[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 83.665145][ T30] audit: type=1800 audit(1572134808.717:25): pid=11844 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 83.688155][ T30] audit: type=1800 audit(1572134808.737:26): pid=11844 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 83.715030][ T30] audit: type=1800 audit(1572134808.767:27): pid=11844 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.59' (ECDSA) to the list of known hosts. 2019/10/27 00:07:02 fuzzer started 2019/10/27 00:07:06 dialing manager at 10.128.0.26:34985 2019/10/27 00:07:07 syscalls: 2424 2019/10/27 00:07:07 code coverage: enabled 2019/10/27 00:07:07 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/27 00:07:07 extra coverage: enabled 2019/10/27 00:07:07 setuid sandbox: enabled 2019/10/27 00:07:07 namespace sandbox: enabled 2019/10/27 00:07:07 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/27 00:07:07 fault injection: enabled 2019/10/27 00:07:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/27 00:07:07 net packet injection: enabled 2019/10/27 00:07:07 net device setup: enabled 2019/10/27 00:07:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 00:11:14 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1, 0x8}}, 0x30) syzkaller login: [ 350.076899][T12007] IPVS: ftp: loaded support on port[0] = 21 [ 350.219039][T12007] chnl_net:caif_netlink_parms(): no params data found [ 350.276015][T12007] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.283400][T12007] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.292134][T12007] device bridge_slave_0 entered promiscuous mode [ 350.301762][T12007] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.309032][T12007] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.317815][T12007] device bridge_slave_1 entered promiscuous mode [ 350.349834][T12007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.362896][T12007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.396872][T12007] team0: Port device team_slave_0 added [ 350.406240][T12007] team0: Port device team_slave_1 added [ 350.706901][T12007] device hsr_slave_0 entered promiscuous mode [ 350.853069][T12007] device hsr_slave_1 entered promiscuous mode [ 351.095702][T12007] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.102985][T12007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.110729][T12007] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.118024][T12007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.237428][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.263368][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.459060][T12007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.517256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 351.526311][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.546835][T12007] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.588156][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 351.597994][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.607126][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.614356][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.722846][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.732414][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.741417][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.748669][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.758367][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 351.768431][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 351.778434][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 351.788275][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 351.797882][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 351.807765][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 351.817347][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 351.826601][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.835796][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 351.845030][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.859825][T12007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 351.968641][T12007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.247994][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 00:11:18 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1, 0x8}}, 0x30) 00:11:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) dup2(r0, r1) 00:11:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) dup(0xffffffffffffffff) 00:11:19 executing program 0: r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="850000000700000025000000000000009500000000000000675d7ff630f3a6ed59d10594847ce0038c696112fbbd306c59f87ea8773a3d6cdf94432ed8f437d9c6d5010000800000000099f5572d22c85af5db1b40356aeec9077bf12fddad"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r0, r1, 0x0, 0x0, 0x0}, 0x30) 00:11:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/fscreate\x00') pwritev(r0, &(0x7f0000000180), 0x3c7, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 354.368454][T12065] IPVS: ftp: loaded support on port[0] = 21 00:11:19 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet(r1, 0x0, 0x0, 0x80800) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000480)=0x8b21d7b36ca52682) r4 = syz_open_procfs(r3, &(0x7f0000000300)='coredump_filter\x00') ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000500)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x4003, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) fsetxattr$security_smack_transmute(r1, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='TRUE', 0x4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone(0xfd, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x2b, &(0x7f0000f59ffc)=0x194, 0x1) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) r8 = getpid() mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1) creat(&(0x7f00000007c0)='./file0\x00', 0x800000000) unlink(&(0x7f0000000000)='./file0\x00') ptrace$setopts(0x4206, r8, 0x2, 0x100001) sendto$inet(r5, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 354.574948][T12065] chnl_net:caif_netlink_parms(): no params data found [ 354.639984][T12065] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.647305][T12065] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.655999][T12065] device bridge_slave_0 entered promiscuous mode [ 354.666060][T12065] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.673289][T12065] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.682081][T12065] device bridge_slave_1 entered promiscuous mode [ 354.717094][T12065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.730234][T12065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.768284][T12065] team0: Port device team_slave_0 added [ 354.778286][T12065] team0: Port device team_slave_1 added [ 354.917422][T12065] device hsr_slave_0 entered promiscuous mode [ 355.023111][T12065] device hsr_slave_1 entered promiscuous mode [ 355.133104][T12065] debugfs: Directory 'hsr0' with parent '/' already present! [ 355.356133][T12065] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.363420][T12065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.371269][T12065] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.378647][T12065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.645468][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.663404][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.834145][T12065] 8021q: adding VLAN 0 to HW filter on device bond0 00:11:21 executing program 0: r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fbb930102404009d490b0000000109021200010000000009047a00007b28d800f3ca9e39d88150b96e120d0355e6912b07285cad2301703cd6c0e6e2e5a03db612e13e17a98f1c7f55405a0a76d305f0b552b96187d55e31297f3d64"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x1}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x1000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000680), &(0x7f00000006c0)=0x4) [ 355.897310][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.906001][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.932306][T12065] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.985275][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.996223][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.005245][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.012470][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.103444][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.112942][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.122020][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.129198][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.138390][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.148531][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.158544][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 356.168409][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.216235][T12065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.227362][T12065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.363493][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 356.372537][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 356.382434][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 356.392649][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 356.401857][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 356.411457][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 356.413277][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 356.420602][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.450728][T12065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.540842][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 356.682056][ T12] usb 1-1: Using ep0 maxpacket: 16 00:11:21 executing program 1: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x172f, 0x502, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x1aa5b328778fd307, 0x22, {0x22, 0x2f, "bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f523b546d3b9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 356.812734][ T12] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 356.821120][ T12] usb 1-1: config 0 has no interface number 0 [ 356.827472][ T12] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 356.836647][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.847661][ T12] usb 1-1: config 0 descriptor?? [ 357.082063][ T2931] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 357.322070][ T2931] usb 2-1: Using ep0 maxpacket: 8 [ 357.442346][ T2931] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.453690][ T2931] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.467941][ T2931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 357.474901][ T2931] usb 2-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 357.484098][ T2931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.495312][ T2931] usb 2-1: config 0 descriptor?? [ 357.975912][ T2931] hid (null): usage index exceeded [ 357.981095][ T2931] hid (null): unknown global tag 0xd [ 357.986570][ T2931] hid (null): unknown global tag 0xc [ 357.992555][ T2931] hid (null): usage index exceeded [ 357.997724][ T2931] hid (null): global environment stack underflow [ 358.042234][ T2931] waltop 0003:172F:0502.0001: unknown main item tag 0x2 [ 358.049471][ T2931] waltop 0003:172F:0502.0001: ignoring exceeding usage max [ 358.060547][ T2931] waltop 0003:172F:0502.0001: usage index exceeded [ 358.067331][ T2931] waltop 0003:172F:0502.0001: item 0 2 2 0 parsing failed [ 358.075137][ T2931] waltop: probe of 0003:172F:0502.0001 failed with error -22 [ 358.183480][ T2931] usb 2-1: USB disconnect, device number 2 00:11:23 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x6581, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x2, {0x80000000, 0x6, "37cb56281fb7f7bea9df426c47dad203ef7c9d4e03dd9d1ebfd1651429914d45599e33ef2248eca91c03943c245e2917c6eca1f6f0fef1092ca956084f6c96b6c7422582526dd1b846ef06529eac2b902b53775100df9e2b10d865a326fc3e1a94afa71229218232a496248d218c371bede1fe065cd7956f5ee2463ab0bf431538dc78589d5596c581305e42e427d86efdede0ecb4fdb9fc1ae1a0fe5196c2f5fe49d6a67eda9ae9370ea5c2f1d35a463f1d17f69ae1a6566873f7a4ebb5b740d26d158c8369ca5f2721012dd06f4879d6314f04ba8daeb6e81fbb04342b69f8183e2f5dedbb203b95ab1e09cfe0394bce6cc9f177fa34f2e5c2fe73ba617324", 0x20, 0x0, 0x1, 0x2, 0x7, 0x1f, 0x1, 0x1}, r1}}, 0x128) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x100) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x10) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r4, 0x40}, &(0x7f0000000380)=0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f00000003c0)={@dev, @remote, @initdev}, &(0x7f0000000400)=0xc) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20\x00', 0x2000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r6, 0x80045700, &(0x7f0000000480)) epoll_pwait(r0, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x4, 0x2, &(0x7f0000000500)={0x5}, 0x8) r7 = accept(0xffffffffffffffff, &(0x7f0000000540)=@in={0x2, 0x0, @local}, &(0x7f00000005c0)=0x80) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000600)=@assoc_value={0x0}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000680)={0xffff, 0x5, 0x5, 0x1ff, r8}, &(0x7f00000006c0)=0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000700)={0xc968, 0x1, {0xffffffffffffffff, 0x1, 0x5a5, 0x0, 0x1000}}) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dlm-monitor\x00', 0x20, 0x0) connect$vsock_dgram(r9, &(0x7f00000007c0)={0x28, 0x0, 0x2711, @host}, 0x10) r10 = openat$cgroup_ro(r9, &(0x7f0000000800)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$GIO_CMAP(r10, 0x4b70, &(0x7f0000000840)) r11 = syz_open_dev$vcsa(&(0x7f0000000880)='/dev/vcsa#\x00', 0x40, 0x252880) signalfd(r11, &(0x7f00000008c0)={0x1}, 0x8) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000900)='/dev/null\x00', 0x400002, 0x0) bind$alg(r12, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ecb-camellia-aesni-avx2,sha1-generic)\x00'}, 0x58) syz_extract_tcp_res$synack(&(0x7f00000009c0), 0x1, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r13, 0x0, &(0x7f0000000a00), 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1800000000000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/mixer\x00', 0x2000, 0x0) [ 358.962574][ T17] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 359.072524][ T12] smscufx: Failed to read register index 0x0000700c [ 359.079192][ T12] smscufx: ufx_reg_clear_and_set_bits error reading 0x700c [ 359.079205][ T12] smscufx: error clearing output gate in 0x700C [ 359.086573][ T12] smscufx: error -71 configuring system clock [ 359.094021][ T12] smscufx: probe of 1-1:0.122 failed with error -71 [ 359.152891][ T12] usb 1-1: USB disconnect, device number 2 [ 359.186637][T12123] IPVS: ftp: loaded support on port[0] = 21 [ 359.275893][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 359.349997][T12123] chnl_net:caif_netlink_parms(): no params data found [ 359.412194][ T17] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.423501][ T17] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.436611][ T17] usb 2-1: config 0 interface 0 has no altsetting 0 [ 359.443387][ T17] usb 2-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 359.452615][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.463954][T12123] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.471195][T12123] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.480114][T12123] device bridge_slave_0 entered promiscuous mode [ 359.491079][T12123] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.498566][T12123] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.507473][T12123] device bridge_slave_1 entered promiscuous mode [ 359.517290][ T17] usb 2-1: config 0 descriptor?? [ 359.559261][T12123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.594832][T12123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.635576][T12123] team0: Port device team_slave_0 added [ 359.645257][T12123] team0: Port device team_slave_1 added [ 359.727073][T12123] device hsr_slave_0 entered promiscuous mode 00:11:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000440)={0x9}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000000)={0x1, 0x1, [0x0, 0x6, 0x40, 0x3, 0x9, 0x9, 0x5, 0x9]}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xf}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) [ 359.852975][ T40] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 359.861507][T12123] device hsr_slave_1 entered promiscuous mode [ 359.892520][ T17] usbhid 2-1:0.0: can't add hid device: -71 [ 359.898804][ T17] usbhid: probe of 2-1:0.0 failed with error -71 [ 359.924726][ T17] usb 2-1: USB disconnect, device number 3 [ 359.942868][T12123] debugfs: Directory 'hsr0' with parent '/' already present! [ 360.112312][ T40] usb 1-1: Using ep0 maxpacket: 16 00:11:25 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x1e7d, 0x2c24, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x9, 0x3, 0x1, 0x2, 0xaf, {0x9, 0x21, 0x38, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="001aee"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x79]}) ioctl$KVM_SMI(r3, 0xaeb7) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x9d0624f3c2c1e96f) [ 360.200197][T12123] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.207488][T12123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.215292][T12123] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.222539][T12123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.242641][ T40] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 360.250945][ T40] usb 1-1: config 0 has no interface number 0 [ 360.258212][ T40] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 360.267387][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.343681][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.358098][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.412218][ T40] usb 1-1: config 0 descriptor?? [ 360.623125][ T12] usb 2-1: new high-speed USB device number 4 using dummy_hcd 00:11:25 executing program 0: r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fbb930102404009d490b0000000109021200010000000009047a00007b28d800f3ca9e39d88150b96e120d0355e6912b07285cad2301703cd6c0e6e2e5a03db612e13e17a98f1c7f55405a0a76d305f0b552b96187d55e31297f3d64"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x1}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x1000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000680), &(0x7f00000006c0)=0x4) [ 360.669385][T12123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.743182][ T40] smscufx: Failed to read register index 0x00003000 [ 360.749851][ T40] smscufx: error -71 reading 0x3000 register from device [ 360.750822][ T40] smscufx: probe of 1-1:0.122 failed with error -71 [ 360.817229][T12123] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.852313][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 360.860818][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 360.874562][ T40] usb 1-1: USB disconnect, device number 3 [ 360.935784][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 360.945369][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 360.954796][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.962002][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.970505][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 360.979997][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 360.983342][ T12] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 360.988979][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.000919][ T12] usb 2-1: config 0 interface 0 has no altsetting 0 [ 361.007963][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.009147][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 361.014831][ T12] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40 [ 361.039050][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.133346][T12123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 361.143857][T12123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.262736][T12123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.272121][ T12] usb 2-1: config 0 descriptor?? [ 361.342336][ T40] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 361.355272][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 361.365616][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 361.376338][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 361.387435][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 361.397416][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 361.407091][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 361.416540][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 361.426166][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 361.435395][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 361.493725][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 361.503099][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 361.696077][ T40] usb 1-1: Using ep0 maxpacket: 16 [ 361.813588][ T40] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 361.822018][ T40] usb 1-1: config 0 has no interface number 0 [ 361.828188][ T40] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 361.837982][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.853815][ T40] usb 1-1: config 0 descriptor?? 00:11:29 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3bf3, 0x240200) getsockopt$inet_mreqsrc(r0, 0x0, 0x935bd10c1f099f81, &(0x7f0000000080)={@multicast1, @remote}, &(0x7f00000000c0)=0xc) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x10000, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000140)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) r3 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x1, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80800) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000340)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x84, 0x0) r6 = eventfd2(0x5, 0x1) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8d050ee736537ccc, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000400)={r6, 0x281, 0x9, r7}) getsockopt$sock_buf(r0, 0x1, 0x75, &(0x7f0000000440)=""/54, &(0x7f0000000480)=0x36) r8 = creat(&(0x7f00000004c0)='./file0\x00', 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0xff, @dev={0xfe, 0x80, [], 0x25}, 0x3ff}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x824, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @rand_addr=0x1f}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x81, @mcast2, 0x5}, @in={0x2, 0x4e21, @empty}], 0xb4) r9 = syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000600)=""/144) r10 = accept4$inet(r9, &(0x7f00000006c0)={0x2, 0x0, @empty}, &(0x7f0000000700)=0x10, 0x1800) setsockopt$inet_int(r10, 0x0, 0x15, &(0x7f0000000740)=0x8, 0x4) r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dlm-control\x00', 0x1, 0x0) recvfrom$packet(r11, &(0x7f00000007c0)=""/95, 0x5f, 0x23, &(0x7f0000000840)={0x11, 0xc, r2, 0x1, 0x4, 0x6, @local}, 0x14) r12 = accept4$unix(0xffffffffffffffff, &(0x7f0000000880)=@abs, &(0x7f0000000900)=0x6e, 0x81000) pwrite64(r12, &(0x7f0000000940)="822b64b39d3bd4231ea1ffc2e9e8a76f489882645f26d7ad7da484c7a38952b45f5c85d4449e43f8c7da06c399d95a034a4a6f881e6e176d1990ca63d3b13095a996cf25b1e1602eef6dba5e25f1a9c3085ec94227c5dd70095497c764b5cc84f1aea7ee57b9f900d597c58fa9870c393038a1bb18d3b8b76ca25dce14fe2036febc199ee1f7109e5fd0f4f95167bc63da5c92d1458aa9caccbcb2417116f2d20364cf23497a08a88445fd3a1fc94de692a3b105027e7f277c191159b4b9cb2a446743a694e19d6e0a10ae224a01dc502d", 0xd1, 0x4f) r13 = syz_open_dev$media(&(0x7f0000000a40)='/dev/media#\x00', 0x0, 0x202) write$P9_RWRITE(r13, &(0x7f0000000a80)={0xb, 0x77, 0x2, 0x5}, 0xb) r14 = syz_open_dev$vcsn(&(0x7f0000000ac0)='/dev/vcs#\x00', 0xfba4305, 0x20000) write$P9_RMKDIR(r14, &(0x7f0000000b00)={0x14, 0x49, 0x2, {0x8, 0x4, 0x6}}, 0x14) r15 = socket$vsock_stream(0x28, 0x1, 0x0) signalfd4(r15, &(0x7f0000000b40)={0xae4f}, 0x8, 0x5c966e880b0fd0f8) [ 364.352488][T12179] IPVS: ftp: loaded support on port[0] = 21 [ 366.412460][ T12] usb 2-1: string descriptor 0 read error: -32 [ 366.522273][ T12] usbhid 2-1:0.0: can't add hid device: -32 [ 366.528479][ T12] usbhid: probe of 2-1:0.0 failed with error -32 00:11:32 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x314d, 0x9, 0x7, 0x7, 0x56e, 0xe765, 0x89b, 0x1e94, 0x86, 0x9, 0xf8ae, 0x10001, 0xc9, 0x8, 0x4, 0x4, 0x6f6b, 0x25, 0xc0000000, 0x3, 0x5, 0x3298, 0x100, 0x1, 0x9, 0x3d14, 0xbf000000, 0x3, 0x1, 0x4, 0x7, 0x4]}) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0xaa6d, 0x800) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000140)) r2 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x3f, 0x40080) mq_timedsend(r2, &(0x7f0000000300)="de472a2353ffb3a056c37f340f0a6d916bfb8a08a061475702bfa3a0ee433a76c0a65e66c619eb5b2b25e5a854f053fdb206096c9a110b47195fe84f6bb2553b3feb1b4536b843b21861e3ceb5b433da5cd9db089709ded6db73fd80a6463e5b83b5a792414c22ea02609ee2", 0x6c, 0x8, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x5, 0x40000) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f00000003c0)) r4 = syz_open_dev$cec(&(0x7f0000000400)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000440)={0x2}, 0x4) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x5, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x280001f, 0x2053, r5, 0x0) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) write$binfmt_elf32(r6, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x6, 0x3, 0x2, 0x6, 0x0, 0x3, 0x5, 0x140, 0x38, 0x55, 0x400, 0x1f9, 0x20, 0x1, 0x4, 0x2000, 0xe5}, [{0x60000000, 0x2, 0x8, 0x8f, 0x7ff, 0x6, 0x3, 0x8}, {0x7, 0x5, 0x4, 0x101, 0x3, 0x200, 0x4}], "cd68a91f124c8135429614213c8cefd918c495f3dd002d1679eb4867d4e94cf2b7a668d7deee2b69454f277822289b78c1031902eca814c821bc40189302fcfae5125432bac7943823088568c558a6517c49dd20237ca10f21cf18398aa0709cd99979846268ed75759232e760212f87fb69509ff059fcbe4ba2e5a92228ca4175f4bbd89c5397c24acbbff8bd90cc3b6ffdaf7d75d03eb5fef9406ef63620908dbbc5d817506a50e853", [[], [], [], []]}, 0x522) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/mixer\x00', 0xc000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r7, 0xc0405519, &(0x7f0000000a40)={0xa, 0x5, 0xd66, 0x5, 'syz1\x00', 0x8}) fstat(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r8) r9 = syz_open_dev$vbi(&(0x7f0000000b00)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000b40)=@req={0xffffff81, 0x0, 0x6, 0xe96}, 0x10) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/ptmx\x00', 0x218400, 0x0) ioctl$TIOCNXCL(r10, 0x540d) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000bc0)) r11 = syz_open_dev$vcsn(&(0x7f0000000c00)='/dev/vcs#\x00', 0x4, 0x40c00) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r11, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xfc, r12, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xad}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xad}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x345f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb0f3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x37cf01e8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e40)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r9, &(0x7f0000000ec0)={0x9, 0x108, 0xfa00, {r13, 0x0, '|A<', "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"}}, 0x110) r14 = syz_open_dev$vcsa(&(0x7f0000001000)='/dev/vcsa#\x00', 0x0, 0x20080) ioctl$VIDIOC_G_FREQUENCY(r14, 0xc02c5638, &(0x7f0000001040)={0x1, 0x4, 0x7}) [ 367.418979][T12182] IPVS: ftp: loaded support on port[0] = 21 [ 368.922023][ T40] smscufx: Failed to read register index 0x0000700c [ 368.928653][ T40] smscufx: ufx_reg_clear_and_set_bits error reading 0x700c [ 368.928660][ T40] smscufx: error clearing output gate in 0x700C [ 368.935947][ T40] smscufx: error -110 configuring system clock [ 368.943282][ T40] smscufx: probe of 1-1:0.122 failed with error -110 00:11:34 executing program 1: syz_usb_connect(0x0, 0x47, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xfa, 0xed, 0xab, 0x8, 0x46d, 0x8c3, 0xcbee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@mbim={0xc}]}]}}]}}]}}, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000580)="ccf67dd332e8835bab8fe715", 0xc) syz_usb_connect$uac1(0x1, 0x8e, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xa7, 0x1, 0x1, 0x10, 0x9}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x413}}, {0xea, &(0x7f0000000200)=@string={0xea, 0x3, "724816435b1387a4589402a5a3a6f2a7abf99bef049289b7fdac9e962bb2aa890979fdd4febfaf329d3df5ac123ffa98ffc98fa42d04d30fd6e8f795af870738906c13854af43a2c32c16a739e92ad864f52d5d4e12968cc364c917860fbdea618294fb9a446b81c7e623fbea0753cee5a046bf5d64e1bc925c6ca8a7d006f108875cf1c42ff18722ebc51cc654c6623240827becb2eab2ba81c5a2060c089a0c3ad82a9f6c667234b77c02e2ded903e5f397231da7de914045210385b596c3703912633b28852318c8b7bc37db5ea97ba91245b65cc7c61c46d818461893f9832380b21c0491043"}}, {0x73, &(0x7f0000000300)=@string={0x73, 0x3, "d00505146f319482744737bd550f53ef448a5acddb452b2f0b97fea413a84535b53ecbe97891de37602ab1dcca2492710ef1fdbde14c5abf66ba4c1db35494d96cc309db977352bac917161b57f8b56ab84a4d72930cc7b143924600e85ad55e740c7b817a8c2d90b26ffc334c91047d9b"}}, {0x17, &(0x7f0000000380)=@string={0x17, 0x3, "0531f3ee1a4de37732871d2113161dbea19430039b"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x404}}, {0xbc, &(0x7f0000000400)=@string={0xbc, 0x3, "9fe7f66ef74bd19dfd0e3d6105ec56cbc280718a03887d1e3a23d267c2db750eaaffe144800709d403dbe89e9ef8a6ee7f6167853d6155cfa9c5ba3552f9bab62e38eee48b4e72f6bf542638f00eb61c58d91e3a63d1eb1204d4f42f983fe8b20b4a8574326e7c3cd7bf9134f94a9acaa98450bede05f58cdfb7c9ad890cbf14baeea7263a6e30e4e0315ae5618fba60e7dbe74d3fe27ae06e906592708e58ae183b623fa521bc14a3b04342e37aecd01ed7056a16b4831ef1ee"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc0c}}]}) pselect6(0x40, &(0x7f0000000680)={0xffffffff, 0x1207, 0xa7, 0x3, 0xff, 0x1c000000000000, 0x5, 0x3ff}, &(0x7f00000006c0)={0x1ff, 0x6, 0x101, 0x4, 0x3ff, 0x0, 0xfff, 0x3}, &(0x7f0000000700)={0x2, 0x800, 0x3, 0x60e0, 0xffff, 0x80, 0x8000, 0x8}, &(0x7f0000000740)={0x0, 0x1c9c380}, &(0x7f00000007c0)={&(0x7f0000000780)={0x101}, 0x8}) 00:11:34 executing program 0: r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fbb930102404009d490b0000000109021200010000000009047a00007b28d800f3ca9e39d88150b96e120d0355e6912b07285cad2301703cd6c0e6e2e5a03db612e13e17a98f1c7f55405a0a76d305f0b552b96187d55e31297f3d64"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x1}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x1000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000680), &(0x7f00000006c0)=0x4) [ 369.090286][ T12] usb 2-1: USB disconnect, device number 4 [ 369.108911][ T2931] usb 1-1: USB disconnect, device number 4 00:11:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendto(r1, 0x0, 0x0, 0x8834b5174bd8afaf, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.L'}, 0x15) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="40000000a04000000800270020000000"], 0x28}}, 0x0) [ 369.339625][T12179] chnl_net:caif_netlink_parms(): no params data found [ 369.352236][T12182] chnl_net:caif_netlink_parms(): no params data found 00:11:34 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x100000000000012) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x16f, &(0x7f0000002640)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x40000000000025f, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) connect(0xffffffffffffffff, &(0x7f00000001c0)=@isdn={0x22, 0x3f, 0x8, 0xe0, 0x3f}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) [ 369.458081][T12179] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.465455][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.474678][T12179] device bridge_slave_0 entered promiscuous mode [ 369.513795][T12179] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.520987][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.530003][T12179] device bridge_slave_1 entered promiscuous mode [ 369.562018][T12182] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.569323][T12182] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.578313][T12182] device bridge_slave_0 entered promiscuous mode [ 369.626634][T12182] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.634202][T12182] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.643156][T12182] device bridge_slave_1 entered promiscuous mode [ 369.659776][T12179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.669600][ T12] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 369.682531][T12179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.692354][ T2931] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 369.723072][T12182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.747145][T12182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.759017][T12179] team0: Port device team_slave_0 added [ 369.796204][T12182] team0: Port device team_slave_0 added [ 369.805439][T12179] team0: Port device team_slave_1 added [ 369.834365][T12182] team0: Port device team_slave_1 added 00:11:35 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x100000000000012) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x16f, &(0x7f0000002640)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x40000000000025f, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) connect(0xffffffffffffffff, &(0x7f00000001c0)=@isdn={0x22, 0x3f, 0x8, 0xe0, 0x3f}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) [ 369.919408][T12179] device hsr_slave_0 entered promiscuous mode [ 369.926529][ T12] usb 2-1: Using ep0 maxpacket: 8 [ 369.952401][ T2931] usb 1-1: Using ep0 maxpacket: 16 [ 369.983234][T12179] device hsr_slave_1 entered promiscuous mode [ 370.024721][T12179] debugfs: Directory 'hsr0' with parent '/' already present! [ 370.069307][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=cb.ee [ 370.078619][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.089928][ T2931] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 370.098270][ T2931] usb 1-1: config 0 has no interface number 0 [ 370.104581][ T2931] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 370.113709][ T2931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.124846][ T12] usb 2-1: config 0 descriptor?? [ 370.149780][ T2931] usb 1-1: config 0 descriptor?? [ 370.240744][T12182] device hsr_slave_0 entered promiscuous mode [ 370.284568][T12182] device hsr_slave_1 entered promiscuous mode [ 370.323839][T12182] debugfs: Directory 'hsr0' with parent '/' already present! [ 370.422753][ T12] usb 2-1: string descriptor 0 read error: -71 [ 370.429034][ T12] uvcvideo: Found UVC 0.00 device (046d:08c3) [ 370.436108][ T12] uvcvideo: No valid video chain found. 00:11:35 executing program 2: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) ftruncate(r0, 0x1000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x400, 0x2800) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) renameat2(r2, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00', 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read(r0, &(0x7f00000000c0)=""/48, 0xfffffca3) [ 370.600523][ T12] usb 2-1: USB disconnect, device number 5 [ 371.060223][T12179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.187633][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.196458][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.249660][T12182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.259929][T12179] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.282022][ T12] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 371.320209][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.330724][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.341255][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.348502][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.500619][T12182] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.532395][ T12] usb 2-1: Using ep0 maxpacket: 8 [ 371.533601][T12179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.547932][T12179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.605062][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.614058][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.624795][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.633831][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.640999][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.649574][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.659683][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 371.669870][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.679973][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.689597][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.698251][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.706817][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.715147][ T12] usb 2-1: unable to read config index 0 descriptor/all [ 371.716553][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.722355][ T12] usb 2-1: can't read configurations, error -32 [ 371.731646][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 371.745518][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 00:11:36 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x89, 0x72, 0xac, 0x10, 0x582, 0xa3, 0xfa6f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa4, 0xef, 0x9e}}]}}]}}, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x80080) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0x9}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r4, 0x275}, 0x8) [ 371.755223][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 371.764379][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.980338][T12179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.021272][T12182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 372.032525][T12182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.046432][ T12] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 372.304360][T12182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.312561][ T12] usb 2-1: Using ep0 maxpacket: 8 [ 372.402721][ T12] usb 2-1: device descriptor read/all, error -71 [ 372.409584][ T2931] smscufx: Failed to read register index 0x0000700c [ 372.416868][ T2931] smscufx: ufx_reg_clear_and_set_bits error reading 0x700c [ 372.416881][ T2931] smscufx: error clearing output gate in 0x700C [ 372.424213][ T2931] smscufx: error -71 configuring system clock [ 372.431440][ T2931] smscufx: probe of 1-1:0.122 failed with error -71 00:11:37 executing program 1: syz_usb_connect(0x0, 0x47, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xfa, 0xed, 0xab, 0x8, 0x46d, 0x8c3, 0xcbee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@mbim={0xc}]}]}}]}}]}}, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000580)="ccf67dd332e8835bab8fe715", 0xc) syz_usb_connect$uac1(0x1, 0x8e, &(0x7f0000000800)=ANY=[@ANYBLOB="12011003000000406b1d010140000102030109027c0003010300010904000000010100950a2401ff7f0702010209040100000102000109040101010102000509050109ac010800060725011a06feff0904020000010200eb0904020101010200000f24020206000004808ff34fd709af07240100ff0300072401b4080200090000000000000000000000000000005515de7859bf4598224b8fe727715befd29686a025ef3576d9a83493e9753eaa05ce255db580d3404d7e7faa4be0cfb6b8cb44025b5419f9648e9e736465b82c7b710141e5223376e94377c99173c1ddbccc4b72a8b2765daf9a5d5fadff1da794b89e4115a995affcb1082610044316a6faece490902ae1bf03b3f9e9b79a7d3ea1bd4435f10d0d0c9c778957acb29c0041cf7eeb9b716abfdfb16ca8d915d206bed438ef54d17a573d11aad0161943895e2959c4f5e91f971148726bc2a418dc6019ec212f0d315dc5b1c935875d5a4013582eef66edbca359e7d8cca9b3d7883d42e839c7"], &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xa7, 0x1, 0x1, 0x10, 0x9}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x413}}, {0xea, &(0x7f0000000200)=@string={0xea, 0x3, "724816435b1387a4589402a5a3a6f2a7abf99bef049289b7fdac9e962bb2aa890979fdd4febfaf329d3df5ac123ffa98ffc98fa42d04d30fd6e8f795af870738906c13854af43a2c32c16a739e92ad864f52d5d4e12968cc364c917860fbdea618294fb9a446b81c7e623fbea0753cee5a046bf5d64e1bc925c6ca8a7d006f108875cf1c42ff18722ebc51cc654c6623240827becb2eab2ba81c5a2060c089a0c3ad82a9f6c667234b77c02e2ded903e5f397231da7de914045210385b596c3703912633b28852318c8b7bc37db5ea97ba91245b65cc7c61c46d818461893f9832380b21c0491043"}}, {0x73, &(0x7f0000000300)=@string={0x73, 0x3, "d00505146f319482744737bd550f53ef448a5acddb452b2f0b97fea413a84535b53ecbe97891de37602ab1dcca2492710ef1fdbde14c5abf66ba4c1db35494d96cc309db977352bac917161b57f8b56ab84a4d72930cc7b143924600e85ad55e740c7b817a8c2d90b26ffc334c91047d9b"}}, {0x17, &(0x7f0000000380)=@string={0x17, 0x3, "0531f3ee1a4de37732871d2113161dbea19430039b"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x404}}, {0xbc, &(0x7f0000000400)=@string={0xbc, 0x3, "9fe7f66ef74bd19dfd0e3d6105ec56cbc280718a03887d1e3a23d267c2db750eaaffe144800709d403dbe89e9ef8a6ee7f6167853d6155cfa9c5ba3552f9bab62e38eee48b4e72f6bf542638f00eb61c58d91e3a63d1eb1204d4f42f983fe8b20b4a8574326e7c3cd7bf9134f94a9acaa98450bede05f58cdfb7c9ad890cbf14baeea7263a6e30e4e0315ae5618fba60e7dbe74d3fe27ae06e906592708e58ae183b623fa521bc14a3b04342e37aecd01ed7056a16b4831ef1ee"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc0c}}]}) pselect6(0x40, &(0x7f0000000680)={0xffffffff, 0x1207, 0xa7, 0x3, 0xff, 0x1c000000000000, 0x5, 0x3ff}, &(0x7f00000006c0)={0x1ff, 0x6, 0x101, 0x4, 0x3ff, 0x0, 0xfff, 0x3}, &(0x7f0000000700)={0x2, 0x800, 0x3, 0x60e0, 0xffff, 0x80, 0x8000, 0x8}, &(0x7f0000000740)={0x0, 0x1c9c380}, &(0x7f00000007c0)={&(0x7f0000000780)={0x101}, 0x8}) [ 372.450191][T12026] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 372.479256][ T12] usb usb2-port1: attempt power cycle [ 372.649707][ T2931] usb 1-1: USB disconnect, device number 5 [ 372.702401][T12026] usb 3-1: Using ep0 maxpacket: 16 [ 372.852728][T12026] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.861003][T12026] usb 3-1: config 0 has no interface number 0 [ 372.867661][T12026] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice=fa.6f [ 372.868545][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 372.876904][T12026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.885956][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 372.901261][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 372.910849][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 372.919977][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.927222][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.935803][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 372.945412][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 372.954472][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.961650][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.970369][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 372.980546][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 372.990611][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.000739][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 373.010314][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 373.019313][T12026] usb 3-1: config 0 descriptor?? [ 373.020085][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 373.033873][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.043052][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 00:11:38 executing program 0: r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fbb930102404009d490b0000000109021200010000000009047a00007b28d800f3ca9e39d88150b96e120d0355e6912b07285cad2301703cd6c0e6e2e5a03db612e13e17a98f1c7f55405a0a76d305f0b552b96187d55e31297f3d64"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x1}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x1000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000680), &(0x7f00000006c0)=0x4) [ 373.052703][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.061964][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.270800][T12026] usb 3-1: USB disconnect, device number 2 [ 373.315366][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.325084][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.334250][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 373.362680][ T12] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 373.572405][ T2931] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 373.633277][ T12] usb 2-1: Using ep0 maxpacket: 8 00:11:38 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7a, 0x9d, 0x57, 0x8, 0x1286, 0x2046, 0x1289, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x2, 0xff, 0x4, 0x1, 0x0, [], [{{0x9, 0x5, 0x8f}}, {{0x9, 0x5, 0x2, 0x12}}]}}]}}]}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) getcwd(&(0x7f0000000100)=""/84, 0x54) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x80000000, 0x8}, 0xc) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000000)={0x1}) 00:11:38 executing program 3: write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0)='%(\x00', 0xffffffffffffffff}, 0x30) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x400000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x60, 0x0, &(0x7f0000000140)="9d30a80b7d08d6499c583788e78c9416086caded369351de498bd682eb4a2225513e5f39cec2d8c5bea0e11f7b51d12dd9738cbb3cff9951186d87e8e7427f00"/96, 0x0, 0x0, 0x0, 0x3b, 0xffffffffffffff16, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') [ 373.773926][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=cb.ee [ 373.783272][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.807526][ T12] usb 2-1: config 0 descriptor?? [ 373.842062][ T2931] usb 1-1: Using ep0 maxpacket: 16 [ 373.984231][ T2931] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 373.992625][ T2931] usb 1-1: config 0 has no interface number 0 [ 373.998815][ T2931] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 374.008346][ T2931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:11:39 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xb}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket(0xa, 0x80005, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000)={r7}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r8, &(0x7f0000000d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000dc0)=0x80) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r10, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe8020006}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r10, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000480)={0xb37a, 0x100, 0x3fc4}) r11 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r12 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) [ 374.032142][T12026] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 374.083312][ T2931] usb 1-1: config 0 descriptor?? [ 374.092616][ T12] usb 2-1: string descriptor 0 read error: -71 [ 374.098888][ T12] uvcvideo: Found UVC 0.00 device (046d:08c3) [ 374.106661][ T12] uvcvideo: No valid video chain found. [ 374.116048][T12197] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 374.149311][ T12] usb 2-1: USB disconnect, device number 8 [ 374.194568][T12307] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 374.273026][T12026] usb 5-1: Using ep0 maxpacket: 8 [ 374.275129][ C1] hrtimer: interrupt took 61282 ns [ 374.327302][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 374.372924][T12197] usb 3-1: Using ep0 maxpacket: 16 [ 374.402946][T12026] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 374.411234][T12026] usb 5-1: config 0 has no interface number 0 [ 374.417606][T12026] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 374.428191][T12026] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=12.89 [ 374.437368][T12026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.520817][T12026] usb 5-1: config 0 descriptor?? [ 374.529538][T12197] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 374.537737][T12197] usb 3-1: config 0 has no interface number 0 [ 374.546766][T12197] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice=fa.6f [ 374.555949][T12197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.590301][T12026] usb 5-1: NFC: intf 000000004d64e485 id 000000006835f5da [ 374.701505][T12197] usb 3-1: config 0 descriptor?? 00:11:39 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) listen(r0, 0x103) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xf388, @remote, 0x57}, @in6={0xa, 0x4e20, 0x80000000, @empty, 0x401}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x25}, 0xabe}, @in6={0xa, 0x4e23, 0x8, @rand_addr="c6e7d79861267791939c680f3341ae18", 0x4}, @in6={0xa, 0x4e22, 0xf3f1, @remote, 0x4}, @in6={0xa, 0x4e21, 0x2db7, @local, 0xfff}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xc8) close(r0) write(r8, &(0x7f0000000100), 0x14088) socket$unix(0x1, 0x2, 0x0) [ 374.734231][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 374.788924][T12026] usb 5-1: USB disconnect, device number 2 00:11:39 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xb}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket(0xa, 0x80005, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000)={r7}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r8, &(0x7f0000000d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000dc0)=0x80) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r10, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe8020006}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r10, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000480)={0xb37a, 0x100, 0x3fc4}) r11 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r12 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) [ 375.017950][ T40] usb 3-1: USB disconnect, device number 3 00:11:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4000000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x1e7) sendto$inet(r0, 0x0, 0xfd53, 0x40000020000806, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ef1f8c08e10921518c18000000010902120001000000000904cc00008a310f00"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000100)={0x0, 0x7, {0x54, 0x1, 0x3, {0xf86c, 0x6}, {0x2, 0x9080}, @const={0x2, {0xc45, 0x6, 0x8ba}}}, {0x51, 0x1, 0x0, {0x5, 0x300}, {0x7fff, 0x7}, @period={0x5b, 0x7, 0x3f, 0x6, 0x4, {0x5, 0x1f, 0x1, 0x99a0}, 0x7, &(0x7f0000000000)=[0xfff7, 0xfff, 0x2, 0xff, 0xffff, 0x5, 0x7]}}}) sendto(r0, &(0x7f0000000080)="b4", 0x1, 0x0, 0x0, 0x0) 00:11:40 executing program 1: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0a85320, &(0x7f0000000000)) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f00000002c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5a475cf1}) r7 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc04c5349, &(0x7f0000000280)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) pidfd_open(r8, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 375.218756][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:11:40 executing program 5: getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x800, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xe, 0x4, 0x101, 0x1000, 0x8, r0, 0x1, [], r1, r2, 0x4}, 0x3c) r3 = shmget(0x3, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000280)=""/4096) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001280)='/dev/dsp\x00', 0x4000, 0x0) clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0}) futimesat(r4, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001340)={{r5, r6/1000+30000}, {0x77359400}}) setsockopt$packet_buf(r4, 0x107, 0x16, &(0x7f0000001380)="08621d3e8fd30f0cc209c8d890dfebdc1927be2dedef3be4d86e352ff7d97782d5a986be2d6190", 0x27) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001400)={&(0x7f00000013c0)='./file0\x00'}, 0x10) r8 = syz_open_dev$swradio(&(0x7f0000001440)='/dev/swradio#\x00', 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001480)={0x15, 0x3ff, 0x40, 0x0, 0x205, r7, 0x8, [], r1, r8, 0x5}, 0x3c) r9 = creat(&(0x7f00000014c0)='./file0\x00', 0xa0) ioctl$SNDRV_TIMER_IOCTL_INFO(r9, 0x80e85411, &(0x7f0000001500)=""/249) bind$inet6(r4, &(0x7f0000001600)={0xa, 0x4e20, 0x97, @ipv4={[], [], @local}, 0x7ff}, 0x1c) r10 = syz_open_dev$adsp(&(0x7f0000001640)='/dev/adsp#\x00', 0x4000000000000, 0x2) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(r10, 0xc0406429, &(0x7f0000001800)={r11, 0x9, &(0x7f0000001700)=[0x5, 0x9, 0xd9c, 0x5, 0x81, 0x7e3f9fe4, 0xfe18, 0x9, 0x40], &(0x7f0000001740)=[0x0, 0x4, 0x4, 0xfff], 0x20, 0x5, 0x597d, &(0x7f0000001780)=[0x0, 0x7fff, 0x5, 0x4, 0x8], &(0x7f00000017c0)=[0x0, 0xffffffc0, 0x4266, 0x6, 0x7fff, 0x7]}) r12 = syz_open_dev$sndpcmp(&(0x7f0000001840)='/dev/snd/pcmC#D#p\x00', 0x7, 0xa8ab5b2dd5ba2ea2) ioctl$SG_GET_RESERVED_SIZE(r12, 0x2272, &(0x7f0000001880)) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001900)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000001b80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001940)={0x1f8, r13, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1093}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xce1c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x53000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x60}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8ad2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA={0x24, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40000}, 0x810) rt_sigreturn() r14 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer\x00', 0xc23ce03cb65d9efc, 0x0) ioctl$TIOCSBRK(r14, 0x5427) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001c00)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r15, 0xb777, &(0x7f0000001c40)=""/93) 00:11:40 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xb}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket(0xa, 0x80005, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000)={r7}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r8, &(0x7f0000000d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000dc0)=0x80) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r10, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe8020006}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r10, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000480)={0xb37a, 0x100, 0x3fc4}) r11 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r12 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) [ 375.573855][T12026] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 375.736043][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 375.751501][T12338] IPVS: ftp: loaded support on port[0] = 21 [ 375.787496][ T40] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 375.819763][T12026] usb 5-1: Using ep0 maxpacket: 8 [ 375.973047][T12026] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 375.981413][T12026] usb 5-1: config 0 has no interface number 0 [ 375.987780][T12026] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 375.997795][T12026] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=12.89 [ 375.998801][T12338] chnl_net:caif_netlink_parms(): no params data found [ 376.006971][T12026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:11:41 executing program 1: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0a85320, &(0x7f0000000000)) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f00000002c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5a475cf1}) r7 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc04c5349, &(0x7f0000000280)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) pidfd_open(r8, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 376.055954][T12026] usb 5-1: config 0 descriptor?? 00:11:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000000080), 0x2f, 0x0) ioctl$sock_netdev_private(r2, 0x89fa, &(0x7f00000000c0)="f7c7e9eac25863746af313df95b420c973b5215de7ece55e7105b0f62b66b001d6d2a7b26b89") r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfff, 0xc000) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) r5 = dup(r4) write$smack_current(r5, &(0x7f0000000040)=',vmnet1\x00', 0xffe5) [ 376.106130][ T40] usb 3-1: Using ep0 maxpacket: 8 [ 376.106615][T12026] usb 5-1: NFC: intf 00000000b4176c2b id 000000006835f5da [ 376.174822][T12338] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.182751][T12338] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.191719][T12338] device bridge_slave_0 entered promiscuous mode [ 376.236263][ T40] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 376.240201][T12338] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.244684][ T40] usb 3-1: config 0 has no interface number 0 [ 376.244800][ T40] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=18.8c [ 376.251931][T12338] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.258167][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.268691][T12338] device bridge_slave_1 entered promiscuous mode [ 376.318990][ T17] usb 5-1: USB disconnect, device number 3 [ 376.327010][T12338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.334133][ T40] usb 3-1: config 0 descriptor?? [ 376.352648][ T2931] smscufx: Failed to read register index 0x0000700c [ 376.359390][ T2931] smscufx: ufx_reg_clear_and_set_bits error reading 0x700c [ 376.359403][ T2931] smscufx: error clearing output gate in 0x700C [ 376.367247][ T2931] smscufx: error -71 configuring system clock [ 376.374619][ T2931] smscufx: probe of 1-1:0.122 failed with error -71 [ 376.397892][T12338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.431404][ T2931] usb 1-1: USB disconnect, device number 6 [ 376.455651][T12338] team0: Port device team_slave_0 added [ 376.465407][T12338] team0: Port device team_slave_1 added [ 376.565528][T12338] device hsr_slave_0 entered promiscuous mode [ 376.614165][T12338] device hsr_slave_1 entered promiscuous mode [ 376.653525][T12338] debugfs: Directory 'hsr0' with parent '/' already present! [ 376.692297][ T40] usb 3-1: string descriptor 0 read error: -71 [ 376.698993][ T40] int51x1: probe of 3-1:0.204 failed with error -32 [ 376.756916][ T40] usb 3-1: USB disconnect, device number 4 [ 376.758552][T12338] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.770098][T12338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.778299][T12338] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.785561][T12338] bridge0: port 1(bridge_slave_0) entered forwarding state 00:11:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x3, 0x6, 0x4, 0x8, {r2, r3/1000+30000}, {0x1, 0x5da14bdc7c2ef7c, 0xbc, 0x9, 0x6, 0x6, "ba1fe55d"}, 0x401, 0x1, @userptr=0xffffffffa6d2d6c7, 0x4}) 00:11:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r3}, 0x10) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)) 00:11:42 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000c00)='j', 0x1}], 0x1}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100000000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) [ 376.982737][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.009206][ T17] bridge0: port 2(bridge_slave_1) entered disabled state 00:11:42 executing program 1: setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x70, 0x57, 0x29, 0x8, 0x7c0, 0x1503, 0x5933, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xaa, 0x0, 0x1, 0x23, 0x6b, 0xbc, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) [ 377.103491][T12384] binder: 12379:12384 ioctl c018620c 20000040 returned -22 [ 377.236310][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 00:11:42 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000c00)='j', 0x1}], 0x1}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x1}], 0x1}}], 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100000000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 00:11:42 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x200000004e20}, 0x1c) listen(r0, 0x4d) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000080)={0x0, 0x40, 0xc05, &(0x7f0000000040)=0x4}) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x6}, 0x4) syz_emit_ethernet(0x14b, &(0x7f0000000240)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x115, 0x2b, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @rand_addr="c08c3e3f9fbaa90ef0247bbe6f6ccab6", {[@srh={0x4, 0x0, 0x4, 0x0, 0x7, 0x8, 0x62a}, @srh={0x11, 0x4, 0x4, 0x2, 0x6, 0x10, 0x1, [@empty, @rand_addr="a1bfb78fda4432a69a67971e5bc4c35b"]}, @fragment={0x32, 0x0, 0x8a, 0x1, 0x0, 0x4, 0x64}, @dstopts={0x40, 0x9, [], [@calipso={0x7, 0x40, {0xffff8000, 0xe, 0x81, 0xff00, [0x3788, 0xfff, 0x4, 0x6, 0xfffffffffffffff8, 0x7, 0x1]}}, @jumbo={0xc2, 0x4, 0x84b}]}, @hopopts={0x2c, 0x2, [], [@hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0xffd2}]}, @dstopts={0x17519afcc4bc2c45, 0x4, [], [@calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x0, [0xeb0a, 0x1]}}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @pad1, @pad1]}, @fragment={0x3b, 0x0, 0x7, 0x1, 0x0, 0x17, 0x65}, @fragment={0x0, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x64}], @tipc=@payload_mcast={{{{{{0x2d, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x1000, 0x0, 0x2, 0x7, 0x3, 0x1, 0x7, 0x4cc6, 0x4, 0x4e22, 0x4e20}, 0x2, 0x3}, 0x4, 0x3}, 0x1}}, [0x0]}}}}}}, 0x0) [ 377.455868][ T40] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 377.477014][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 377.563014][T12338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.602356][ T2931] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 377.628032][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 377.636687][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.671315][T12338] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.730980][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.740970][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.751005][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.758225][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.963356][ T2931] usb 2-1: config 0 has an invalid interface number: 170 but max is 0 [ 377.971736][ T2931] usb 2-1: config 0 has no interface number 0 [ 377.978368][ T2931] usb 2-1: config 0 interface 170 altsetting 0 endpoint 0xB is Bulk; changing to Interrupt [ 377.988554][ T2931] usb 2-1: New USB device found, idVendor=07c0, idProduct=1503, bcdDevice=59.33 [ 377.997754][ T2931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.017583][T12338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 378.028598][T12338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.044238][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.054054][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.063052][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.070264][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.078831][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 378.089074][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 378.099172][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 378.108986][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.118651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 378.128596][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 378.138164][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 378.147298][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.156936][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 00:11:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xb5, &(0x7f0000000280), &(0x7f0000000240)=0x92) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r2, 0x10d, 0xb5, &(0x7f0000000280), &(0x7f0000000240)=0x92) accept4$inet(r2, &(0x7f0000000580), &(0x7f00000005c0)=0x10, 0x800) r3 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r4 = dup3(r1, r3, 0x80000) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x5, 0x400) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in6}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0x3a) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x6) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000340)={0x9, 0x0, [{0x80, 0x3, 0x0, 0x0, @irqchip={0xffffffff, 0x8000}}, {0x0, 0x6a3e90cc293207fc, 0x0, 0x0, @msi={0x5, 0x8, 0x7}}, {0x8, 0x5, 0x0, 0x0, @sint={0x6, 0x8}}, {0x2d, 0x0, 0x0, 0x0, @msi={0x2, 0x7ff}}, {0x7, 0x3, 0x0, 0x0, @adapter={0x6, 0x400, 0x1, 0x1ff, 0xffffffff}}, {0x7, 0x4, 0x0, 0x0, @adapter={0xb9c, 0x7f, 0x0, 0x10001, 0x1f}}, {0x7, 0x2, 0x0, 0x0, @msi={0x4, 0x1, 0xffffffff}}, {0x101, 0x2, 0x0, 0x0, @msi={0x1, 0x101, 0x9}}, {0x0, 0x4, 0x0, 0x0, @sint={0x2, 0x1}}]}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 00:11:43 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000440)={0x9}) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000280)=0x100) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2c, 0xa, 0x0, "17ff030000000000005a0f9cc0fbda7643ed12de15d5036177e48500"}) r2 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x110) r4 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$HIDIOCGRAWNAME(r5, 0x80404804, &(0x7f00000001c0)) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x82, &(0x7f0000000000)={r7}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000140)={r7, 0x4}, 0x8) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="028ed2026656a4cb251092c7891b107ce6821c442218dfdb2e66a9533e66f016c0000e2625ae1aa0334d1dd859b35138ee58d48a397eae45e79eb4e0491cbfa68c139b56e143e49d8296fbc0ab0f110f5fd7c879795a34a32d392713c1fea45cc97d552b0c04316fc4ae219e860e85cd2c8d63a617df895090e15bde6454fd9cf7861a8a0394cf9308ea153bb63034bdbfb626a433e6b6e5e81cfa9e36797f5daf1e1dbb73828c84542f859f41", @ANYRES16=0x0, @ANYBLOB="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"], 0x2c8}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1005}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 378.166077][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 378.278499][ T2931] usb 2-1: config 0 descriptor?? [ 378.327371][ T2931] iowarrior 2-1:0.170: no interrupt-in endpoint found [ 378.407903][T12338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.749165][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 378.758708][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 378.825229][ T40] usb 2-1: USB disconnect, device number 9 00:11:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000077000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat(r7, &(0x7f00000002c0)='./file0\x00', 0x460000, 0xa0) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000580)=""/126, 0x7e}, {&(0x7f0000000600)=""/68, 0x44}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x7c}}, 0x0) 00:11:44 executing program 2: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x1ae}}, {{0x9, 0x5, 0x3, 0x2, 0x1b8}}}}}]}}]}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000000), 0x70db2da734432a8e) recvmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/103, 0x67}, {&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f00000002c0)=""/63, 0x3f}, {&(0x7f00000003c0)=""/210, 0xd2}], 0x4, &(0x7f0000000340)=""/49, 0x31}, 0x42) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR64], @ANYRES32=r0, @ANYRES16=r2, @ANYRESHEX=r2], 0x0, 0x0, 0x0}, 0x0) getpid() 00:11:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) sendmsg$netlink(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0000e767d307c024025016802b2362d281b979a7593efcb6aa732c09c5d55897fd2bfaee1068c059f0139403a10e5424e72ce5944bc6531db26a27ae21d6d45c670d879c7ae6135198b091661b4ae1b5b41b301561275df04db49b38582230775f7a24366e0582657aeda78904759f27181f14f47ddb1180d0a665d29ac72217baa20e1278f32acb7d3241f5dc49fb5268969050eb10bc3f29d05aa2092bbaed6112d8143733d9c33dd64445c454287aa2f821e6ef2c17e3771c3323e6954de0117465893ee02c72c32d30ce8a37"], 0x1200}], 0x1}, 0x0) 00:11:44 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa2, 0x56, 0x1b, 0x8, 0x545, 0x800d, 0x30a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd1, 0x0, 0x0, 0xea, 0xd3, 0xfe}}]}}]}}, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000001440)={0x2, 0x0, @multicast1}, &(0x7f0000001480)=0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f00000014c0)="d1018c4b7a51e1bbb02ba27bf5366679506a0f3ba8251dd4fb77a796ff129c817b241be5e159d3d1bf70feb1ee5edd5450ad99602ac2e6f00681b33f74d790b215069806d04044b68cf38919ae60090f5956185fdfe206f0dddcf59e503ae859eb5537838aa288cb1c0f268a69cac28cc1cdc60ba316327bf09f04689fbf4b7aa25da6f5af0bb880fad7b546f8171b42629e3bd60d33881f72e8c3040e14827f91e1c70d822d3fbe51faec71bc78607e9eb65f", 0xb3) [ 379.083283][T12425] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 379.168082][T12432] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 00:11:44 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xd1, 0xd2, 0x5c, 0x40, 0x55d, 0x9000, 0xe3ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x10, 0xe0}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="00dfed"], 0x0, 0x0, 0x0, 0x0}) 00:11:44 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x42, 0x0, 0x8b, 0x10, 0xbda, 0x159, 0x5c63, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x86, 0x0, 0x0, 0x55, 0xc9, 0x63}}]}}]}}, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x3, r0, 0x1}) [ 379.282727][T12100] usb 3-1: new high-speed USB device number 6 using dummy_hcd 00:11:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x138, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xab}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000340)=@string={0x2f, 0x3, "367b3a968cc75b77bf44d46fd48c71577c12167b6a96fba9514e41439adcbbd198a2cdee39d73a998406bbdc05"}}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000fee000/0x12000)=nil, 0x12000}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000040)={0x2, [0x0, 0x0]}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0xab}}, &(0x7f0000000b40)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 379.442066][ T40] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 379.462217][ T17] usb 1-1: new high-speed USB device number 7 using dummy_hcd 00:11:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\xe6A\xcf\\a\xf7\x93\xb5\x05G\xc1\xf8s\x9d\xd0\xe7\x03j\xdf\xa5\xe8\x0f\xb0\x0e\f\x11\x17\"\xe3i\x1e\xab\xa0R<\x97\xd4\xb6\xd5\xe4\x1c\xa9k\x91\x9d\xfd\aK\xf79\xf1\xcd\x8e=v\xea\xa9\x8b\xd9\x1c\x00\x83?\xd9\xb1.\xf6{\x8c1h\xf0%G\x87\x8dy\xcc\xf5\xba~\xd4\x1d\xbe\x8b\x14\xc4\x14\xbb])*\xda\x90\xc0\xdf\xe2\x9d\xd1;\x1e{\x1a\x16\aDm\x81\fG\x1cC/G\xa7\xcb\x17\x94H<\xf6\x1f\x96\x91\xb3\xfb\xd0\n\xfd\x8f\xaa\x883\xda\xddr\xc5\x00\x00?\xe2\x99e\n\x15\xc7\xa7g\xafZ<\xdd\xc0\xfa\xfc\xdf+a\xf2\x7f\xe4\x85\xa3fM\x85E\xea\xa2\xf6\x9b$:\x9b\x9f\xea\xd3\xc4[\xea9\xaenM\x19\xefuJ\xf1\x1a\xf9\xd6\xbcu6\f\x9a\xe3\x95~\xaa\x89 \x01\x177E$\x16\xd0\xda\xda\x81\xdb\xf1\xbb\xab\xa6\xd5G?\x15\x15\xf7\x8d\xf2`x\x80X\xd1\x03\xe3\xef\xf5s?>\xb6\x86\x98/e\n\x97-\xd4e\xd9\xb9\xca\xcf~1(\x9d\xe8#\xa2\x03b\xa6\x8c5p&_\xa1\x91\xd8\x18\xacZ\xaf\x83 X\x842\xcf\x8bC\x81\b\\\x8fi\xad\xa8j\xcd\t\xe6\x7f.\xb5\x13\x97\x86?\xfcZ\xa5\xe0$\'\xeaU\x88\xb7\xe0\x96Z\xdf\xd8\xe5\xf3\x17\xd3\xff\xab\xc2}\t\xe6\xa9\f\x81\x97\x1fB\x93\xf0\x00\x7f\xb1w\xa5\xc2\x88\x82\x12\xaa\xa0l\xe2\xc6\xd3\xc7\xb7I\x91%\xbe\xc3\x17\xd5\x8b\x14\xb6\xcb\xd9\xb7wsK~\xdc\x83\x90\xe3\x19\n\\ 1Q\xfa\xd2\xd0X1xA\xbbU\xb9\xad\x82Y\xc2qU\xd3\x9d2\x86m\xd9\x84\x94\x0eBU\xa3\xaf\x8e\xf9', 0x200002, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) r3 = openat$cgroup_procs(r0, &(0x7f00000004c0)='tasks\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, &(0x7f0000000140)=0x5, 0x6) [ 379.532163][T12100] usb 3-1: Using ep0 maxpacket: 16 [ 379.542268][ T2931] usb 5-1: new high-speed USB device number 4 using dummy_hcd 00:11:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\xe6A\xcf\\a\xf7\x93\xb5\x05G\xc1\xf8s\x9d\xd0\xe7\x03j\xdf\xa5\xe8\x0f\xb0\x0e\f\x11\x17\"\xe3i\x1e\xab\xa0R<\x97\xd4\xb6\xd5\xe4\x1c\xa9k\x91\x9d\xfd\aK\xf79\xf1\xcd\x8e=v\xea\xa9\x8b\xd9\x1c\x00\x83?\xd9\xb1.\xf6{\x8c1h\xf0%G\x87\x8dy\xcc\xf5\xba~\xd4\x1d\xbe\x8b\x14\xc4\x14\xbb])*\xda\x90\xc0\xdf\xe2\x9d\xd1;\x1e{\x1a\x16\aDm\x81\fG\x1cC/G\xa7\xcb\x17\x94H<\xf6\x1f\x96\x91\xb3\xfb\xd0\n\xfd\x8f\xaa\x883\xda\xddr\xc5\x00\x00?\xe2\x99e\n\x15\xc7\xa7g\xafZ<\xdd\xc0\xfa\xfc\xdf+a\xf2\x7f\xe4\x85\xa3fM\x85E\xea\xa2\xf6\x9b$:\x9b\x9f\xea\xd3\xc4[\xea9\xaenM\x19\xefuJ\xf1\x1a\xf9\xd6\xbcu6\f\x9a\xe3\x95~\xaa\x89 \x01\x177E$\x16\xd0\xda\xda\x81\xdb\xf1\xbb\xab\xa6\xd5G?\x15\x15\xf7\x8d\xf2`x\x80X\xd1\x03\xe3\xef\xf5s?>\xb6\x86\x98/e\n\x97-\xd4e\xd9\xb9\xca\xcf~1(\x9d\xe8#\xa2\x03b\xa6\x8c5p&_\xa1\x91\xd8\x18\xacZ\xaf\x83 X\x842\xcf\x8bC\x81\b\\\x8fi\xad\xa8j\xcd\t\xe6\x7f.\xb5\x13\x97\x86?\xfcZ\xa5\xe0$\'\xeaU\x88\xb7\xe0\x96Z\xdf\xd8\xe5\xf3\x17\xd3\xff\xab\xc2}\t\xe6\xa9\f\x81\x97\x1fB\x93\xf0\x00\x7f\xb1w\xa5\xc2\x88\x82\x12\xaa\xa0l\xe2\xc6\xd3\xc7\xb7I\x91%\xbe\xc3\x17\xd5\x8b\x14\xb6\xcb\xd9\xb7wsK~\xdc\x83\x90\xe3\x19\n\\ 1Q\xfa\xd2\xd0X1xA\xbbU\xb9\xad\x82Y\xc2qU\xd3\x9d2\x86m\xd9\x84\x94\x0eBU\xa3\xaf\x8e\xf9', 0x200002, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) r3 = openat$cgroup_procs(r0, &(0x7f00000004c0)='tasks\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, &(0x7f0000000140)=0x5, 0x6) [ 379.655839][T12026] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 379.663690][T12197] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 379.673486][T12100] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 430 [ 379.683790][T12100] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 440 00:11:44 executing program 1: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(r0, &(0x7f0000000600)="0400", 0x2, 0x8002, 0x0, 0x0) [ 379.704599][ T17] usb 1-1: Using ep0 maxpacket: 8 00:11:44 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000100)={0x0, 0x2, "21a9"}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000180), &(0x7f00000001c0)="58bfc0522e0703baf1481ded7007a7f83125291cc038f2f9eca52be03a9d4ce8dc480a19722cee5a9e113a0ff8ab93daa15310276743cf2ed0582116f58683bac168a03f262d33913191857af0f6c590fe8586257455ea919087b40213148e90d57f2cfea93f56fda7540316cae381803dec42502784c4af8a8c497b4245b91eac15e2", 0x6}, 0x20) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0c10000000000001400000", 0x58}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r5, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x158, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x48f9}]}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5987}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x15b1f8fa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x64a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5a97b59c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffff2b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x51a4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040080) [ 379.842281][ T17] usb 1-1: config 0 has an invalid interface number: 209 but max is 0 [ 379.850855][ T17] usb 1-1: config 0 has no interface number 0 [ 379.857325][ T17] usb 1-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 379.867454][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.876542][T12100] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.885736][T12100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.893864][T12100] usb 3-1: Product: syz [ 379.898110][T12100] usb 3-1: Manufacturer: syz [ 379.902839][T12100] usb 3-1: SerialNumber: syz [ 379.907875][T12197] usb 6-1: Using ep0 maxpacket: 16 [ 379.913742][ T2931] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac [ 379.918689][ T17] usb 1-1: config 0 descriptor?? [ 379.922935][ T2931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.924561][T12026] usb 4-1: Using ep0 maxpacket: 16 [ 379.947748][ T2931] usb 5-1: config 0 descriptor?? [ 380.017963][ T2931] pwc: Samsung MPC-C10 USB webcam detected. [ 380.072450][T12197] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.084270][T12197] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 380.097325][T12197] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40 [ 380.106657][T12197] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:11:45 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000100)={0x0, 0x2, "21a9"}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000180), &(0x7f00000001c0)="58bfc0522e0703baf1481ded7007a7f83125291cc038f2f9eca52be03a9d4ce8dc480a19722cee5a9e113a0ff8ab93daa15310276743cf2ed0582116f58683bac168a03f262d33913191857af0f6c590fe8586257455ea919087b40213148e90d57f2cfea93f56fda7540316cae381803dec42502784c4af8a8c497b4245b91eac15e2", 0x6}, 0x20) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0c10000000000001400000", 0x58}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r5, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x158, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x48f9}]}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5987}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x15b1f8fa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x64a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5a97b59c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffff2b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x51a4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040080) [ 380.116475][T12026] usb 4-1: config 0 has an invalid interface number: 134 but max is 0 [ 380.124840][T12026] usb 4-1: config 0 has no interface number 0 [ 380.131099][T12026] usb 4-1: New USB device found, idVendor=0bda, idProduct=0159, bcdDevice=5c.63 [ 380.140356][T12026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.156636][T12026] usb 4-1: config 0 descriptor?? [ 380.177566][ T12] usb 1-1: USB disconnect, device number 7 [ 380.198633][T12197] usb 6-1: config 0 descriptor?? [ 380.211638][T12026] ums-realtek 4-1:0.134: USB Mass Storage device detected [ 380.426771][ T17] usb 4-1: USB disconnect, device number 2 [ 380.642997][T12100] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 380.663863][T12100] usb 3-1: USB disconnect, device number 6 [ 380.708691][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.715785][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x2 [ 380.722843][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.729819][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.736864][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.743866][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.750798][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.757824][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.764799][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.771721][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.778748][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.785846][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.792910][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.800113][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.807143][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.814208][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.821150][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.828291][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.835328][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.842359][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.849312][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.856350][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.863546][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.870594][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.877635][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.884631][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.891564][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.898609][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.905594][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.912605][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.919482][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.926454][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.933436][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.940365][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.947446][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.954459][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.961371][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.968351][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.975299][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.975439][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.988957][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 380.989105][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.002654][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.009541][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.016515][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.023485][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.030395][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.037374][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.044370][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.051301][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.058289][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.065325][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.072315][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.079225][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.086250][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.093281][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.100220][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x7 [ 381.107335][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x1 [ 381.114345][T12197] kye 0003:0458:0138.0002: unknown main item tag 0xd [ 381.121379][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.128414][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.135382][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.135525][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.148999][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.155954][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.162931][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.169840][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.176880][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.183846][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.190786][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.197788][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.204777][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.211699][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.218706][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.225680][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.232768][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.239668][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.246681][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.253636][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.260720][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.267772][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.274777][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.281726][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.288742][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.295725][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.302752][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.309655][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.316657][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.323663][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.330548][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.332106][T12100] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 381.337539][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.351891][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.358909][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.365894][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.372854][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.379780][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.386806][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.393770][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.400701][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.407734][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.414720][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.421620][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.428672][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.435669][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.442664][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.449580][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 00:11:46 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000140)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400000, 0x0) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0), 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) getpgid(0xffffffffffffffff) unshare(0x40000000) write$P9_RWALK(r0, &(0x7f0000000240)=ANY=[], 0x0) times(&(0x7f0000000100)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000180)={{0x1, 0x0, @identifier="9bfb42c26396ff510fab94056a18dff3"}}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r5, 0x5, 0x0, 0x0, {}, [{{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0xfffffe28}}}]}, 0x868b}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x82, &(0x7f0000000000)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r8, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={r9, @in6={{0xa, 0x4e22, 0x3, @local, 0xea1}}, 0x5, 0x400, 0xfffffffd, 0x9, 0x6}, &(0x7f0000000440)=0x98) r10 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x89, r10}}, {{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8b, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xa000}, 0x8401) [ 381.456587][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.463587][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.470541][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.473588][ T17] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 381.477556][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.491848][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.498835][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.505934][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.512949][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.519845][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.519986][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.533648][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.540587][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.547715][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.554693][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.561618][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.568603][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.575659][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.582645][T12197] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 381.583630][T12480] IPVS: ftp: loaded support on port[0] = 21 [ 381.589543][T12197] kye 0003:0458:0138.0002: unbalanced collection at end of report description [ 381.604729][T12197] kye 0003:0458:0138.0002: parse failed [ 381.610445][T12197] kye: probe of 0003:0458:0138.0002 failed with error -22 [ 381.632586][T12100] usb 4-1: Using ep0 maxpacket: 16 [ 381.650106][ T2931] pwc: recv_control_msg error -32 req 02 val 2c00 [ 381.692897][T12197] usb 6-1: USB disconnect, device number 2 [ 381.762630][ T17] usb 3-1: Using ep0 maxpacket: 16 [ 381.768063][T12100] usb 4-1: config 0 has an invalid interface number: 134 but max is 0 [ 381.776445][T12100] usb 4-1: config 0 has no interface number 0 [ 381.784314][T12100] usb 4-1: New USB device found, idVendor=0bda, idProduct=0159, bcdDevice=5c.63 [ 381.793559][T12100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.804169][T12100] usb 4-1: config 0 descriptor?? [ 381.845588][T12100] ums-realtek 4-1:0.134: USB Mass Storage device detected [ 381.882858][T12480] IPVS: ftp: loaded support on port[0] = 21 [ 381.892282][ T17] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 430 [ 381.902441][ T17] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 440 [ 381.929844][ T12] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 381.949403][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 381.960489][ T2931] pwc: recv_control_msg error -71 req 04 val 1400 [ 381.984426][ T2931] pwc: recv_control_msg error -71 req 02 val 2000 [ 382.002236][ T2931] pwc: recv_control_msg error -71 req 02 val 2100 [ 382.023622][ T2931] pwc: recv_control_msg error -71 req 02 val 2200 [ 382.042847][ T2931] pwc: recv_control_msg error -71 req 06 val 0600 [ 382.056063][T12026] usb 4-1: USB disconnect, device number 3 [ 382.082296][ T2931] pwc: recv_control_msg error -71 req 04 val 1500 [ 382.102332][ T2931] pwc: recv_control_msg error -71 req 02 val 2500 [ 382.124142][ T2931] pwc: recv_control_msg error -71 req 02 val 2400 [ 382.132588][T12197] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 382.142746][ T17] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.144020][ T2931] pwc: recv_control_msg error -71 req 02 val 2600 [ 382.151971][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.152041][ T17] usb 3-1: Product: syz [ 382.152111][ T17] usb 3-1: Manufacturer: syz [ 382.152177][ T17] usb 3-1: SerialNumber: syz [ 382.192827][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 382.210436][ T2931] pwc: recv_control_msg error -71 req 02 val 2900 [ 382.240638][ T2931] pwc: recv_control_msg error -71 req 02 val 2800 [ 382.252928][ T17] usb 3-1: can't set config #1, error -71 00:11:47 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) r1 = add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="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", 0x1000, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000001140)='.dead\x00', &(0x7f0000001180)=@builtin='builtin_trusted\x00') r2 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x40000, 0x102) lstat(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001280)={0x0, 0x0, 0x0}, &(0x7f00000012c0)=0xc) setregid(r3, r5) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000080)) 00:11:47 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xce, 0x55, 0xa0, 0x10, 0x13b1, 0x41, 0xba34, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xe1, 0xa8}}]}}]}}, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xa9cc, 0x207701) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000080)={0xb, 0x1f, {0x52, 0x7f, 0x8, {0x7, 0x3}, {0x0, 0x8}, @ramp={0x0, 0xf000, {0x0, 0x3, 0x2, 0x7ff}}}, {0x55, 0x50fd, 0x8, {0x0, 0x7}, {0x4, 0x4d}, @const={0x3282, {0x26, 0x101, 0x2, 0x5}}}}) [ 382.270895][ T12] usb 1-1: device descriptor read/all, error -71 [ 382.299547][ T17] usb 3-1: USB disconnect, device number 7 [ 382.309672][ T2931] pwc: recv_control_msg error -71 req 04 val 1100 [ 382.349937][ T2931] pwc: recv_control_msg error -71 req 04 val 1200 [ 382.381209][ T2931] pwc: Registered as video39. [ 382.387550][ T2931] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 382.477367][ T2931] usb 5-1: USB disconnect, device number 4 00:11:47 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x6, &(0x7f0000000040)=@raw=[@generic={0x8, 0x9, 0x2, 0xfff, 0x6}, @exit, @jmp={0x5, 0x0, 0x7, 0x2, 0x6, 0xfffffffffffffff9, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffff9d}, @exit], &(0x7f0000000440)='syzkaller\x00', 0x6, 0x90, &(0x7f00000000c0)=""/144, 0x0, 0x0, [0x63], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 382.682388][ T12] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 382.922321][ T12] usb 1-1: Using ep0 maxpacket: 16 00:11:48 executing program 4: socket$inet6(0xa, 0x696afeb95ee97b88, 0x6) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket(0x10, 0x2, 0xff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x18312611) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000180)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r6) ioctl(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) quotactl(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x28048018, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0x4, 0x4) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) clock_adjtime(0x6, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r8, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ftruncate(r9, 0x7fff) sendfile(r2, r9, 0x0, 0x8040fffffffd) 00:11:48 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0xffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000040)={0xffff, 0x8, 0x5, 0x9, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={r11, 0x8}, &(0x7f0000000240)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) r14 = dup2(r13, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) getpeername$tipc(r14, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x2dc) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = fcntl$dupfd(r15, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) syz_emit_ethernet(0xffb6, &(0x7f0000000100)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff080045030000010000000000906bfc78ac883eca889078000000000000000000ab390e444a05066c3cca2a0c7c02ae34021fdfe90c517f920d0e8f5e2463188a0acdad1cb217bf5865dee68707815ac7f7923349d276e07964da0c5c077118954ae837f682f39c08ad1cd84ee2bf18067f513b984bb9dff6252862536458d3e1cf2e4b9b42422b0c7f88243d625d74b28284bf952ea5469993"], 0x0) [ 382.952262][ T2931] usb 5-1: new high-speed USB device number 5 using dummy_hcd 00:11:48 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x2) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r0, 0x10d, 0xb5, &(0x7f0000000280), &(0x7f0000000240)=0x92) sendto$inet(r0, &(0x7f0000000380), 0x0, 0x40004800, 0x0, 0xffffffffffffffb3) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xffffff37, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000140)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x8c000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), 0x0) socket(0x1000000010, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000001700)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f0000000240)="240000001a0025f07e9451f68f2e9c920a0b49ffed0000", 0x17) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='\x01S\xb8\x00\x00', 0x152) r6 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3f, 0x200) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x48030, 0xffffffffffffffff, 0x0) 00:11:48 executing program 5: syz_usb_connect(0x0, 0xa1, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xad, 0x8, 0x75, 0x10, 0x573, 0x4d21, 0x8391, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x2, 0xe1, 0xa7, 0xdf, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x83, 0x11}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0xb, 0x1b, 0x15, 0x6, 0xa, 0x3, 0x3, 0x41, 0x1}) r5 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r6 = fcntl$dupfd(r0, 0x80c, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 00:11:48 executing program 1: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e000000130065c5e4050cecdb4c9f0407255e431a00000000fffffff0cade0006000c0008ffe79226c52b30a33b", 0x2e}], 0x1}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x6, 0x1, 0x7}}, 0x28) [ 383.062346][ T12] usb 1-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=ba.34 [ 383.071539][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.120137][ T12] usb 1-1: config 0 descriptor?? 00:11:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0xfffffffffffffc41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) connect(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x0, "25d202cab80bda45beca727edb327ee02150680c5cfe1e5b797d841729b26c09fc6327f2a5e53375cb50fe71ce24d42dae71167cea76a84ef393043ddd574812bd68e3e14c2be2b4fe212a48d6d285995119e132784c78500f9e3915bfcaad4c225d3cf6a63af7f50d769e3a4c3a6404ef7af7195e3f15d921c8a1de3b0f"}, 0x80) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000440)={0x9}) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000300)={0x9d0000, 0xbc9a, 0x20, [], &(0x7f00000002c0)={0x9a091d, 0x5, [], @p_u32=&(0x7f0000000140)=0x80}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 383.165078][T12516] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:11:48 executing program 3: syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf0, 0x7f, 0xc8, 0x8, 0x2639, 0x2, 0x228c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x0, 0x118, 0xfe, [{{0x9, 0x4, 0xb2, 0x0, 0x0, 0xe5, 0xd2, 0x78, 0x8}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x80b, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) io_getevents(r2, 0xff, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)={r3, r4+30000000}) [ 383.415251][ T12] r8152 1-1:0.0: Unknown version 0x0000 [ 383.463928][ T12] usb 1-1: USB disconnect, device number 9 [ 383.542214][T12197] usb 6-1: device descriptor read/64, error -71 00:11:48 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201e55cf3bf2c08490d04c1000000"], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) getrandom(&(0x7f0000000280)=""/121, 0x1a0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x3, 0xf461be9da5652e7c) r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x5, 0xa0002) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x20000, 0x0) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000000c0)) [ 383.744376][ T17] usb 4-1: new full-speed USB device number 4 using dummy_hcd 00:11:48 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x2, 0x7, 0xff, 0x65, "cf2659e1c82e8bf2db7372f151c7b57763c42a4b13105a936024c6a47b89ccd2a02bcdbbc43016012e3c754694c9ae0bae91b43eacd59b0b83b893f7bdc4a4", 0x1d}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000840)="24c6e79b8e8fdfe49a61880cb6bc9adb31f8e711d6849074ac9e3d92dd8cb5872828c7b018683b7832cc949bc29ee6f69fb242187bcad6f4188c18b37230a5a2dac0e1eaa3953c6edda505f0ec7f0cc4e651da3d255e8fd81037c3be49244fa5211f90c9c904271a92b408171cdffe204bd485434c2a6b14b6b66c5d348caa704347bac800db068d916e0416a2c74a2c55bb67dfbdeb19d2dee51e98fc6971d0771c83435a146d618f139330b56a7d77f82a61b7007512a9965305c2de39098b0b40be93f88363981624faff9009cbd00586d97bcebc00e9d1753c2afe17e6b14c906d353d50ee4efda6c66212c8e6f4663c92166ff6f480f97cdd5a8cf594", 0xff}], 0x1}, 0x84) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0xb2, 0xfbff, [0xd5, 0x765, 0x1, 0x6, 0x7ff], 0x5}) process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000009c0)=""/235, 0xeb}, {&(0x7f0000000300)=""/53, 0x35}], 0x2}}], 0x1, 0x40010022, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000740)={'nr0\x00', {0x2, 0x4e20, @loopback}}) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000ac0)={0x6, @raw_data="d39ffd545d024bf7c111c091d6c5d5ad968b63d8430a6f504b6107f3332d926d94ace8012288b20d5b3a9431e2d87c7b25a483d9bafe25d4842369d2b6b86fc05c292994a8e29cf1cb5ce086f04cce2467ae1b3519c9a09bf75fdc93d7f317dc320d666b34e3731995670b7bf045da69a45fc82779f3c60902d263a8b7f8a80453e2db94c0fc2ad9f422c2f667e149c47ce61d50c87e5086c097a7644017df6cbf05d2f677d2f1213a513f4fc802a5e0a723501e9677c8e0c487963b8d8cd13bcbdfb01e355c426b"}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000029c0)=ANY=[@ANYBLOB="c0020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2c0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1005}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 383.922755][T12197] usb 6-1: Using ep0 maxpacket: 16 00:11:49 executing program 4: socket$inet6(0xa, 0x696afeb95ee97b88, 0x6) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket(0x10, 0x2, 0xff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x18312611) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000180)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, r6) ioctl(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) quotactl(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x28048018, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0x4, 0x4) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) clock_adjtime(0x6, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r8, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ftruncate(r9, 0x7fff) sendfile(r2, r9, 0x0, 0x8040fffffffd) [ 383.964733][T12026] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 384.053581][T12197] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 384.061981][T12197] usb 6-1: config 0 has no interface number 0 [ 384.068224][T12197] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 384.079434][T12197] usb 6-1: New USB device found, idVendor=0573, idProduct=4d21, bcdDevice=83.91 [ 384.088641][T12197] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.144605][ T17] usb 4-1: config 129 has an invalid interface number: 178 but max is 0 [ 384.153477][ T17] usb 4-1: config 129 has no interface number 0 [ 384.159885][ T17] usb 4-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=22.8c [ 384.169131][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.182503][T12197] usb 6-1: config 0 descriptor?? [ 384.188201][ T12] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 384.201485][ T17] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 384.210395][ T17] usb 4-1: no configuration chosen from 1 choice [ 384.222590][T12026] usb 3-1: Using ep0 maxpacket: 8 [ 384.233104][T12197] usbvision_probe: Hauppauge WinTV USB Pro (PAL B/G) found [ 384.240762][T12197] usb 6-1: usbvision_write_reg: failed: error -90 [ 384.247564][T12197] usbvision_audio_off: can't write reg [ 384.253373][T12197] usb 6-1: usbvision_write_reg: failed: error -90 [ 384.260088][T12197] usb 6-1: usbvision_write_reg: failed: error -90 [ 384.266856][T12197] usb 6-1: usbvision_write_reg: failed: error -90 [ 384.283687][T12197] usb 6-1: usbvision_write_reg: failed: error -90 [ 384.290439][T12197] usb 6-1: usbvision_write_reg: failed: error -90 [ 384.296934][T12197] usbvision_i2c_register: can't write reg [ 384.318792][T12197] USBVision[0]: registered USBVision Video device video39 [v4l2] [ 384.399050][T12542] usbvision_set_video_format: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 384.409147][T12542] usb 6-1: usbvision_set_dram_settings: ERROR=-90 [ 384.415835][T12542] usbvision_set_compression_params: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 384.429869][T12542] usb 6-1: usbvision_write_reg: failed: error -90 [ 384.436425][T12542] usbvision_set_input: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 384.445900][T12542] usb 6-1: usbvision_set_output failed: error -90 [ 384.448452][T12026] usb 3-1: unable to get BOS descriptor or descriptor too short [ 384.452549][T12542] usb 6-1: usbvision_write_reg: failed: error -90 [ 384.460146][T12026] usb 3-1: no configurations [ 384.466674][T12542] usb 6-1: usbvision_write_reg: failed: error -90 [ 384.471161][T12026] usb 3-1: can't read configurations, error -22 [ 384.477715][T12542] usb 6-1: usbvision_read_reg: failed: error -90 [ 384.490403][T12542] usb 6-1: usbvision_write_reg: failed: error -90 [ 384.496897][T12542] usbvision_set_audio: can't write iopin register for audio switching [ 384.570110][ T17] usb 6-1: USB disconnect, device number 3 [ 384.577317][ T17] usbvision_disconnect: In use, disconnect pending [ 384.612549][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 384.732291][ T12] usb 1-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=ba.34 [ 384.741595][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.752115][ T12] usb 1-1: config 0 descriptor?? [ 385.012382][ T12] r8152 1-1:0.0: Unknown version 0x0000 [ 385.027092][ T12] usb 1-1: USB disconnect, device number 10 [ 385.172039][T12026] usb 3-1: new high-speed USB device number 9 using dummy_hcd 00:11:50 executing program 5: syz_usb_connect(0x0, 0xa1, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xad, 0x8, 0x75, 0x10, 0x573, 0x4d21, 0x8391, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x2, 0xe1, 0xa7, 0xdf, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x83, 0x11}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0xb, 0x1b, 0x15, 0x6, 0xa, 0x3, 0x3, 0x41, 0x1}) r5 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r6 = fcntl$dupfd(r0, 0x80c, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 00:11:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000004006, 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f00000000c0)={0x1c8, 0x10, &(0x7f00000001c0)="b3e6c854991f1d7285439f72d5fab85e4a55e7cf8539e0c729ebe5e7f54ec843ee4f7408315c85a163344110f4af308221435c0f730b90325af3f55ee3f0b3dfc69f56425e169ccb663220", {0xe701, 0xa2a, 0x4c47504a, 0x0, 0x7ae, 0x2, 0xa, 0x35c2}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x400000024800, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000013000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000001580), 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername(r5, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000001400)=0xffffffffffffffd6) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r8, 0x80045500, &(0x7f0000001440)) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @dev}, r13}}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="000400"}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r13}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r11, &(0x7f00000002c0)={0x15, 0x110, 0xfa00, {r13, 0x2000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0x1}, 0x3}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x1f}, 0x9}}}, 0x118) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x50000}], 0x1, 0x0) 00:11:50 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20002, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000080)={0xe9, "201ac18fba9bd43961559e05b66d1bfa63b2b51671ca5fbf1eaed49b68b8e613c66228ee69071729d703835280315fe0a0b18b23081cb9916c6c1ab68e351a62b853e41c1e087340db83ce952a4a9b8532d7718f49b7942dca9f55785522d83a32ec3581a9e5821d3d5bfdd9774e7777fc9d7552b3ec408967706f8971653685ac34b37fceeb55cfe7ed468be8b59fea05cdb004b22853e93724eee2812e55af735e4fe17dd78ad1e3bd601af5aa87b5465bae3a02001bbb66e45d8b2623a62ef612a3cdefc5e0209e10fee95f6e870b67606808109e9e1292c4025fb1e240a4d58e40356822bc22cc"}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}}], 0x1, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) sendmmsg(0xffffffffffffffff, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 00:11:50 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="4c01002022d26b08c81403005eac0000000109021b00010000000009046d00015ca3980009058e1e0800000000c5a1b649237d44b9ee7894c0af19743ed2055ecd00d11c88cd0a000000020000000000"], 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8e041) [ 385.412498][T12026] usb 3-1: Using ep0 maxpacket: 8 00:11:50 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x14, 0xe6, 0x4c, 0x8, 0xd8e3, 0x3590, 0x4377, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xef, 0x3, 0x1}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x462, &(0x7f0000000000)={0x0, 0x0, 0x37, "37002a4f3375470300961717fe03a701006ca6010000000a00000000024082218b71a86ed24493086f5226c36283514b3f5da66973b893"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000080)) 00:11:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000004006, 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f00000000c0)={0x1c8, 0x10, &(0x7f00000001c0)="b3e6c854991f1d7285439f72d5fab85e4a55e7cf8539e0c729ebe5e7f54ec843ee4f7408315c85a163344110f4af308221435c0f730b90325af3f55ee3f0b3dfc69f56425e169ccb663220", {0xe701, 0xa2a, 0x4c47504a, 0x0, 0x7ae, 0x2, 0xa, 0x35c2}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x400000024800, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000013000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000001580), 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername(r5, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000001400)=0xffffffffffffffd6) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r8, 0x80045500, &(0x7f0000001440)) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @dev}, r13}}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="000400"}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r13}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r11, &(0x7f00000002c0)={0x15, 0x110, 0xfa00, {r13, 0x2000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0x1}, 0x3}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x1f}, 0x9}}}, 0x118) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x50000}], 0x1, 0x0) [ 385.532609][T12026] usb 3-1: device descriptor read/all, error -61 [ 385.540557][T12026] usb usb3-port1: attempt power cycle [ 385.632009][ T17] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 385.682399][T12197] usb 1-1: new high-speed USB device number 11 using dummy_hcd 00:11:50 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") socket(0x10, 0x80002, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x72, &(0x7f0000000100)}], 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000180), 0x10) socket$inet(0x2, 0x3, 0x5) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r8 = getpid() fcntl$setownex(r7, 0xf, &(0x7f0000000080)={0x0, r8}) write$P9_RGETLOCK(r6, &(0x7f00000000c0)={0x22, 0x37, 0x2, {0x2, 0x3, 0x98b, r8, 0x4, 'em1/'}}, 0x22) r9 = ioctl$TIOCGPTPEER(r6, 0x5441, 0xfa) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x5, 0x6}]}) 00:11:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x114, &(0x7f0000000180)={@local, @link_local, [], {@ipx={0x8137, {0xffff, 0x106, 0x3, 0x0, {@broadcast, @broadcast, 0x4}, {@broadcast, @random="5c23b7ecd2fd", 0x807}, "f5d15e7baea84c9b7d5ef9bcb3d2e763659454211d89e8e692feed4d19209b589020681366593e69f85eb28e41daf240376fa98da8e30fb81af703616def8c71b34e262986f68d7124c773ab78d2a2ab9ac0b0607e3292e5c967dbd4a4774b4d8af50002a16c3a6fba695d3c356de3911c3055d7a0f2144a6323d1492f3cf69ee92a1a7245a830fcc6c3af86258fccbf0e633f356527d1699fbefe06cfa4f563d53c90f4f84b089c034edb8d4591ef3b0e09adfb51f047a197a7af687744184e153c8cc8b48629dcfcab9746e6f208fe557b79597eca9174c0d3d81c3a2c08c81be98e8cbc6bea26"}}}}, 0x0) [ 385.892257][ T17] usb 6-1: Using ep0 maxpacket: 16 [ 385.922289][T12197] usb 1-1: Using ep0 maxpacket: 8 [ 385.962392][ T12] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 386.012682][ T17] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 386.021049][ T17] usb 6-1: config 0 has no interface number 0 [ 386.027396][ T17] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 386.038630][ T17] usb 6-1: New USB device found, idVendor=0573, idProduct=4d21, bcdDevice=83.91 [ 386.047950][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.058118][ T17] usb 6-1: config 0 descriptor?? [ 386.117974][ T17] usbvision_probe: Hauppauge WinTV USB Pro (PAL B/G) found [ 386.125490][T12197] usb 1-1: unable to get BOS descriptor or descriptor too short [ 386.125667][ T17] usb 6-1: usbvision_write_reg: failed: error -90 [ 386.139731][ T17] usbvision_audio_off: can't write reg [ 386.145560][ T17] usb 6-1: usbvision_write_reg: failed: error -90 [ 386.152302][ T17] usb 6-1: usbvision_write_reg: failed: error -90 [ 386.159017][ T17] usb 6-1: usbvision_write_reg: failed: error -90 [ 386.175721][ T17] usb 6-1: usbvision_write_reg: failed: error -90 [ 386.182633][ T17] usb 6-1: usbvision_write_reg: failed: error -90 [ 386.189082][ T17] usbvision_i2c_register: can't write reg [ 386.195223][T12197] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 386.196522][ T17] USBVision[1]: registered USBVision Video device video40 [v4l2] [ 386.202981][T12197] usb 1-1: can't read configurations, error -71 [ 386.203339][ T12] usb 5-1: Using ep0 maxpacket: 8 [ 386.243784][T12585] usbvision_set_video_format: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 386.254042][T12585] usb 6-1: usbvision_set_dram_settings: ERROR=-90 [ 386.260551][T12585] usbvision_set_compression_params: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 386.271203][T12585] usb 6-1: usbvision_write_reg: failed: error -90 [ 386.277778][T12585] usbvision_set_input: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 386.287222][T12585] usb 6-1: usbvision_set_output failed: error -90 [ 386.292125][T12026] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 386.293893][T12585] usb 6-1: usbvision_write_reg: failed: error -90 [ 386.294081][T12585] usb 6-1: usbvision_write_reg: failed: error -90 [ 386.308254][T12585] usb 6-1: usbvision_read_reg: failed: error -90 [ 386.321050][T12585] usb 6-1: usbvision_write_reg: failed: error -90 [ 386.327564][T12585] usbvision_set_audio: can't write iopin register for audio switching [ 386.374691][ T12] usb 5-1: New USB device found, idVendor=d8e3, idProduct=3590, bcdDevice=43.77 [ 386.384091][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.397480][ T12] usb 5-1: config 0 descriptor?? [ 386.411222][ T17] usb 6-1: USB disconnect, device number 4 [ 386.434937][ T17] usbvision_disconnect: In use, disconnect pending [ 386.592081][T12026] usb 3-1: device descriptor read/64, error 18 [ 386.673199][ T12] wusb-cbaf 5-1:0.0: Missing RETRIEVE_HOST_INFO association request [ 386.681372][ T12] wusb-cbaf 5-1:0.0: This device is not WUSB-CBAF compliant and is not supported yet. [ 386.691254][ T12] wusb-cbaf: probe of 5-1:0.0 failed with error -22 00:11:51 executing program 3: openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x100000, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x0, {[@local=@item_012={0x0, 0x2, 0x85c89bfb10f61542, "87"}, @local=@item_012={0x0, 0x2, 0x0, '\"'}]}}, 0x0}, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) 00:11:51 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x480000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r3, 0x0) r4 = gettid() fcntl$lock(r3, 0x94eeb9d4062b9153, &(0x7f0000000140)={0x0, 0x2, 0x8000000000000000, 0x3, r4}) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x4) sendfile(r2, r1, 0x0, 0x7fffffff) 00:11:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x734}}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000440)={0x9}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000040)={0x8001002, 0x80}) dup3(r2, r1, 0x0) 00:11:51 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) socket(0x11, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x51200}, [@IFLA_LINKINFO={0x3c, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x2c, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr="78937d2c018525f640132ce09cfb1fdd"}]}}}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0x1d, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}}, &(0x7f0000000200)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248}, 0x48) [ 386.804498][ T12] usb 4-1: USB disconnect, device number 4 [ 386.873832][T12591] rtc_cmos 00:00: Alarms can be up to one day in the future [ 386.884822][ T2931] usb 5-1: USB disconnect, device number 6 [ 386.901670][T12590] rtc_cmos 00:00: Alarms can be up to one day in the future [ 386.912011][T12197] usb 1-1: new high-speed USB device number 12 using dummy_hcd 00:11:52 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa9, 0x8c, 0x78, 0x8, 0x2040, 0x4902, 0xff51, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x1, 0xf, 0xa0, 0x63, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0xe0, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x1, 0x1, 0x40, 0x10, 0xb6, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x20, {{0x9, 0x24, 0x6, 0x0, 0x0, "32be4b34"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x1, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x9, 0x5}, @mdlm_detail={0x83, 0x24, 0x13, 0x5, "24215854ea391ddbb3c34fdccd807063934a1daf2eb8396b4270e36035a2e5d3ccf4265dd013359bc97b32cc7a2ba2e4be608538d52b00d2243e5c1eb138f066ee0cf6b7317165b1e2c85fc9d53918dcc8e6d760162bfefffc2b2d10d58fdaa9d65398156b58f23d7d7185ba79d398ea638e8a1473a1d602f6e770b0d60754"}, @acm={0x4, 0x24, 0x2, 0xf}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20e, 0x4, 0x0, 0x65}}, {{0x9, 0x5, 0x3, 0x2, 0x27e, 0x1, 0x2, 0xa9}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x752, 0x4, 0x0, 0x9, 0x38ef3c4a826c332a, 0x90}, 0x27, &(0x7f0000000040)={0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0xe, 0x8, 0x9, 0x0, 0x3ff, 0x7f}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "69a54b091b3a73bfeade4b70baf7dc2c"}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x423}}, {0xf1, &(0x7f0000000200)=@string={0xf1, 0x3, "4351ae198dc1ff8abb121da4af56de45103c7f1408558ff2fcae9ccfafd3a1c019ddfa5ff86bc7c7b856d249266af658dfbeca56a100b88f27f347510f8d44cc330fb9a96168b205c322f9e81ac16fae9efe62821a5859a2ad8cdf248faf399356fc1109e0b3043a4812c23c6f119e14009a9b95a09279d7d13c843260b8e18e84a911eb1b7a486deae9d57031f79ca74308a34f6614c6db2487c74aa93d4f4fda42da6972f14148ec31a9a2a54f63383ae3ba021167ebbde8273bd7bf4b8cbda3fbc25845a081180d1380a793c428315fce54d72e79bb37df81562e3ca48d860ffb67a5ad35980ec1ef8b97948c27"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1801}}]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002000)={0x2c, &(0x7f0000001ec0)={0x0, 0x0, 0x2e, "e7dc40edac96b90f01956721a760e44a198c1e5df704c775d33346ced2d92e2c7eddabe2eec9e80f119e763687ae"}, 0x0, 0x0, 0x0, 0x0}) 00:11:52 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000020101000000000000100000000000000c0001000000000000000800"], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2490a681492b4b99, 0x0) [ 387.093827][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 387.182088][T12197] usb 1-1: Using ep0 maxpacket: 8 [ 387.292687][ T17] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 387.309714][T12197] usb 1-1: unable to get BOS descriptor or descriptor too short [ 387.374421][ T2931] rtc_cmos 00:00: Alarms can be up to one day in the future [ 387.382296][ T2931] rtc_cmos 00:00: Alarms can be up to one day in the future [ 387.389836][ T2931] rtc_cmos 00:00: Alarms can be up to one day in the future [ 387.397536][ T2931] rtc_cmos 00:00: Alarms can be up to one day in the future [ 387.404935][ T2931] rtc rtc0: __rtc_set_alarm: err=-22 [ 387.412539][T12197] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 387.420198][T12197] usb 1-1: can't read configurations, error -71 00:11:52 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000280)=""/103, &(0x7f0000000300)=0x67) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0xc2a, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4028, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x19d) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, &(0x7f0000000180)=""/19) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f00000001c0)=""/126) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000080)) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000140)=""/46, 0x84000, 0x2800, 0x95}, 0x18) [ 387.446275][T12197] usb usb1-port1: attempt power cycle [ 387.532140][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 387.653585][ T17] usb 6-1: config 0 has an invalid interface number: 26 but max is 0 [ 387.661772][ T17] usb 6-1: config 0 has no interface number 0 [ 387.668072][ T17] usb 6-1: config 0 interface 26 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 387.678079][ T17] usb 6-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ff.51 [ 387.687345][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.698308][ T17] usb 6-1: config 0 descriptor?? 00:11:52 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000000240), &(0x7f0000000280)=0x4) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={r0, r7, 0x3, 0x3}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r9, 0x0) r10 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r10, 0x10d, 0x0, 0x0, &(0x7f0000350ffc)) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54ecb0c720dc80a280f21efd205e9e8ac82d740000e7036662aeaf19ce70e627c2bbb83fca379daa0b643d09354eb5628dab92ccdd19081bd197cdb1a27a16f830769f55e7b13ae8eab560e6571f212cacb516000229000000000000000000", @ANYRES16=r11, @ANYBLOB="00022dbd7000ffdbdf25030000000c000400ffffffff0010000014000100fe8000000000000000000000000000aa0800020000800000140001000000000000000000000000000000000008000300010000000800050003000000"], 0x60}, 0x1, 0x0, 0x0, 0x4004071}, 0x15) r12 = accept4(r8, 0x0, 0x0, 0x0) splice(r12, 0x0, r1, 0x0, 0x200080000005, 0x0) [ 387.791132][ T2931] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 387.971653][ T17] hdpvr 6-1:0.26: firmware version 0xdc dated @í¬–¹•g!§`äJŒ]÷ÇuÓ3FÎÒÙ.,~Ý«âîÉèžv6‡® [ 387.981937][ T17] hdpvr 6-1:0.26: untested firmware, the driver might not work. [ 388.062091][ T2931] usb 5-1: Using ep0 maxpacket: 8 [ 388.182941][ T17] hdpvr 6-1:0.26: device init failed [ 388.188440][ T17] hdpvr: probe of 6-1:0.26 failed with error -12 [ 388.192282][ T2931] usb 5-1: New USB device found, idVendor=d8e3, idProduct=3590, bcdDevice=43.77 [ 388.204087][ T2931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.205048][ T17] usb 6-1: USB disconnect, device number 5 [ 388.225782][ T2931] usb 5-1: config 0 descriptor?? [ 388.483072][ T2931] wusb-cbaf 5-1:0.0: Missing RETRIEVE_HOST_INFO association request [ 388.491178][ T2931] wusb-cbaf 5-1:0.0: This device is not WUSB-CBAF compliant and is not supported yet. [ 388.501025][ T2931] wusb-cbaf: probe of 5-1:0.0 failed with error -22 [ 388.510190][ T2931] usb 5-1: USB disconnect, device number 7 00:11:53 executing program 1: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x27c, &(0x7f0000000080)}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$apparmor_current(r3, &(0x7f0000000080)=@hat={'changehat ', 0x4, 0x5e, ['\x00', '^Gproc\x00', '&posix_acl_accessprocem0eth1++nodevsecurityvmnet1cpusetsystem#%posix_acl_accesssystem.{:\x00', ':em0em1vboxnet0+\'lo+&\x00', '\x00', 'vmnet0\x00']}, 0x9c) 00:11:53 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$CAPI_INSTALLED(r1, 0x80024322) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2000000000000000840000000200120000000001000000000000000041b3b0ef8d1de57e22e99b3e1a985b1bd47d282e39293777faff4c6469eb86fa92ef299f80d94516de7dc3ad29f8a733889de1fd76881796ebf8bddf7150c18673b316a745ecaa1e53ed992a50a19097344ba6350340b28087ed1a8681649b592942ce88c1189e709424847cbf4ff5c78bc2526321f4ccbc", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='nlmon0\x00', 0x10) io_setup(0x5, &(0x7f0000000440)=0x0) io_submit(r3, 0x1, &(0x7f0000000740)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @local}}, [0x1, 0x9, 0x400, 0x7, 0x3, 0x9, 0x3, 0x7da, 0xf43, 0x8001, 0xcb32, 0x3, 0x9, 0x4, 0x6]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e23, 0x4006, @dev={0xfe, 0x80, [], 0x23}, 0x10001}}, 0x2, 0x3, 0x3ff, 0x6, 0x59c6bba03c01fe11}, 0x98) r8 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r9 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x3, 0x202001) fcntl$dupfd(r8, 0x0, r9) 00:11:53 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r2 = dup2(r1, r0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0) pwrite64(r3, &(0x7f00000000c0)="2b7743af5b9df994c120c9eca0aad1be406e5a2248add4f2c495e48201e09f31185970bfa3bb4d0baaaef12237a1781e45ced29364f13d53ec240a66084ca6d1191f13b68fe64967a3ae26926d04c075784e816888f2779b8219498b644544071c8d2dc2d0fd1344c8", 0x69, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept(r0, &(0x7f0000000140)=@xdp, &(0x7f00000001c0)=0x80) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000040)) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011000d7d59608fc044a500300000904930000e13e7600000000000000000020000000"], 0x0) getsockname$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @initdev}, &(0x7f0000000300)=0x10) prctl$PR_GET_TIMERSLACK(0x1e) syz_usb_control_io(r4, 0x0, &(0x7f0000000c40)={0xac, &(0x7f0000000200)=ANY=[@ANYBLOB="a33d376488c07dc766fffa509cf06fc9d6a3e9338fdd4c96e577c106ec77babec45ebe8e34ec6f02f71c8bfb6caef3ec6b0cd1ffd354342a2b4f4eabc6517c5c9be0f8d905f64a4678e8bb07767a4ee510f2769ad099ecf2769ca4d27b24897882259f86a3e80575e15b58a7d92f124a9821d029450d7bac403be9c01a1a9d7f88e75d6026c94da42be935a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) accept$alg(r7, 0x0, 0x0) 00:11:53 executing program 2: io_setup(0x104, &(0x7f0000002b40)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000002a40)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x26f9, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1a9841, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "2126b48ae7073c8f", "da8c1ad0b5e04fca1c9ff0ba10989bb6ac8960308a2f6c5c4cdf466aa422a62b", "5545f847", "6eb960a9ab736596"}, 0x38) 00:11:53 executing program 4: syz_usb_connect(0x0, 0x3e5, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c000002010902128001000000df08049f00eb71fcb7c2732d200fa4007e052200b83bf8d09c62437b578d8a70204a8258dc6d0a4fac7c6770acff7f7354cb84e6982eb1737f154d6824721e1c3a0c75a227f89c0add9b0dab3bf27e06e447110285a007897705ae9542e041d26afbf65411e1463095e0f9d01e207d62b775f224b0a863d5a952d1179d3a8bf6a708d5cd754bc0fb0708add87146ed0d3b6a19610ff09ac9792dd834f747524cb9009ab60c34ec362195dcf1edced580c5db03a9f906bb115f1e4f5e5cf1f2ffe5d735"], 0x0) 00:11:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}]}, 0x28}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000440)=0x80000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="ce", 0x1, 0x0, 0x0, 0x0) 00:11:53 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x79]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000080)={"615915ee720d13787a872e6b74a7522630626c4a4248ca7247f649e15459ba012b3bc7fdbd4abc4166a55f05db9b80ba24fc9113fe63fe6abe395f46640d4cf196d4fa6fa9774d442c16d13fe254b21219ebc9efeb06a1b0e8936fb26d5c65b06b874e8c946716663906433bb4d8dc2a94e2266449ac5eb0b157bfa0e1304a2b98a42b3d2991a98f97aa7b81a0130157d91fd6a345814f999a64efcec798dc4380ac24b32f4169d2ab7214e509a3f211ba867ffa0aed1085353e1ce0567110f02d639e48b3d7a51f7e9b4b2fcac730977d00dcf7641ba2de63a12196aec36718d11e84cd4aaad56bf13037256f41953d058c3d93f50d720718b9491dd010823bfc1012fbd65b177e24bf448c5ae266423d31860451fcca1a251aebce0bee20184f1b6498d1755a4afab7499dcc7df81995e79de4ca85bd5e165bc7f28e4f2df5e5765aafa928ced1f71310c91b283339c0d30f9729d3d8751f3adc3a02327f8ebbeb95fd089ac9ea56fbe589ac5c023b115d78e1cb3e74ba99a3da1be6c000bf9599e5ae0a10991ae355e93a06ce8cb2555583ad752101a5c1178b9cf4a929f637e618a83f39b49174cd357925ea4c2c4fcf2ee3e89cf95d4e8ed5ea97f2fde6ec6d929cd6cca3e002b4170a5d98de664dd54420818534e7062b8d23c4fbf71d81fafb7d86414a643b5754239d5f8a04a23b5e43805d7ab1e6b31afe31ffe7adbda68de07fe55860b432c83604bd1b03d54c46833478b78b171dcf7bcbc6e9248c15bdc1a32f40f920dfaf3eaa376a2187b764167609288f158d08a8dc24ef14490ea010e4ff3479ad3b4263983d5f5c52b03e648e01fc8776c52b6af4525c9492d5c282a53d4b52fc4da650e15559aff02835d746d20d10e19fdd39e3675d2e76d95b352b887fdb60f8a8b6b7667b24bb27ace311087b5753429b4e4753c0228650c52d24c2652dbc92566df1a6bb42e201d603afe1e99c24e480a3d68a9ab8b39d5cc24aff02336492ca8ac2731c91c813d2dc48347c5537c255f83ba8c3760a78126eb12b14cc9282ac2d37c653d03d589e41ffd5dbe5c82a261cbb79a30bb1c7ef8d84e92f2524fa9924a22310a2333da097ce8f6a8d9ed0121fa715ae48667395fa5ad9983526624d9a42fb5d6725680d21dd460da39a42765e0211503c400b85afc04b7519c04db277ea7261f4a187a2961d56074d32f75912731a785b6c65ab15c0a57f2046ba51864d5a9599c619da147f6f58716ce71cb23f016da9cb54c1074ca01d08c82b3da9b6dc80f31513be25bae8e7963727eb3605e55c619b16d6560ce0d9736a630cb7777a8d80f696e8ef00fd38856898cd59a07034762e77fede9e78cb40980a6e2cffd8c6ac152b7e2800bfba9cd63fadb04ac232b22baec1dcece14e5faa21fc5bc7c75a19cc8e268790b3d1d6e31d1fa0d661bd8a"}) 00:11:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0x1ab, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xc, 0xa, @dev}]}, 0x40}}, 0x0) [ 388.942116][T12197] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 389.006254][T12653] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 389.014862][T12653] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 389.025000][ T2931] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 389.032211][ T17] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 389.182034][T12197] usb 6-1: Using ep0 maxpacket: 8 [ 389.232103][T12100] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 389.273988][ T2931] usb 4-1: Using ep0 maxpacket: 8 [ 389.282112][ T17] usb 5-1: Using ep0 maxpacket: 32 [ 389.302218][T12197] usb 6-1: config 0 has an invalid interface number: 26 but max is 0 [ 389.310517][T12197] usb 6-1: config 0 has no interface number 0 [ 389.317002][T12197] usb 6-1: config 0 interface 26 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 389.327006][T12197] usb 6-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ff.51 [ 389.336211][T12197] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.348330][ T2931] usb 4-1: too many configurations: 147, using maximum allowed: 8 [ 389.402425][ T17] usb 5-1: config index 0 descriptor too short (expected 32786, got 979) [ 389.405617][T12197] usb 6-1: config 0 descriptor?? [ 389.411194][ T17] usb 5-1: config 0 has an invalid interface descriptor of length 8, skipping [ 389.425115][ T17] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.435376][ T17] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 389.472383][ T2931] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 389.480090][ T2931] usb 4-1: can't read configurations, error -61 [ 389.557422][ T17] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 389.566708][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 389.574882][ T17] usb 5-1: SerialNumber: syz [ 389.598983][ T17] usb 5-1: config 0 descriptor?? [ 389.662445][T12100] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 389.664022][ T2931] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 389.670848][T12100] usb 1-1: config 0 has no interface number 0 [ 389.678647][T12197] hdpvr 6-1:0.26: firmware version 0xdc dated @í¬–¹•g!§`äJŒ]÷ÇuÓ3FÎÒÙ.,~Ý«âîÉèžv6‡® [ 389.684699][T12100] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 389.684788][T12100] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 389.684877][T12100] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 389.684971][T12100] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.685072][T12100] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 389.697594][T12197] hdpvr 6-1:0.26: untested firmware, the driver might not work. [ 389.708742][T12100] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.820109][T12100] usb 1-1: config 0 descriptor?? [ 389.890814][T12100] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 389.914862][T12197] hdpvr 6-1:0.26: device init failed [ 389.920518][T12197] hdpvr: probe of 6-1:0.26 failed with error -12 [ 389.937889][T12197] usb 6-1: USB disconnect, device number 6 [ 389.954137][T12026] usb 5-1: USB disconnect, device number 8 [ 389.972036][ T2931] usb 4-1: Using ep0 maxpacket: 8 00:11:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1}) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x20, 0x6, 0xb7, 0xa4, 0x0, 0x5, 0x43922, 0x1e, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000000), 0xb}, 0x6801877621592243, 0x0, 0xffffffc1, 0xa, 0xfffffffffffff7a5, 0x4, 0x5}, r1, 0xc, 0xffffffffffffffff, 0xa) wait4(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)) sendto$unix(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x185300, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x7, r2, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000000800800000000000"], 0x28}}, 0x0) 00:11:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7b, 0xaa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x2, 0xfd13, &(0x7f0000000240)=""/195}, 0x26) r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 00:11:55 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x200) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mq_open(&(0x7f0000001380)='.th0\x00', 0x0, 0x0, 0x0) [ 390.012880][ T2931] usb 4-1: too many configurations: 147, using maximum allowed: 8 [ 390.126446][T12100] usb 1-1: USB disconnect, device number 14 [ 390.132602][ T2931] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 390.132686][ T2931] usb 4-1: can't read configurations, error -61 [ 390.132714][ C1] iowarrior 1-1:0.135: iowarrior_callback - usb_submit_urb failed with result -19 [ 390.133368][ T2931] usb usb4-port1: attempt power cycle 00:11:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xde, 0x280000) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000040)={{0x9, 0x9, 0x5, 0x0, 0x0, 0x3f}, 0x80000000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000002c0)=[@clear_death], 0x4f, 0x0, &(0x7f0000000340)="353806495bb48bd6e6037061a52ffd18ca312141fb134c283d3fdcdf9704869f5ccaa13178353edec3d9fa45b44ac14d9c6072bf0c4f5755a82e9ca3096102ee938b109c0562a2355ef40449087fe5"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 390.176941][T12100] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 00:11:55 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000400)=0x0) close(r3) io_submit(r4, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r5 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x6, 0x400000) r7 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r8 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r9 = dup3(0xffffffffffffffff, r8, 0x80000) r10 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) r13 = dup2(r12, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) io_submit(r4, 0x4, &(0x7f0000001500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xf4f, r5, &(0x7f00000000c0)="a2f4f73516257baa1336d015cade4903b28a36", 0x13, 0x3f}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x11, 0x81, r0, &(0x7f00000003c0)="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", 0x1000, 0x401, 0x0, 0x3, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x1, r7, &(0x7f00000013c0)="f5d5d9d4e4d5330de688997304bebf68052782ed80ec23fc7003d1723bf4e54b60564a1d09e3968d299c24723b8f6f19e1592191accf55c62408631ac10953be574c135f2a09d1c92fef60dcaf1d330c2f3b6cadfd3a80d26a3fed313345361a141d1f177220d45d78e7", 0x6a, 0x100, 0x0, 0x0, r9}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x81, r10, &(0x7f0000001440)="33d65ca852ee22ca49765fdb404412688623353a1f53ee538f3757fc31e1820437b9b3d296dbeb84f5c94573e35b9c11b3a77b27d54f1df4853ef460d8ad549f3b8040960ce4aabc31b5b748043626f0499eff82ecff386012b2ec7ac08c6a6ba9a8eea6c33a56fc86c50eb5a5c0e5f728d4c516aede85", 0x77, 0x32, 0x0, 0x1, r13}]) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x24) r14 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) io_submit(r2, 0x2000000000000060, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000380)='Y', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r14, 0x0, 0xfffffcee}]) r15 = dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) 00:11:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x208200, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x958, 0x11, 0x0, 0x27) [ 390.731979][T12197] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 390.882453][ T2931] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 390.952206][T12026] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 390.972161][T12197] usb 5-1: Using ep0 maxpacket: 32 [ 391.092539][T12197] usb 5-1: config index 0 descriptor too short (expected 32786, got 979) [ 391.101228][T12197] usb 5-1: config 0 has an invalid interface descriptor of length 8, skipping [ 391.110282][T12197] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.120491][T12197] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 391.129992][ T2931] usb 4-1: Using ep0 maxpacket: 8 [ 391.172413][ T2931] usb 4-1: too many configurations: 147, using maximum allowed: 8 [ 391.202336][T12197] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 391.211674][T12197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 391.220180][T12197] usb 5-1: SerialNumber: syz [ 391.226684][T12197] usb 5-1: config 0 descriptor?? [ 391.302287][ T2931] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 391.309994][ T2931] usb 4-1: can't read configurations, error -61 [ 391.317221][T12026] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 391.325797][T12026] usb 1-1: config 0 has no interface number 0 [ 391.332098][T12026] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 391.343006][T12026] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 391.354514][T12026] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 391.365913][T12026] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.379123][T12026] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 391.388294][T12026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.399532][T12026] usb 1-1: config 0 descriptor?? [ 391.449796][T12026] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 391.470045][T12197] usb 5-1: USB disconnect, device number 9 [ 391.542153][ T2931] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 391.646318][ T40] usb 1-1: USB disconnect, device number 15 [ 391.664367][ T40] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 00:11:56 executing program 3: seccomp(0x0, 0x0, &(0x7f00000005c0)={0x2, &(0x7f0000000040)=[{0x44, 0x0, 0x0, 0x20000}, {0x4, 0x0, 0x0, 0x7fffffff}]}) 00:11:56 executing program 5: r0 = syz_usb_connect$hid(0x0, 0xffffffffffffff14, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x56a, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000000)=0x1) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002202"], 0x0}, 0x0) 00:11:56 executing program 1: syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000280)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="e397d6b025e138fbf33405fd07ebc27ea2c910851f15e3dcd72d9a7b11b3e706da7fbb3896c0e8c8560fea59b5b647f667372ad28a6b19e8dc6d4096d07745672df79c6710baa38ca86556f453dff2b751c235a48956e86fbefe494684c226a72f37d6a69fd8a90afd7f3c02e9fa758ced218876d219b726ab70e94e0e0cbba346c185041895a2dea7cdca8f547dece7437fe4d700467777eef8eb7b9e215bd9844effc7ed2345f354d8680aba39fa6fae128fd1f8f50d5dc98f32c87cb5ec21ed5c702f324e"], 0x1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000002c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x20) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000380)='G', 0xfffffffffffffce1}], 0x378) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, 0x0) r6 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r6) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000001c0)={0x2, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}}}, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) close(0xffffffffffffffff) 00:11:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'yam0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[], 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r4 = getpid() fcntl$setownex(r3, 0xf, &(0x7f0000000080)={0x0, r4}) ptrace$cont(0x20, r4, 0x101, 0x5d) wait4(0x0, 0x0, 0x0, 0x0) [ 391.782110][ T2931] usb 4-1: Using ep0 maxpacket: 8 [ 391.874535][ T2931] usb 4-1: device descriptor read/all, error -71 [ 391.885598][ T2931] usb usb4-port1: unable to enumerate USB device 00:11:57 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup(r1) r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1bb8, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x360, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeaa, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000000100), 0x8000fffffffe) 00:11:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:11:57 executing program 3: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x200800, 0x0) getegid() lstat(0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x57) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="20000000000000008400faff01000892254cc26d04a6000000000000dc2f9ae2cd2bf0cdcae68baa2b2011cd2e8bff805738e85139bbc8cefd60", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) getpeername(r1, &(0x7f0000000680)=@hci, &(0x7f0000000180)=0x80) keyctl$chown(0x4, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x110000, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) getgid() syz_open_dev$mice(&(0x7f0000000640)='/dev/input/mice\x00', 0x0, 0x20080) socket$rxrpc(0x21, 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000440)='\x00\x00\x00\x06\x00\x00\x04\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000480)='\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0x1, 0x7ff, 0x8, 0x7fff, 0x0, 0x8}) keyctl$negate(0xd, r3, 0x49b, r4) unshare(0x60020000) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSETATTR(r8, &(0x7f00000004c0)={0x7, 0x1b, 0x2}, 0x7) 00:11:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) epoll_create(0x8006) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3f) 00:11:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='statm\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') sendfile(r1, r0, 0x0, 0x100003) [ 392.136981][ T17] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 392.275060][T12710] IPVS: ftp: loaded support on port[0] = 21 00:11:57 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x42b}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000240)={0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}]}) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000003001800020014000100000000000000000000000000000000000000391136cdcad244d344c1795b6d359ce0ee8fc9788dbd6d1befe8bd227128e1ed53556c4f5fc171081a3ad45edb37cfd05b361b32e772999d202103f4c1fa6d0cd41909f5b1076a5c54905430d7402fc6f903b84e35b95ddc26e94d3ab073b95b232d59707dc3c7cffa32f64e22132e76b801b04233270a3362eef9b01619926555cd519c5e9453652a3185482c15e4616b3d33fe5719c1b1b499", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [0x6c, 0x2, 0xd401, 0x0, 0x0, 0x0, 0x3fc]}, 0x0, r7}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000080)=r7) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0x4e68d5f8) 00:11:57 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x4, @tick=0x6, 0x2, {0x40, 0x8}, 0x4, 0x4, 0x6}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)="47485d9091dd7721920022758f9db188e854f75520adaad70e222e385aeb0eff5f9d187981b21a", 0x27) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xbf7f, 0x11, 0x0, 0x27) 00:11:57 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000001100)) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$swradio(&(0x7f0000001180)='/dev/swradio#\x00', 0x0, 0x2) r6 = syz_open_dev$audion(&(0x7f00000011c0)='/dev/audio#\x00', 0x7, 0x40) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000001200)=0x1) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) read$FUSE(r4, &(0x7f00000000c0), 0x1000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x2100, 0x4431b847e0da8a12) r9 = openat$cgroup_int(r7, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r8, r9, 0x0, 0x7fffffff) 00:11:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r3 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r4 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r5 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) r6 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000001440)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r7 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r8 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$UFFDIO_UNREGISTER(r11, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r12 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) r13 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x400000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r13, 0x80045400, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r12, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r14 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r14, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r15 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r15, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x26, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r15, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r2, @ANYRES16=r5, @ANYRESHEX=0x0, @ANYRES32=r0, @ANYBLOB="4409343a870faddceb6562e8f9ee4938457ef0ab26916860f861943c096c1a950350e6f38977f30a555b55eaa90ac92347e4c61d9419e4325768f35509a38b5c1236d3aa60604f213bb22ee8ea0de65dbb57b8a4baf57c6735985f6109eabf97a4b304baffbe05213252ecf5b7d7262e379cb796b471779a739958f555bdbfcd89745622db45c80d807d3ab56ffb6072d30d2639eeaf8e8c94f371dd8433412ba4518b81f7d06d98077cd19b1a6877f0ea777ffcaf3ae870b0fc765dae73c8d890f4e00eb6704ba795bf8cf1c33b017bed08de7e31f8a6a81b1d0e5c86434f90b0d4a395b618768c921235be5d15afcd6d3e843bac9999da3c79f16ac2dfcec3d323530266dba7c3a0d80a44b96d2a27cf679f1b6e7331e6c217e1bf3941bfac0992f7ce3af17221df77d5a563e6237bc03fdead61dc58bb72aaa28f6b804717a25b10cd4d29ab1ed8e7b068dae1f719bb6063bd69d4591d8eb5cc5a5d43c9bc9fbf4c0eb61b7e351f0b21af6b4e3227910d501c068ac840963565fcec9f2d674fdfaa9fc5bbc8798f23b7d782d1e75be31ee166e62bb4f7e2c5e6c4cfc534d85b9f00e86907dafb2d29b6fb6b455bcb439731be765ca02a64c0e4ee48e9e99979c31b1397258a821d3b211715791438b1cc2b23d2b7490ebbeea710614ffc52f7883aefd73e0d5aac651f7236b21d765e381f851e212bbbae8e3e55ca4c406f6230563e0171a2b9a941e7893bab27be4b09106e296ae1a211db8a92dcbebccadfea2b9df20f9be47a607b000c76c8b2ad9a84bb3d2cac49d8fcdfc67634d3e00aaca7baf1b208c41280efb8af6b16efef4de00a6e139acafe8c535593818e3c23ef9aeacd16b14583f19dc549a77c0f3b906b729f1f7c7696b3482a1b86e436777801da93f9951d9cec200f07b6c2754c15fc3eb9a9ed20e18378c07a0e2df991b6c941c6364cf0aa11add0d2b623ef301443badee56e0f938d8bc0e62bddff7e4752317c7b7dd27d50b69cc66f1720363159d0850fbffd1b753177d5d5479eac07ee06689ac5c98cf5a4160cc2c2cf601ec2289f66cba24e1e43a3a578dec1c8e9ba16568cba3238802959be423d2ae6e12c0678eae152b6209f95fd0484b8b22b17c6df751177619ecd4ecedd39aad2be685d9599b7b70188bd02445c06798651303ad4b3b83e5b0dba3ddb2501401f8fe754538a8c443d04ebb2977d2ee913435047e516d73ba308d10cc3bea95ea4c20b085efefd735d64b0d706085485a2335ea56311405bee6c58ab103f01a575562662b6ecb407c73f7c8c8f4ecd65d05de34a6764c7c60792eb53a27227e95af47432162054dba5766c0b149c73c2ae7c22fad65c1b8d1ab53cf60e18526f0dce6458bb45bc1408e24da23bf4d66600e0d01e8b4e884e21d24cb449bc302bbd8d6dd5321d92a78e73ba73dc409a1d6e60062b307962f9cb0419aee900432259f9a83073f6b71ef31c6f7142a7dcb6ee02f4c42b036cfe8ed738b50f123c3585de4eea7e2884cc6608af2e9dca3031330dad409ca3f3641d20fbf4b561d265b1a5d64f5cff6e67cc9a62858a1b95637176cde9c5f6443686258d275ebf3b7af224b17ab2c7b8e8172e9badcb80898848d060fd18fae277d4d965bc4dcfbb022026ef9bd1105b1958ce32cfdfe3200b511d101814beb1c688b7f72bf7a53ebcb3b167525d022fc5535be87fd530ae4ad8f5df4149c866d7cc433cb5b290acaf5219eec21953d3b24163df587df34fcae80ea8f8525162580129f15458fe69237cfd1f89c8796e6ad19a93c6c277b6c2e286cf340c7e0d3db93b448c2aff30ca31b21be5119e88f58656c4ffd9c700c169ab2a25acf1c9346fa9b836e059c812e847d27ad3ea018774c04f0d8a57b0e93c73e5b78543f110c20a1fbbf06099904ff5364ca66745428260c4a06c93239a4f6bbc2cdb1632a6e7f5f320c7c7467c449d7c46d3a648fa5625ba8a2be278eea50aeb90f0c33f1986e47c698b052a5c46b12df696d0b2e30091dba918544841535061c34e8a4eb726130b0ef4e1243f9b397164a3a102efca736a8fa9268e52ff04f94d68343ed3ce2467ab3e7e8e520de4fe3e40463bc43b7c1a43be07154ee3b1bf52d35aaec11f9a0eef977e98c4200e715fe406582a977db580a326643a805f4787ee8f3f75fdbded3538ea6010b756b9e655605ab3b3254758289ec2df4654acf1412d2ca3aac24dd3182c360d8fce04e66a6805d117bd4cf42ab7c0c8f3b8665ec85c39225ac17498caba836e77aa4917d417eb80837c7efcfc8b7e08f1552166c6086011479b0fada1afb57c94f89c3023933526c3576735c8a37e347e3962a74a3fa5d7d28fdaca9d6817fdcdf4f469b97490a52235121a34bb365e6af4f1ca998a34cf04fb85900bebb9fae72a9fbec3bcf11b518998952a894495b56823365be7d88814589ac84ee5a08076b17eab15201d55016ad2332bc807d7236de2163822be0f9da039681279093674d24c91622e7307905169eed3b88aeae23126851d95cde1e18ea8ac26e1e217ebe8b2a58a1e5593d0e53dc366e7343905969802aebb3726f6efdaf9e8d44d15f93516c54415df6d068a1bcac667f61f1c38c65637cdc107fb0811a5f393db3cc513422ed736c70bbded87370f807c65f447df5596e154a4bcc708a9fc2c55afba0d3a33044ffee6670c9be875a1701f27bf1d4821ecc7a5d07c8d488f90b6667c51b335924bc71a97229c64224e525471b2ac79adab8553b042f1037acd4c8554a0409731dfcdb62fc89bf2242f850966a4577bd4f663d91145aa605c7006893332aff6dda4e22eaecee3c6aac7d4458b61426f6f5539a4397ed45d3856244e89516378e6ea06bea1784a52bc5bba5d86d6969a1cb0e69a1b9b605dcff8f725235396c927208498544c1d51d2b434e21be5361adac8f123b738917c42f53a421d03d4d849ea8072a311339801fe2330c6b987ea20f3d7fe07157ab2495f2c172e8d97aa5d90f75984b089b4cb58ce5b9c0d9b30be17acc4c8ab23c021709033bcae2d34b5f19508ca03203147be0b9c0467ff7c6031f2a9a9b5e0b415acaf00ed2ca588b127bede621c71b7004f58aa1ee3b07b92cb6e21db0cba671fa5bcc9febbca8091982b08cf2e3eed8ff8d53edb760706a092f114523e763ca1d9ab1a0102d47a0e0a1c2630797b7204dba585c395d9f936837bb5be8899802fc2c4a13a7fcbfce300fa5cda4c9808196eb48e427a1bfd031bb90bb92709563d7656a287269459570ecc3723b3318ae7148ead8e478af1b1ffa998f0ef146c367335aa949a904c3af71df38e896bbc444acd5db0ff1a0dfb07fa1d13dd7a46120a349803134ae91993fb675070034d6ad3490f495412b53f2a71d9e82d5daf96ae6fb9444eb2254e13aa7caa066e89a756a996ca54b0dcf0ed178bf8a4fd080695d404d21a2d44923f9ef933c47fa71c0bcbcb39b382dd56732eb9e774c2644bdb8c1ebd601187b259d62c0f6343cae89b0ab111de106162e63de7d0d8d73b19e5a8904c16a90c569e795821ee27ecde12f9d3d91f4bf666d6afeca2bec10b03ba4121d676cb6c45fd9d12d75becbbce81163654e6f978a76853aa9fcb5013d665f4092f83124dddd1d2e9d4541a2d85c380bc47dea26950bbe7dd7dce148dfaed9ec1df3d3d6896942e5767d3b5bf340bb9c00bd709ffa1749c577262e7a313699856ae137801f701c59c965e2f37a1cd67bb6e99ae679aff2d1603b0ced34562f96d62e01e3ad5c3c2c525067f3064ca918b9e7b698cee403761b53b82b17fe298c7999f2df9c67060bb9d2b3dfe0629c69bbd59054d376a3ea50fad77c8064923f958d15edf6d4dccb26a71298ebc1937292b5991d09e5e1e9fd73224653a79cfc75f3f13c652f7ef07eaf00a1efa2581adf74b93093d4947220e01a33c988d13e7ff7ea8fd1d24b512091375c15a5c64600487f25d37b41e791f92c20b608a4b15f11f678b10d27122d9deb8df0caba4cf7f368ab3dfcee625284a91bc0731de81be1b58b0736ce11856f8401869a0726157b93774eb1149ecdf0053e481f8acf340d6d3ed009cd076a30b6b0012c8f8dbd1ca117b1cb10c7ec3a0b56dadf76fefe102f30675673651ca343bb6e7d31087b4edd2d0397e5cb3b43a72b6a39a7526252fc7a3840c34c5eb20f8c7fb4c3f48c6b3ac2801c18e739818714f093ac1c9ae08431ee033d18e1612fae29c4f586d4e6b869d0adf27b4e0c821bf3d2cd37b78dd7fe0e348dbc8a545bccbbbe40f991b0f1b03b36a83e7abe7f910b4ce2954c8248f2549db437ae78ea8bf4863584d9b825cfe704bde9d86cc78c19de77a22c1160ea4b70de02edc625caaa76b3c5cf30280ca724dba42fbb019d2c4b53bf0e62842e0515927071350376fcf0105b7a10a12bf87235984d6180344d3aac149d823257d7189242147ccbc2265972f01da3a4f7a5553477041f31e416606d1275ee417ee4def9be0d3ddce3a312eb4b6cd836b43c15d44b41fdec235a38595efc5f255686568d5c3866af9a6c15d5a81fd2f2f68172064a628d2c40b3093a3ee5c3fb5a32ac65d24d2c84f131c70f630635c6fde1d0e49d43fe4e5404496bdbb4d6da55b61cca44cba5ff9858aceb772f6e16a6d201baa900428f63bae53aba9384909e27413262113e8e6ff3a7a69e7aecd71c790878152285e57ae096c5db01ef961ca4c3dfe490eaf5a35dad411a67b52e6ad03d5acb76000c7972376329b9b06c8d3c26154a43205cf13f74663333c79327f29987c3508b78dcffde2e8043649072fe43c3562984cda5ea0380bc6d1cb815c31900243b309d81dacb1ad202042c55f4dc775204efad22bed0ad6505de897f7bc3314c32b6599d66c0fb073d22634dfafa3759bac60f62bd516e7eda9fd66417aaf54b5c4da4f7b9f6d509b57d01c2f05e89607b194d2d7d3286e74b96ebbd154364521c58735fd0b8c60d7325663e545545f13097a9acd13551e71a9203edfdabe8059862d159d1ffff4dda1be85ee7a54e195b1fcf0f288ed9c715de4710aa30387be398538ef3afc4418eff2eb52fa611697642341f3fe61daac1ca4976ca973f2de112f6e9762ad508a83fb32caf5de9e52fd1ccc837b32104eabb70a7c3e4649008c2c1684e2219a2b57cb9f7c5a6c1363c3b176d633553083879248787bc2d9bb2f110d78461b5accdddf70386a11bedfa60fb47f89e80da022a10c37ac070971d168cd96e129fbbd79a0c9e951e43a281462d568d771c6517de4e5bb0209284cb4b0a4c9d69760bf10ce7ad8ca9ed09c8280fcb513cf6f2bd5a64b72824c58d8fbd0d538dea550cd59d05c08c0ef1718fe93c2672bbf422d5b9e9a24428a087ef2cbb03e52a944e363fe88a347af8106c480d4d6fa7a80f20dd0279c0fdefb0967760820852bdcf9b012889bd1012859868899545f302ca7755fd008614436567c4a638689bb1d2819c100f8394ebfac3d0ab5f9661920476cee6853e5a06ea37bf4587ad726dc4997b5997f9064675de9722c50ff4b0848f8c9922f03dcbe3cc21a5f7f4291064f7de95c94b57a0ce86a8946e84c58c1d61fc48c730e17c91fdf6ea7d8f6bb84a9a7eb75ce9901ac3c76a07bc4dc445c3737ab1ff282cd1943dfa132d24bc076fd9b8514caf7386bc0998e0f4402e15e318b912bac69cce183a65a9ea966c0ef906d9b06993af86da7d3cefcc243b5f5adb6f0c8193bd5b3437e98692e76db3315548f7e4ac8b826b5dfe8f686553a96ed"]}}, 0x40000) [ 392.736376][T12726] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 393.086773][ T17] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 393.096588][ T17] usb 6-1: can't read configurations, error -22 [ 393.209319][T12732] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 393.282132][ T17] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 393.712295][ T17] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 393.720422][ T17] usb 6-1: can't read configurations, error -22 [ 393.727148][ T17] usb usb6-port1: attempt power cycle [ 394.442375][ T17] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 394.842248][ T17] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 394.850321][ T17] usb 6-1: can't read configurations, error -22 00:12:00 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r1 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000000500)='em0cpus1\x95\xeb\xe6\xa2\xa5\x12\xb7V\xda\x8eo\x9ce\x0e\x8a\x9e\xc6!\xae\xe8\xf9I\xe4e\xb2q\xb9\xd9c\xc1n\xddg\xf17\xbf\xac\x19\xf8\xb0\x84\xad4\xc4\xa27\xe0\xdf\xfd\xf1\x98\xdb\x19\x97\x89\x9f\xf6Rr\xde7\xcb\xed&0\xa4\xb4):\x15\x8a\x91@<\x00\xbb\xbfm\xc8H\x95\xbb\xdea\x96Q\xef\x8a\x01\xf0<_\xfb\xb0\x98\xbc\x81#.\xc9\x93\xf1m\x91\xc5P\xe834\xcd\x14\x01\xe9K\x16\xde\x87I\xbf\x0f\xeb\xbe\xb4\x914\xa7>\xac\x16\x01\x9a\xe98]\xb1\xd4 \xcb\\\x1e1\xc3\xc91[,2w\xa2\xfa\x04<\xd0\xea\xe4\xb4', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r1, 0x0, r2) write$P9_RGETATTR(r0, &(0x7f00000001c0)={0x8, 0x19, 0x0, {0x0, {0x1, 0x2}, 0x40, 0x0, r2}}, 0xa0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:12:00 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x15, 0x35b, 0x0}) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_dev$media(0x0, 0x7, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0xffffffff, 0x0, {}, {0x0, 0x2}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) write$hidraw(r0, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) 00:12:00 executing program 3: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x200800, 0x0) getegid() lstat(0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x57) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="20000000000000008400faff01000892254cc26d04a6000000000000dc2f9ae2cd2bf0cdcae68baa2b2011cd2e8bff805738e85139bbc8cefd60", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) getpeername(r1, &(0x7f0000000680)=@hci, &(0x7f0000000180)=0x80) keyctl$chown(0x4, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x110000, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) getgid() syz_open_dev$mice(&(0x7f0000000640)='/dev/input/mice\x00', 0x0, 0x20080) socket$rxrpc(0x21, 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000440)='\x00\x00\x00\x06\x00\x00\x04\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000480)='\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0x1, 0x7ff, 0x8, 0x7fff, 0x0, 0x8}) keyctl$negate(0xd, r3, 0x49b, r4) unshare(0x60020000) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSETATTR(r8, &(0x7f00000004c0)={0x7, 0x1b, 0x2}, 0x7) 00:12:00 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x4, @tick=0x6, 0x2, {0x40, 0x8}, 0x4, 0x4, 0x6}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)="47485d9091dd7721920022758f9db188e854f75520adaad70e222e385aeb0eff5f9d187981b21a", 0x27) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xbf7f, 0x11, 0x0, 0x27) 00:12:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x1542a536122aa686, 0x0) accept4$unix(r2, &(0x7f0000000340), &(0x7f00000003c0)=0x6e, 0x80000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000000080)=[{&(0x7f0000000a80)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000940)="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", 0xfb}, {&(0x7f0000000400)="e6fee5e4effc92a0e9aafd3b9c5d4b63223f25e02ba53e9e32fdb75bc100cc8b7fa2ddeb9894d83a488675289d", 0x2d}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="20b5000000000000008400a8aeb711b5e6ad1c000002000000c600"/37, @ANYRES32=0x0], 0x29}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x88, &(0x7f0000000140)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0x8, @mcast1, 0x1}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e21, 0x7, @local, 0x1}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000280)={r5, 0x101}, &(0x7f00000002c0)=0x8) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x88601, 0x0) io_setup(0xd30, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r8 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000440)={0x8ac0000000000000, 0xd000, 0x3, 0x2, 0x1f}) r9 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r10 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') r11 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) fsetxattr$trusted_overlay_nlink(r11, &(0x7f0000000ac0)='trusted.overlay.nlink\x00', &(0x7f0000000b00)={'L+', 0x7}, 0x28, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r12 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r12, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r13 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r13, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r14 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r14, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) write$binfmt_elf32(r6, &(0x7f0000000480)=ANY=[@ANYRESHEX=r4, @ANYPTR=&(0x7f0000000d00)=ANY=[@ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYRES64=0x0, @ANYPTR64=&(0x7f0000000b40)=ANY=[@ANYPTR, @ANYRES64=0x0], @ANYBLOB="1c202df20790a4be405609b8ffb9ce2db0a9da24f2fc58f11df5e57953487c82e70176adb8104c65daa496403da1918b073e050e", @ANYRESHEX=r4, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000b80)=ANY=[@ANYRESDEC=r12, @ANYRES32=r2, @ANYRESHEX=r13, @ANYBLOB="dd7fac66140749b3505341693c3cb4808d64b1", @ANYRESOCT=r14], @ANYBLOB="4700548416bbd17265c2afec9a80031cdbf149302cc672355c60d83ac0bbb06bc450ad0fc4141453206e54baa6d00611b97bcb3b49e118965c0f784ead", @ANYRES64=0x0, @ANYRES64=r1], @ANYRES16], @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRESOCT=r8, @ANYPTR64=&(0x7f0000000780)=ANY=[], @ANYBLOB="e2abd08d5120d16fe2020eb969555516c9eabb63289dd02efb53608af8c36d4edad43c8714ef224d2fc9d0c99d9c818c86325e36b0d8082fc21c2490547b53141b9041b157247e53171c49f7f349d0f08dc7843073cc9a50ab29f5bf75b2ee6ffb235d72a86fd868fd9a0d0e4b48863f742f5e122357330b64287d51f3acd795f83aea9eb6dc9a75e6f64eff65f67cdd7f164c0df8237f1bb7a5a7e787df01134823ee334719f12443be1daeee230d754fceb69990dc7a7f40c58d97a97a"]], 0x22) r15 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r15, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) fadvise64(r15, 0x0, 0xffff, 0x2) [ 395.040596][ T17] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 395.208962][T12751] IPVS: ftp: loaded support on port[0] = 21 00:12:00 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x361) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xe00) r1 = socket$bt_rfcomm(0x1f, 0x0, 0x3) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x1, 0x2) rmdir(&(0x7f00000001c0)='./file0\x00') 00:12:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_tcp_buf(r3, 0x6, 0x17, &(0x7f0000000540)=""/4096, &(0x7f0000000140)=0x1000) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000180)='usertrusted!\x00', &(0x7f0000000200)='./file0\x00', r3) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="230400000000000000060ad1266d1b4ba87899a3686efe93e8b0dc00"/42], 0x2a) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x2, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0)={'syz1', "978e0c4dcc42f7a2c65fddce5e777a12ca7b66302d25bf2e8af63823cd8e5eb26df2fe0643934bb153dd8a7ff5e3af28867338f2062fb5e59d3169f7e2ba9ca58d8e86e0c5d71b689bfeb1918ebacdcb35a5f87abc4c27144cee56b0c2897381448b63533c28"}, 0x6a) ioctl$SG_IO(r0, 0x2285, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RREAD(r7, &(0x7f0000000040)={0xfffffffffffffda0, 0x75, 0x2, {0x23, "301f949efa6ffef5cbd182820bc8000000000000000078bef32af50000000000a593df"}}, 0x29) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1) 00:12:00 executing program 2: kexec_load(0xfffffffffffffff9, 0xa, &(0x7f00000026c0)=[{&(0x7f0000000040)="dee05705a316d8e500d3d867ca46", 0xe, 0x8, 0x9}, {&(0x7f0000000080)="8a7ffcb670134982bb8965d8343773f67a646d316affdf79ee492f55c328c2eb7d90fc03fe85186e55e70e6f353ee10faff16775ea23c85433a5085d5d09ac52a17ec4d458cbedd6d76de61b160405cc42899c850a29c642ec954fed26ed118ecf7fc3be8fdd4c046e49d1004c895a934851a8de616224927aa4972826d2c34844b443273fe50ae509ee3696ad5b8bdcdd848998b3c3d9e7e25e2cff4ae80c2f5eec5ce8bb8405e6318d5b6e9f58f39fdc2c59936f9a5838e6d23b6713648837095d070bdea37b28e906d5ea496bdbd6411473004cd2", 0xd6, 0x4, 0x101}, {&(0x7f0000000180)="4ce2a1ccb4cd2be77afd4e514cac9f88d9e54a0bcbdcc73cf96847585970164b8412fde1a3d4a988f4693c760088b142761baca329315dee785f1b06eaac88d696f5ad4b3a9d3577e059ff7dbb7933c5fe02e7abcaad5b02675e22536c4e212705162529d97fec43c4e505f55855970752204e521bd8efba4be2c9fd0eeceb477a480340f38a163c664b09e0e34796eb1572ee2ab3378c4922e53b53b7754ce69698a4d1dac38f8ee8af8c97dfcfd6c66ae0c8a395faddcf849810952e9bb310871d1bfb7b01950feca13753c7dd1e0427c1f934cd9c89e2d47f43931dbeb2c97872c2f2107520e8be5fab6e18daf1517f6ff30b0c05a6bfe99a182437fd0d1b7000c6a38adc6f52e34008afd1cfb2854432f9e0dfdc83d39776f2bc24ea8abdcb9dce5dd5501f2a4efa0dab4b5a55350fddddcd21f10cad6c847cb7f8ce448c3aa803d9c975c7f61b5402a19d1fd82918165786d32b17864cd1c09c04ce83eb6ca810c68b21b2ff194044222645b6eb6de12935b1201976fe3ab5db7fd7524d786669d00da43dc7ef8256c077725a1db179287c2e3dba6bff8f0ef45d744499ea9a8b5d7f9b45fc7f60c74a03a8dcc2d1b961f9057fcbececf15cdf385d94aa1f35ce9e7b03e1f8e5899edcd7b737391ab1e35de810508335d9b2c52247a0dd94050efea2166d8a2e5dd9d7dc6e67912bda96546db50d480e9022f3b2cc1d18916479d914fa3b3d6c4525f402bc86a6cf33d9ae85e9086f9ccb4c370dbd2b9b41c937df126c37f172f06a929851431d2d65f60744a78b873eb28345b5a8626113b35806b728c7f6f7d85f53f80d4144d90cad01e7b0b27f154c269b02a838250cb9e20c53ff1292839b220d48a4565dd1b7b3dca2535eab6760989e933d903bfe6bc2cc0a5aa80ddf3ab0b6643119c869250992016b92b6270a89416dff48f0125ec5621964b49bc5fe0dca6d9039429cd245560adb9ead5ba1b4339925cfe1d8f6e33a79f1c390d1f1e7b435d065e7ca6d87e9776bbd2cdbaf86acc8c3ffb1811df1d7e8ff4cb7cf3fb9950db832b550832fc2352f608f6f6ab1904c2955fd29d0ab7018fc43f5f89a2801c3899388f959080fd3f2cac0d57cda5490b6cc0ec3eb2f54af1af8f510d41f14142cc2525d3bfd047c9c4e0b70b68387504b1bbb8fef58067c648f4ae6e9219c1fa6fae1d007be650b5de7b1910ffd97500629b2459faf38de560395c01dfcf76ab52d7c57059ac2e8d7d3aa09765747f7d26221fba014892cc27daca6750ce3f9e972a018dc38e4be170715915cf1a884a9bd53706cfed307c961ae0a2aab2660452961066ae5998d31ea016d859b1298f17ca5eaad98d178bcdab7eda0c4da784f113dc3012c945b9268c1ca87cc668c871edd4d343e958eb532acaf316ffd1e22e1b02ba99a2014a36b4c47dd33170a51521d50dbe0af5d7b2cdff037b4b53929eb26b68ac9b0f0e4e930e65579605f5733b2bdc7f88312b4eab0497358b20cc7efe6c0a7481865009e2ecec29a415bb50957586b399f1be9267d694a8d60f6b7dd46952644c6bb8aad9edb09ddd4683dbf8b4649e0d35f479a54f6b604ff53d7acf8e61f4d3521e7c69f610d5409b596506f458fe5ad2e1fc9459a7308f0983af09087f1a75830b849bb5f2abac18c5b4a865371e2ef0c850dfeedf1afe9b6c6ed965f1e6ee584b94977fb30c5adce986a351be97639999fc46e9d9093e3b7ef4e4d5c9e893b24d6684118853e5718098a0fa985ce36ee04a047fb7b3d3197a54f870257c64000216b5ab73872dcfd6713f40ff10cb484c93e304b54a8a1a84394eeef9532ea8afc288781a46a4dda090bc41d9ac543a2b374bb21cd09ae31c43ffe2045b170eecfe1c660cf1f21750b797004b17e3117b2b86d6d8858a7fa8d6a5ada872e6fcf7c7996e81adbda8a4bb5061641975cc2ff7fa638030ba15dfcc5b9e54e59b3c52a076fd1d00b95b51fe66fe41574fd5019dcd6748021693678e9aeaa4293614a7d2b3afb1efa583cb3f6807fe0f724bdc00330a581c6da67863c1a8d12d6ee4df4369e0eea8800efdf7833360f564c3c874f0994f7283062fc14c23ab6ab5e106c49cde4f5d78bb6191149ee7127b6fea2830fb6246937418ba9a3ece26a8c4df61932a3ec23c2da55f9c0f3002ace0962cf7684635fd22226c91a5ef48b9ae56fcaacb6e666419324e97f9b8867aaa765b41628467fe39deb47cec6492e20d60b753f43ee3495364fa18c325fdb3f25217c90f7cfcd3e4457bca51a9ed192d582feff4ba1a063f94caabb36bb378beafb5c6acd9cd0140376726c91e0f28740ac2f66fbb2646af991af8381ded26b68b0db51e22a82175ca505a6162c2dd9feee48ab990ec27c1f3fcf411ae3e2af4b71fb9584897ef11019fa8ca6c4a6b3af6a5ede3982552f18271282646de53635e7492d5513eadcd89bd85e52844478340227b116e901ddc6b36c5a511f64da7ed9b2e441ede670c5a6aa983b96ca586f475de23971e5f5938b12fd14ced176125bf5062353d6da88c8ec59de62e6af8853d9cba74a102e6b8d5be403d42d2439aadd683c49ca1d30e272461e25c38c8110a7cc9c669d98ec27fbf05495801d25765270ba811fcc3b85d6a4e3f99fdc60917b34c869accba6584bcb972652565b14b24953f34348a78d3b9a5168a6c1881383dd0e38eaaa1e0f3b90065724953bb56751340461952e3890d0c9324ec13b49763b21014bf823d6150a58945e458bb65bb534f1b5bd0a8a9aaac84853b12cc507e3b05f63093dc52011ce3e2068b22e1097e24524b32bdde1f7d1be21aa613d561afe61a8a0fbbe0bbc74c682949210d89c3237533755af62169ce581ae58aa13ae023c462223bc27297833bb881972780264ff4c4d7ccfa69f0febbc1f6b49fa04f1ac53c6b901fb226835af2237d75d6ec3cf7a732b804f969aaf333d918377c25e13d48137422b60b845dcc12e04205ef1059edf2396cbe7d2be21ce143ea8f65dde43f9223445caa50ec7a93e30070097283ccef26f72a9bf22c038c526c06830ba35d66c900dd722b8134d273c29ab238e1b879665dd01da3578faa0b1f4aa3f699a97e4d0c4c22fa47173e2b8d96d0bee409050df7c30a82a2733c78ab5a756d455af09b445d065ffd43dac882fd5808074677fb032b1f2c0c66115e2950b4946af1d44da6162d5a429895a3c8e394480790545016522e9a2a08082dabb72aaf4b4727725f07cfa7e95cc1f53409837802d573b1e48cded1fe66af27751b285b92f64758e520b0df421f106b4765017dc882b62915f4ea7adade3255f887457c5ad402797daa1b6fe8ab1174367b9af44839a28e1db67f6839e4b098be759cfd7fb316a3593dfb5a43534290945cc4934b8ccc10e8e242c8bbd4ffd18fbae4aa856a75c4e53767ded46fae2a38ffcb2fad866b8dfd72bfce544945ece09c612c12608af915631965a539d71f321af2b5f35d51cba74a8bccf80d2045eeca2d7b7bae6e89baa1357fa8083477ad4099b991cfc3d454f96380bc15c512f663d0d6a2b9276ba403809165601177c33c910aadbde55d4ab2a94246565d3d078af3b90799cdc5b0bbeb647e72c36de8fef6360b2befc11d0b9c44d2fc1922737f0f79a896a1d5b2f160b0e879998030e33f7a96c5a42568624c92e9e832f5cce74b1c07c84ea6d4dd41529413ff3fefbbbacaafc03ef89ad778637ade25c2af169f5f667a7564f0b549ab10bb7be818e4b591c25770111d5a2cb72c3a07e240d37799dfa71cdbd31f659dbaef4275a86bf7dc41b8127abe4ee26b02bd77e5a65ed0f867b10a8e43f9071d8a772987e2cfbccb1a1499e7a7829efb82967db1ae97f8d6f59570a62851ab68379bf020c5f83cb1386ac555b446a36183345aa07e304c3d070888c4a1c714e4b59e8997bdb8acc29f2c1f853bc1a6e8111f6b30b277332aa42c0ae1a97dacf0697481dad3d839e7b20c97b588cb3e8de7baeb6ec85e6c3b80fbc7341e235b8988bdc49c1fdb7706b02091a4f0d22d7d1709d7c2e0f5879a6c7b135a3b95bc8f3b8f8bfbe9612f52ac6c28550903676b5a9c41aaf70a5b0601d7428df05a7f51b04cd369cc328ea224da2c59e1cf973811cfd2e0f33130588809a05541ce296ec63ca55f474251301c85d032d0bd9a307bfd353b0cede842b044318024d9bedb062421be61315329321a3f1834b36130f24b0fe80d8fcd2c7e20b7f325a2ece25ed527121e733b3453b1b669886b1a574d376d8febaa92b22bae2faa9d2c2577c1315e8390495ff9b3628686475195693dfb8b7a341ed4cf232a2524f855275c11f83e9d4ba53d368805e7a23c253a950d99ca70a50153b58610965266ce3ae6862c2298bf52180dfb54c01c2d81a417af5dc0cafff0b229bfe78c35b8717382dd3871ab0f71f0355841c86e0cd4e7f2d588cc9386dd1a36fc6a21e910e467e5de2e0a3a99fd405621e1986f899caf525dd96f46d8cbac3748d6afef5b52808fb1ab5013d422abd71e3c2f18c78e51135709326236925e69085b3cb51012002e547b2d24f6b7a88812ef4ccc679d3d29a93be6d0d50090b993a77f3fdd7e6e81ec6e2318ccb3118f73ee41c54d525a092c56b767e5860d0aeb708d8988fe08d5469fbd05ebd386d47a3e28edf97f873825491704e27131c7bacde0da8f4e7f2fe057836e39e0d9eed3bd11dcb78750b9e28fb9dd35447c32cc08ac1003d79d72310dca8068d1b28c205b765a990a2fbe1ae0cca0c8fb8f1f06841971e3327669b638e58e73acb34155df6cc7f75f5994a23869341232aca451533371dbb9d551776763907bc0c4cc33942fbaa45f625f90c98cc298f638d151e915b682e516380022658f125fd26c67da7b90c178cfa789896e31096bbd184231965aae741d8ca2e2f51bd365f50ac520b035b8877d6acaa616242f41bdba6f556d4d26e6fefd767c95b30363b2b583c001610f74a67041cf5f165a0d0ba9892443838376c12045c1a60eba46b61980bba35e47233e84c27bdab9f3c4163728abce4db7a84a9d5c57078846459a63e1f9d6259de07f616ae04f80edf71d481f8bb0378fa469af8f1991c8406088dfe47272348b1e3eeab99e8da63afb93de3a50060376ce81f0ef79746cea28f542819d0a60d378aba46531a3199d586bd67b7af4651d2ebb7b8cd0d5b4d95f7924aa48f57f97165ed2eb41d80891cf765aecd9e68688df35f87bc3523c24a104242621f53348370cc585c0ed657fc4799253e4003412450b9ce00b247da2f991056a1a9fa33f9676f3156f768bf8ed9cf174f719d11a106d5b88d4d0b0116fa7df9bf7c4f6d9c6394cc6e5c37e7ebfaafb9c33af5cc38ff4581b91d3334905e429e5b84d0b11e48a18297823eca118bfbe74bd60b370574182ffff90c1719c5c2916657835daf4d1f3c94327dc88d6ff3e1b5129b393fc726bdf9e090c440f86913651510d89d9ad86064681874e4d6b6440720bfb2293f3757a66946989c1d01e1c633dff72fdf6b74a068e66de2bf0a000626789bf42a88c0be8afed0a77473f938d47bbec7de8adfb36ae0b095582352d5658f95734888fd0a5d230ea444b96b653248f90b89d50d948642b37b3b00ab84f93e875be90c2fe7b4f61022315df61c0ac07836bd9add5593f46a04fade268ad8c7b5d14e7fe5a78ffe24cbdb9d085a4b1be207c7ffe15159769b64a30f9c8b1be57ebfffe397f3c64e5de511c02c617c470d583378dd189c2ec9f062e365b7c12fb8f2f7", 0x1000, 0x9, 0xffffffffffff8001}, {&(0x7f0000001180)="afdc21c291623c0032f56bb8e83b29f1cd9e258706ef62b303b9c82fe1cc229284a6cb42b3eb463195fa90fb589e4e4745b09f347bc453bde0466fc1ff3d0531e5118c5f14510883d9ff908c9eaa0f5a7cd9b530e518ec4ac789fd299e697f57a2ea4136c4b798de417cf56bb43c4c750561d67b79cfefe6b823576b79f8ae417861f421e5e5c1d3c8e2285e6bc56ab4e22b97", 0x93, 0x7ff}, {&(0x7f0000001240)="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", 0x1000, 0x7, 0x2}, {&(0x7f0000002240)="4c04fa07dec91f9b258ead1cfabc98cf63a47ca678252bf09f9cdcdd0569f5ee7f4332c5f1a6f95e3714daff78cd98a0e95e17b53fa139381cd52f1f6257d6d897cd36fed38e07caaeab9653f8721bdcd25de9cc59cbee1231716d8d2779d576b2356d24e26f75c2dbc8d4d57d150917d4ecb3195b478b6de26550b799b6912939a1223da5c255410f103b8f1d5840400ad14ea1d5e0f013082ae558f061a0416c91b6c898c048a3c84b429d47e9a77ac1c32e466b36b574fbae4a227b27f2ec7aeff5afa484fea10f87198d716ddfa822503cf66609f3", 0xd7, 0x100000001, 0x100000001}, {&(0x7f0000002340)="8d4be4742e6a91bf6d1e67858aabd848b9b74a63bed2e0b382f8807143b56aa1b7bfc696d3826f894c056ba1e03763d613c3ba0ed4dd87866640c7b20be5358c1a2e24ac1b47b4ba106fc54c1321436c3949f1b4ab4af7cad4a6a447d421697dacf310879fbb1dd6379d3da54e0af3708d56e853bebb51e144592cd5759185557622d7bbc875197c4953051d182720cd8194c206193a721156e2654da8c9dc6a544a2a418070ccc88ce89e30fbf2e18feaa3f4062710c8517cb62f0c5f9e7f60abdf41", 0xc3, 0x3, 0x196dc326}, {&(0x7f0000002440)="6f548fe9ce9c5fb2ba0b5fe5a00cf067b4a54f5a8707c2d4ffc1214adb087b1e0add312c435b56f6f5afe5410bec79572971b89f07fda16377e094d95667de69f02d9d166093187218beefcbe89083004d329c52fd4532261d87e98637659466f3f5dd962292848989ee1e75203f91d38cd80c816e11ffc576e01ae55c003d6f9a5f6361ff8ff41ae359b41f58ca8cc6dbefb64923a37c1a14e8f8aa6291b19670414d4fb531ae83a137ac2cd3130bb2e49570b977e9b1a7fda87bedb7b14615beb498cdde0e6ac99638e309ce192bb8a99c0592070ab13f407d02e86a16a37120", 0xe1, 0x800, 0x40}, {&(0x7f0000002540)="4e8a5a2082e42d4e1319d9b86a6e73dd50afd41ecbc8a98ee66aff7326ea01d9aa442a0cfed7b3339f6e24ba2c2b7ad2cc045ce8111930fb7622fec70d304a8a2f466d4e84849c61c74450bb22fc0082810fc9a901a83f0ef42da82c9a9f0aa6b432cbe5ff080dda3647045a019e047eaf97541879f031ad1612368d0a3607a3ed0c834e04023ba6dac6e5857f13da5b6a7d10fecf776f6d", 0x98, 0x100000001, 0x100000001}, {&(0x7f0000002600)="5b9f6e058d671181d7299ac296fda59bfd8c579d634b1950782d44c3bcd901361a25826f0f02e7d7c6c1b973f73fde2a7859098eb07ad2e06ac1dafb4d87ef7d3016aa59267607631d6c54e6fc5ddbb15587149e6b661709b3f8c0157eb9ff40dfca04df223e0e3f41ec0d46ac01c63d592488ab5f0ee0904a991825ee9b151bafacfe922040a87fc3dfc47e9c1d54ba1881483701258175a4144c7429b19d02cf2c7115e056f7d43e91575636", 0xad, 0x420000000, 0x1699}], 0x160000) syz_emit_ethernet(0x2e, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000440)={0x9}) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000002800)) 00:12:01 executing program 2: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c96b3408861a2d7580a6370d3b0109021b0001000000000904010001fb8aea000705071b0000000000"], 0x0) 00:12:01 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="01800000aaaaaaaa25264c736000000000183a00021000000f0000000000000400000000ff02000000000000000000000000000183009078000000000000000000e6f046e8fe380400000076"], 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x4f, 0x8) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x4]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40020900}, 0x1) 00:12:01 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x4, @tick=0x6, 0x2, {0x40, 0x8}, 0x4, 0x4, 0x6}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)="47485d9091dd7721920022758f9db188e854f75520adaad70e222e385aeb0eff5f9d187981b21a", 0x27) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xbf7f, 0x11, 0x0, 0x27) 00:12:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa9078ac14140bac1414aa860a9078000300000000000000000001000004009ee880129e61f26234ac7965c7473f6f3b35f28ce13906e169d7a82a93ac1820a73c3b9f5d798c2593b46d1800c66db18af1e8537943028201377efb6690f200224bc3a13b29d0ac4200a53f06ba6f1e9ab97399b69bddbf55b148b3850cff9158711335861bd2948af2d5b1d64126174f36493410c0a1bf42fe"], 0x0) 00:12:01 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000525d6f404f17316a70300000000109021200010000000009041c0000f026c30051f7bf13deb7e7e3591a73808a78a9b66534a87c9cf3462a457a3e7c587157932af3fbca1730a27c2a799088e3dca88d19b2c74e34b62f724b3964626a0f89aa5eb4eea1165ce25450e9ab126dcb1c50b8f8f211783a1572e9119a054ac7a0d3d70d92de73dc590cee32e7352b7a72919e67ad7f87fb24134bb85ee956cbb4995dc0ddad1c93f09bd59ff823b88b34640abbe943f807b6421c0a1d3686dbea5aa1bdf81ca72e6454"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') syz_usb_control_io(r0, 0x0, 0x0) 00:12:01 executing program 3: r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x68, 0x8a, 0x49, 0x8, 0x6cb, 0x2, 0x41e5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfe, 0x1, 0x2, 0x19, 0x4b, 0xb7, 0x0, [], [{{0x9, 0x5, 0xc}}, {{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x18c, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) 00:12:01 executing program 0: socket$netlink(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r0, 0x1}, 0x14}}, 0x0) [ 396.600059][T12197] usb 3-1: new full-speed USB device number 11 using dummy_hcd 00:12:01 executing program 0: syz_usb_connect$hid(0x0, 0x304, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010ac055a0240000000000109022400715fea8abcd1b5ef00d35c7bb50100000000090400000003010200092100000001220000090581030000000000"], 0x0) 00:12:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x100, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0)=@rc={0x1f, {0x9, 0x8, 0x0, 0x7f, 0x3, 0x81}, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000540)="12b0570b9c18f19c6e37b478e1de0267381cfbda86981709c4e02e83c9d4c63d", 0x20}, {&(0x7f0000000580)="aee19f5287c6575bfa3dadd181b46c2f800222a1b74c33c8649e94dd96d4a52a3213f1d3a7cdeb04e1f1e22cff99c71d73479ccce69c928d380c40a6f6f592db916ddc72043929e0a4ae9576bdfd959b02aee9e1c17e2bb13ed2459042a6fbb701b8b9081c394da7368bdd09f5847c75655269f01201cd90b3fc49194c479d1b16", 0x81}, {&(0x7f0000000640)="6bd542942b76c54a8df3ce46c57bdf04d625af86573fb9c22897f7eacc6ea397391e4981ff050d8e584b48b0081fd817821637615e9a57953903207c901b70199dc3d1bf3729b1b264251346b1388b80dc4b8959446a176f45168f1fc0d262706007f59cd68375299d52da2d0df8bd054e0d9e6a03235028d0557b5ae66b291bc5dc7686339fc4a16a70150d4b9577b9392e7795003834f5335acf010026f61961b17bc43d972784c53b16678c222947b41015b95aa8", 0xb6}, {&(0x7f0000000700)="2ef9f253cf27b9fa884fb123219266c7a8a5614696abe514c8f693a47ee0236f5df1bde60daf7a2c2630c2461929e1ab2704c1221175f9d84d317c1395a6dffa62d2e2d93646d17ca232ef0ddb4f749ba3b8f614ac01fc45d0683c429b", 0x5d}, {&(0x7f0000000780)="f05fbc47dde64f442daeca84f11a28940d0e4489edae6fa44a845e1aa1d59a6e6618aea9", 0x24}], 0x5, 0x0, 0x318}, 0x500010c6) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100736974000c000200080003004b0a01904b65b19795da569c1ae45dc56b10bc40cf31f72e6b5f1b01f06d27532b81567158f8962df868abe3bc89081583cd27c0f70bfd391200f1bf4723c47ba64f9cb91ba5e27ab2e1a7127e746f3c0692f1dc9da5459776922203a514c5b5ec00"/136, @ANYRES32=r6], 0x38}}, 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000000880)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r5, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x8, 0x2}, 0x0, 0x0, &(0x7f00000002c0)={0x3, 0x2, 0x9, 0x73c93f86}, &(0x7f0000000300)=0x10000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0xd3}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={r7}, 0xc) prctl$PR_CAPBSET_READ(0x17, 0xa) [ 396.972504][ T2931] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 397.062461][T12197] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.070670][T12197] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.081360][T12197] usb 3-1: config 0 has no interface number 0 [ 397.087647][T12197] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 397.102177][ T17] usb 4-1: new high-speed USB device number 9 using dummy_hcd 00:12:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair(0x1, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x78) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}], 0x10) [ 397.223155][ T40] usb 1-1: new high-speed USB device number 16 using dummy_hcd 00:12:02 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x9, 0x8, 0x32, 0xf83e, r7}, &(0x7f0000000180)=0x10) r8 = accept4(r3, 0x0, 0x0, 0x0) close(r8) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r9, 0xc040565e, &(0x7f0000000440)={0x9}) ioctl$VIDIOC_G_ENC_INDEX(r9, 0x8818564c, &(0x7f00000002c0)) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = dup2(r11, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r12, 0xc0a85352, &(0x7f0000000000)={{0x3, 0x7}, 'port0\x00', 0x80, 0x800, 0xf85e, 0x567, 0x4, 0xf94, 0x8, 0x0, 0x5, 0x2}) [ 397.325200][T12197] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=a6.80 [ 397.334519][T12197] usb 3-1: New USB device strings: Mfr=55, Product=13, SerialNumber=59 [ 397.343091][T12197] usb 3-1: Product: syz [ 397.347339][T12197] usb 3-1: Manufacturer: syz [ 397.352079][T12197] usb 3-1: SerialNumber: syz [ 397.358108][ T2931] usb 5-1: config 0 has an invalid interface number: 28 but max is 0 [ 397.366502][ T2931] usb 5-1: config 0 has no interface number 0 [ 397.372019][ T17] usb 4-1: Using ep0 maxpacket: 16 [ 397.372865][ T2931] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=30.70 [ 397.387040][ T2931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.404528][T12197] usb 3-1: config 0 descriptor?? [ 397.414914][ T2931] usb 5-1: config 0 descriptor?? [ 397.458315][ T2931] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 397.482302][ T40] usb 1-1: Using ep0 maxpacket: 16 [ 397.514320][ T17] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 397.522876][ T17] usb 4-1: config 0 has no interface number 0 [ 397.529106][ T17] usb 4-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 397.538425][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.632316][ T40] usb 1-1: config 95 has too many interfaces: 113, using maximum allowed: 32 [ 397.641299][ T40] usb 1-1: config 95 has an invalid descriptor of length 209, skipping remainder of the config [ 397.651967][ T40] usb 1-1: config 95 has 0 interfaces, different from the descriptor's value: 113 [ 397.661345][ T40] usb 1-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 397.670484][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.680884][T12197] usb 3-1: USB disconnect, device number 11 [ 397.714739][ T17] usb 4-1: config 0 descriptor?? [ 398.032800][ T40] usb 1-1: string descriptor 0 read error: -71 [ 398.054098][ T40] usb 1-1: USB disconnect, device number 16 00:12:03 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+'}, 0x28, 0x5) ioctl(r1, 0x2, &(0x7f0000000000)="9fed0f8f9e09f59e979666376de051bdff7d41f95636ec9d309c29bec1afe212a4c27f7b66bf99b72f611554864efce813c89b7d") r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e) [ 398.192808][T12829] IPVS: ftp: loaded support on port[0] = 21 [ 398.212201][ T17] smscufx: Failed to read register index 0x00003004 [ 398.218873][ T17] smscufx: error -71 reading 0x3004 register from device [ 398.219832][ T17] smscufx: probe of 4-1:0.122 failed with error -71 [ 398.273423][ T17] usb 4-1: USB disconnect, device number 9 [ 398.542272][T12100] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 398.562165][ T2931] gspca_stk1135: reg_w 0x7 err -71 [ 398.568488][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 398.575092][ T2931] gspca_stk1135: Sensor write failed [ 398.580558][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 398.587058][ T2931] gspca_stk1135: Sensor write failed [ 398.592503][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 398.598869][ T2931] gspca_stk1135: Sensor read failed [ 398.604342][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 398.610700][ T2931] gspca_stk1135: Sensor read failed [ 398.616042][ T2931] gspca_stk1135: Detected sensor type unknown (0x0) [ 398.622835][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 398.629201][ T2931] gspca_stk1135: Sensor read failed [ 398.634630][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 398.640999][ T2931] gspca_stk1135: Sensor read failed [ 398.646419][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 398.652879][ T2931] gspca_stk1135: Sensor write failed [ 398.658251][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 398.664872][ T2931] gspca_stk1135: Sensor write failed [ 398.670431][ T2931] stk1135: probe of 5-1:0.28 failed with error -71 [ 398.681029][ T2931] usb 5-1: USB disconnect, device number 10 [ 398.782279][ T40] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 398.972177][T12100] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 398.980330][T12100] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.990680][T12100] usb 3-1: config 0 has no interface number 0 [ 398.997012][T12100] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 399.008486][ T17] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 399.072170][ T40] usb 1-1: Using ep0 maxpacket: 16 [ 399.172554][T12100] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=a6.80 [ 399.181700][T12100] usb 3-1: New USB device strings: Mfr=55, Product=13, SerialNumber=59 [ 399.190218][T12100] usb 3-1: Product: syz [ 399.194686][T12100] usb 3-1: Manufacturer: syz [ 399.199384][T12100] usb 3-1: SerialNumber: syz [ 399.205250][ T40] usb 1-1: config 95 has too many interfaces: 113, using maximum allowed: 32 [ 399.214235][ T40] usb 1-1: config 95 has an invalid descriptor of length 209, skipping remainder of the config [ 399.225428][ T40] usb 1-1: config 95 has 0 interfaces, different from the descriptor's value: 113 [ 399.234785][ T40] usb 1-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 399.243942][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.255655][T12100] usb 3-1: config 0 descriptor?? [ 399.303033][ T17] usb 4-1: Using ep0 maxpacket: 16 00:12:04 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008b3f2440b10e0770000009045a8b45152061860ffa9c0100001dcbfd0057c76b47575f54b389389fea55"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair(0x10, 0xa, 0x6f, &(0x7f0000000540)) syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x3, 0x20000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_pts(r0, 0x2002) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000001edffffff435a66c07e5434270000100001000c00010005008a5300000000"], 0x24}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x400f, 0x4) 00:12:04 executing program 1: clone(0x40000000, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d0400b4f4d4f600000300000022") r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000340)={0x7, 0x0, 0x8, {0x77359400}, 0x1000, 0x80000001}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$PPPIOCSDEBUG(r5, 0x40047440, 0xfffffffffffffffe) ioctl$PPPIOCDISCONN(r5, 0x7439) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x402000, 0x0) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) read$rfkill(r6, &(0x7f0000000000), 0x3) ioctl$int_in(r6, 0x800000c0045009, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000240)=ANY=[], &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000280)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r10 = socket(0xa, 0x80005, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000002a0cd25bcfbeffdad86653430acdc379c52205e299c74eed93000000002e84ad51e3a6c87175f1b1b7231819295d434ea92e8ce3bf89c57ade00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000000)={r12}, 0x8) [ 399.324961][ T2931] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 399.342787][T12100] usb 3-1: can't set config #0, error -71 [ 399.370173][T12100] usb 3-1: USB disconnect, device number 12 [ 399.427155][T12834] IPVS: ftp: loaded support on port[0] = 21 [ 399.442505][ T17] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 399.450817][ T17] usb 4-1: config 0 has no interface number 0 [ 399.457171][ T17] usb 4-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 399.466397][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.477791][ T17] usb 4-1: config 0 descriptor?? [ 399.542360][ T40] usb 1-1: string descriptor 0 read error: -71 [ 399.564287][ T40] usb 1-1: USB disconnect, device number 17 [ 399.724132][ T2931] usb 5-1: config 0 has an invalid interface number: 28 but max is 0 [ 399.732791][ T2931] usb 5-1: config 0 has no interface number 0 [ 399.739027][ T2931] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=30.70 [ 399.748287][ T2931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.763290][ T17] smscufx: Failed to read register index 0x00003000 00:12:04 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000002060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x4c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f00000000c0)=0x6, 0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x210002, 0x0) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f0000000080)={0x2, 0x2, 0x1}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000100)) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f00000001c0)={0x8, 'syz0\x00'}) r6 = dup2(r3, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 399.769951][ T17] smscufx: error -71 reading 0x3000 register from device [ 399.770847][ T17] smscufx: probe of 4-1:0.122 failed with error -71 [ 399.837417][ T2931] usb 5-1: config 0 descriptor?? 00:12:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001680)={&(0x7f0000000140)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="bb", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000ac008400000000000000029ae49ddfc41efded000000000000000472e3bd4c0f5a8e631fbfda66a3f0d11c31f5aaa6737755460dc1ba1fc8dd2600"/78], 0x18}, 0x60) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) [ 399.861593][ T17] usb 4-1: USB disconnect, device number 10 [ 399.869796][T12100] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 399.889768][ T2931] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 400.026282][T12852] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 400.134880][ T2931] gspca_stk1135: reg_w 0x2 err -71 [ 400.141195][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 400.147737][ T2931] gspca_stk1135: Sensor write failed [ 400.153275][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 400.159633][ T2931] gspca_stk1135: Sensor write failed [ 400.165120][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 400.171480][ T2931] gspca_stk1135: Sensor read failed [ 400.176924][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 400.182269][T12100] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 400.183352][ T2931] gspca_stk1135: Sensor read failed [ 400.196474][ T2931] gspca_stk1135: Detected sensor type unknown (0x0) [ 400.203339][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 400.209700][ T2931] gspca_stk1135: Sensor read failed [ 400.215112][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 400.221746][ T2931] gspca_stk1135: Sensor read failed [ 400.227145][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 400.233605][ T2931] gspca_stk1135: Sensor write failed [ 400.238985][ T2931] gspca_stk1135: serial bus timeout: status=0x00 [ 400.245450][ T2931] gspca_stk1135: Sensor write failed [ 400.250944][ T2931] stk1135: probe of 5-1:0.28 failed with error -71 00:12:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00') fcntl$setown(r2, 0x8, r1) r3 = getpid() fcntl$setown(r2, 0x8, r3) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x14b2, 0x1, 0x4, 0xe2}, 0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x7fffffff, 0x4) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/156, 0x9c}, {&(0x7f00000002c0)=""/233, 0xe9}], 0x2, &(0x7f00000004c0)=""/80, 0x50}, 0x10040) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000440)={0xfffffe00, 0x8, 0x401, 0x9}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 400.315523][T12100] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 400.323513][T12100] usb 3-1: can't read configurations, error -61 00:12:05 executing program 0: move_pages(0x0, 0x20000000000001d5, &(0x7f0000e2afe0), &(0x7f0000000080)=[0x44a4], 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x5, 0x30, 0x72e4, 0x7f, 0x3e, 0x4, &(0x7f0000000000)="9705fa8cdefebd35c16d5f3a82ba658c5e1120ffc09495b13b2a07b77c9f2623af221684d66488ff570de3ced243638cfb4af9a3f98c53127d7008fbfdae"}) [ 400.512003][T12100] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 400.539756][ T2931] usb 5-1: USB disconnect, device number 11 00:12:05 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e60, 0x0, @rand_addr="005e00000200"}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x20, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) [ 400.812556][T12100] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 400.952251][T12100] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 400.960284][T12100] usb 3-1: can't read configurations, error -61 [ 400.987928][T12100] usb usb3-port1: attempt power cycle 00:12:06 executing program 4: setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.syz\x00', &(0x7f0000000180)=')systemwlan0em1\x00', 0x10, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000140)=0x2, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@dev]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2000, &(0x7f0000000000)={0x2, 0x0, @local}, 0x710000) 00:12:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r3 = accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c, 0x400) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f00000001c0)={'TPROXY\x00'}, &(0x7f0000000200)=0x1e) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 00:12:06 executing program 0: setrlimit(0x2, &(0x7f0000000040)={0x80000000, 0x100000000000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x101}, 0x68) r0 = socket(0x10, 0xa, 0x1) write(r0, &(0x7f0000000480)="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", 0xfc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) bind(r0, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x0, 0x2, {0xa, 0x4e20, 0xfffffffd, @local, 0x7080198f}}}, 0x80) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000300)=""/119, &(0x7f0000000100)=0x77) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) 00:12:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000180)={0x0, &(0x7f0000000080)="d6deb9ac810aecda2091c39a0fa0bc44787451ecb65910b7aae84fa17c0d4f469496e41c5139719a5cc8961377fb5842e5ed77ba9dd037025601e8d8b710c4e988c1a369ca4095b8b29ab536fc59785d4f5325667cba9d33f53dbb801d34d81e3dc66b0f7e92875274fa37d696e1629f1ba0b4febe863a414f1ffed94e7de0fb43cee2f5dfa399fdaa8d597ffcad85dcb54f6029a3f4f60468188109830a47a0a38f95b8f5e030dc3ea4e18e46ac2bfac7da83237e63b2949aaab637bcd4c13ff539febd2d2affe0e7adb726b7e4d009f56effe0788dad4a269467cd501688db4efa379f07726c86d09780c2"}) r4 = socket$inet(0x10, 0x3, 0x6) sendmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000340001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:12:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCSETXW(r6, 0x5435, &(0x7f0000000040)={0x0, 0x7f, [0x8000, 0x2, 0x6, 0x8, 0x1], 0x20}) r7 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 401.316721][T12888] IPVS: length: 119 != 24 [ 401.364823][T12894] IPVS: length: 119 != 24 [ 401.722187][T12100] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 402.015653][T12100] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 402.144151][T12100] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 402.152111][T12100] usb 3-1: can't read configurations, error -61 [ 402.322000][T12100] usb 3-1: new high-speed USB device number 16 using dummy_hcd 00:12:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x100000000000019, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e23}, 0x1c) getsockopt$sock_int(r2, 0x1, 0x4, 0x0, &(0x7f0000000440)) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x39}, 0x80000000002100) 00:12:07 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r0, 0x1000, 0x4f}, 0x0, &(0x7f00000002c0)="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", &(0x7f0000000100)=""/79) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) close(r2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp={0x0, 0x0, 0x32315241}}) 00:12:07 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000002f00)={{0x12, 0x1, 0x0, 0x45, 0x6f, 0xea, 0x20, 0xd81, 0x1910, 0x3a67, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd1, 0x9e, 0x42}}]}}]}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x56e73f72c346b3aa) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x82, &(0x7f0000000000)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r3, 0x9}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r4, 0xca, "0f694e57929897521515d99139ea0f6c9e5dd33e687ba6d29c39d5cbdbe70017032ec3d1742e0bd5ea9ed5db3542ff4b245c09a7ce17fdf7ae0219f82c00d214adcb847c2b963a5e788bf84f1724927b2883b91f24f2552b8c37fae6ed6c9900218ebb3d89ab217b984961986e18a9ad9a8c95afa63483fbb114a48d7d3da3eebabf23c226c22d76ffe192a56c83062dd12aec23d38976b6d5517b2f8cdf95506e5b7b04879e5a8991bb23876f2914d1c05ee719a78bf7f324e95ce90422e4a2df398d7716f7fe68b21d"}, &(0x7f0000000180)=0xd2) 00:12:07 executing program 0: syz_usb_connect(0x2, 0x318, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100006a5395403d1bf40168bf00000008000000000100040024d808fcb8c189348e82dc260009049d00010a42cc000705830d0000000000bd0b6fd4b932c80e6f2833c66b672a1915ddf667403299d76092ff049b2e9a16341830e8128f6f45dd1f2b59f5313fa64927260ff27513981484"], 0x0) 00:12:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) move_pages(0x0, 0x5, &(0x7f0000000000)=[&(0x7f0000001000/0x4000)=nil, &(0x7f000000d000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x0, r2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x2, 0x8, 0x2, 0x9, 0x0, 0x4, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x3, @perf_bp={&(0x7f0000000040), 0x2}, 0x200, 0x7fff, 0x8, 0x7, 0xff, 0xfffffffa, 0x400}, r2, 0xe, r5, 0x2) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfd77e4ef05f7e1, 0x0, 0x0, 0x35a) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="530861b124826e6fa61bb2d3fcf9134cd4c46cdeb32415cab16f", 0x1a}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffff6) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 402.652274][T12100] usb 3-1: device descriptor read/all, error -71 [ 402.668826][T12100] usb usb3-port1: unable to enumerate USB device 00:12:07 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x400100000001, 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r0, 0x28007d) sendfile(r0, r0, 0x0, 0x2008000fffffffe) [ 402.696246][T12909] kvm: emulating exchange as write 00:12:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x11) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x7, &(0x7f0000000080)=[{0x0, 0xff, 0x2, 0xfffffffc}, {0x0, 0xe, 0x0, 0x3}, {0xd7, 0xf9, 0x0, 0xff}, {0x401, 0xb3, 0x0, 0x10000}, {0x0, 0x7, 0x3f, 0x7ff}, {0x0, 0x80, 0xfc, 0x7}, {0x0, 0x8, 0x5, 0xfffffff9}]}) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x82630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) [ 402.874079][ T17] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 402.883635][T12026] usb 1-1: new full-speed USB device number 18 using dummy_hcd 00:12:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x100000006) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f00000000c0)=ANY=[@ANYBLOB="0d00000000000000fddf74000000000001"]}) 00:12:08 executing program 4: clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') sendfile(r0, r1, &(0x7f0000000100)=0x8000004, 0xe0) 00:12:08 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000400)={0x80, 0x0, 0x4}) 00:12:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={' \x00', 0x8602}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000880)='memory.stat\x00', 0x2761, 0x0) [ 403.125208][ T17] usb 4-1: Using ep0 maxpacket: 32 00:12:08 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="12f1dd75a4ef91501e5a37f6e4b2afe260738205a09bc19d617e83f1eddbdcc9ae83f3506c593627c9c426827d13805425cda3233739c7d0eb7ef4bad52f3125d71503d6840a5e12ef5c48e019fbf8e6828f1da0832f077fdfceae58ad9b8cd8572b28fdbe255a9acbb8bce396aeeacd151a74cffe71911b06f14471a0ce27d0c8216c179e24a179723c6b258bda36580c75d45bd42387fbb4fde22be794179fc2f7d60f3af3ddb0cd", 0xa9}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000180)={{0x0, 0x0, @reserved="bdfc9bc11467bdf00764620515bf9c114f8958207417b4cea35ba08e360abf41"}}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000001500)="0800b5055e0bcfe87b0071") setgroups(0x54b, &(0x7f0000000180)) pread64(r0, 0x0, 0x0, 0x0) [ 403.264312][ T17] usb 4-1: New USB device found, idVendor=0d81, idProduct=1910, bcdDevice=3a.67 [ 403.273755][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.291769][ T17] usb 4-1: config 0 descriptor?? [ 403.292320][T12026] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 403.304695][T12026] usb 1-1: can't read configurations, error -61 00:12:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x30, 0x0) r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r1, r0, 0x0, 0x40801001) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x2) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') socket$inet_udplite(0x2, 0x2, 0x88) stat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0xfff) [ 403.362860][ T17] pwc: Visionite VCS-UM100 USB webcam detected. [ 403.462258][T12026] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 403.562310][ T17] pwc: recv_control_msg error -71 req 06 val 3700 [ 403.582164][ T17] pwc: Failed to set LED on/off time (-71) [ 403.602183][ T17] pwc: send_video_command error -71 [ 403.607547][ T17] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 403.615354][ T17] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 403.687933][ T17] usb 4-1: USB disconnect, device number 11 [ 403.872415][T12026] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 403.880303][T12026] usb 1-1: can't read configurations, error -61 [ 403.890831][T12026] usb usb1-port1: attempt power cycle [ 404.322163][ T2931] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 404.563883][ T2931] usb 4-1: Using ep0 maxpacket: 32 [ 404.604246][T12026] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 404.684429][ T2931] usb 4-1: New USB device found, idVendor=0d81, idProduct=1910, bcdDevice=3a.67 [ 404.693719][ T2931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.705510][ T2931] usb 4-1: config 0 descriptor?? [ 404.748821][ T2931] pwc: Visionite VCS-UM100 USB webcam detected. [ 404.862336][T12026] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 404.870113][T12026] usb 1-1: can't read configurations, error -61 [ 404.952188][ T2931] pwc: recv_control_msg error -71 req 06 val 3700 [ 404.972504][ T2931] pwc: Failed to set LED on/off time (-71) [ 404.992199][ T2931] pwc: send_video_command error -71 [ 404.997530][ T2931] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 405.005386][ T2931] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 405.022061][T12026] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 405.032699][ T2931] usb 4-1: USB disconnect, device number 12 [ 405.272135][T12026] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 405.280090][T12026] usb 1-1: can't read configurations, error -61 [ 405.288071][T12026] usb usb1-port1: unable to enumerate USB device 00:12:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x38}}, 0x0) 00:12:10 executing program 4: gettid() tkill(0x0, 0x3c) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syncfs(0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r1, 0x28007d) sendfile(r1, r1, 0x0, 0x2008000fffffffe) 00:12:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3f) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4, 0xfa}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 00:12:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000880)='memory.stat\x00', 0x2761, 0x0) 00:12:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x159, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000000000806201801400000000001090224000100000000090400000903010000092100000001220600090581030000000000b8fda40d7715fb258480de1f4f87c50632faf615757fa62ddd56f57426cd120e1f7e36499479291d79502e94c221191925d680e92cda1114bf0c3ad21e42be6ad4a557307ab1eda4fd2282cf66237a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="61cdb152000ae3d73178e741310500a7df0000dc04"], 0x0}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0xfffffffffffffffa, 0x0, 0x2, 0xffffffff}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000080)={0x9, r4, 0x0, 0xbd7}) 00:12:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/fscreate\x00') pwritev(r0, &(0x7f0000000180), 0x3c7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 00:12:10 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000540), 0x1000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = socket$inet6(0xa, 0x800000000000002, 0x0) dup3(r2, r0, 0x0) 00:12:10 executing program 1: connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe38) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x0, 0x0) 00:12:10 executing program 3: socket$inet(0x2, 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, 0x0) syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f00000001c0)={0x7, 0x1, 0xff}) 00:12:10 executing program 0: socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000002c40)={0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x0, 0x0) [ 405.905188][ T2931] usb 6-1: new high-speed USB device number 11 using dummy_hcd 00:12:11 executing program 4: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x2e8, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x7ffffffe}) [ 406.123717][T13029] binder: 13028:13029 ioctl c0306201 20000140 returned -14 [ 406.143495][T13029] binder: 13028:13029 ioctl c018620c 200000c0 returned -22 [ 406.165156][T13029] binder: 13028:13029 ioctl c0306201 20000140 returned -14 00:12:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200036154, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 406.165179][T13030] binder: 13028:13030 ioctl c018620c 200000c0 returned -22 [ 406.180374][ T2931] usb 6-1: Using ep0 maxpacket: 8 00:12:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001900)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0xfffffece) syz_open_procfs(0x0, 0x0) close(r0) 00:12:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r1, &(0x7f0000000100)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)) 00:12:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) [ 406.322674][ T2931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.334135][ T2931] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 406.347118][ T2931] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.40 [ 406.356418][ T2931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:12:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00') sendfile(r0, r1, &(0x7f0000000100)=0x10, 0xe0) 00:12:11 executing program 1: vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r0, 0x28007d) sendfile(r0, r0, 0x0, 0x2008000fffffffe) [ 406.550512][ T2931] usb 6-1: config 0 descriptor?? [ 407.102320][ T2931] usbhid 6-1:0.0: can't add hid device: -71 [ 407.108766][ T2931] usbhid: probe of 6-1:0.0 failed with error -71 [ 407.118036][ T2931] usb 6-1: USB disconnect, device number 11 [ 407.792018][ T17] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 408.052037][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 408.192247][ T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.203357][ T17] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 408.216431][ T17] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.40 [ 408.225590][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.235259][ T17] usb 6-1: config 0 descriptor?? 00:12:13 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) 00:12:13 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x40810) 00:12:13 executing program 3: bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, 0x0) syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 00:12:13 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="2b7069647320412c5ec7b5d90762f8ba9fe8ee7e083311af7cb115b708409b4e9206cb06735d6d1ff4ad468b64ac46bb6f6aee300fb8e7572bcd829a59c00400000000000000c8818253da71fa1b6b4ed383c004ca276a756a0e6e7c9bda4107b37664c98904cb9639bf4b91d78f4ce4035762ba803bb0aa07717d543e909d253ce3ef52d352ed9e0518d43a170ea8f70daf282682ea5e5a295e9d66f169f0dcd24a3d11c633af74dd3ac2ac46fd62ad075e989e5ab6f14a1d6e8f0d35ea51e18be5672af0b7f39f748ebddb0694fc063c33ad9848bd"], 0x6) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'pids'}]}, 0x6) 00:12:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x9}, 0xc) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x6, &(0x7f0000000080)=[{0x1, 0xff, 0x2, 0xfffffffc}, {0x6, 0xe}, {0xfff, 0xd7}, {0x6, 0x80, 0xfc}, {0x0, 0x8, 0x5, 0xfffffff9}, {0x0, 0x1f, 0x2, 0x7fffffff}]}) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x82630, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) 00:12:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7fdd7b8b07960f21847650ca0000806037d6aa597000e96c8951329a04f91e12f19a01e5e354740000aabce725c2812c0811b9232c555c07e8c00a53da00e227110f766c84bdc8544fdedd87a56159ca140d0e50720a31c0f63c6943e66232ed48a48e70b7bcec35e8edc9ea7bc86ec49c8c1dd755c7b6ba347f2fce04972391308f240ff2c13747fd4e2650f2d042bdb31d44267137265180a8a074de45e262172729e7580032292109e61cfe14929e9ce6e2060a1abc84c52bd9227c28e97a3f5f89d61cb57988881c8face223ed291fd373c47b6afd41dc0ec3e6d0d8127840956abb3cf9e7f6ae7f18bfb36641fbc8e7197f126d3adf081ba1387408fd42a53a1492b9d237"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) [ 408.602249][ T17] usbhid 6-1:0.0: can't add hid device: -71 [ 408.608494][ T17] usbhid: probe of 6-1:0.0 failed with error -71 [ 408.617608][ T17] usb 6-1: USB disconnect, device number 12 00:12:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/fscreate\x00') pwritev(r0, &(0x7f0000000180), 0x3c7, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 00:12:13 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fsetxattr(r2, &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x20, 0x0) fremovexattr(r2, &(0x7f0000000040)=@known='user.syz\x00') 00:12:13 executing program 0: 00:12:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="d5523b13f90000c97b0071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newsa={0x15c, 0x10, 0x40d, 0x0, 0x0, {{@in=@dev, @in6=@rand_addr="53ac9fe54f55edf45596dbdd8f96b25d"}, {@in=@empty, 0x0, 0x6c}, @in6=@rand_addr="71de24093ea2fb44b8254b10b201f9f3", {}, {}, {}, 0x0, 0x0, 0xa}, [@lifetime_val={0x24}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}}, 0x0) 00:12:14 executing program 1: fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xfff) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="2b7069647320412c5ec7b5d90762f8ba9fe8ee7e083311af7cb115b708409b4e9206cb06735d6d1ff4ad468b64ac46bb6f6aee300fb8e7572bcd829a59c00400000000000000c8818253da71fa1b6b4ed383c004ca276a756a0e6e7c9bda4107b37664c98904cb9639bf4b91d78f4ce4035762ba803bb0aa07717d543e909d253ce3ef52d352ed9e0518d43a170ea8f70daf282682ea5e5a295e9d66f169f0dcd24a3d11c633af74dd3ac2ac46fd62ad075e989e5ab6f14a1d6e8f0d35ea51e18be5672af0b7f39f748ebddb0694fc06"], 0xd0) dup(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in=@loopback}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) pipe(&(0x7f0000000640)) syz_open_dev$vcsn(0x0, 0x0, 0x400000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001ec0)='/proc/self/net/pfkey\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000001c0)) accept4(0xffffffffffffffff, 0x0, &(0x7f0000001f00), 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) 00:12:14 executing program 0: r0 = timerfd_create(0x0, 0x0) fcntl$lock(r0, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0xfff) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="2b7069647320412c5ec7b5d90762f8ba9fe8ee7e083311af7cb115b708409b4e9206cb06735d6d1ff4ad468b64ac46bb6f6aee300fb8e7572bcd829a59c00400000000000000c8818253da71fa1b6b4ed383c004ca276a756a0e6e7c9bda4107b37664c98904cb9639bf4b91d78f4ce4035762ba803bb0aa07717d543e909d253ce3ef52d352ed9e0518d43a170ea8f70daf282682ea5e5a295e9d66f169f0dcd24a3d11c633af74dd3ac2ac46fd62ad075e989e5ab6f14a1d6e8f0d35ea51e18be5672af0b7f39f748ebddb0694fc063c33ad9848bd"], 0x6) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000640)) io_setup(0x1, &(0x7f00000001c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@multicast2, @in=@empty}}, {{@in=@initdev}, 0x0, @in=@remote}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) semget(0x0, 0x3, 0x0) 00:12:14 executing program 5: 00:12:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) 00:12:14 executing program 3: 00:12:14 executing program 5: 00:12:14 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:14 executing program 1: 00:12:14 executing program 3: 00:12:14 executing program 0: 00:12:14 executing program 5: 00:12:14 executing program 1: 00:12:15 executing program 3: 00:12:15 executing program 0: 00:12:15 executing program 5: 00:12:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) 00:12:15 executing program 1: 00:12:15 executing program 0: 00:12:15 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:15 executing program 3: 00:12:15 executing program 5: 00:12:15 executing program 1: 00:12:15 executing program 0: 00:12:15 executing program 3: 00:12:15 executing program 0: 00:12:15 executing program 5: 00:12:15 executing program 1: 00:12:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) 00:12:16 executing program 3: 00:12:16 executing program 5: 00:12:16 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:16 executing program 0: 00:12:16 executing program 1: 00:12:16 executing program 3: 00:12:16 executing program 0: 00:12:16 executing program 5: 00:12:16 executing program 1: 00:12:16 executing program 3: 00:12:16 executing program 0: 00:12:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:16 executing program 5: 00:12:16 executing program 1: 00:12:16 executing program 0: 00:12:16 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) 00:12:16 executing program 3: 00:12:16 executing program 5: 00:12:16 executing program 1: 00:12:17 executing program 0: 00:12:17 executing program 3: 00:12:17 executing program 5: 00:12:17 executing program 0: 00:12:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:17 executing program 3: 00:12:17 executing program 1: 00:12:17 executing program 5: 00:12:17 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) 00:12:17 executing program 0: 00:12:17 executing program 1: 00:12:17 executing program 5: 00:12:17 executing program 3: 00:12:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f00000006c0)=""/110, 0x1c9) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/154, 0x9a) 00:12:17 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) link(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) sendfile(r0, r0, 0x0, 0x40fdf) write(0xffffffffffffffff, &(0x7f0000000000)="2400000018002551075c0165ff0ffc021c14020000100f0504e1000c0800160000000000bc0000008f3943793a5ea67658cb22d90000000000000059b97dc8f8b550e66a2bff77c4931da84157f7a733686a22fd8169f6b6b4f464e0c05df670d851f785ea2b85d32b3583d87124da3bb0b9e2cc000000dcce1fb4ac2cbd48c8378a3ad82a5b83c01295723da595c4831f65123819e204853d48a5a6bd525801d5cae983cf4544a9c4c396f36e85787a8efc32e0015c85ead2b748bc6a5fefc4e53543f9f65e3da31a110af1acb78ce510c7a70723741b34981d1b182deb7904", 0xe0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="000000000000000000000000000200"}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)) 00:12:17 executing program 1: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmget(0x2, 0x4000, 0x0, &(0x7f00007b8000/0x4000)=nil) exit_group(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 00:12:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:18 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0xffffffffffffff7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6eb30d23d8b1e7, @perf_config_ext, 0x8000000200032154, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 00:12:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0xffffffffffffff7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6eb30d23d8b1e7, @perf_config_ext, 0x8000000200032154, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 00:12:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4c0083) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = msgget$private(0x0, 0x1) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000180)=""/111) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000280)={&(0x7f0000000200)={0x1f, r3, 0x5, 0x0, 0x0, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f00000005c0)={0x2, &(0x7f0000000040)=[{0x44}, {0x6, 0x0, 0x0, 0x7fffffff}]}) 00:12:18 executing program 3: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000100)={0xdfb, "9dc377f2d32c52c59e344bb643b7e7f27752b5fbd28674415bfa9b4b2bc5f511", 0x0, 0x4, 0x5}) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6401001d006a643000"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='pstore\x00', 0x25000, &(0x7f00000003c0)='cgroup.procs\x00') write$cgroup_pid(r3, &(0x7f0000000300), 0x12) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) 00:12:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:18 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:18 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @multicast1}], 0x2c) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="e83ebacd29144a7de946b6a489a77da6"}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="a6", 0x1}], 0x1}, 0x40) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat(r3, &(0x7f0000000040)='.\x00', 0x210082, 0x100) 00:12:18 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) 00:12:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x6) getsockopt(r1, 0x8, 0x4, &(0x7f0000000080), &(0x7f00000000c0)) open(&(0x7f0000000040)='./file0\x00', 0x22100, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000507ff0100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c000200140006002e9ef0e1be118746bbbf83fb842f551214000700ff010000000000000000000000000001"], 0x64}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1f, 0x2a00) 00:12:18 executing program 0: socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) link(0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x400, 0xb) getsockname$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x200000002, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x6, 0x101401) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000240)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, [@local]}, 0x14) r4 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r4, 0xc0487c04, &(0x7f0000000000)=""/226) bind$inet(r4, 0x0, 0x24d) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$unix(0x1, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x3, 0xffffffffffffffff) splice(r5, 0x0, r6, 0x0, 0x400, 0xb) getpeername$inet6(r6, &(0x7f0000000000), &(0x7f0000000040)=0x1c) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="9dffc21e8ea568f2af388202eb45047aa72dd7ced0e1c11ca3360709a6cd9f4006ae3daa0912a1a492e7d372505747322fde5a3ecb5e60bf848e5492f052772f83abbd690c438c3ac35f22ededb1f8cad4fe1a8cba83a199afdd4cca04a45facebeab1ff1bf8c185034bff3f4495efe7312f9e012ec36b16bfd0e756dfe3f5bd6e1595a5a2dfe33f004126ad4317c75229c943b295ab4757eb9624d7c4f4e5dd3c869c0a2de82b", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000000000000b0000000003001462726f6164636173742d6c696e6b000093c06697a93b89302dfc94dbaaf07782cb6c1dc367dafc8d1d16f159d4e5d81c3e2df3232512a123c19ebbdd265c5dd5d3b7fbd95e827750459f56d279dfb19e639a133a35f9a70f28cac15df4c1b982fd6135d519f88632244dc544e072454a48e23237519e3f44d70ab9f45ca106180a227e6f875dbae7bfeed242932e03f2e18975acc3dcb386e9ed644a921bb50c9b851c6da5c3d63acb425c34dffadb864acd7a414e71fa4411345be637ebb62e7d28f33816f78aed1d78c475acae8098e9c797aaf84462e4"], 0x3}}, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1002) r8 = syz_open_dev$media(&(0x7f0000000140)='?dev\xfb=edia\x03\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r8, 0xc0487c04, &(0x7f0000000000)=""/226) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000200)='posixacl\x00', 0x0, 0x0) 00:12:18 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xd7, 0x2e, 0xad, 0x20, 0xf3d, 0x68aa, 0x85bf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x99, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x11, 0x80000, 0x8) 00:12:19 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7fdd7b8b07960f21847650ca0000806037d6aa597000e96c8951329a04f91e12f19a01e5e354740000aabce725c2812c0811b9232c555c07e8c00a53da00e227110f766c84bdc8544fdedd87a56159ca140d0e50720a31c0f63c6943e66232ed48a48e70b7bcec35e8edc9ea7bc86ec49c8c1dd755c7b6ba347f2fce04972391308f240ff2c13747fd4e2650f2d042bdb31d44267137265180a8a074de45e262172729e7580032292109e61cfe14929e9ce6e2060a1abc84c52bd9227c28e97a3f5f89d61cb57988881c8face223ed291fd373c47b6afd41dc0ec3e6d0d8127840956abb3cf9e7f6ae7f18bfb36641fbc8e7197f126d3adf081ba1387408fd42a53a1492b9d237"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:19 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) [ 414.316189][ T2931] usb 2-1: new high-speed USB device number 11 using dummy_hcd 00:12:19 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) [ 414.594801][ T2931] usb 2-1: Using ep0 maxpacket: 32 [ 414.765310][ T2931] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 414.773726][ T2931] usb 2-1: config 0 has no interface number 0 [ 414.779958][ T2931] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=85.bf [ 414.789178][ T2931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.800272][ T2931] usb 2-1: config 0 descriptor?? [ 414.851259][ T2931] sierra 2-1:0.153: Sierra USB modem converter detected 00:12:20 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x9, 0xffff, 0x5}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0xa6, &(0x7f0000ffc000/0x1000)=nil, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 00:12:20 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7fdd7b8b07960f21847650ca0000806037d6aa597000e96c8951329a04f91e12f19a01e5e354740000aabce725c2812c0811b9232c555c07e8c00a53da00e227110f766c84bdc8544fdedd87a56159ca140d0e50720a31c0f63c6943e66232ed48a48e70b7bcec35e8edc9ea7bc86ec49c8c1dd755c7b6ba347f2fce04972391308f240ff2c13747fd4e2650f2d042bdb31d44267137265180a8a074de45e262172729e7580032292109e61cfe14929e9ce6e2060a1abc84c52bd9227c28e97a3f5f89d61cb57988881c8face223ed291fd373c47b6afd41dc0ec3e6d0d8127840956abb3cf9e7f6ae7f18bfb36641fbc8e7197f126d3adf081ba1387408fd42a53a1492b9d237"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 00:12:20 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) getsockopt$bt_hci(0xffffffffffffffff, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x5) r6 = socket(0x2, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)) shutdown(r6, 0x0) epoll_wait(r7, &(0x7f0000000040)=[{}], 0x1, 0x10) [ 415.278561][ T17] usb 2-1: USB disconnect, device number 11 [ 415.285482][ T17] sierra 2-1:0.153: device disconnected 00:12:20 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) getsockopt$bt_hci(0xffffffffffffffff, 0x65, 0x6, 0x0, &(0x7f0000000100)) [ 416.072159][ T17] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 416.312080][ T17] usb 2-1: Using ep0 maxpacket: 32 [ 416.432197][ T17] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 416.440588][ T17] usb 2-1: config 0 has no interface number 0 [ 416.446948][ T17] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=85.bf [ 416.456133][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.465807][ T17] usb 2-1: config 0 descriptor?? [ 416.505512][ T17] sierra 2-1:0.153: Sierra USB modem converter detected [ 416.717431][ T17] usb 2-1: USB disconnect, device number 12 [ 416.724036][ T17] sierra 2-1:0.153: device disconnected 00:12:22 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:22 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) 00:12:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r2 = dup(r1) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000080)) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000180)=0xfffffffe, 0x4) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='\x04\xf8\x00\x00\x00\x00\xf6\x00', 0x40000020806, 0x0) ioctl$int_in(r3, 0x800000c0045006, &(0x7f0000000000)=0x7b) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r4, 0x200006) r5 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000100)={0xc, @tick=0x7fffffff, 0x5, {0x2, 0x80}, 0xcb, 0x0, 0xd0}) sendfile(r0, r4, 0x0, 0x8000fffffffe) 00:12:22 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0xb, 0x11, 0x3, 0x5, "17c06b176ef379ede0129783544d7c69cfd6748283a8db86ab8d06a1ddc8a773"}) r1 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) write(r1, &(0x7f0000000340)="ea", 0x1) unshare(0x20400) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000005, 0x2010, r1, 0x9f9b6000) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) getsockopt(r0, 0x480000000000003a, 0x1, 0x0, &(0x7f0000000000)) 00:12:22 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) getsockopt$bt_hci(0xffffffffffffffff, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:22 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:22 executing program 1: ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000040)={0x0, 0x8000, 0x8369, 0x203}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000010491008460d81002b4d0000000109021b00010000200009046b000000000000000a6b138d3efa51445fe18a12e7bb340000000000"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'team_slave_1\x00', {0x2, 0x4e23, @multicast1}}) [ 417.352133][ T17] usb 4-1: new high-speed USB device number 13 using dummy_hcd 00:12:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:22 executing program 0: syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902940003010000000904000000010100000a24010000000201020c240200000000000000000005240500000d24080000000003b4f7031369072405000022fd0904010000010200000904010101010200000905010900000000000725010000000009000009040201010102000007240100000110092402020000000000090582091c0200000007250100000000"], 0x0) r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) pwrite64(r0, &(0x7f0000000000)="88f9acb73b6f37cec3f535e983cff57bad3716eb3de163205ca21ce7eef24f7bcc437411119ea1efe585ba159b", 0x2d, 0x0) 00:12:22 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:22 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) [ 417.612681][ T2931] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 417.714452][ T17] usb 4-1: config index 0 descriptor too short (expected 58130, got 18) [ 417.723120][ T17] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.733431][ T17] usb 4-1: config 0 has no interfaces? 00:12:22 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) [ 417.812482][ T17] usb 4-1: config index 1 descriptor too short (expected 58130, got 18) [ 417.821113][ T17] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.831631][ T17] usb 4-1: config 0 has no interfaces? [ 417.872049][ T2931] usb 2-1: Using ep0 maxpacket: 8 [ 417.922332][ T17] usb 4-1: config index 2 descriptor too short (expected 58130, got 18) [ 417.930835][ T17] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.941306][ T17] usb 4-1: config 0 has no interfaces? [ 417.947609][ T17] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 417.956822][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.965865][T12100] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 417.976913][ T17] usb 4-1: config 0 descriptor?? [ 418.003392][ T2931] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 418.011926][ T2931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.022152][ T2931] usb 2-1: config 0 has no interface number 0 [ 418.028372][ T2931] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=4d.2b [ 418.037552][ T2931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.081974][ T2931] usb 2-1: config 0 descriptor?? [ 418.125745][ T2931] kobil_sct 2-1:0.107: required endpoints missing [ 418.212071][T12100] usb 1-1: Using ep0 maxpacket: 32 [ 418.332519][T12100] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 418.341374][T12100] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.352648][T12100] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 418.361712][T12100] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 418.364176][ T2931] usb 2-1: USB disconnect, device number 13 [ 418.532286][T12100] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.541630][T12100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.549839][T12100] usb 1-1: Product: syz [ 418.554092][T12100] usb 1-1: Manufacturer: syz [ 418.558729][T12100] usb 1-1: SerialNumber: syz [ 418.882549][T12100] usb 1-1: 0:2 : does not exist [ 418.905132][T12100] usb 1-1: USB disconnect, device number 22 [ 419.152150][ T2931] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 419.582091][T12100] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 419.842017][T12100] usb 1-1: Using ep0 maxpacket: 32 [ 419.962161][T12100] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 419.970930][T12100] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.981234][T12100] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 419.990299][T12100] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 00:12:25 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:25 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:25 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 420.057580][ T17] usb 4-1: USB disconnect, device number 13 00:12:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000001) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r4 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x82, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r6, 0x3, 0x1}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0)={r7, 0xe0, 0xff, 0x9, 0x4, 0x6}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x5) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000100)={0x800, 0x0, @value}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4), 0x0) [ 420.174361][T12100] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 420.184282][T12100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.192407][T12100] usb 1-1: Product: syz [ 420.196623][T12100] usb 1-1: Manufacturer: syz [ 420.201260][T12100] usb 1-1: SerialNumber: syz [ 420.219856][T13540] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:12:25 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:25 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) [ 420.663121][T12100] usb 1-1: 0:2 : does not exist 00:12:25 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000001) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r4 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x82, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r6, 0x3, 0x1}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0)={r7, 0xe0, 0xff, 0x9, 0x4, 0x6}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x5) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000100)={0x800, 0x0, @value}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4), 0x0) 00:12:25 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 420.756311][T12100] usb 1-1: USB disconnect, device number 23 00:12:25 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:26 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) [ 421.126709][T13587] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:12:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r1, 0x115, 0x0, 0x0, {0x14}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x20}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) poll(&(0x7f00000000c0)=[{r2}, {r2}], 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xffffffffffffff7f, 0x1) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='\x00(:\xb0') syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x4, 0x10201) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f00000001c0)={0x4, 0x8, 0x3ff}) socket$unix(0x1, 0x1, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, 0xc9, 0x0, 0x0, 0x7], 0x10000}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 00:12:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:26 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x8) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001480)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x1, 0x0, "51bd6247e9de77312051174ae4736b288d7bcbf8b2198440e2944850054c6fc7c4fc94bb8eaf1068d65036397d0bf1cd00c1ad175e3210004d06d5539901d84c29136aed0e238ca0757aa414ef989c43"}, 0xd8) r3 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) write$binfmt_aout(r3, &(0x7f00000001c0)={{0xcc, 0x7, 0xee, 0x33f, 0x331, 0x7f5efdce, 0x32d}, "127f8cd4937e2f697837cdcc03f12aa18ee0c7f8ff373e76a631575a085a9836929a26fa9962f1c3477d335705e3ef00f4ca2bddb80e0a213e51fd752f550a93a6f516df79ef0ce8af5801e1f2549044a2fe533ca3e0eaec989ec03e495b0aa8b29606149750b0397c9cda5c6d5c63096cac56f22e815a53862686e6544c908a1cb9408b2053a2ca673bd7679e11de498e6931c55f", [[], [], [], [], [], [], [], []]}, 0x8b5) listen(r2, 0x0) read$usbmon(r1, &(0x7f00000000c0)=""/115, 0x73) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x680242) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x7) syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60d8652b0028060000000000000000000000000000000000ff02000000000000000000000000000100004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0000000907800001312f3e60e853001000000000000009d46bc0000"], 0x0) tee(0xffffffffffffffff, r3, 0x9, 0xc) 00:12:26 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:26 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x3, 0x7f) vmsplice(r1, &(0x7f0000000780)=[{&(0x7f00000002c0)="5b7e5a656364351e4cdc6e1db6b0c8182f87ce44", 0x14}, {&(0x7f00000001c0)="3f2fd4110b8f631d3668e11aaa325fe4cdb33bc9", 0x14}], 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000140)=0x7ff, 0x4) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, 0x0, 0x0) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x101002, 0x0) write$P9_RLOCK(r7, &(0x7f0000000400)={0x8, 0x35, 0x2, 0x1}, 0x8) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000380)={0x1, 0x3}, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@local, @in6=@mcast2}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0xff}}, 0xe8) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) write$vnet(0xffffffffffffffff, &(0x7f0000000300)={0x1, {&(0x7f0000000000)=""/47, 0x2f, &(0x7f00000000c0)=""/121, 0x3, 0x3}}, 0x68) 00:12:26 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:26 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) [ 421.833627][T13621] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 421.833788][T13617] misc userio: Invalid payload size 00:12:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) [ 421.952600][T13628] misc userio: Invalid payload size 00:12:27 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:27 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x5000, 0x1000, &(0x7f0000017000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x680, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040404}, 0x48d1) 00:12:27 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) 00:12:27 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:27 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1a001000044}, [@ldst={0x2, 0x0, 0x87a275e243a55113, 0x2, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc0, &(0x7f0000000140)=""/199, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x390}, 0x70) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000000c0)={0xe, 0x10001, {0x56, 0x6e79, 0x0, {0xfffc, 0x8}, {0xffff, 0x200}, @period={0x2c9654b615630561, 0xe82, 0x7, 0x7, 0x5557, {0x1000, 0x4, 0x4, 0x2}, 0x1, &(0x7f0000000040)=[0x124]}}, {0x57, 0x1, 0x6, {0x0, 0xdc83}, {0x3, 0x800}, @const={0x9, {0x7, 0x9, 0x3, 0xd79a}}}}) 00:12:27 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xfb, 0x1d, 0x49, 0x10, 0x4971, 0x1012, 0x2d89, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x21, 0x0, 0x0, 0x35, 0x52, 0x59, 0x1}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1555555555555680}) 00:12:27 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:28 executing program 0: syz_usb_connect(0x5, 0x223, &(0x7f0000000380)={{0x12, 0x1, 0x98, 0x85, 0xf3, 0x94, 0x8, 0x2040, 0x5510, 0x7be0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x211, 0x1, 0x48, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x1, 0xea, 0x2e, 0x80, 0x40, [], [{{0x7, 0x5, 0x1, 0x0, 0x1c, 0x8, 0x0, 0x6, [@generic={0x1ef, 0x23, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0x0, 0x8000}]}}]}}]}}]}}, 0x0) 00:12:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7fdd7b8b07960f21847650ca0000806037d6aa597000e96c8951329a04f91e12f19a01e5e354740000aabce725c2812c0811b9232c555c07e8c00a53da00e227110f766c84bdc8544fdedd87a56159ca140d0e50720a31c0f63c6943e66232ed48a48e70b7bcec35e8edc9ea7bc86ec49c8c1dd755c7b6ba347f2fce04972391308f240ff2c13747fd4e2650f2d042bdb31d44267137265180a8a074de45e262172729e7580032292109e61cfe14929e9ce6e2060a1abc84c52bd9227c28e97a3f5f89d61cb57988881c8face223ed291fd373c47b6afd41dc0ec3e6d0d8127840956abb3cf9e7f6ae7f18bfb36641fbc8e7197f126d3adf081ba1387408fd42a53a1492b9d237"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:28 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r4, 0x65, 0x6, 0x0, &(0x7f0000000100)) [ 423.155830][T12100] usb 4-1: new high-speed USB device number 14 using dummy_hcd 00:12:28 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:28 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r4, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:28 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) 00:12:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x1cc, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) [ 423.412322][T12100] usb 4-1: Using ep0 maxpacket: 16 [ 423.417775][ T17] usb 1-1: new high-speed USB device number 24 using dummy_hcd 00:12:28 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r4, 0x65, 0x6, 0x0, &(0x7f0000000100)) [ 423.592347][T12100] usb 4-1: unable to get BOS descriptor or descriptor too short [ 423.682599][T12100] usb 4-1: config 0 has an invalid interface number: 33 but max is 0 [ 423.690825][T12100] usb 4-1: config 0 has no interface number 0 [ 423.697186][T12100] usb 4-1: New USB device found, idVendor=4971, idProduct=1012, bcdDevice=2d.89 [ 423.706705][T12100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.716019][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 423.742422][T12100] usb 4-1: config 0 descriptor?? 00:12:28 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:28 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) [ 423.832258][ T17] usb 1-1: config 72 has an invalid interface number: 179 but max is 0 [ 423.841033][ T17] usb 1-1: config 72 has an invalid descriptor of length 0, skipping remainder of the config [ 423.851445][ T17] usb 1-1: config 72 has no interface number 0 [ 423.857796][ T17] usb 1-1: New USB device found, idVendor=2040, idProduct=5510, bcdDevice=7b.e0 [ 423.866949][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.032447][T12100] usb 4-1: string descriptor 0 read error: -71 [ 424.040925][T12100] usb-storage 4-1:0.33: USB Mass Storage device detected [ 424.082612][T12100] usb-storage 4-1:0.33: Quirks match for vid 4971 pid 1012: 800000 [ 424.132769][T12100] usb 4-1: USB disconnect, device number 14 [ 424.193466][ T17] usb 1-1: string descriptor 0 read error: -71 [ 424.203299][ T17] smsusb:smsusb_probe: board id=8, interface number 179 [ 424.220875][ T17] usb 1-1: USB disconnect, device number 24 [ 424.762149][ T2931] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 424.922060][T12026] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 425.001956][ T2931] usb 4-1: Using ep0 maxpacket: 16 [ 425.162169][ T2931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 425.170195][T12026] usb 1-1: Using ep0 maxpacket: 8 [ 425.242255][ T2931] usb 4-1: config 0 has an invalid interface number: 33 but max is 0 [ 425.250521][ T2931] usb 4-1: config 0 has no interface number 0 [ 425.256933][ T2931] usb 4-1: New USB device found, idVendor=4971, idProduct=1012, bcdDevice=2d.89 [ 425.266062][ T2931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.275792][ T2931] usb 4-1: config 0 descriptor?? [ 425.312299][T12026] usb 1-1: config 72 has an invalid interface number: 179 but max is 0 [ 425.320840][T12026] usb 1-1: config 72 has an invalid descriptor of length 0, skipping remainder of the config [ 425.331226][T12026] usb 1-1: config 72 has no interface number 0 [ 425.337517][T12026] usb 1-1: New USB device found, idVendor=2040, idProduct=5510, bcdDevice=7b.e0 [ 425.346667][T12026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.552306][ T2931] usb 4-1: string descriptor 0 read error: -71 [ 425.560804][ T2931] usb-storage 4-1:0.33: USB Mass Storage device detected [ 425.572985][ T2931] usb-storage 4-1:0.33: Quirks match for vid 4971 pid 1012: 800000 [ 425.616975][ T2931] usb 4-1: USB disconnect, device number 15 [ 425.632239][T12026] usb 1-1: string descriptor 0 read error: -71 [ 425.642622][T12026] smsusb:smsusb_probe: board id=8, interface number 179 [ 425.653787][T12026] usb 1-1: USB disconnect, device number 25 00:12:30 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:31 executing program 0: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001540)={0x0, 0x22, 0x23, {[@main=@item_4={0x3, 0x0, 0x0, "cf87f96f"}, @local=@item_4={0x3, 0x2, 0x0, "c4eb48fd"}, @main=@item_4={0x3, 0x0, 0x0, "d7448659"}, @local=@item_4={0x3, 0x2, 0x0, "af9db9b5"}, @main=@item_4={0x3, 0x0, 0x0, "dc9b3b2c"}, @local=@item_4={0x3, 0x2, 0x0, "18c1187b"}, @main=@item_4={0x3, 0x0, 0x0, "4ba4cd92"}]}}, 0x0}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x582, 0x2000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 00:12:31 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:31 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) 00:12:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000002580)={0x800, 0xef8, 0x7}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'irlan0\x00', 0x0}) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000002500), &(0x7f0000002540)=0x10) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002480)='/dev/cachefiles\x00', 0x10782, 0x0) sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = dup2(r8, r7) delete_module(&(0x7f00000025c0)='cpusetvmnet0@{mime_type+^\x00', 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SCSI_IOCTL_STOP_UNIT(r9, 0x6) write$P9_RREMOVE(r6, &(0x7f00000024c0)={0x7, 0x7b, 0x2}, 0x7) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, r5}, 0x80, &(0x7f0000002400)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000000c0)="9f315614270f6e27e9a9e301ab87648248e684840f06d0252d34fc582080cd4c9ddcdee394bab3c5f3c7289990d324273f4d9dc959bf2a0576fb3cc3cae8250098fc1d2b07f685eb6f6e64e43ac82e53b77594dd7f7599678a8b8b819ba4af7161926ecc026eed9eb07e8be85415838285d275eb4689747b35595ec86f605346038d9c947b9d5b3f52597bd21ec4665f1763774556ca82e5306366b8141533f2533ab1", 0xa3}, {&(0x7f0000000180)="bc74777cea74d211a3c6072da983c54650c81448b71fe2e514c7e093d4acb89851515e14ff90bde174259b6b0eb331f8719881872746fac6781ac1c7699cadb68ad3e3470fd7b0f25e6585de03f1fe0eb00b1a4e9142a9faafaa1ef3e1b06bb900bcb4f752247e9cb86f44b72acd15c19e3d1a25b78eb07f947d7ab42a5886dabae61056ed48d8e2f9f6d30b9ed60c8362606f65e45de2edc147b92ef832e1ac1a550972b2cae5716cabcb2bf17840fcd1aa", 0xb2}, {&(0x7f00000022c0)="d40d780afc08612632140bb9b256b6b2a67ed123e53603b6ff70b220a80b5fb5f7c737e4c3857b41468cdd9bbee40ae3", 0x30}, {&(0x7f0000002300)="8a7a818ceada7f7439e13e0bae3e3096c7c4b5b1af865883f0c24bc4a5279c26517bc5172cba7142e604b88eca4237", 0x2f}, {&(0x7f0000002340)="dd19098bdb6e74b6a790b4a9c65babd16aa5029c5c4b2a5ca1ef2a0e6a2f081e376af97bd243385a9a44204f618e719d98e99f907ac85607faced34017d3dafcb16acde710cd8f9133ece9a38c2ceed2cc8e175ac5a4529959713984b282a10f36768dd82c9982f4b9b244267882ebc1b9165790d531f3f93d6d6375ccad4e7b8af96bcb70a6abc151e372", 0x8b}], 0x7}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'syzkaller0\x00'}}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000007b00)}}], 0x2, 0x40) 00:12:31 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 00:12:31 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r4, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000100)=0x200) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x82, &(0x7f0000000000)={r10}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000480)={r10, 0x5}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000500)={r11, 0x8001, 0x30, 0x9, 0x93}, &(0x7f0000000540)=0x18) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r13 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r13, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r14 = fcntl$dupfd(0xffffffffffffffff, 0x406, r13) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r14, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x29a81476190aab08}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x224, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2b2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x347a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbc}]}, @TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x89}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x54ab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x259}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3f}]}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc0}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000100}, 0x80) r15 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r15, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8}) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = fcntl$dupfd(r16, 0x0, r16) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x1cb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x57) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) [ 426.472478][ T17] usb 1-1: new high-speed USB device number 26 using dummy_hcd 00:12:31 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r4, 0x65, 0x6, 0x0, &(0x7f0000000100)) 00:12:31 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2d, 0x63, 0xe4, 0x8, 0x46d, 0x960, 0x3386, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x80, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xcf, 0x0, 0x0, 0xcd, 0xc7, 0x1a}}]}}]}}, 0x0) 00:12:31 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xd0ceb778b8845a68}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, {0x6, 0x81, 0x84, 0x20, 0xff, 0x7}, 0x80}, 0xa) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r4, 0x65, 0x6, 0x0, &(0x7f0000000100)) [ 426.732117][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 426.853064][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.864276][ T17] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 426.877276][ T17] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 426.886485][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.947022][ T17] usb 1-1: config 0 descriptor?? [ 426.964305][T12026] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 427.211997][T12026] usb 4-1: Using ep0 maxpacket: 8 [ 427.332200][T12026] usb 4-1: config 128 has an invalid interface number: 207 but max is 0 [ 427.340818][T12026] usb 4-1: config 128 has no interface number 0 [ 427.445277][ T17] sony 0003:1345:3008.0003: unknown main item tag 0x0 [ 427.452385][ T17] sony 0003:1345:3008.0003: unknown main item tag 0x0 [ 427.459406][ T17] sony 0003:1345:3008.0003: unknown main item tag 0x0 [ 427.466540][ T17] sony 0003:1345:3008.0003: item fetching failed at offset 1358120738 [ 427.475321][ T17] sony 0003:1345:3008.0003: parse failed [ 427.481207][ T17] sony: probe of 0003:1345:3008.0003 failed with error -22 [ 427.502227][T12026] usb 4-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=33.86 [ 427.511459][T12026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.519889][T12026] usb 4-1: Product: syz [ 427.524164][T12026] usb 4-1: Manufacturer: syz [ 427.528787][T12026] usb 4-1: SerialNumber: syz [ 427.575280][T12026] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 427.645872][ T2931] usb 1-1: USB disconnect, device number 26 [ 427.792110][T12026] gspca_sunplus: reg_w_riv err -71 [ 427.797382][T12026] ===================================================== [ 427.804350][T12026] BUG: KMSAN: uninit-value in sd_init+0x2195/0x6060 [ 427.810966][T12026] CPU: 0 PID: 12026 Comm: kworker/0:0 Not tainted 5.4.0-rc3+ #0 [ 427.818581][T12026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.828643][T12026] Workqueue: usb_hub_wq hub_event [ 427.833648][T12026] Call Trace: [ 427.836923][T12026] dump_stack+0x191/0x1f0 [ 427.841245][T12026] kmsan_report+0x128/0x220 [ 427.845740][T12026] __msan_warning+0x73/0xe0 [ 427.850253][T12026] sd_init+0x2195/0x6060 [ 427.854513][T12026] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 427.860664][T12026] ? sd_config+0x631/0x760 [ 427.865080][T12026] ? sd_config+0x760/0x760 [ 427.869483][T12026] gspca_dev_probe2+0xe93/0x2230 [ 427.874416][T12026] gspca_dev_probe+0x346/0x3b0 [ 427.879378][T12026] sd_probe+0x8d/0xa0 [ 427.883416][T12026] ? i2c_write+0xe40/0xe40 [ 427.887827][T12026] usb_probe_interface+0xd19/0x1310 [ 427.893018][T12026] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 427.898901][T12026] ? usb_register_driver+0x860/0x860 [ 427.904171][T12026] really_probe+0xd91/0x1f90 [ 427.908753][T12026] driver_probe_device+0x1ba/0x510 [ 427.913860][T12026] __device_attach_driver+0x5b8/0x790 [ 427.919236][T12026] bus_for_each_drv+0x28e/0x3b0 [ 427.924091][T12026] ? deferred_probe_work_func+0x400/0x400 [ 427.929796][T12026] __device_attach+0x489/0x750 [ 427.934552][T12026] device_initial_probe+0x4a/0x60 [ 427.939557][T12026] bus_probe_device+0x131/0x390 [ 427.944415][T12026] device_add+0x25b5/0x2df0 [ 427.948952][T12026] usb_set_configuration+0x309f/0x3710 [ 427.954421][T12026] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 427.960507][T12026] generic_probe+0xe7/0x280 [ 427.965009][T12026] ? usb_choose_configuration+0xae0/0xae0 [ 427.970727][T12026] usb_probe_device+0x146/0x200 [ 427.975559][T12026] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 427.981432][T12026] ? usb_register_device_driver+0x500/0x500 [ 427.987309][T12026] really_probe+0xd91/0x1f90 [ 427.991884][T12026] driver_probe_device+0x1ba/0x510 [ 427.996998][T12026] __device_attach_driver+0x5b8/0x790 [ 428.002370][T12026] bus_for_each_drv+0x28e/0x3b0 [ 428.007199][T12026] ? deferred_probe_work_func+0x400/0x400 [ 428.012903][T12026] __device_attach+0x489/0x750 [ 428.017654][T12026] device_initial_probe+0x4a/0x60 [ 428.022657][T12026] bus_probe_device+0x131/0x390 [ 428.027491][T12026] device_add+0x25b5/0x2df0 [ 428.031998][T12026] usb_new_device+0x23e5/0x2fb0 [ 428.036841][T12026] hub_event+0x581d/0x72f0 [ 428.041264][T12026] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 428.047132][T12026] ? led_work+0x720/0x720 [ 428.051439][T12026] ? led_work+0x720/0x720 [ 428.055758][T12026] process_one_work+0x1572/0x1ef0 [ 428.060779][T12026] worker_thread+0x111b/0x2460 [ 428.065545][T12026] kthread+0x4b5/0x4f0 [ 428.069606][T12026] ? process_one_work+0x1ef0/0x1ef0 [ 428.074793][T12026] ? kthread_blkcg+0xf0/0xf0 [ 428.079361][T12026] ret_from_fork+0x35/0x40 [ 428.083757][T12026] [ 428.086063][T12026] Uninit was created at: [ 428.090286][T12026] kmsan_internal_poison_shadow+0x60/0x120 [ 428.096073][T12026] kmsan_slab_alloc+0xaa/0x120 [ 428.100829][T12026] kmem_cache_alloc_trace+0x8c5/0xd20 [ 428.106192][T12026] gspca_dev_probe2+0x30d/0x2230 [ 428.111205][T12026] gspca_dev_probe+0x346/0x3b0 [ 428.115973][T12026] sd_probe+0x8d/0xa0 [ 428.119956][T12026] usb_probe_interface+0xd19/0x1310 [ 428.125145][T12026] really_probe+0xd91/0x1f90 [ 428.129729][T12026] driver_probe_device+0x1ba/0x510 [ 428.134827][T12026] __device_attach_driver+0x5b8/0x790 [ 428.140195][T12026] bus_for_each_drv+0x28e/0x3b0 [ 428.145035][T12026] __device_attach+0x489/0x750 [ 428.149782][T12026] device_initial_probe+0x4a/0x60 [ 428.154803][T12026] bus_probe_device+0x131/0x390 [ 428.154815][T12026] device_add+0x25b5/0x2df0 [ 428.154832][T12026] usb_set_configuration+0x309f/0x3710 [ 428.154845][T12026] generic_probe+0xe7/0x280 [ 428.154857][T12026] usb_probe_device+0x146/0x200 [ 428.154890][T12026] really_probe+0xd91/0x1f90 [ 428.164227][T12026] driver_probe_device+0x1ba/0x510 [ 428.188638][T12026] __device_attach_driver+0x5b8/0x790 [ 428.193997][T12026] bus_for_each_drv+0x28e/0x3b0 [ 428.198835][T12026] __device_attach+0x489/0x750 [ 428.203585][T12026] device_initial_probe+0x4a/0x60 [ 428.208583][T12026] bus_probe_device+0x131/0x390 [ 428.213409][T12026] device_add+0x25b5/0x2df0 [ 428.217892][T12026] usb_new_device+0x23e5/0x2fb0 [ 428.222731][T12026] hub_event+0x581d/0x72f0 [ 428.227145][T12026] process_one_work+0x1572/0x1ef0 [ 428.232147][T12026] worker_thread+0x111b/0x2460 [ 428.236885][T12026] kthread+0x4b5/0x4f0 [ 428.240946][T12026] ret_from_fork+0x35/0x40 [ 428.245339][T12026] ===================================================== [ 428.252264][T12026] Disabling lock debugging due to kernel taint [ 428.258407][T12026] Kernel panic - not syncing: panic_on_warn set ... [ 428.265940][T12026] CPU: 0 PID: 12026 Comm: kworker/0:0 Tainted: G B 5.4.0-rc3+ #0 [ 428.274932][T12026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.284974][T12026] Workqueue: usb_hub_wq hub_event [ 428.289974][T12026] Call Trace: [ 428.293250][T12026] dump_stack+0x191/0x1f0 [ 428.297583][T12026] panic+0x3c9/0xc1e [ 428.301490][T12026] kmsan_report+0x215/0x220 [ 428.305988][T12026] __msan_warning+0x73/0xe0 [ 428.310475][T12026] sd_init+0x2195/0x6060 [ 428.314710][T12026] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 428.320854][T12026] ? sd_config+0x631/0x760 [ 428.325284][T12026] ? sd_config+0x760/0x760 [ 428.329705][T12026] gspca_dev_probe2+0xe93/0x2230 [ 428.334657][T12026] gspca_dev_probe+0x346/0x3b0 [ 428.339419][T12026] sd_probe+0x8d/0xa0 [ 428.343395][T12026] ? i2c_write+0xe40/0xe40 [ 428.347804][T12026] usb_probe_interface+0xd19/0x1310 [ 428.353000][T12026] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 428.358897][T12026] ? usb_register_driver+0x860/0x860 [ 428.364183][T12026] really_probe+0xd91/0x1f90 [ 428.368758][T12026] driver_probe_device+0x1ba/0x510 [ 428.373855][T12026] __device_attach_driver+0x5b8/0x790 [ 428.379320][T12026] bus_for_each_drv+0x28e/0x3b0 [ 428.384161][T12026] ? deferred_probe_work_func+0x400/0x400 [ 428.389860][T12026] __device_attach+0x489/0x750 [ 428.394611][T12026] device_initial_probe+0x4a/0x60 [ 428.399626][T12026] bus_probe_device+0x131/0x390 [ 428.404472][T12026] device_add+0x25b5/0x2df0 [ 428.408966][T12026] usb_set_configuration+0x309f/0x3710 [ 428.414458][T12026] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 428.420527][T12026] generic_probe+0xe7/0x280 [ 428.425009][T12026] ? usb_choose_configuration+0xae0/0xae0 [ 428.430707][T12026] usb_probe_device+0x146/0x200 [ 428.435540][T12026] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 428.441419][T12026] ? usb_register_device_driver+0x500/0x500 [ 428.447304][T12026] really_probe+0xd91/0x1f90 [ 428.451880][T12026] driver_probe_device+0x1ba/0x510 [ 428.456985][T12026] __device_attach_driver+0x5b8/0x790 [ 428.462349][T12026] bus_for_each_drv+0x28e/0x3b0 [ 428.467178][T12026] ? deferred_probe_work_func+0x400/0x400 [ 428.472879][T12026] __device_attach+0x489/0x750 [ 428.477627][T12026] device_initial_probe+0x4a/0x60 [ 428.482643][T12026] bus_probe_device+0x131/0x390 [ 428.487502][T12026] device_add+0x25b5/0x2df0 [ 428.492017][T12026] usb_new_device+0x23e5/0x2fb0 [ 428.496896][T12026] hub_event+0x581d/0x72f0 [ 428.501339][T12026] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 428.507227][T12026] ? led_work+0x720/0x720 [ 428.511539][T12026] ? led_work+0x720/0x720 [ 428.515863][T12026] process_one_work+0x1572/0x1ef0 [ 428.520889][T12026] worker_thread+0x111b/0x2460 [ 428.525648][T12026] kthread+0x4b5/0x4f0 [ 428.529696][T12026] ? process_one_work+0x1ef0/0x1ef0 [ 428.534893][T12026] ? kthread_blkcg+0xf0/0xf0 [ 428.539476][T12026] ret_from_fork+0x35/0x40 [ 428.545368][T12026] Kernel Offset: disabled [ 428.549686][T12026] Rebooting in 86400 seconds..