 646.462545][ T9174] Bluetooth: hci4: command 0x0406 tx timeout [ 646.501057][ T49] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 646.509498][ T49] usb 1-1: config 0 has no interface number 0 [ 646.516011][ T49] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 646.527327][ T49] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 646.537540][ T49] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 646.547973][ T49] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 646.557259][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.913864][ T49] usb 1-1: config 0 descriptor?? [ 646.936866][T14824] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 646.958876][T14824] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 647.287545][ T8707] usb 1-1: USB disconnect, device number 74 14:18:03 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:18:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0307000000000000000011"], 0x2c}}, 0x0) 14:18:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0xa, &(0x7f0000000040)=""/37, &(0x7f0000000080)=0x25) 14:18:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) 14:18:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x5452, &(0x7f0000000000)) 14:18:03 executing program 1: sched_rr_get_interval(0xffffffffffffffff, 0x0) [ 648.209408][T14880] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 648.293062][T14882] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:18:04 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) 14:18:04 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x5450, 0x0) 14:18:04 executing program 5: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) 14:18:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) [ 648.601088][ T8704] usb 1-1: new high-speed USB device number 75 using dummy_hcd 14:18:04 executing program 4: open(&(0x7f0000002440)='./file1\x00', 0x169040, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000002200)=ANY=[@ANYBLOB="02"], 0x4c, 0x0) [ 648.849850][ T8704] usb 1-1: Using ep0 maxpacket: 8 [ 648.971493][ T8704] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 648.980097][ T8704] usb 1-1: config 0 has no interface number 0 [ 648.986373][ T8704] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 648.997725][ T8704] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 649.008000][ T8704] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 14:18:04 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) [ 649.018037][ T8704] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 649.027507][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.350037][ T8704] usb 1-1: config 0 descriptor?? [ 649.372041][T14883] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 649.379730][T14883] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 649.714536][ T9174] usb 1-1: USB disconnect, device number 75 14:18:05 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:18:05 executing program 5: setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0), 0x78d075a1e9d31c41) 14:18:05 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30db0000", @ANYRES16, @ANYBLOB="00032cbd7080fbdbdf250900000004000f0004000b0010006e800400014b8082d100040001000400280087ab5b1175e06b6b49f981dbd294dce75baaae9121"], 0x30}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5bdcb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 14:18:05 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffdc}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff3c0f600d698cc7abd7cb86dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 14:18:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='freezer.state\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00000001c0)={0x0, 0x5000, 0x3, 0x2, 0x13}) accept$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000000c0)=0x1c) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x8}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 14:18:05 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) [ 650.544581][T14937] device veth0_to_bond entered promiscuous mode [ 650.551249][T14937] device macvtap1 entered promiscuous mode 14:18:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pkey_alloc(0x0, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x2, 0x15acb3638fb, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 14:18:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) 14:18:06 executing program 4: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 14:18:06 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0x1f8, 0x0, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) [ 651.160026][T10176] usb 1-1: new high-speed USB device number 76 using dummy_hcd 14:18:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x45200, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="640f21f3f20f2b2b26d9784a0f01c3d93926670fa80f3266b83d0000000f23280f21f86635000000040f23f826df1dbaa10066b8ef8dc56d66ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x88003}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x40000c00004cb, 0x0, 0x0, 0x0, 0xb5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 651.400419][T10176] usb 1-1: Using ep0 maxpacket: 8 [ 651.415212][T14955] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 651.472396][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 651.488398][T14964] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 651.540372][T10176] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.548697][T10176] usb 1-1: config 0 has no interface number 0 [ 651.555447][T10176] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 651.566753][T10176] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 651.576990][T10176] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 14:18:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) [ 651.587110][T10176] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 651.596380][T10176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.750287][T14965] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 651.873216][T10176] usb 1-1: config 0 descriptor?? [ 651.891567][T14947] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 651.899101][T14947] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 652.272713][ T8704] usb 1-1: USB disconnect, device number 76 14:18:08 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:18:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x45200, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="640f21f3f20f2b2b26d9784a0f01c3d93926670fa80f3266b83d0000000f23280f21f86635000000040f23f826df1dbaa10066b8ef8dc56d66ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x88003}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000c00004cb, 0x0, 0x0, 0x0, 0xb5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:18:08 executing program 1: r0 = eventfd(0x0) init_module(0x0, 0x0, &(0x7f0000000080)='/\xc3\xdc\x8b\x85kvm\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000440)=@ll={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)="a8b113c44f693226bd093e779b48cbe2697c0189fa60997a30a463fd6a5c439deee04a5e146d8a6f5c988f1547ec8f66b846cb83fd0d691553f1100abc47672f65c76ba448a1741d5d560eb60e132769bf943412aeea7ace87fd92d2fd1170f21827122a93932a3f5b022a151bd58e30ec93de0a1c311e306e4ebefcd28b97b5b1891d3fdbacf26834", 0x89}, {&(0x7f0000000580)="0eed9e9b35fee135cbad4c98d0945af0c194749dde11939574c1ecc5ca6949e9486c4307f0519b321612619c4abec0581f424f8526b0af23b137f56f672856ca2fded6ebd9d1889eb0e4b2b43e777852b67ead53bebc1db9f6b7eb0e74a3977f7508b98afb1b0c70f0af35e166a4d1b49a49140a", 0x74}, {&(0x7f0000000680)="463e234708cd9a56a956fffba1bddae9efa428ef1188059c1d82fc16ce8fd2658981a02c258ccac95856b80c42a64051ded6fb911c2c956c35698fa749b3197da306ff0285674c9f53489e73873cb5e11d66aa0f9dd875d5d69d2fa7089b0e7c5b3cf3e8ff48997312978457f060dae801298b1fd4fc6e2a37fff9e8b8da0ee64c88fa83b5a7de358b5777454c94957b5d69321560d3d4590f3a0e86f196240d65b7b7108dc7c56edd20cc275d37e200c78f71be98a23674fd1f3254773b4ee54b90ffa187319ab53f7d102b35a59b6ee1d08fef19bf2fdebc15c07bbf8b63fec750a108", 0xe4}], 0x3, &(0x7f00000007c0)=[{0x28, 0x111, 0x5, "62d7053f521a0a9bece27a526aaf69a320217a6125d1"}], 0x28}, 0xc010) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup3(r4, r2, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000840)) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f00000002c0)) pipe(&(0x7f0000000200)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r0, 0x0, 0x0, r0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 14:18:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x45200, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="640f21f3f20f2b2b26d9784a0f01c3d93926670fa80f3266b83d0000000f23280f21f86635000000040f23f826df1dbaa10066b8ef8dc56d66ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x88003}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:18:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) 14:18:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PDEATHSIG(0x27, 0x0) [ 653.141689][T15035] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 14:18:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) [ 653.469574][ T9174] usb 1-1: new high-speed USB device number 77 using dummy_hcd 14:18:09 executing program 5: r0 = eventfd(0x0) init_module(0x0, 0x0, &(0x7f0000000080)='/\xc3\xdc\x8b\x85kvm\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000440)=@ll={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000580)="0eed9e9b35fee135cbad4c98d0945af0c194749dde11939574c1ecc5ca6949e9486c4307f0519b321612619c4abec0581f424f8526b0af23b137f56f672856ca2fded6ebd9d1889eb0e4b2b43e777852b67ead53bebc1db9f6b7eb0e74a3977f7508b98afb1b0c70f0af35e166a4d1b49a49140ad1edb433ca800e72462f27f332116d50d1ca7edb25633e2364eaa69e537d03ccff2e97a7537c7d8a1903b90fd1476225b88786677a44ef58d56a68ecc9c72f8fdd2db53b4f1e4f07607a7006e346fe8bf3bb1c1dad918f1a0c22d5d61881a18c490022c64b6c39c4dedc734586e53ba22b12d135", 0xe8}, {&(0x7f0000000680)="463e234708cd9a56a956fffba1bddae9efa428ef1188059c1d82fc16ce8fd2658981a02c258ccac95856b80c42a64051ded6fb911c2c956c35698fa749b3197da306ff0285674c9f53489e73873cb5e11d66aa0f9dd875d5d69d2fa7089b0e7c5b3cf3e8ff48997312978457f060dae801298b1fd4fc6e2a37fff9e8b8da0ee64c88fa83b5a7de358b5777454c94957b5d69321560d3d4590f3a0e86f196240d65b7b7108dc7c56edd20cc275d37e200c78f71be98a23674fd1f3254773b4ee54b90ffa187319ab53f7d102b35a59b6ee1d08fef19bf2fdebc15c07bbf8b63fec750a108", 0xe4}], 0x3}, 0xc010) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup3(r4, r2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x4]}, 0x8) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000840)) pipe(&(0x7f0000000200)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r6, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r0, 0x0, 0x2, r0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) [ 653.720376][ T9174] usb 1-1: Using ep0 maxpacket: 8 14:18:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) 14:18:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_SCRNMAP(r0, 0x4b64, &(0x7f0000000000)=""/102390) [ 653.784654][T15065] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 653.850641][ T9174] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 653.858819][ T9174] usb 1-1: config 0 has no interface number 0 [ 653.865318][ T9174] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 653.876909][ T9174] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 653.887079][ T9174] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 653.897241][ T9174] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 653.906835][ T9174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:18:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PDEATHSIG(0x1, 0x0) [ 654.220949][ T9174] usb 1-1: config 0 descriptor?? 14:18:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) [ 654.241356][T15044] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 654.248877][T15044] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 654.843140][T10176] usb 1-1: USB disconnect, device number 77 14:18:11 executing program 1: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803}}], 0x500, 0x0, 0x0) 14:18:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) listen(r0, 0xffd7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 14:18:11 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r0, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) 14:18:11 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='R\x10\x9cist\xe3cusgriide\x00\x00', 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "6f8dfe1f847c9759cb1d155242d440c5542d43856699792480ca4bdde0a6c2d5d3f651136f9e4e44c041f50ebe54b8b4184bf5deae65d02e729779c2021455ba", "06c6d2ccd0baadada38d1cf99953a0b2cbde3a06ddced06c99b95c5c314607c2", [0x0, 0xc5]}) 14:18:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) 14:18:11 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="9000000018001f15b9409b0dffff65580200be0a020c060500680300430008000300fc6cfac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket(0x0, 0x0, 0x0) [ 655.814054][T15144] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:18:11 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="9000000018001f15b9409b0dffff65580200be0a020c0605000b0300430008000300fc6cfac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket(0x0, 0x0, 0x0) 14:18:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) 14:18:11 executing program 4: socket$inet6(0xa, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = getpid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="c2", 0x9101}], 0x300, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x38}, 0x0) 14:18:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x88003}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 656.011093][T15150] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:18:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b48, &(0x7f0000000000)=""/102390) [ 656.199629][T15157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:18:11 executing program 0: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x5000000000016) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffcbd}, &(0x7f0000000040)=[{}, {}, {}, {}]) 14:18:12 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigtimedwait(&(0x7f00000000c0)={[0x19e]}, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) prlimit64(r0, 0xd, &(0x7f0000000000)={0x1d}, &(0x7f0000000180)) wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000100)='\v\x8b\x8a\xa9\x9fca\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b', 0x3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x5) sendfile(r1, r2, &(0x7f00000000c0), 0x2000000c) fcntl$addseals(r2, 0x409, 0xb) tkill(r0, 0x2) [ 656.426589][T15157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:18:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) 14:18:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x45200, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="640f21f3f20f2b2b26d9784a0f01c3d93926670fa80f3266b83d0000000f23280f21f86635000000040f23f826df1dbaa10066b8ef8dc56d66ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x88003}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x40000c00004cb, 0x0, 0x0, 0x0, 0xb5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:18:12 executing program 1: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() tkill(r3, 0x5000000000016) tkill(r3, 0x2f) ptrace(0x10, r0) ptrace$peeksig(0x4209, r3, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x4}, &(0x7f00000003c0)=[{}, {}, {}, {}]) 14:18:12 executing program 3: r0 = eventfd(0x0) init_module(0x0, 0x0, &(0x7f0000000080)='/\xc3\xdc\x8b\x85kvm\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000440)=@ll={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)}, {&(0x7f0000000580)="0eed9e9b35fee135cbad4c98d0945af0c194749dde11939574c1ecc5ca6949e9486c4307f0519b321612619c4abec0581f424f8526b0af23b137f56f672856ca2fded6ebd9d1889eb0e4b2b43e777852b67ead53bebc1db9f6b7eb0e74a3977f7508b98afb1b0c70f0af35e166a4d1b49a49140ad1edb433ca800e72462f27f332116d50d1ca7edb25633e2364eaa69e537d03ccff2e97a7537c7d8a1903b90fd1476225b88786677a44ef58d56a68ecc9c72f8fdd2db53b4f1e4f07607a7006e346fe8bf3bb1c1dad918f1a0c22d5d61881a18c490022c64b6c39c4dedc734586e53ba22b12d135", 0xe8}, {&(0x7f0000000680)="463e234708cd9a56a956fffba1bddae9efa428ef1188059c1d82fc16ce8fd2658981a02c258ccac95856b80c42a64051ded6fb911c2c956c35698fa749b3197da306ff0285674c9f53489e73873cb5e11d66aa0f9dd875d5d69d2fa7089b0e7c5b3cf3e8ff48997312978457f060dae801298b1fd4fc6e2a37fff9e8b8da0ee64c88fa83b5a7de358b5777454c94957b5d69321560d3d4590f3a0e86f196240d65b7b7108dc7c56edd20cc275d37e200c78f71be98a23674fd1f3254773b4ee54b90ffa187319ab53f7d102b35a59b6ee1d08fef19bf2fdebc15c07bbf8b63fec750a108", 0xe4}], 0x3, &(0x7f00000007c0)=[{0x10, 0x111, 0x5}], 0x10}, 0xc010) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup3(r4, r2, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000840)) pipe(0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) dup3(r7, r6, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r0, 0x0, 0x2, r0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 14:18:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="640f21f3f20f2b2b26d9784a0f01c3d93926670fa80f3266b83d0000000f23280f21f86635000000040f23f826df1dbaa10066b8ef8dc56d66ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) statfs(0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x88003}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000c00004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:18:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce33", 0x10) 14:18:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x2, 0x15acb3638fb, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 14:18:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/102390) 14:18:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 14:18:13 executing program 5: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x5000000000016) tkill(r1, 0x2f) ptrace(0x10, r0) tgkill(r1, r0, 0x1e) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080)) [ 657.816524][T15230] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 14:18:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 14:18:15 executing program 1: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803}}], 0x500, 0x0, 0x0) 14:18:15 executing program 3: r0 = eventfd(0x0) init_module(&(0x7f0000000140)=',\x1f\xba\x0eP^\xe8\xba\x90\xb7\xe43}\v\xe7\x9aK\xde\xc1}\x88!\xd7\xd6Ms\xab\xd7>j\xf4\xb9\xf8\xea\xf7u\xb2bm\xa9\xd1Z\x06OF=\x89\xd7\xef\xff\x84\x06\x8f\x06\vdR\xaf\xff\xe2F\xc6^~\x00\x06c\x86\xff\xbc\xean\x8ab\xe9w\x91\xc6\v<\x8d\x13\x15^v\xf1H\xe9\xf7\x93C\xbc\x9b\x82\x05vp\xa1\n\xea?D\xf3', 0x67, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup3(r4, r2, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x4]}, 0x8) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000840)) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f00000002c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r8, 0x0) dup3(r8, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r7, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r0, 0x0, 0x2, r0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 14:18:15 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) prlimit64(r0, 0x0, 0x0, &(0x7f0000000180)) wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000100)='\v\x8b\x8a\xa9\x9fca\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b', 0x3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x5) sendfile(r1, r2, &(0x7f00000000c0), 0x2000000c) fcntl$addseals(r2, 0x409, 0xb) tkill(r0, 0x2) 14:18:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 14:18:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 659.973664][T15288] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 14:18:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_SCRNMAP(r0, 0x4b48, &(0x7f0000000000)=""/102390) 14:18:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="640f21f3f20f2b2b26d9784a0f01c3d93926670fa80f3266b83d0000000f23280f21f86635000000040f23f826df1dbaa10066b8ef8dc56d66ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000100)={0xe8003}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000c00004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:18:16 executing program 0: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup3(r4, r2, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) pipe(&(0x7f0000000200)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r0, 0x0, 0x2, r0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 14:18:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) 14:18:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0xfdef) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x88003}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:18:16 executing program 5: r0 = eventfd(0x0) init_module(&(0x7f0000000140)=',\x1f\xba\x0eP^\xe8\xba\x90\xb7\xe43}\v\xe7\x9aK\xde\xc1}\x88!\xd7\xd6Ms\xab\xd7>j\xf4\xb9\xf8\xea\xf7u\xb2bm\xa9\xd1Z\x06OF=\x89\xd7\xef\xff\x84\x06\x8f\x06\vdR\xaf\xff\xe2F\xc6^~\x00\x06c\x86\xff\xbc\xean\x8ab\xe9w\x91\xc6\v<\x8d\x13\x15^v\xf1H\xe9\xf7\x93C\xbc\x9b\x82\x05vp\xa1\n\xea?D\xf3', 0x67, &(0x7f0000000080)='/\xc3\xdc\x8b\x85kvm\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000440)=@ll={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)="a8b113c44f693226bd093e779b48cbe2697c0189fa60997a30a463fd6a5c439deee04a5e146d8a6f5c988f1547ec8f66b846cb83fd0d691553f1100abc47672f65c76ba448a1741d5d560eb60e132769bf943412aeea7ace87fd92d2fd1170f21827122a93932a3f5b022a151bd58e30ec93de0a1c311e306e4ebefcd28b97b5b1891d3fdbacf26834f01e7f", 0x8c}, {&(0x7f0000000580)="0eed9e9b35fee135cbad4c98d0945af0c194749dde11939574c1ecc5ca6949e9486c4307f0519b321612619c4abec0581f424f8526b0af23b137f56f672856ca2fded6ebd9d1889eb0e4b2b43e777852b67ead53bebc1db9f6b7eb0e74a3977f7508b98afb1b0c70f0af35e166a4d1b49a49140ad1edb433ca800e72462f27f332116d50d1ca7edb25633e2364eaa69e537d03ccff2e97a7537c7d8a1903b90fd1476225b88786677a44ef58d56a68ecc9c72f8fdd2db53b4f1e4f07607a7006e346fe8bf3bb1c1dad918f1a0c22d5d61881a18c490022c64b6c39c4dedc734586e53ba22b12d135", 0xe8}, {&(0x7f0000000680)="463e234708cd9a56a956fffba1bddae9efa428ef1188059c1d82fc16ce8fd2658981a02c258ccac95856b80c42a64051ded6fb911c2c956c35698fa749b3197da306ff0285674c9f53489e73873cb5e11d66aa0f9dd875d5d69d2fa7089b0e7c5b3cf3e8ff48997312978457f060dae801298b1fd4fc6e2a37fff9e8b8da0ee64c88fa83b5a7de358b5777454c94957b5d69321560d3d4590f3a0e86f196240d65b7b7108dc7c56edd20cc275d37e200c78f71be98a23674fd1f3254773b4ee54b90ffa187319ab53f7d102b35a59b6ee1d08fef19bf2fdebc15c07bbf8b63fec750a108", 0xe4}], 0x3, &(0x7f00000007c0)=[{0x40, 0x111, 0x5, "62d7053f521a0a9bece27a526aaf69a320217a6125d1434f10b5822eced2f02b33ce8a004e991d53b6bf15"}], 0x40}, 0xc010) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup3(r4, r2, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x4]}, 0x8) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000840)) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f00000002c0)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r0, 0x0, 0x2, r0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 14:18:16 executing program 0: prctl$PR_GET_FPEXC(0x59616d61, 0x0) [ 661.425987][T15327] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 661.564307][T15327] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 14:18:18 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x2, 0x15acb3638fb, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 14:18:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) 14:18:18 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3c87bb07eb78c27b061773f04a22ba8cedf8510e63fb112cf6956e09d1938ef3b217e0f6ae30b"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0x0, &(0x7f0000000040)="a663f3cb268109f6eb4f5724bcbe848a", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd09) 14:18:18 executing program 0: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10000) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x5, 0xf989, "cd"}]}}}}}}}}, 0x0) 14:18:18 executing program 5: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="9000000018001f15b9409b0dffff65580200be0a020c060500000300430016000300fc6cfac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 14:18:18 executing program 4: r0 = eventfd(0x0) init_module(&(0x7f0000000140)=',\x1f\xba\x0eP^\xe8\xba\x90\xb7\xe43}\v\xe7\x9aK\xde\xc1}\x88!\xd7\xd6Ms\xab\xd7>j\xf4\xb9\xf8\xea\xf7u\xb2bm\xa9\xd1Z\x06OF=\x89\xd7\xef\xff\x84\x06\x8f\x06\vdR\xaf\xff\xe2F\xc6^~\x00\x06c\x86\xff\xbc\xean\x8ab\xe9w\x91\xc6\v<\x8d\x13\x15^v\xf1H\xe9\xf7\x93C\xbc\x9b\x82\x05vp\xa1\n\xea?D\xf3', 0x67, &(0x7f0000000080)='/\xc3\xdc\x8b\x85kvm\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000440)=@ll={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)="a8b113c44f693226bd093e779b48cbe2697c0189fa60997a30a463fd6a5c439deee04a5e146d8a6f5c988f1547ec8f66b846cb83fd0d691553f1100abc47672f65c76ba448a1741d5d560eb60e132769bf943412aeea7ace87fd92d2fd1170f21827122a93932a3f5b022a151bd58e30ec93de0a1c311e306e4ebefcd28b97b5b1891d3fdbacf26834f01e7ffd", 0x8d}, {&(0x7f0000000580)="0eed9e9b35fee135cbad4c98d0945af0c194749dde11939574c1ecc5ca6949e9486c4307f0519b321612619c4abec0581f424f8526b0af23b137f56f672856ca2fded6ebd9d1889eb0e4b2b43e777852b67ead53bebc1db9f6b7eb0e74a3977f7508b98afb1b0c70f0af35e166a4d1b49a49140ad1edb433ca800e72462f27f332116d50d1ca7edb25633e2364eaa69e537d03ccff2e97a7537c7d8a1903b90fd1476225b88786677a44ef58d56a68ecc9c72f8fdd2db53b4f1e4f07607a7006e346fe8bf3bb1c1dad918f1a0c22d5d61881a18c490022c64b6c39c4dedc734586e53ba22b12d135", 0xe8}, {&(0x7f0000000680)="463e234708cd9a56a956fffba1bddae9efa428ef1188059c1d82fc16ce8fd2658981a02c258ccac95856b80c42a64051ded6fb911c2c956c35698fa749b3197da306ff0285674c9f53489e73873cb5e11d66aa0f9dd875d5d69d2fa7089b0e7c5b3cf3e8ff48997312978457f060dae801298b1fd4fc6e2a37fff9e8b8da0ee64c88fa83b5a7de358b5777454c94957b5d69321560d3d4590f3a0e86f196240d65b7b7108dc7c56edd20cc275d37e200c78f71be98a23674fd1f3254773b4ee54b90ffa187319ab53f7d102b35a59b6ee1d08fef19bf2fdebc15c07bbf8b63fec750a108", 0xe4}], 0x3, &(0x7f00000007c0)=[{0x40, 0x111, 0x5, "62d7053f521a0a9bece27a526aaf69a320217a6125d1434f10b5822eced2f02b33ce8a004e991d53b6bf15"}], 0x40}, 0xc010) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup3(r4, r2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x4]}, 0x8) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000840)) pipe(&(0x7f0000000200)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) dup3(r7, r6, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r0, 0x0, 0x2, r0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) [ 663.396639][T15364] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 663.536454][T15378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:18:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) 14:18:19 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="9000000018001f15b9409b0dffff65580200be0a020c060500000300430016000300fc6cfac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) 14:18:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pkey_alloc(0x0, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x2, 0x15acb3638fb, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 14:18:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 14:18:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = getpid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="c2", 0x9101}], 0x300, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x38}, 0x0) [ 664.251724][T15389] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:18:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b184", 0x8) 14:18:22 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 14:18:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_SCRNMAP(r0, 0x4b70, &(0x7f0000000000)=""/102390) 14:18:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000380)={0x1, 0x2, 0x1000, 0x81, &(0x7f00000002c0)="9fa1803695e97fc721f0328aaea82295f29a4710920249d353af9d66dea2e5a1ae1e09fed6db01ea09b45f206d38631c35ec1edf9cdebafa4eb11531f7b33170e82110be73d12882541d538341c8b8cf894f283e568b2ac18b2f29dbf9b099d7f0d9c79d4f5634f7d73ee23a6557b46869ae2682d0e4a0592fd3625da79ca03dce", 0x0, 0x0, &(0x7f0000000140)}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x84, @local, 0x4e20, 0x4, 'lblc\x00', 0x0, 0x8}, 0x2c) clock_gettime(0x2, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x2, 0x15acb3638fb, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 14:18:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b184", 0x8) 14:18:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000380)={0x1, 0x2, 0x1000, 0x7f, &(0x7f00000002c0)="9fa1803695e97fc721f0328aaea82295f29a4710920249d353af9d66dea2e5a1ae1e09fed6db01ea09b45f206d38631c35ec1edf9cdebafa4eb11531f7b33170e82110be73d12882541d538341c8b8cf894f283e568b2ac18b2f29dbf9b099d7f0d9c79d4f5634f7d73ee23a6557b46869ae2682d0e4a0592fd3625da79ca0", 0x0, 0x0, &(0x7f0000000140)}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x2, 0x15acb3638fb, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 14:18:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10000) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x5, 0xf989, "cd"}]}}}}}}}}, 0x0) 14:18:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pkey_alloc(0x0, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x2, 0x15acb3638fb, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 14:18:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b184", 0x8) 14:18:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000040)="a663f3cb268109f6eb4f5724bcbe848a", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd09) 14:18:22 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="9000000018001f15b9409b0dffff65580200be0a020c0605fec00300430008000300fc6cfac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket(0x0, 0x0, 0x0) 14:18:22 executing program 3: 14:18:22 executing program 1: [ 667.235134][T15439] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:18:23 executing program 4: 14:18:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac", 0xc) 14:18:23 executing program 0: 14:18:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = getpid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="c2", 0x9101}], 0x300, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x38}, 0x0) [ 667.471699][T15439] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:18:23 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3c87bb07eb78c27b061773f04a22ba8cedf8510e63fb112cf6956e09d1938ef3b217e0f6ae30b"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0x0, &(0x7f0000000040)="a663f3cb268109f6eb4f5724bcbe848a", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd09) 14:18:23 executing program 5: 14:18:23 executing program 4: 14:18:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac", 0xc) 14:18:23 executing program 0: 14:18:23 executing program 3: 14:18:23 executing program 1: 14:18:23 executing program 4: 14:18:23 executing program 5: 14:18:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac", 0xc) 14:18:24 executing program 3: 14:18:24 executing program 0: 14:18:24 executing program 1: 14:18:24 executing program 4: 14:18:24 executing program 5: 14:18:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0", 0xe) 14:18:24 executing program 3: 14:18:24 executing program 0: 14:18:24 executing program 1: 14:18:24 executing program 5: 14:18:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0", 0xe) 14:18:24 executing program 4: 14:18:25 executing program 0: 14:18:25 executing program 3: 14:18:25 executing program 1: 14:18:25 executing program 5: 14:18:25 executing program 4: 14:18:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0", 0xe) 14:18:25 executing program 3: 14:18:25 executing program 0: 14:18:25 executing program 5: 14:18:25 executing program 1: 14:18:25 executing program 4: 14:18:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce", 0xf) 14:18:26 executing program 0: 14:18:26 executing program 3: 14:18:26 executing program 1: 14:18:26 executing program 5: 14:18:26 executing program 4: 14:18:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce", 0xf) 14:18:26 executing program 0: 14:18:26 executing program 3: 14:18:26 executing program 1: 14:18:26 executing program 5: 14:18:26 executing program 4: 14:18:27 executing program 0: 14:18:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="55d3e264c073b1848f4f6dac11b0ce", 0xf) 14:18:27 executing program 1: 14:18:27 executing program 3: 14:18:27 executing program 5: 14:18:27 executing program 4: 14:18:27 executing program 0: 14:18:27 executing program 2: 14:18:27 executing program 1: 14:18:27 executing program 5: 14:18:27 executing program 3: 14:18:27 executing program 4: 14:18:27 executing program 0: 14:18:28 executing program 2: 14:18:28 executing program 1: 14:18:28 executing program 5: 14:18:28 executing program 3: 14:18:28 executing program 0: 14:18:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="640f21f3f20f2b2b26d9784a0f01c3d93926670fa80f3266b83d0000000f23280f21f86635000000040f23f826df1dbaa10066b8ef8dc56d66ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xe8003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x901]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000c00004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) 14:18:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001a00)=""/4084, 0xff4}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/230, 0xe6}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/105, 0x69}, {0x0}, {0x0}], 0x3}, 0x40002) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r4, 0x0) r6 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r6, &(0x7f0000000240)={0x1c, 0x1c, 0x1}, 0x1c) shutdown(r5, 0x0) r7 = dup(r3) shutdown(r7, 0x0) 14:18:28 executing program 5: syz_emit_ethernet(0x279, &(0x7f00000025c0)={@random="ff772b82ffb1", @broadcast=[0xff, 0xff, 0x0], @val, {@ipv6}}, 0x0) 14:18:28 executing program 1: 14:18:28 executing program 3: 14:18:28 executing program 0: 14:18:28 executing program 1: syz_emit_ethernet(0x1006, &(0x7f00000025c0)={@random="ff772b82ffb1", @broadcast=[0xff, 0xff, 0x0], @val, {@ipv6}}, 0x0) 14:18:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@un=@abs={0x8}, 0x8) 14:18:29 executing program 5: r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000300)={r3}, &(0x7f0000000280)=0xb8) 14:18:29 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x26, &(0x7f0000001440), &(0x7f0000001480)=0x8) 14:18:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x41, 0x0, &(0x7f0000000040)=0x84) 14:18:29 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) 14:18:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f00000001c0), 0x10) 14:18:29 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) r1 = dup2(r0, r0) bind$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) 14:18:29 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c) 14:18:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="1c1c4e236f00000000000000000000000000ffffac1400aa0100"/126, @ANYRES32=0x0, @ANYBLOB="05000000ff"], 0x98) 14:18:29 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 14:18:30 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@un=@abs={0x8}, 0x8) 14:18:30 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) connect(r1, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 14:18:30 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_int(r0, 0xffff, 0x8000, &(0x7f0000000000), 0x4) 14:18:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) shutdown(r3, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {}, {}, {}, {}, {}, {}], 0x7, 0x8000000000049) shutdown(r4, 0x0) 14:18:30 executing program 2: r0 = socket(0x2, 0x5, 0x0) connect(r0, &(0x7f0000000240)=@in={0x10, 0x2}, 0x10) 14:18:30 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r2 = socket(0x2, 0x5, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000000640), &(0x7f0000000580)=0xc) 14:18:30 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYBLOB="03000000", @ANYRES32=0x0], &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0x100, &(0x7f0000000380)={r3}, &(0x7f0000000140)=0xb8) 14:18:30 executing program 4: syz_emit_ethernet(0x1f6, &(0x7f00000025c0)={@random="ff772b82ffb1", @broadcast=[0xff, 0xff, 0x0], @val, {@ipv6}}, 0x0) 14:18:31 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYBLOB="192032ba", @ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x15, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x8) 14:18:31 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 14:18:31 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c}, 0x1c) 14:18:31 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000440)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@init={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @loopback}], 0x30}, 0x0) 14:18:31 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) 14:18:31 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6(0x1c, 0x2, 0x0) dup2(r1, r0) 14:18:32 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) 14:18:32 executing program 2: syz_emit_ethernet(0x66, &(0x7f00000025c0)={@random="ff772b82ffb1", @broadcast=[0xff, 0xff, 0x0], @val, {@ipv6}}, 0x0) 14:18:32 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) 14:18:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0x10) 14:18:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="1c1c4e236f00000000000000000000000000ffffac1400aa0100"/126, @ANYRES32=0x0, @ANYBLOB="05000000ff89fceb299b824df54beab7747da6"], 0x98) 14:18:32 executing program 5: r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x903, &(0x7f0000000000)={r3}, 0x8) 14:18:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="9e00af"], 0xb7) 14:18:32 executing program 1: socket$inet6_sctp(0x1c, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) shutdown(r3, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x8000000000049) shutdown(r4, 0x0) socket$inet6(0x1c, 0x2, 0x0) 14:18:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), &(0x7f00000000c0)=0xa0) 14:18:32 executing program 0: r0 = socket(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r1, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c) dup2(r1, r0) connect$inet(r0, &(0x7f00000002c0)={0x10, 0x2}, 0x10) 14:18:32 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f00000001c0), &(0x7f0000000000)=0x98) 14:18:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) 14:18:33 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)=ANY=[], &(0x7f0000001700)=0x8) 14:18:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x8) 14:18:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000040)={0x80}, 0x1) 14:18:33 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x26, &(0x7f0000000080), 0x8) 14:18:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000100), 0x8) 14:18:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), 0xa0) 14:18:33 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) 14:18:34 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x24, &(0x7f0000000000)=0x1c00, 0xfe6a) 14:18:34 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000000140), &(0x7f0000000180)=0xc) 14:18:34 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000140), 0x8) 14:18:34 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@prinfo={0x14}], 0x14}, 0x0) 14:18:34 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x103, &(0x7f0000000040)=ANY=[@ANYRES32=r2], &(0x7f00000000c0)=0x7f) 14:18:34 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES64, @ANYRESHEX, @ANYBLOB="dca555337b3be7887907080000000000000036ac9823d214b9ac2abdbe96f147a730d4cff1e9a9413ebf89997305575a2667a18bc9beee00ce8edd5bef493ff36a0000d90704d28a1abe7ed4deb020a7039676e52100", @ANYRESOCT, @ANYRES16], 0x98) 14:18:34 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x103, &(0x7f0000000080)={r2, 0x2, "fcfd"}, &(0x7f0000000180)=0xa) 14:18:35 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x98) 14:18:35 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040), 0x8) 14:18:35 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000001400)={r2}, &(0x7f0000001440)=0x18) 14:18:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)=0x8c) 14:18:35 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0), 0x8c) 14:18:35 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x0, 0x1, "19"}, 0x9) 14:18:35 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c) 14:18:35 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) 14:18:35 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c}, 0x1c) 14:18:36 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, r4}, 0x10) 14:18:36 executing program 5: r0 = socket(0x2, 0x5, 0x0) connect(r0, &(0x7f0000000180)=@in={0x10, 0x2}, 0x10) 14:18:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001a00)=""/4084, 0xff4}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/230, 0xe6}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/105, 0x69}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x40002) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r4, 0x0) r6 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r6, &(0x7f0000000240)={0x1c, 0x1c, 0x1}, 0x1c) shutdown(r5, 0x0) r7 = dup(r3) shutdown(r7, 0x0) 14:18:36 executing program 0: syz_emit_ethernet(0xfe6, &(0x7f00000025c0)={@random="ff772b82ffb1", @broadcast=[0xff, 0xff, 0x0], @val, {@ipv6}}, 0x0) 14:18:36 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x103, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)=0x7f) 14:18:36 executing program 5: r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0x8) 14:18:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 14:18:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x5, &(0x7f0000000040), &(0x7f0000000240)=0x4) 14:18:37 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000001400)={r2, 0x0, 0x1}, &(0x7f0000001440)=0x18) 14:18:37 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x24, &(0x7f0000000000)=0x1c00, 0xfe6a) 14:18:37 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000100)=@in={0x10, 0x2}, 0x10) 14:18:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000140), &(0x7f0000000200)=0xa0) 14:18:37 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000001180), &(0x7f0000000040)=0xa0) 14:18:37 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) 14:18:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) shutdown(r3, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x8000000000049) shutdown(r4, 0x0) 14:18:38 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000180)={0x6, [0x0]}, &(0x7f00000001c0)=0x1) 14:18:38 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000001400)={0x0, 0x0, 0x1}, &(0x7f0000001440)=0x18) [ 682.307134][ T8705] Bluetooth: hci5: command 0x0406 tx timeout 14:18:38 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x26, &(0x7f0000001440)={r2}, &(0x7f0000001480)=0x8) 14:18:38 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) 14:18:38 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000200)=ANY=[], 0xa) 14:18:38 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140), 0x8c) 14:18:38 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_int(r0, 0xffff, 0x1014, &(0x7f0000000000), 0x4) 14:18:38 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:18:38 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x50, 0x0, 0x0) 14:18:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0xc56}, 0x10) 14:18:39 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x26, &(0x7f0000001440)={r2}, &(0x7f0000001480)=0x8) 14:18:39 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) r2 = socket$inet6_udplite(0x1c, 0x2, 0x88) dup2(r2, r1) 14:18:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080), 0xc) 14:18:39 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x14) 14:18:39 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000080)=@in={0x10, 0x2}, 0x10) 14:18:40 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x24, &(0x7f0000000000), 0xfe6a) 14:18:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) 14:18:40 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000040), 0x8) 14:18:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000240), 0x8) 14:18:40 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) r1 = dup2(r0, r0) bind$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) 14:18:40 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f00000000c0)={r2}, &(0x7f0000000140)=0x8) 14:18:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x8000000000000001, 0x84) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x42) 14:18:40 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000003c0)={0x1c, 0x1c, 0x3}, 0x1c) 14:18:40 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000003c0)={0x1c, 0x1c, 0x3}, 0x1c) 14:18:40 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000180)=ANY=[@ANYRES32], 0xb7) 14:18:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000200), 0x8c) 14:18:41 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6(0x1c, 0x2, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040)={0x101}, 0x8) dup2(r1, r0) 14:18:41 executing program 5: r0 = socket$inet_sctp(0x2, 0x8000000000000001, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x7}, 0x98) 14:18:41 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) bind$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) 14:18:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 14:18:41 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x8000000000000001, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) dup2(r1, r0) 14:18:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 14:18:42 executing program 2: syz_emit_ethernet(0x25b, &(0x7f00000025c0)={@random="ff772b82ffb1", @broadcast=[0xff, 0xff, 0x0], @val, {@ipv6}}, 0x0) 14:18:42 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x24, &(0x7f0000000000)=0x1c00, 0xfe6a) 14:18:42 executing program 4: r0 = socket(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) dup2(r1, r0) connect$inet(r0, &(0x7f00000002c0)={0x10, 0x2}, 0x10) 14:18:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200)=ANY=[], 0x98) 14:18:42 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) 14:18:42 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYBLOB="19", @ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x15, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x8) 14:18:42 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000040)='M', 0x1, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 14:18:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001a00)=""/4084, 0xff4}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/230, 0xe6}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/105, 0x69}, {0x0}, {0x0}, {0x0}], 0x4}, 0x40002) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r4, 0x0) r6 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r6, &(0x7f0000000240)={0x1c, 0x1c, 0x1}, 0x1c) shutdown(r5, 0x0) r7 = dup(r3) shutdown(r7, 0x0) 14:18:42 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000440)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@init={0x14}], 0x14}, 0x0) 14:18:42 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_int(r0, 0xffff, 0x1014, 0x0, 0x0) 14:18:43 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x15, &(0x7f0000000580), 0x8) 14:18:43 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x98) 14:18:43 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xe, &(0x7f0000000100), &(0x7f0000000180)=0x8) 14:18:43 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000100), &(0x7f0000000140)=0x8) 14:18:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 14:18:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) dup2(r1, r0) 14:18:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) shutdown(r3, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x8000000000049) shutdown(r4, 0x0) 14:18:44 executing program 0: r0 = socket(0x2, 0x5, 0x0) sendto$inet(r0, 0x0, 0x2e, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 14:18:44 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) 14:18:44 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000180)=ANY=[], 0xb7) 14:18:44 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100), &(0x7f00000000c0)=0x8) 14:18:44 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockname$inet6(r0, 0x0, &(0x7f0000000200)) 14:18:44 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c) 14:18:44 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f0000000080), 0xc) 14:18:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000040)='u', 0x1, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 14:18:44 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x4, 0x0, &(0x7f00000000c0)) 14:18:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0xfcea, 0x2}, 0x10) getsockname(r0, 0x0, &(0x7f0000000080)) 14:18:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="1c1c4e236f00000000000000000000000000ffffac1400aa0100"/128, @ANYRES32=0x0, @ANYBLOB="05000000ff0000000902"], 0x98) 14:18:45 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000200), 0x8) 14:18:45 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 14:18:45 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f00000000c0)=@un=@abs={0x8}, 0x8) 14:18:45 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xee01, 0x1000) 14:18:45 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x19, 0x0, &(0x7f0000000040)) 14:18:45 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) bind$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) 14:18:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 14:18:46 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:18:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 14:18:46 executing program 1: unshare(0x6c060000) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0cb23e9b200a0008010000000000010000000000", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00'], 0x1}}, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvfrom$inet(r3, 0x0, 0x0, 0x80010002, 0x0, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002580)=""/4108, 0x100c}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[], 0x1000001bd) 14:18:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002180)={'veth0_virt_wifi\x00', &(0x7f0000001140)=@ethtool_dump={0x1f}}) [ 690.966585][T16241] IPVS: ftp: loaded support on port[0] = 21 14:18:46 executing program 0: pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000220044944eeba71a4976e252922cb18f032e2aba000000012e0b3836005404b0e0301a4ce875f2e3b15f163ee340b7c59500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000000000004974000000000000097fc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x46) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0003460000dce8e4240669d92c8633", @ANYRES32=r4], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x84ffde, 0x0) 14:18:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x2, 0x1, 0x3, 0x4}}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="b7230000000000000000070000f008000300adfd63e16a895a67075aa6b9935d655f4f6e382d4880d91c1508dca35a2cdecc4312da9508039f5ac7b8eb1e988b6a162a0cc5d5a98885ebb6b6f466daa6ce4f196f3d978eb298f95d58bf477a59750d34f937fb20f1d385fc7faa89b9f63ab23f072bd27a291f4142fc58ec1b1dd2e733db455828a86c9060aef4786765af37335599c504cd64a0fd3d7b3b0439099839ffdc0d32c93d0239c929fcc756c8e4c6bff69b24a6a9ce0c03760d4ef178a1ecab2dd3a72551", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x50000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f41f4cbace7f9a7df0200000000e80001dd0000040d000d", 0x1f}], 0x1) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 691.007141][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 691.016920][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 14:18:46 executing program 2: bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0xfffffffe) [ 691.064405][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 691.112634][T16244] netlink: 40027 bytes leftover after parsing attributes in process `syz-executor.1'. [ 691.122523][T16244] device lo entered promiscuous mode [ 691.130821][T16244] device tunl0 entered promiscuous mode [ 691.140379][T16244] device gre0 entered promiscuous mode [ 691.149636][T16244] device gretap0 entered promiscuous mode [ 691.157789][T16244] device erspan0 entered promiscuous mode [ 691.165732][T16244] device ip_vti0 entered promiscuous mode [ 691.175160][T16244] device ip6_vti0 entered promiscuous mode [ 691.185142][T16244] device sit0 entered promiscuous mode [ 691.194975][T16244] device ip6tnl0 entered promiscuous mode [ 691.204467][T16244] device ip6gre0 entered promiscuous mode [ 691.213851][T16244] device syz_tun entered promiscuous mode [ 691.221570][T16244] device ip6gretap0 entered promiscuous mode [ 691.229708][T16244] device bridge0 entered promiscuous mode [ 691.237457][T16244] device vcan0 entered promiscuous mode [ 691.243416][T16244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 691.251900][T16244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 691.261181][T16244] device bond0 entered promiscuous mode [ 691.266894][T16244] device bond_slave_0 entered promiscuous mode [ 691.273601][T16244] device bond_slave_1 entered promiscuous mode [ 691.283454][T16244] device team0 entered promiscuous mode [ 691.289169][T16244] device team_slave_0 entered promiscuous mode [ 691.295843][T16244] device team_slave_1 entered promiscuous mode [ 691.305507][T16244] device dummy0 entered promiscuous mode 14:18:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x1046) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xffffffe8) r1 = gettid() ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) tkill(r1, 0xb) [ 691.314750][T16244] device nlmon0 entered promiscuous mode [ 691.382968][T16244] device caif0 entered promiscuous mode [ 691.389364][T16244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:18:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score\x00') read$snapshot(r0, 0x0, 0x0) [ 691.750697][T16242] IPVS: ftp: loaded support on port[0] = 21 [ 691.812424][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 691.938339][T16250] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 691.946688][T16250] netlink: 71 bytes leftover after parsing attributes in process `syz-executor.3'. [ 691.977573][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 691.988046][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 14:18:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x810, r0, 0x0) [ 692.212385][ T163] tipc: TX() has been purged, node left! 14:18:48 executing program 4: mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 14:18:48 executing program 0: mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x401c5820, 0x7ffcc25bb003) 14:18:48 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 14:18:48 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000280)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000b00)=r1, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffff7fffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60100002400c00020005", 0x1d}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="280e003f4305607e5bc5795e6558000800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0xffffffffffffffb4, 0x212, &(0x7f0000000940)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) 14:18:48 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0xffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, 0x3}) 14:18:48 executing program 4: r0 = epoll_create1(0x0) r1 = syz_io_uring_setup(0x3c91, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) 14:18:48 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$char_raw(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESDEC], 0xdc00) 14:18:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045510, 0x0) 14:18:49 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 694.791008][ T163] tipc: TX() has been purged, node left! 14:18:53 executing program 5: r0 = socket(0x23, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 14:18:53 executing program 2: r0 = socket(0xa, 0x3, 0x7) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0xa, 0x0, 0x2, 0x10}, 0x24) 14:18:53 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000001080)) 14:18:53 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x2fde00) 14:18:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'hsr0\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x6}}) 14:18:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x4], 0x1}) 14:18:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x24, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) 14:18:53 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000380)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc040563d, &(0x7f0000000000)={0x0, 0x1}) 14:18:53 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x40085511, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:18:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) 14:18:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045503, 0x0) 14:18:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) 14:18:53 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x400000000000006b, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) 14:18:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af61, &(0x7f0000000000)) 14:18:53 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3f, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3001}) 14:18:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000036c0)={0x0, 0x0, 0x0, {0xe, @raw_data="d1ef4d2ca640407db9a44a5eaff51e3bf848486de8728ef5f91d26bb15586d89f83d2ccc5ce77326f21d6b32c811031f8b9abed18f6c65bf3552690085e78c859bcb598273e450b920a6a21931422aeb7370a888b8ec1ffdf3ddec8d5e1808d1515045a773d88368953d104ea92cd8ecb8fa36c6f0f9bf6a0c5201a1d222c392076b0a3d59611747eb47ba65d2d6a4668b0d4a5cfd7cd4228798894dff2507fae004ee9151c48809560f0cfb0519c81653d1e0e51c18496963bb85a431d462846cec7c0df17cf515"}}) 14:18:54 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stack\x00') read$snapshot(r0, 0x0, 0x0) 14:18:54 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800011666ff0000000000000a04100080000008"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:18:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 698.734952][T16387] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:18:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af61, &(0x7f0000000000)) 14:18:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000700000007000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000500100005"], 0x30}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}}, 0x0) 14:18:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000140)={'macvlan0\x00', @ifru_settings={0x0, 0x0, @fr_pvc=0x0}}) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000140)={'macvlan0\x00', @ifru_flags}) [ 698.839157][T16387] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:18:54 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 699.145827][T16394] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.161519][T16394] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.423149][T16401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 699.430962][T16401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 699.457372][T16401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 699.465271][T16401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 699.473214][T16401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 699.481148][T16401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 699.507021][T16401] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.514329][T16401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.530042][T16401] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.530230][T16401] bridge0: port 2(bridge_slave_1) entered forwarding state 14:18:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000000206010200000000000000000000000005000400000000000900020073797a3000000000050005000200000005000100060000002c00078008000640000000000500fd000000000005001400060000000800124000000005080006400000004011000300686173683a69702c706f7274"], 0x78}}, 0x0) 14:18:55 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x247a04, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000440)='./file0\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x80005) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x62ce9f1, 0x0) [ 699.972692][T16409] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.988504][T16409] bridge0: port 2(bridge_slave_1) entered disabled state 14:18:55 executing program 2: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000004e40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}], 0x1, 0x0) 14:18:55 executing program 5: [ 700.150229][T16412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 700.160022][T16412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 700.187587][T16412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 700.195390][T16412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 700.203279][T16412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 700.211152][T16412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 700.237064][T16412] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.244350][T16412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.259510][T16412] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.266884][T16412] bridge0: port 2(bridge_slave_1) entered forwarding state 14:18:56 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x212, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bridge_slave_1\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@dev, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 14:18:56 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x212, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bridge_slave_1\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@dev, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 701.015085][T16427] No such timeout policy "syz1" 14:18:56 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800011666ff0000000000000a04100080000008"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:18:56 executing program 5: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000100), 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x2e) wait4(0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r2, 0x3d) 14:18:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r2, &(0x7f0000000100)="0400", 0x2, 0x0, 0x0, 0x0) 14:18:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000400)='\a\xe7\x9cav:\xd5A\x9f\xbe\xb7\x81\x19x\xb0\xe8\x86!\xbc3\xf9%\xd2L\xa4\xf4V\xf2=\xbe\x10\n\xda\xdf\x8c2\xe4\xff\xddk\x8a\x92N\x86\x1e\xc1\xdc\xcc\xca\x7f\x0e\x95\xe43\xac\xae\xa8\xd2@\xefT\xdb\xdb\xc0W#co\xe7YY\xca\x96\xf8F\xcc\xde\xc4;\x80\x16\xbeSG\xc4\x80\xa9\x8e\xb7D\x1bd\xf9i\x95u\xdf\xb4\xbe\x05\x82]\r\x0e\x1b\xf8\xdc\x05\xad\x89\x9e\x02\x14\xd1A,)2\x12\xa9eO\xeb\xc0\xe8H\x0e\x9aH|{GV;\x05\xf2a\xd9x]zA\x81\x90\x0f\xbe\x06mJ\x8ab\x8fK\x1dlD\xf1\xd4\x17k\x9a\xda\xfawX4\xc0 r|\xc1\xa3\xc9\xdae\x04\x803\x80\xe5\xcf\xe4C2\x98\xbcYy\xc9EO\x96V9\xbd\x10\xce\xe2\xfe\x82X\x1f\xb3?\xc44\xff', 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)='!', 0x1}], 0x1, 0x658, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r0, r0, 0x0, 0x2000000010003) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 701.045457][T16429] No such timeout policy "syz1" [ 701.138430][T16431] No such timeout policy "syz1" [ 701.208992][T16435] x_tables: duplicate underflow at hook 2 [ 701.268948][T16435] x_tables: duplicate underflow at hook 2 14:18:57 executing program 3: shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) [ 701.458536][T16446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:18:57 executing program 1: r0 = socket(0x2, 0x10000000000003, 0x0) connect$unix(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7802"], 0x10) getpeername$unix(r0, 0x0, 0x0) 14:18:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x212, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bridge_slave_1\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@dev, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 701.542051][T16446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:18:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x1f8, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000006500), 0x4, 0x0) 14:18:57 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 14:18:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000000206010200000000000000000000000005000400000000000900020073797a3000000000050005000200000005000100060000002c00078008000640000000000500fd000000000005001400060000000800124000000005080006400000004011000300686173683a69702c706f7274"], 0x78}}, 0x0) [ 701.856530][T16456] x_tables: duplicate underflow at hook 2 [ 701.862774][T16457] No such timeout policy "syz1" [ 701.926550][T16456] x_tables: duplicate underflow at hook 2 14:18:57 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="ce9ca03218", 0x5}], 0x1, 0x0, 0x160}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 14:18:58 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000100), 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) 14:18:58 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800011666ff0000000000000a04100080000008"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:18:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002200)=""/165, 0xa5}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1c1, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) 14:18:58 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8"], 0x3c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 14:18:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0fc7ab20e2ba4300b02aee0f79f8360f22180fc718ba4200b80001ef66b9c40b00000f32b800008ed00f0966b8d8b800000f23c80f21f86635000060000f23f8", 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:18:58 executing program 5: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r5, r4) [ 703.143727][T16482] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 703.167562][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 703.207780][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:18:59 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x4c00, 0x0) 14:18:59 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstatfs(0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=@md0='/dev/md0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, 0x0) [ 703.934057][T16483] not chained 10000 origins [ 703.938614][T16483] CPU: 0 PID: 16483 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 703.947289][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 703.957349][T16483] Call Trace: [ 703.960659][T16483] dump_stack+0x21c/0x280 [ 703.965013][T16483] kmsan_internal_chain_origin+0x6f/0x130 [ 703.970751][T16483] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 703.976831][T16483] ? kmsan_get_metadata+0x116/0x180 [ 703.982042][T16483] ? kmsan_set_origin_checked+0x95/0xf0 [ 703.987602][T16483] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 703.993688][T16483] ? kmsan_get_metadata+0x116/0x180 [ 703.998898][T16483] ? kmsan_get_metadata+0x116/0x180 [ 704.004142][T16483] ? kmsan_set_origin_checked+0x95/0xf0 [ 704.009700][T16483] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 704.015835][T16483] ? _copy_from_user+0x201/0x310 [ 704.020781][T16483] ? kmsan_get_metadata+0x116/0x180 [ 704.025983][T16483] __msan_chain_origin+0x50/0x90 [ 704.030947][T16483] __copy_msghdr_from_user+0x4e1/0xc20 [ 704.036422][T16483] ? __msan_get_context_state+0x9/0x20 [ 704.041906][T16483] __sys_sendmmsg+0x635/0xf70 [ 704.046613][T16483] ? __msan_poison_alloca+0xf0/0x120 [ 704.051965][T16483] ? ktime_get_ts64+0x79f/0x8d0 [ 704.056841][T16483] ? _copy_to_user+0x1bf/0x260 [ 704.061619][T16483] ? kmsan_get_metadata+0x116/0x180 [ 704.066823][T16483] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 704.072632][T16483] ? kmsan_get_metadata+0x116/0x180 [ 704.078449][T16483] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 704.085590][T16483] ? __prepare_exit_to_usermode+0x16c/0x560 [ 704.091504][T16483] __se_sys_sendmmsg+0xbd/0xe0 [ 704.096277][T16483] __x64_sys_sendmmsg+0x56/0x70 [ 704.101138][T16483] do_syscall_64+0xad/0x160 [ 704.105649][T16483] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 704.111545][T16483] RIP: 0033:0x45d5b9 [ 704.115431][T16483] Code: Bad RIP value. [ 704.119493][T16483] RSP: 002b:00007fdee1b2ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 704.127902][T16483] RAX: ffffffffffffffda RBX: 0000000000027a00 RCX: 000000000045d5b9 [ 704.135866][T16483] RDX: 0492492492492642 RSI: 0000000020000180 RDI: 0000000000000003 [ 704.143826][T16483] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 704.151787][T16483] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 704.159746][T16483] R13: 000000000169fb6f R14: 00007fdee1b2b9c0 R15: 000000000118cf4c [ 704.167712][T16483] Uninit was stored to memory at: [ 704.172732][T16483] kmsan_internal_chain_origin+0xad/0x130 [ 704.178439][T16483] __msan_chain_origin+0x50/0x90 [ 704.183376][T16483] __copy_msghdr_from_user+0x4e1/0xc20 [ 704.188831][T16483] __sys_sendmmsg+0x635/0xf70 [ 704.193507][T16483] __se_sys_sendmmsg+0xbd/0xe0 [ 704.198257][T16483] __x64_sys_sendmmsg+0x56/0x70 [ 704.203095][T16483] do_syscall_64+0xad/0x160 [ 704.207585][T16483] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 704.213454][T16483] [ 704.215768][T16483] Uninit was stored to memory at: [ 704.220783][T16483] kmsan_internal_chain_origin+0xad/0x130 [ 704.226489][T16483] __msan_chain_origin+0x50/0x90 [ 704.231421][T16483] __copy_msghdr_from_user+0x4e1/0xc20 [ 704.236869][T16483] __sys_sendmmsg+0x635/0xf70 [ 704.241551][T16483] __se_sys_sendmmsg+0xbd/0xe0 [ 704.246304][T16483] __x64_sys_sendmmsg+0x56/0x70 [ 704.251145][T16483] do_syscall_64+0xad/0x160 [ 704.255636][T16483] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 704.261507][T16483] [ 704.263822][T16483] Uninit was stored to memory at: [ 704.268836][T16483] kmsan_internal_chain_origin+0xad/0x130 [ 704.274543][T16483] __msan_chain_origin+0x50/0x90 [ 704.279617][T16483] __copy_msghdr_from_user+0x4e1/0xc20 [ 704.285076][T16483] __sys_sendmmsg+0x635/0xf70 [ 704.289749][T16483] __se_sys_sendmmsg+0xbd/0xe0 [ 704.294509][T16483] __x64_sys_sendmmsg+0x56/0x70 [ 704.299455][T16483] do_syscall_64+0xad/0x160 [ 704.304055][T16483] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 704.311270][T16483] [ 704.313773][T16483] Uninit was stored to memory at: [ 704.319065][T16483] kmsan_internal_chain_origin+0xad/0x130 [ 704.324777][T16483] __msan_chain_origin+0x50/0x90 [ 704.329719][T16483] __copy_msghdr_from_user+0x4e1/0xc20 [ 704.335178][T16483] __sys_sendmmsg+0x635/0xf70 [ 704.339858][T16483] __se_sys_sendmmsg+0xbd/0xe0 [ 704.344610][T16483] __x64_sys_sendmmsg+0x56/0x70 [ 704.349453][T16483] do_syscall_64+0xad/0x160 [ 704.353945][T16483] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 704.359818][T16483] [ 704.362136][T16483] Uninit was stored to memory at: [ 704.367149][T16483] kmsan_internal_chain_origin+0xad/0x130 [ 704.372854][T16483] __msan_chain_origin+0x50/0x90 [ 704.377790][T16483] __copy_msghdr_from_user+0x4e1/0xc20 [ 704.383234][T16483] __sys_sendmmsg+0x635/0xf70 [ 704.387901][T16483] __se_sys_sendmmsg+0xbd/0xe0 [ 704.392653][T16483] __x64_sys_sendmmsg+0x56/0x70 [ 704.397494][T16483] do_syscall_64+0xad/0x160 [ 704.401987][T16483] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 704.407854][T16483] [ 704.410165][T16483] Uninit was stored to memory at: [ 704.415267][T16483] kmsan_internal_chain_origin+0xad/0x130 [ 704.420994][T16483] __msan_chain_origin+0x50/0x90 [ 704.425930][T16483] __copy_msghdr_from_user+0x4e1/0xc20 [ 704.431557][T16483] __sys_sendmmsg+0x635/0xf70 [ 704.436232][T16483] __se_sys_sendmmsg+0xbd/0xe0 [ 704.441086][T16483] __x64_sys_sendmmsg+0x56/0x70 [ 704.445932][T16483] do_syscall_64+0xad/0x160 [ 704.450456][T16483] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 704.456342][T16483] [ 704.458657][T16483] Uninit was stored to memory at: [ 704.463674][T16483] kmsan_internal_chain_origin+0xad/0x130 [ 704.469398][T16483] __msan_chain_origin+0x50/0x90 [ 704.474341][T16483] __copy_msghdr_from_user+0x4e1/0xc20 [ 704.479797][T16483] __sys_sendmmsg+0x635/0xf70 14:19:00 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000140)=[0x0], 0x1}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000000, 0x1000}, 0x20) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, 0x0) [ 704.484480][T16483] __se_sys_sendmmsg+0xbd/0xe0 [ 704.489234][T16483] __x64_sys_sendmmsg+0x56/0x70 [ 704.494074][T16483] do_syscall_64+0xad/0x160 [ 704.498568][T16483] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 704.504453][T16483] [ 704.506768][T16483] Local variable ----msg_sys@__sys_sendmmsg created at: [ 704.513689][T16483] __sys_sendmmsg+0xbb/0xf70 [ 704.518268][T16483] __sys_sendmmsg+0xbb/0xf70 14:19:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x49, 0x800001b, 0xffffffffffffff9c, &(0x7f00000000c0)='.\x00') fanotify_mark(r2, 0x80, 0x0, 0xffffffffffffffff, 0x0) 14:19:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0fc7ab20e2ba4300b02aee0f79f8360f22180fc718ba4200b80001ef66b9c40b00000f32b800008ed00f0966b8d8b800000f23c80f21f86635000060000f23f8", 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:19:00 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000480)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x15) 14:19:00 executing program 3: 14:19:01 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800011666ff0000000000000a04100080000008"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:01 executing program 1: 14:19:01 executing program 5: [ 705.896465][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 705.936596][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:19:01 executing program 0: 14:19:01 executing program 3: 14:19:01 executing program 2: 14:19:01 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_matches\x00') read$char_usb(r2, &(0x7f0000001380)=""/230, 0x20001466) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x9, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) dup3(r3, r0, 0x0) 14:19:01 executing program 1: 14:19:02 executing program 5: 14:19:02 executing program 3: 14:19:02 executing program 1: 14:19:02 executing program 2: 14:19:02 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800011666ff0000000000000a04100080000008"], 0x28}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:02 executing program 0: 14:19:02 executing program 5: 14:19:02 executing program 3: 14:19:02 executing program 1: 14:19:02 executing program 2: 14:19:03 executing program 0: 14:19:03 executing program 3: 14:19:03 executing program 1: 14:19:03 executing program 5: 14:19:03 executing program 2: 14:19:03 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800011666ff0000000000000a04100080000008"], 0x28}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:03 executing program 3: 14:19:03 executing program 0: 14:19:03 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 14:19:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0x17}) 14:19:03 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800011666ff0000000000000a04100080000008"], 0x28}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:03 executing program 2: [ 708.191381][T16581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 708.256102][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 14:19:04 executing program 0: 14:19:04 executing program 3: 14:19:04 executing program 5: 14:19:04 executing program 1: 14:19:04 executing program 2: 14:19:04 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:04 executing program 0: 14:19:04 executing program 3: 14:19:04 executing program 5: 14:19:04 executing program 2: 14:19:04 executing program 1: 14:19:04 executing program 3: 14:19:04 executing program 0: 14:19:05 executing program 5: 14:19:05 executing program 2: 14:19:05 executing program 1: 14:19:05 executing program 0: 14:19:05 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:05 executing program 3: 14:19:05 executing program 5: 14:19:05 executing program 1: 14:19:05 executing program 2: 14:19:05 executing program 0: 14:19:06 executing program 0: 14:19:06 executing program 5: 14:19:06 executing program 1: 14:19:06 executing program 3: 14:19:06 executing program 2: 14:19:06 executing program 0: 14:19:07 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:07 executing program 1: 14:19:07 executing program 3: 14:19:07 executing program 5: 14:19:07 executing program 2: 14:19:07 executing program 0: 14:19:07 executing program 0: 14:19:07 executing program 5: 14:19:07 executing program 2: 14:19:07 executing program 3: 14:19:07 executing program 1: 14:19:08 executing program 0: 14:19:08 executing program 4: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:08 executing program 5: 14:19:08 executing program 3: 14:19:08 executing program 2: 14:19:08 executing program 1: 14:19:08 executing program 0: 14:19:08 executing program 5: 14:19:08 executing program 3: 14:19:08 executing program 1: 14:19:08 executing program 0: 14:19:08 executing program 2: 14:19:09 executing program 3: 14:19:09 executing program 4: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:09 executing program 2: 14:19:09 executing program 5: 14:19:09 executing program 1: 14:19:09 executing program 0: 14:19:09 executing program 3: 14:19:10 executing program 1: 14:19:10 executing program 5: 14:19:10 executing program 0: 14:19:10 executing program 3: 14:19:10 executing program 2: 14:19:10 executing program 1: 14:19:11 executing program 4: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:11 executing program 2: 14:19:11 executing program 3: 14:19:11 executing program 5: 14:19:11 executing program 0: 14:19:11 executing program 1: 14:19:11 executing program 2: 14:19:11 executing program 1: 14:19:11 executing program 3: 14:19:11 executing program 0: 14:19:11 executing program 5: 14:19:12 executing program 2: 14:19:12 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:12 executing program 1: 14:19:12 executing program 0: 14:19:12 executing program 3: 14:19:12 executing program 5: 14:19:12 executing program 2: 14:19:13 executing program 3: 14:19:13 executing program 0: 14:19:13 executing program 2: 14:19:13 executing program 1: 14:19:13 executing program 5: 14:19:13 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:13 executing program 5: 14:19:13 executing program 3: 14:19:13 executing program 0: 14:19:13 executing program 2: 14:19:13 executing program 1: 14:19:13 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:13 executing program 0: 14:19:14 executing program 3: 14:19:14 executing program 5: 14:19:14 executing program 2: 14:19:14 executing program 1: 14:19:14 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:14 executing program 0: 14:19:14 executing program 3: 14:19:14 executing program 5: 14:19:14 executing program 1: 14:19:14 executing program 2: 14:19:14 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:14 executing program 0: 14:19:14 executing program 3: 14:19:14 executing program 5: 14:19:15 executing program 1: 14:19:15 executing program 2: 14:19:15 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:15 executing program 0: 14:19:15 executing program 3: 14:19:15 executing program 1: 14:19:15 executing program 5: 14:19:15 executing program 2: 14:19:15 executing program 0: 14:19:15 executing program 3: 14:19:15 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:15 executing program 1: 14:19:16 executing program 2: 14:19:16 executing program 5: 14:19:16 executing program 0: 14:19:16 executing program 3: 14:19:16 executing program 1: 14:19:16 executing program 2: 14:19:16 executing program 5: 14:19:16 executing program 0: 14:19:16 executing program 3: 14:19:16 executing program 1: 14:19:17 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:17 executing program 5: 14:19:17 executing program 2: 14:19:17 executing program 0: 14:19:17 executing program 1: 14:19:17 executing program 3: 14:19:17 executing program 2: 14:19:17 executing program 1: 14:19:17 executing program 5: 14:19:17 executing program 3: 14:19:17 executing program 0: 14:19:18 executing program 2: [ 722.931037][T16765] not chained 20000 origins [ 722.935594][T16765] CPU: 1 PID: 16765 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 722.944267][T16765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.954323][T16765] Call Trace: [ 722.957624][T16765] dump_stack+0x21c/0x280 [ 722.961969][T16765] kmsan_internal_chain_origin+0x6f/0x130 [ 722.967699][T16765] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 722.973778][T16765] ? kmsan_get_metadata+0x116/0x180 [ 722.979072][T16765] ? kmsan_set_origin_checked+0x95/0xf0 [ 722.984634][T16765] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 722.991144][T16765] ? kmsan_get_metadata+0x116/0x180 [ 722.996438][T16765] ? kmsan_get_metadata+0x116/0x180 [ 723.001644][T16765] ? kmsan_set_origin_checked+0x95/0xf0 [ 723.007198][T16765] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 723.013277][T16765] ? _copy_from_user+0x201/0x310 [ 723.018224][T16765] ? kmsan_get_metadata+0x116/0x180 [ 723.023450][T16765] __msan_chain_origin+0x50/0x90 [ 723.028396][T16765] __copy_msghdr_from_user+0x4e1/0xc20 [ 723.033867][T16765] ? __msan_get_context_state+0x9/0x20 [ 723.039340][T16765] __sys_sendmmsg+0x635/0xf70 [ 723.044042][T16765] ? __msan_poison_alloca+0xf0/0x120 [ 723.049334][T16765] ? ktime_get_ts64+0x79f/0x8d0 [ 723.054203][T16765] ? _copy_to_user+0x1bf/0x260 [ 723.058980][T16765] ? kmsan_get_metadata+0x116/0x180 [ 723.064186][T16765] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 723.069998][T16765] ? kmsan_get_metadata+0x116/0x180 [ 723.075205][T16765] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 723.081021][T16765] ? __prepare_exit_to_usermode+0x16c/0x560 [ 723.086927][T16765] __se_sys_sendmmsg+0xbd/0xe0 [ 723.091702][T16765] __x64_sys_sendmmsg+0x56/0x70 [ 723.096575][T16765] do_syscall_64+0xad/0x160 [ 723.101089][T16765] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 723.106980][T16765] RIP: 0033:0x45d5b9 [ 723.110864][T16765] Code: Bad RIP value. [ 723.114927][T16765] RSP: 002b:00007fdee1b2ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 723.124380][T16765] RAX: ffffffffffffffda RBX: 0000000000027a00 RCX: 000000000045d5b9 [ 723.132351][T16765] RDX: 0492492492492642 RSI: 0000000020000180 RDI: 0000000000000003 [ 723.140758][T16765] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 723.148751][T16765] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 723.156734][T16765] R13: 000000000169fb6f R14: 00007fdee1b2b9c0 R15: 000000000118cf4c [ 723.164885][T16765] Uninit was stored to memory at: [ 723.169941][T16765] kmsan_internal_chain_origin+0xad/0x130 [ 723.175754][T16765] __msan_chain_origin+0x50/0x90 [ 723.180700][T16765] __copy_msghdr_from_user+0x4e1/0xc20 [ 723.186161][T16765] __sys_sendmmsg+0x635/0xf70 [ 723.190840][T16765] __se_sys_sendmmsg+0xbd/0xe0 [ 723.195607][T16765] __x64_sys_sendmmsg+0x56/0x70 [ 723.200462][T16765] do_syscall_64+0xad/0x160 [ 723.204971][T16765] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 723.210852][T16765] [ 723.213177][T16765] Uninit was stored to memory at: [ 723.218213][T16765] kmsan_internal_chain_origin+0xad/0x130 [ 723.223935][T16765] __msan_chain_origin+0x50/0x90 [ 723.228875][T16765] __copy_msghdr_from_user+0x4e1/0xc20 [ 723.234334][T16765] __sys_sendmmsg+0x635/0xf70 [ 723.239133][T16765] __se_sys_sendmmsg+0xbd/0xe0 [ 723.244423][T16765] __x64_sys_sendmmsg+0x56/0x70 [ 723.249300][T16765] do_syscall_64+0xad/0x160 [ 723.253813][T16765] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 723.259694][T16765] [ 723.262028][T16765] Uninit was stored to memory at: [ 723.267061][T16765] kmsan_internal_chain_origin+0xad/0x130 [ 723.273304][T16765] __msan_chain_origin+0x50/0x90 [ 723.278247][T16765] __copy_msghdr_from_user+0x4e1/0xc20 [ 723.283709][T16765] __sys_sendmmsg+0x635/0xf70 [ 723.289271][T16765] __se_sys_sendmmsg+0xbd/0xe0 [ 723.294071][T16765] __x64_sys_sendmmsg+0x56/0x70 [ 723.298929][T16765] do_syscall_64+0xad/0x160 [ 723.303436][T16765] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 723.309403][T16765] [ 723.311728][T16765] Uninit was stored to memory at: [ 723.316768][T16765] kmsan_internal_chain_origin+0xad/0x130 [ 723.322496][T16765] __msan_chain_origin+0x50/0x90 [ 723.327438][T16765] __copy_msghdr_from_user+0x4e1/0xc20 [ 723.332911][T16765] __sys_sendmmsg+0x635/0xf70 [ 723.337568][T16765] __se_sys_sendmmsg+0xbd/0xe0 [ 723.342940][T16765] __x64_sys_sendmmsg+0x56/0x70 [ 723.347770][T16765] do_syscall_64+0xad/0x160 [ 723.352252][T16765] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 723.358201][T16765] [ 723.360518][T16765] Uninit was stored to memory at: [ 723.365541][T16765] kmsan_internal_chain_origin+0xad/0x130 [ 723.371250][T16765] __msan_chain_origin+0x50/0x90 [ 723.376372][T16765] __copy_msghdr_from_user+0x4e1/0xc20 [ 723.381840][T16765] __sys_sendmmsg+0x635/0xf70 [ 723.386528][T16765] __se_sys_sendmmsg+0xbd/0xe0 [ 723.391277][T16765] __x64_sys_sendmmsg+0x56/0x70 [ 723.396123][T16765] do_syscall_64+0xad/0x160 [ 723.400619][T16765] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 723.406493][T16765] [ 723.408800][T16765] Uninit was stored to memory at: [ 723.413809][T16765] kmsan_internal_chain_origin+0xad/0x130 [ 723.419514][T16765] __msan_chain_origin+0x50/0x90 [ 723.424446][T16765] __copy_msghdr_from_user+0x4e1/0xc20 [ 723.429914][T16765] __sys_sendmmsg+0x635/0xf70 [ 723.434601][T16765] __se_sys_sendmmsg+0xbd/0xe0 [ 723.439409][T16765] __x64_sys_sendmmsg+0x56/0x70 [ 723.444257][T16765] do_syscall_64+0xad/0x160 [ 723.448923][T16765] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 723.454787][T16765] [ 723.457094][T16765] Uninit was stored to memory at: [ 723.462104][T16765] kmsan_internal_chain_origin+0xad/0x130 [ 723.467803][T16765] __msan_chain_origin+0x50/0x90 [ 723.472720][T16765] __copy_msghdr_from_user+0x4e1/0xc20 [ 723.478777][T16765] __sys_sendmmsg+0x635/0xf70 [ 723.483604][T16765] __se_sys_sendmmsg+0xbd/0xe0 [ 723.488365][T16765] __x64_sys_sendmmsg+0x56/0x70 [ 723.493197][T16765] do_syscall_64+0xad/0x160 [ 723.497692][T16765] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 723.503570][T16765] [ 723.505884][T16765] Local variable ----msg_sys@__sys_sendmmsg created at: [ 723.512821][T16765] __sys_sendmmsg+0xbb/0xf70 [ 723.517418][T16765] __sys_sendmmsg+0xbb/0xf70 14:19:19 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:19 executing program 3: 14:19:19 executing program 1: 14:19:19 executing program 5: 14:19:19 executing program 0: 14:19:19 executing program 2: 14:19:19 executing program 5: 14:19:19 executing program 2: 14:19:19 executing program 0: 14:19:19 executing program 1: 14:19:19 executing program 3: 14:19:20 executing program 5: 14:19:20 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:20 executing program 1: 14:19:20 executing program 0: 14:19:20 executing program 2: 14:19:20 executing program 3: 14:19:20 executing program 5: 14:19:20 executing program 0: 14:19:20 executing program 1: 14:19:21 executing program 2: 14:19:21 executing program 3: 14:19:21 executing program 5: 14:19:21 executing program 0: 14:19:22 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:22 executing program 1: 14:19:22 executing program 3: 14:19:22 executing program 2: 14:19:22 executing program 5: 14:19:22 executing program 0: 14:19:22 executing program 5: 14:19:22 executing program 1: 14:19:22 executing program 3: 14:19:22 executing program 2: 14:19:22 executing program 0: 14:19:22 executing program 0: 14:19:23 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:23 executing program 2: 14:19:23 executing program 5: 14:19:23 executing program 1: 14:19:23 executing program 3: 14:19:23 executing program 0: 14:19:23 executing program 3: 14:19:23 executing program 5: 14:19:23 executing program 0: 14:19:23 executing program 1: 14:19:23 executing program 2: 14:19:24 executing program 0: 14:19:24 executing program 5: 14:19:24 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800011666ff0000"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:24 executing program 3: 14:19:24 executing program 0: 14:19:24 executing program 2: 14:19:24 executing program 1: 14:19:25 executing program 5: 14:19:25 executing program 0: 14:19:25 executing program 1: 14:19:25 executing program 2: 14:19:25 executing program 3: r0 = socket(0xa, 0x5, 0x0) ioctl$SIOCSIFMTU(r0, 0x8916, &(0x7f0000000000)={'ip_vti0\x00'}) 14:19:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0xd, &(0x7f0000000000)=0x8001, 0x4) 14:19:25 executing program 1: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x1d, r1, r0) [ 730.080103][T16860] sctp: [Deprecated]: syz-executor.0 (pid 16860) Use of int in maxseg socket option. [ 730.080103][T16860] Use struct sctp_assoc_value instead 14:19:26 executing program 3: 14:19:26 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800011666ff0000"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:26 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={0x0, 0x0, 0x38}, 0x10) 14:19:26 executing program 2: 14:19:26 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000980)={0x14, 0x14, 0x5db2f0efc0013d9b, 0x0, 0x0, {0x38}}, 0x14}}, 0x0) 14:19:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x11, 0x46, 0x0, 0x0) 14:19:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}]}, 0x2c}}, 0x0) 14:19:26 executing program 1: keyctl$instantiate_iov(0xf, 0x0, 0x0, 0x0, 0x0) 14:19:26 executing program 5: bpf$MAP_CREATE(0x1e, &(0x7f0000000100), 0x40) 14:19:26 executing program 3: prctl$PR_SET_SPECULATION_CTRL(0x24, 0x0) 14:19:26 executing program 0: r0 = socket(0x2b, 0x1, 0x0) connect$rds(r0, 0x0, 0x1000000) 14:19:26 executing program 2: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x541b, &(0x7f0000000480)={'ip6tnl0\x00', 0x0}) 14:19:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev_mcast\x00') read$snapshot(r0, 0x0, 0x0) 14:19:27 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800011666ff0000"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x29, 0x42, 0x0, 0x300) 14:19:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x70, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') 14:19:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:19:27 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4e24}}}, 0x4c}}, 0x0) 14:19:27 executing program 1: r0 = socket(0xa, 0x3, 0x200000000000ff) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x0, @ethernet={0x0, @link_local}, @can={0x1d, 0x0, 0x80fe, 0x4000000}, @ax25={0x3, @bcast}, 0x0, 0x0, 0x0, 0x2}) [ 732.068038][T16899] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:27 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x401c812, r0, 0x80000000) 14:19:27 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RAUTH(r0, &(0x7f0000000000)={0x14}, 0x531c000) 14:19:28 executing program 5: r0 = socket(0x23, 0x2, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xf, &(0x7f00000001c0)={0x0}}, 0x0) 14:19:28 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xa2) 14:19:28 executing program 2: r0 = socket(0xa, 0x5, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) 14:19:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x4}]}, 0x28}}, 0x0) 14:19:29 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800011666ff0000000000000a04"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:29 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x4020940d, &(0x7f0000000000)={'veth1_to_bond\x00', @ifru_mtu}) 14:19:29 executing program 0: r0 = socket(0x1, 0x5, 0x0) ioctl$PPPOEIOCDFWD(r0, 0x5411, 0x531000) 14:19:29 executing program 2: clone(0x10000, 0x0, 0x0, 0x0, 0x0) 14:19:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) 14:19:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 14:19:29 executing program 0: r0 = socket(0x23, 0x2, 0x0) bind$rds(r0, 0x0, 0x0) [ 733.584019][T16929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 733.647170][T16929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:19:29 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8971, &(0x7f0000000e00)={'wg0\x00'}) 14:19:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab08, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) 14:19:29 executing program 2: r0 = socket(0x2, 0x3, 0x5) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'nr0\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @multicast1, 0x1}, @ipx={0x4, 0x1, 0x9, "b9e0ec515b66", 0x9}, @can, 0xfff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='erspan0\x00', 0x10000, 0x3, 0x1}) 14:19:29 executing program 5: sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x342da365dec1fafc) 14:19:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8980, &(0x7f0000000980)={'wg2\x00'}) 14:19:30 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800011666ff0000000000000a04"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:30 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001340)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000001640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 14:19:30 executing program 5: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev, 0x1}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7b, &(0x7f0000000040)={r2, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 14:19:30 executing program 2: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x12, &(0x7f0000000140), 0x4) 14:19:30 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x3, &(0x7f00000002c0), 0x4) 14:19:30 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)) 14:19:30 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCOUTQ(r0, 0x5429, 0x0) 14:19:30 executing program 3: r0 = syz_io_uring_setup(0x36d0, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 735.151427][T16963] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:19:30 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)=@pppol2tpv3in6={0x2, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80) [ 735.226595][T16963] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:19:30 executing program 0: r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000001c0)='n', 0x1, 0xfffffffffffffffc) add_key(&(0x7f0000000200)='id_resolver\x00', 0x0, 0x0, 0x0, r0) 14:19:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 14:19:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000440)={r0}, &(0x7f0000000480)={'enc=', 'raw', ' hash=', {'sha1-generic\x00'}}, 0x0, 0x0) 14:19:32 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800011666ff0000000000000a04"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 14:19:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15}, 0x40) 14:19:32 executing program 0: socketpair(0x21, 0x2, 0x2, &(0x7f0000000180)) 14:19:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2279, 0x0) 14:19:32 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x1, 0x42) write$tun(r0, &(0x7f0000000140)={@val, @val, @x25={0x0, 0x0, 0x0, "d230ab46fb23ff0188d2dba900dcad22241d2a59e56baadd14bedf035700c0b3b7136733f114790407e2d2b254568ba308989ae3a21b1e99c5cf616fa2f57b6fe9a03966b59152f6b1926962797681f1a94e70b47c3a92e117ff2e60c2edfedc3e"}}, 0xfd84) 14:19:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000380)={0x8, 0x5, 0xfa00, {0x0, {0x0, 0x0, "5f2ce88b48b835cc2bfb421e9768ccc29c2a8a0a45e927f8260a34ea3ca4299e84083622cfab114598cc818d4fb933cd548fc47ca506c7a615be04702fba42258e4e319eb847d528077be8babccaf1820a976fb8e686db8ef11927e7764782bdadeafe9d29850c064f39345507f7cabfe189fdbef34114464bc49a0a639822dd570cddd0ac738cc903277cd769604fba89aa3e73ca7214ba41dea55bf542fc8f6bfb4e5affda8c4e5f8641490a7a372807e31089dac65922fd0e3d9cd7f4cb6f6ad95a8197ef9e7a6871e2ad5c389eba815b52108f48065d79f10c80aa98fe18f99f5b50eb7d8ae558bc6f5d33f5a962da986acd00"}}}, 0x128) [ 736.539797][T16990] ===================================================== [ 736.546799][T16990] BUG: KMSAN: uninit-value in xa_load+0xa59/0xa90 [ 736.553230][T16990] CPU: 0 PID: 16990 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 736.561896][T16990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 736.571952][T16990] Call Trace: [ 736.575285][T16990] dump_stack+0x21c/0x280 [ 736.579626][T16990] kmsan_report+0xf7/0x1e0 [ 736.584231][T16990] __msan_warning+0x58/0xa0 [ 736.588747][T16990] xa_load+0xa59/0xa90 [ 736.592897][T16990] ucma_get_ctx+0x82/0x3b0 [ 736.597325][T16990] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.603141][T16990] ucma_accept+0x29a/0xe40 [ 736.607604][T16990] ? kmsan_set_origin_checked+0x95/0xf0 [ 736.613314][T16990] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 736.619401][T16990] ? _copy_from_user+0x201/0x310 [ 736.624351][T16990] ? kmsan_get_metadata+0x116/0x180 [ 736.629560][T16990] ucma_write+0x64d/0x6e0 [ 736.633906][T16990] ? ucma_get_global_nl_info+0xe0/0xe0 [ 736.639422][T16990] vfs_write+0x6a3/0x17c0 [ 736.643773][T16990] ? __msan_poison_alloca+0xf0/0x120 [ 736.649204][T16990] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.655008][T16990] ? kmsan_get_metadata+0x116/0x180 [ 736.660202][T16990] ksys_write+0x275/0x500 [ 736.664534][T16990] ? __prepare_exit_to_usermode+0x16c/0x560 [ 736.670423][T16990] __se_sys_write+0x92/0xb0 [ 736.674922][T16990] __x64_sys_write+0x4a/0x70 [ 736.679506][T16990] do_syscall_64+0xad/0x160 [ 736.684090][T16990] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 736.689972][T16990] RIP: 0033:0x45d5b9 [ 736.693873][T16990] Code: Bad RIP value. [ 736.697925][T16990] RSP: 002b:00007fa0f39ddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 736.706340][T16990] RAX: ffffffffffffffda RBX: 0000000000038180 RCX: 000000000045d5b9 [ 736.714308][T16990] RDX: 0000000000000128 RSI: 0000000020000380 RDI: 0000000000000003 [ 736.722271][T16990] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 736.730578][T16990] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 736.738536][T16990] R13: 000000000169fb6f R14: 00007fa0f39de9c0 R15: 000000000118cf4c [ 736.746505][T16990] [ 736.748828][T16990] Local variable ----cmd@ucma_accept created at: [ 736.755271][T16990] ucma_accept+0x91/0xe40 [ 736.759602][T16990] ucma_accept+0x91/0xe40 [ 736.763909][T16990] ===================================================== [ 736.770832][T16990] Disabling lock debugging due to kernel taint [ 736.776986][T16990] Kernel panic - not syncing: panic_on_warn set ... [ 736.784262][T16990] CPU: 0 PID: 16990 Comm: syz-executor.1 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 736.794302][T16990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 736.804353][T16990] Call Trace: [ 736.807642][T16990] dump_stack+0x21c/0x280 [ 736.812033][T16990] panic+0x4d7/0xef7 [ 736.815935][T16990] ? add_taint+0x17c/0x210 [ 736.820347][T16990] kmsan_report+0x1df/0x1e0 [ 736.824852][T16990] __msan_warning+0x58/0xa0 [ 736.829350][T16990] xa_load+0xa59/0xa90 [ 736.833422][T16990] ucma_get_ctx+0x82/0x3b0 [ 736.837839][T16990] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.843647][T16990] ucma_accept+0x29a/0xe40 [ 736.848084][T16990] ? kmsan_set_origin_checked+0x95/0xf0 [ 736.853623][T16990] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 736.859685][T16990] ? _copy_from_user+0x201/0x310 [ 736.864619][T16990] ? kmsan_get_metadata+0x116/0x180 [ 736.869809][T16990] ucma_write+0x64d/0x6e0 [ 736.874140][T16990] ? ucma_get_global_nl_info+0xe0/0xe0 [ 736.879589][T16990] vfs_write+0x6a3/0x17c0 [ 736.883920][T16990] ? __msan_poison_alloca+0xf0/0x120 [ 736.889195][T16990] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 736.894992][T16990] ? kmsan_get_metadata+0x116/0x180 [ 736.900181][T16990] ksys_write+0x275/0x500 [ 736.904511][T16990] ? __prepare_exit_to_usermode+0x16c/0x560 [ 736.910395][T16990] __se_sys_write+0x92/0xb0 [ 736.914894][T16990] __x64_sys_write+0x4a/0x70 [ 736.919478][T16990] do_syscall_64+0xad/0x160 [ 736.923973][T16990] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 736.929853][T16990] RIP: 0033:0x45d5b9 [ 736.933753][T16990] Code: Bad RIP value. [ 736.937805][T16990] RSP: 002b:00007fa0f39ddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 736.946233][T16990] RAX: ffffffffffffffda RBX: 0000000000038180 RCX: 000000000045d5b9 [ 736.954192][T16990] RDX: 0000000000000128 RSI: 0000000020000380 RDI: 0000000000000003 [ 736.962154][T16990] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 736.970113][T16990] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 736.978073][T16990] R13: 000000000169fb6f R14: 00007fa0f39de9c0 R15: 000000000118cf4c [ 736.987965][T16990] Kernel Offset: disabled [ 736.992282][T16990] Rebooting in 86400 seconds..