[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 84.410924][ T31] audit: type=1800 audit(1571687491.455:25): pid=12079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 84.434784][ T31] audit: type=1800 audit(1571687491.485:26): pid=12079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 84.470530][ T31] audit: type=1800 audit(1571687491.505:27): pid=12079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.64' (ECDSA) to the list of known hosts. 2019/10/21 19:51:45 fuzzer started 2019/10/21 19:51:50 dialing manager at 10.128.0.26:32863 2019/10/21 19:51:50 syscalls: 2415 2019/10/21 19:51:50 code coverage: enabled 2019/10/21 19:51:50 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/21 19:51:50 extra coverage: enabled 2019/10/21 19:51:50 setuid sandbox: enabled 2019/10/21 19:51:50 namespace sandbox: enabled 2019/10/21 19:51:50 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/21 19:51:50 fault injection: enabled 2019/10/21 19:51:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/21 19:51:50 net packet injection: enabled 2019/10/21 19:51:50 net device setup: enabled 2019/10/21 19:51:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 19:55:54 executing program 0: syzkaller login: [ 347.554299][T12243] IPVS: ftp: loaded support on port[0] = 21 [ 347.699867][T12243] chnl_net:caif_netlink_parms(): no params data found [ 347.756978][T12243] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.764278][T12243] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.773222][T12243] device bridge_slave_0 entered promiscuous mode [ 347.783015][T12243] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.790194][T12243] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.798977][T12243] device bridge_slave_1 entered promiscuous mode [ 347.830871][T12243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.843788][T12243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.876644][T12243] team0: Port device team_slave_0 added [ 347.886171][T12243] team0: Port device team_slave_1 added [ 348.036809][T12243] device hsr_slave_0 entered promiscuous mode [ 348.292701][T12243] device hsr_slave_1 entered promiscuous mode [ 348.573644][T12243] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.580878][T12243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.588688][T12243] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.595919][T12243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.678856][T12243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.700516][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.714343][ T3914] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.725799][ T3914] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.741519][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 348.761428][T12243] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.777456][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.787081][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.797281][ T3914] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.804504][ T3914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.852758][T12243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.863867][T12243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.879586][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.889328][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.898442][ T3914] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.905645][ T3914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.914124][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.924122][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.934167][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.944023][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.953717][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.963548][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.973177][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.982556][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.992272][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.001539][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.017619][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.026428][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.059756][T12243] 8021q: adding VLAN 0 to HW filter on device batadv0 19:55:56 executing program 0: 19:55:56 executing program 0: 19:55:56 executing program 0: 19:55:56 executing program 0: 19:55:56 executing program 0: 19:55:56 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x5, 0xff, 0x10000, 0x0, 0xffffffffffffffff}) ioctl(r0, 0x1200008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchmod(r2, 0x0) fstat(r1, &(0x7f00000005c0)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x541000, 0x0) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000140)={0x40d0, 0x5a1e}) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) writev(r4, &(0x7f00000000c0), 0x10000000000000a4) creat(&(0x7f0000000040)='./file0\x00', 0x23) 19:55:58 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x89280) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) connect$rds(r0, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="134398f7df9dafe316453f6fd9fe2305ed76716f") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_map={0x81, 0x4, 0x6, 0x7, 0x0, 0x58}}) r3 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x5, 0x0) name_to_handle_at(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0xde, 0x3, "d5f5bfc49a141eb774ef28fe3d3c6a6709e134b070e7e78f68a73d2b579be10f72177e3b645cd7aa4719f06cde8cd137bdc7253b5a00f65a21eb79c9ad0a506a6c23c30e49d94c1c7b55594bcbcfeff11a92db3297268052623c0bcb7261e777d951161e038e1c2f0457cc5d947f964962bcbd15238865de11f8609a04c795864c164d3568f1e64c43da054b489aaaec5d616472eba03a49030616122d106430da9f879e1a6151a9b37650f0db18a5f75a567ebf63abab239cdde431694cc9e9bfbb4e5e2acc8d3ceb32b1b78447dccfdd31d8043b21"}, &(0x7f0000000340), 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video36\x00', 0x2, 0x0) r4 = request_key(&(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='mime_type\x00', 0xfffffffffffffffc) keyctl$invalidate(0x15, r4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x20000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000004c0)={r0}) r6 = syz_open_dev$mouse(&(0x7f0000000500)='/dev/input/mouse#\x00', 0x6, 0x40000) close(r6) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000540)) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x153202, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000005c0)={@loopback, 0x0}, &(0x7f0000000600)=0x14) sendmsg$kcm(r7, &(0x7f0000000e40)={&(0x7f0000000640)=@hci={0x1f, r8, 0x2}, 0x80, &(0x7f0000000d80)=[{&(0x7f00000006c0)="3c48a3fef20ca361a4cbbce74eb2485a7ed61c49e2fdace0b1baaf35c57596457d83ff4af60e91592da7ee1ae5e79dc957a452789516bad9ad99925dc9cf8cb88ab53cd6acedb03ff9f63d0a559851c243ce5106931f0412d96cebcdecb620f562679058dda37fa2622ce45eac39d1e549a23e0864aa1c7a8659d1cd2d27b698814e408ac788157ce67a43576a82d0d6ed941dbf2a368fa9d30b7a1b9484fbadca9f893d4ae74aa4ef9a2e9c641ea2f6f5a1f11bab894af6bb92ee316248aaf60bf2d0d8b6493ab7ad688e88f9ca01a86f85b8df0d6dfbc07f1e", 0xda}, {&(0x7f00000007c0)="ef04ed1dc1340619f3b67eb5fe53959e5f61212713d9eb7d07ab3d20d4e2f080dcf830719f0a0c04713cf631fc03a13b823bc2b2e690bdef5fea3032db89830d890c4850d8f708c3acabb6311b26d2f8d3bf6f929aff55a341da60491fc280f5187ec44aaa068e8361891bc12573e374e8d31bd4b9ba94a2098130d64359fac76bbbd92822df4a662d24cb", 0x8b}, {&(0x7f0000000880)="011b211e12dcaeaa6b5e28eb1a4d4f8a46c31f24712093a6451f76d82ddfb7337054cb4118e92a01b7dab8642d21ddd599d62ae67c811031fba35ca0db72bccb3569f2afc73a078abbee026c9181be776075685ac474d7a3475851cfa029382b601fd0e638db624bcc0baacdcb7ef0bfcdc0d9d8f8164b99a82f4667081795c54e34c9eaafc1edffa875d256176ba2817ded573eb9150c7d8ba6874589e0942336cb7e709264de72353dab34106ba9149e7e1b5c79feebb4", 0xb8}, {&(0x7f0000000940)="ff1e0960ef32bdc43295076671727212cdd334d2fbc29806dd1bd48def08c3a4f7473a576bed093ea28e67ae714c73deb176ac4be2babbdac30f6478b8ada0466b25fb922ba7ac0fc53ab0456cc147130ed68557947e76b1669c95dcf8a17af08219c23c6a702d60e87b15720c3b5cd95086c77115fd3fe183cbcd2600ada48bf85e245fe72b3127ec2a4ad317c41ba86e7a475d8ab8eb8ae8112ecb60675f6ea5cfbe661d2499464ea467b2e007f274cc55f9fb065887d56967861cec13552127b445c2", 0xc4}, {&(0x7f0000000a40)="90b0c68c330bc4dfbef03b1491b159d32f76b54f4b2a4990bf7746b1993ee69c904e345b06282914f17d011ccec5867f76757b8435b6287e7763e279fa320d697fc3ccffb6cac170d4857e3d4a0a7b21", 0x50}, {&(0x7f0000000ac0)="573c6d8b65299182d287689921f927052fae786d106fe1181b1c48ecca016e132e71bb75beb0d4e372b0ec1e3cf79d75f5f435a70c8b779d0085153831b8581613a74d2f6df3c940f1ac298d513520", 0x4f}, {&(0x7f0000000b40)="319ce25551cb3884bc6088ac2532261c018f9de6f511ab3b5589e512fc578588baa3b725bbcea17d59af96ed01144c291e7ef2407416d9005fa5d90a9dc5c0d936be904b88f21e48ace043bdb86e370df7ff7ecaa2ab0d2d6b5a23c8ee539188d3c7cbba4e48911b5b1d54370c31d6be2fae207f9a63f8e0c61a4c82f6b1bcda07194bfc51f80529f9b44ff654c20bfe4e807ae391", 0x95}, {&(0x7f0000000c00)="2fe45765ae51ded002c2d34c43e2d239c8f3e74178da17985ffa08d8dd9c1402993e440b71733c56e4e25dbc40fc24530455f160b33c11ad391ff455f9c1ac3e52136a3a93d3f2", 0x47}, {&(0x7f0000000c80)="21f2c0408d864e6b3998709b61a9f70e6c0caa81fdf0b7d3fc634d607c8419c0423bc6fe13ec6ec2932f51f486259df540da9c8b23a472c59e2b3b8ce19769746e4e5ca25c8df51163a82260d03d355bea224ab760cd2405be5c27b159b9eb65910116fa6d6e7ed65640a633a1b87ab1ae13644a2e89b8da412b39cde0434954d9ce50691d222aab3ca794bc7992367752c31873a879468d4541615705ed834b578ff9e1c18298b2a53494257c1c426687f0cb0f5e224d93fb9d9abb74eb0640f546398ba23f9fb7bac0cc356dcae357e3fa0089a4196319839707040e225d3eb8f813f22dc55b6d6ebbc1c0be679f74a1d403f2966339a1e5", 0xf9}], 0x9}, 0x20000811) write$P9_RREAD(r6, &(0x7f0000000e80)={0x100b, 0x75, 0x1, {0x1000, "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"}}, 0x100b) fstatfs(r5, &(0x7f0000001ec0)=""/192) r9 = socket$rxrpc(0x21, 0x2, 0x2) fcntl$getownex(r9, 0x10, &(0x7f0000001f80)) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r10, 0x84, 0x20, &(0x7f0000001fc0)=0x101, 0x4) r11 = syz_open_dev$radio(&(0x7f0000002000)='/dev/radio#\x00', 0x0, 0x2) ioctl$UFFDIO_ZEROPAGE(r11, 0xc020aa04, &(0x7f0000002040)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f00000020c0)=0x1) [ 351.884500][T12267] IPVS: ftp: loaded support on port[0] = 21 [ 352.131478][T12267] chnl_net:caif_netlink_parms(): no params data found [ 352.203371][T12267] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.210638][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.219529][T12267] device bridge_slave_0 entered promiscuous mode [ 352.252672][T12267] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.259919][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.268792][T12267] device bridge_slave_1 entered promiscuous mode [ 352.355935][T12267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.375345][T12267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.439832][T12267] team0: Port device team_slave_0 added [ 352.449560][T12267] team0: Port device team_slave_1 added [ 352.547395][T12267] device hsr_slave_0 entered promiscuous mode [ 352.604301][T12267] device hsr_slave_1 entered promiscuous mode [ 352.643383][T12267] debugfs: Directory 'hsr0' with parent '/' already present! [ 352.695640][T12267] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.702935][T12267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.710710][T12267] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.718126][T12267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.815365][T12267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.853631][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.864844][ T3914] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.884316][ T3914] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.905380][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 352.942873][T12267] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.965955][T12246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.975709][T12246] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.982980][T12246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.048881][T12246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.058051][T12246] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.065326][T12246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.075890][T12246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 353.086177][T12246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.102616][T12246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.121116][T12267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.134204][T12267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 353.167321][T12267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.182630][T12246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 353.191477][T12246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 19:56:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80440, 0x120) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x200000000000000) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}, {0x6, 0x79, 0x800}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x8000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r16, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r16}}, 0x20}}, 0x0) r17 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x2) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r22}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r22, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r18, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r22}}, 0x20}}, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x80}, {r1}, {r6, 0x40}, {r1, 0x1}, {r1, 0x40}, {r7, 0x20}, {r12, 0x1}, {r17, 0x8200}, {r18, 0x40}, {0xffffffffffffffff, 0x1000}], 0xa, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={0x8}, 0x8) r23 = socket$kcm(0x2b, 0x1, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$bt_BT_CHANNEL_POLICY(r24, 0x112, 0xa, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) close(r0) 19:56:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80440, 0x120) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x200000000000000) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}, {0x6, 0x79, 0x800}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x8000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r16, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r16}}, 0x20}}, 0x0) r17 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x2) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r22}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r22, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r18, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r22}}, 0x20}}, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x80}, {r1}, {r6, 0x40}, {r1, 0x1}, {r1, 0x40}, {r7, 0x20}, {r12, 0x1}, {r17, 0x8200}, {r18, 0x40}, {0xffffffffffffffff, 0x1000}], 0xa, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={0x8}, 0x8) r23 = socket$kcm(0x2b, 0x1, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$bt_BT_CHANNEL_POLICY(r24, 0x112, 0xa, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) close(r0) 19:56:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80440, 0x120) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x200000000000000) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}, {0x6, 0x79, 0x800}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x8000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r16, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r16}}, 0x20}}, 0x0) r17 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x2) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r22}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r22, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r18, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r22}}, 0x20}}, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x80}, {r1}, {r6, 0x40}, {r1, 0x1}, {r1, 0x40}, {r7, 0x20}, {r12, 0x1}, {r17, 0x8200}, {r18, 0x40}, {0xffffffffffffffff, 0x1000}], 0xa, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={0x8}, 0x8) r23 = socket$kcm(0x2b, 0x1, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$bt_BT_CHANNEL_POLICY(r24, 0x112, 0xa, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) close(r0) 19:56:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80440, 0x120) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x200000000000000) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}, {0x6, 0x79, 0x800}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x8000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r16, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r16}}, 0x20}}, 0x0) r17 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x2) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r22}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r22, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r18, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r22}}, 0x20}}, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x80}, {r1}, {r6, 0x40}, {r1, 0x1}, {r1, 0x40}, {r7, 0x20}, {r12, 0x1}, {r17, 0x8200}, {r18, 0x40}, {0xffffffffffffffff, 0x1000}], 0xa, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={0x8}, 0x8) r23 = socket$kcm(0x2b, 0x1, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$bt_BT_CHANNEL_POLICY(r24, 0x112, 0xa, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) close(r0) 19:56:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="0fc325b8f2000fd80f2327660fc73266660f3805c50f38093a66b9ff0a00000f3266b805000000ba4100ec0f01c1dfc1", 0x30}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000000)={0x4, 0x3, 0x2, 0x3, 0x6}) [ 355.199538][T12291] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 355.284672][T12291] kvm: emulating exchange as write 19:56:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000000c0), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f00000000c0)={0xe, 0x100, 0x2, {0x1, 0x0, 0x80000000, 0x4}}) bind$rds(r2, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}], @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r7}]]}}}]}, 0x40}}, 0x0) [ 356.290776][T12296] netlink: 'syz-executor.1': attribute type 17 has an invalid length. 19:56:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="87", 0x1}], 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 19:56:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0), 0x1c) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) finit_module(r1, &(0x7f0000000000)='&wlan0selfvmnet0\x00', 0x1) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$RTC_UIE_ON(r2, 0x7003) 19:56:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x25f2b20c17af0166, @perf_config_ext={0x70aa, 0xffffffffffffffff}, 0x0, 0x70}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='e\xf61r\x05\xd7\xa1&\x00', 0x9) creat(&(0x7f0000002440)='./file0\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x7fffffff, 0x108000) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x4e23, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x60) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000280)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x2) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r5, &(0x7f00000000c0), 0x1c) r6 = dup2(r5, r5) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x20}}, 0x0) r13 = fcntl$dupfd(r7, 0x406, r8) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r14, 0xc0086420, &(0x7f0000002840)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r14, 0x40086424, &(0x7f0000002880)={r15, 0x3}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r13, 0x4010641c, &(0x7f0000000100)={r15, &(0x7f0000000280)=""/225}) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, &(0x7f00000003c0)={r15}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x10000, 0x0, 0x4, 0x200000, {0x77359400}, {0x0, 0x1f, 0x0, 0x1f, 0xae, 0x8, "f415f7d1"}, 0x0, 0x1, @offset=0xcc, 0x4}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x8200, 0x8, 0xce7}, &(0x7f0000000040)=0x10) 19:56:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000600"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) r11 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r16, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r16}}, 0x20}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES16=r4, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="388f6c37fc440e2cc40c55a053dc812ea7c1639b91fe82c91c5a911a7cb5ea4ee4c205bc36d8f61555fb6a53a544d109d80c45da8cd7dd24722b30377c760cddfacf", @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r6], @ANYRES16=r11, @ANYRESHEX=r16], @ANYRESHEX=0x0, @ANYRES32], 0x0) [ 357.382884][T12310] bond0: (slave bond_slave_1): Releasing backup interface 19:56:05 executing program 0: capset(&(0x7f00002d0ff8)={0x20080522}, &(0x7f0000cc0000)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) capset(&(0x7f0000000040)={0x119980330}, &(0x7f0000000080)) r0 = socket(0x10, 0x803, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={r2, 0x80000}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 19:56:05 executing program 0: r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = syz_usb_connect(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="489ce3b1b2", 0x5, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r3, 0x9e, 0xbc}, &(0x7f0000000140)={'enc=', 'raw', ' hash=', {'sha224\x00'}}, &(0x7f00000001c0)="067286b76700667e96905ce4a8a676a628ebf8f10343ae6e3c90254bbe500fd45800060ef44a979b90f4b28d76ad050761187e29d8cc34683d9b52be3b55e3770ea836189ad3421f38e93f809676ced3ed4094209c5f0a36b72dbef38c9392a011a5ae3d9af01dc8e1d81f3fd2a5923c323ce7a55e620f2a5f95d2e898d90050248b0d833ef4e6050936c76c851c89afe20733dbb4cab59e5d71b31186d2", &(0x7f0000000280)=""/188) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_usb_disconnect(r0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) syz_usb_disconnect(r2) [ 358.300517][T12317] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) 19:56:05 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) r1 = syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x2, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000180)={{0x2, 0x0, @reserved="261237d70ff73690e561a071a1fa9fe1cf9024d5569d4c0d5795e27c77ebd673"}}) eventfd2(0xa726, 0x1800) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0xc002, 0x0) r4 = eventfd2(0x10000, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000200)={r3, 0x8, 0x3f, r4}) r5 = open(&(0x7f0000000240)='./file0\x00', 0xa0000, 0x100) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000280)={'veth0_to_team\x00', 0x54}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') listxattr(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)=""/4096, 0x1000) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001340)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000001380)=0x6) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000001400)={0x6, [0x0, 0x5, 0x3f, 0x3ff, 0x7, 0x3ff]}, &(0x7f0000001440)=0x10) prctl$PR_GET_FP_MODE(0x2e) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001480)={0x0, 0x100, 0x401}, &(0x7f00000014c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001500)={r8, @in6={{0xa, 0x4e23, 0x81, @loopback, 0x81}}, 0x67, 0x77f}, 0x90) r9 = syz_open_dev$swradio(&(0x7f00000015c0)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000001600), 0x4) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001680)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, r10, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x5}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001780)='/dev/snapshot\x00', 0x38101, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r11, 0x40184810, &(0x7f00000017c0)={0x3, 0x200, 0xff, 0x99a0, 0x1, 0x4}) r12 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001800)='/proc/capi/capi20\x00', 0x101801, 0x0) mkdirat(r12, &(0x7f0000001840)='./file1\x00', 0x91) dup3(r4, 0xffffffffffffffff, 0xc0000) 19:56:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffd4a) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept$packet(r13, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000016c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f00000017c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x6f81ea1774d926e5}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)=@gettfilter={0x44, 0x2e, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, r14, {0x9, 0xc}, {0x7, 0xa}, {0xf, 0x10}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x6}]}, 0x44}}, 0x40040004) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r15, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r15}}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x3, 0x2, @VETH_INFO_PEER={0x14, 0x1, {0x0, 0x0, 0x0, r15, 0x180}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r16 = fcntl$dupfd(r0, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) r17 = socket(0x100000000011, 0x2, 0x0) syncfs(r16) bind(r17, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r17, 0x0, 0x0) r18 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc0140, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r18, 0x5411, &(0x7f0000000040)) [ 358.702513][ T54] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 358.785180][T12325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 358.914096][T12328] IPVS: ftp: loaded support on port[0] = 21 [ 358.999520][T12325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 359.092957][ T54] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 359.101283][ T54] usb 1-1: config 0 has no interface number 0 [ 359.107589][ T54] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 359.118366][ T54] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 359.123355][T12328] chnl_net:caif_netlink_parms(): no params data found 19:56:06 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xe9, 0x23, 0x1, 0x8, 0x1a0a, 0x103, 0x437d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x60, 0x0, 0x0, 0x60, 0x3f, 0x69}}]}}]}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 359.130015][ T54] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 359.148898][ T54] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.162111][ T54] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 359.171386][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.186772][ T54] usb 1-1: config 0 descriptor?? [ 359.242146][T12328] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.249438][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.258415][T12328] device bridge_slave_0 entered promiscuous mode [ 359.270959][T12328] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.278323][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.287715][T12328] device bridge_slave_1 entered promiscuous mode [ 359.306683][ T54] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 359.356798][T12328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.384199][T12328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.421867][T12328] team0: Port device team_slave_0 added [ 359.432289][T12328] team0: Port device team_slave_1 added [ 359.532535][T12246] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 359.616863][T12328] device hsr_slave_0 entered promiscuous mode [ 359.776050][T12328] device hsr_slave_1 entered promiscuous mode [ 359.783133][T12246] usb 2-1: Using ep0 maxpacket: 8 [ 359.799746][ T3914] usb 1-1: USB disconnect, device number 2 [ 359.805919][ C1] iowarrior 1-1:0.135: iowarrior_callback - usb_submit_urb failed with result -19 [ 359.820194][ T3914] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 359.832782][T12328] debugfs: Directory 'hsr0' with parent '/' already present! [ 359.906139][T12246] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 359.914385][T12246] usb 2-1: config 0 has no interface number 0 [ 359.989913][T12328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.014195][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 360.022837][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 360.039935][T12328] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.056264][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 360.066440][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 360.075684][ T3914] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.082918][ T3914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.094111][T12246] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.7d [ 360.103374][T12246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.111637][T12246] usb 2-1: Product: syz [ 360.116301][T12246] usb 2-1: Manufacturer: syz [ 360.120982][T12246] usb 2-1: SerialNumber: syz [ 360.176405][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 360.185513][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 360.195056][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 360.204145][ T3914] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.211714][ T3914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.220276][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 360.230439][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 360.240555][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 360.250641][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 360.260204][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 360.270128][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 360.280175][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 360.289377][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 360.298636][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 360.308061][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 360.319876][T12328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 360.320651][T12246] usb 2-1: config 0 descriptor?? [ 360.337346][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 360.387540][T12328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.590196][T12250] usb 2-1: USB disconnect, device number 2 19:56:07 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7fffffff, 0x17042f6be453ab36) sendfile(r2, r5, 0x0, 0x3) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 360.953375][T12246] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 361.354743][T12246] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 361.363119][T12246] usb 1-1: config 0 has no interface number 0 [ 361.369315][T12246] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 361.380126][T12246] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 361.391619][T12246] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 19:56:08 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7fffffff, 0x17042f6be453ab36) sendfile(r2, r5, 0x0, 0x3) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 361.402980][T12246] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.416169][T12246] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 361.425324][T12246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.436894][ T3914] usb 2-1: new high-speed USB device number 3 using dummy_hcd 19:56:08 executing program 0: unshare(0x40600) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xfffffff9, 0x20}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0x8) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r1, 0x0, 0x0) read(r0, &(0x7f0000001380)=""/45, 0x2d) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000140)) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r4, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x95c8}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x2c0}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) [ 361.596282][T12246] usb 1-1: config 0 descriptor?? [ 361.630459][T12246] usb 1-1: can't set config #0, error -71 [ 361.650228][T12246] usb 1-1: USB disconnect, device number 3 [ 361.684158][ C1] hrtimer: interrupt took 44658 ns [ 361.703799][ T3914] usb 2-1: Using ep0 maxpacket: 8 [ 361.822788][ T3914] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 361.831188][ T3914] usb 2-1: config 0 has no interface number 0 [ 362.004000][ T3914] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.7d [ 362.013340][ T3914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.021572][ T3914] usb 2-1: Product: syz [ 362.026536][ T3914] usb 2-1: Manufacturer: syz [ 362.031238][ T3914] usb 2-1: SerialNumber: syz [ 362.082574][ T3914] usb 2-1: config 0 descriptor?? 19:56:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x3f) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4888d5324fd8e276b4481776e29e28cc6f", @ANYRES32=r7, @ANYBLOB="0000000000000000280000001800020014000100000700"/36, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002400070600"/20, @ANYRES32=r7, @ANYBLOB="00000000a287662ce79d9a3a956901dddac2de9df1ffffff0000000008000100"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000220002009a39122cbd7000070001000a148007010000000300000024"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', './file0', [{0x20, 'trusted.overlay.opaque\x00'}, {0x20, 'md5sumcgroup'}, {0x20, 'y\x00'}, {}, {0x20, 'y@'}, {0x20, '-,&}wlan0vboxnet0vboxnet0procwlan0#'}], 0xa, "f96959047d9cbc9c197116ec08ce42beeaf94fc101ee5a864a13cf8e801d262aaca5a3ad197af5fa5edda03e86f37b37b2c871ee3f5935e1d3d03c7e9c24610e2f1f5ef32c89ab2ecf3f6e53b710535ec4eca022b423dd103d388b7e0ef38491cec2b341e62a9ba4132a81cfc77fd2d04514018707af0bcfa8c39d5528ce0de7e8c6fb080a2771f1609d764dbb6c7d55b2e468ac737d85b77d54249bc5a0076205bd0c7f0dde484b904cab27d27064f54c91772f0b7fc3fe35f628dcefb3b982e80ecf5acac065d0cac3b461b4c76aaa9cbebbae"}, 0x12f) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r11, &(0x7f00000000c0), 0x1c) r12 = dup2(r11, r11) setsockopt$inet6_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) read$usbmon(r12, &(0x7f00000001c0)=""/32, 0x20) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x47, 0x24, 0x607, 0x0, 0x0, {0x0, r13, {}, {0xc, 0xffff}}}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@dellink={0x1d8, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_PROTO_DOWN={0x8}, @IFLA_CARRIER={0xffffffffffffffd5, 0x21, 0x9}, @IFLA_LINK={0x8}, @IFLA_IFALIASn, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x48}}, 0x0) fallocate(r2, 0x0, 0x9656, 0x0) close(r0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000080)='trusteK\xe8\x00\x00\x13S\xc4\xfe\xe6\xd2\xc3\xd1\xedq\x04e\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 19:56:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x3fe, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x56a, 0xd2, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x3c, {0x34, 0x0, "055b08e2b94db664517b80748e6597b20f948768d71ae713b641a5630d0becb54c4070509bf8d36eff46a06eaf741e45f63374f1a84942d05dc9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') [ 362.353394][ T3914] usb 2-1: USB disconnect, device number 3 [ 362.403460][T12369] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 19:56:09 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket(0x10, 0x1, 0x9) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/76, 0x4c}, {&(0x7f0000000040)=""/57, 0x39}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f0000000440)=""/79, 0x4f}], 0x5, &(0x7f0000000640)=""/137, 0x89}, 0x3) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000580)=@xdp={0x2c, 0xc, r2, 0x20}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000700)="45be3848228ea8b6f30591d653dc54ce53e2005be4978427f8ac8f64b87634245f9884e77116ad70683b39e173b35475c422dba2639e486e2882698d1498a70d3727e044548bad9dca8ca4e6f4be67814c3064241e501a8ab049fb06f2e6dc412d64d35666fab70744dfad87dd71b6bacd7f22674ed902bba2dbdc7c6c59902d9a94ebf1d1d8f4c9bffda206a3d66e7dfba482f145798f784caadbb52d1319a924aa92b4a65a3a77a3983a2f4c82054b9c1190d69ec9f4b6fc484a72946a43c8c298c1f741de4caeeb4b546b05310fcd4807cf01d67e665117fca56c5340bf6d284f73f239aa71a3", 0xe8}, {&(0x7f0000000800)="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", 0xff}, {&(0x7f0000000900)="a516ff0006b241077cd2a959d2d871e8b75ce507a8f379a891398ee67de4cc6d9ce9452be3d6ba716a7b8015e9934c96510a21fd3b759cb226d0cbc0c50bfcec4fed5eb35facd1936d17ed694d06f9b1f6767f0479406d8abc64dd6006670174dd03b8", 0x63}, {&(0x7f0000000980)="c99b25e4a60d42619871a0ea6ca1786b001d3d422d68cd4725818ecb36f8f77365345bc0341a7c7483d7fb75c1c4ea03b96b2fe5fac7c07bb600f7fb8817d2b221c785be875c355334546868bb8a3f386501d9472e9d8420e5da7b426fafacba2f0085686d501ae5124a296eed72aa7459c3a67ce29ecba7bad5ae7f5ab4e436c36d058e3639623505a83f98ae12c3d729e99ac00061a293b512a6dba95bfc20367193255b05e3e136a77d4f3ba992ba599b42f37642930125f3ee03f8f6987e92429d4736d730ef7937b165abdeedda1798bd1866cb6a54987da51e52", 0xdd}, {&(0x7f0000000a80)}], 0x5, &(0x7f0000000b40)=[{0xf8, 0x200, 0xff, "7c04108e486870c73e070b072e020016f138b8896c208860a4985b0104735fcfd460e793f0bd2de77f9a4814fdbd3afcf0008eb75ad3f568b5bc13755d5a1f5736219eafeea5cc308f989992971eb32cced09ca1d864d06d70e9b73503bf6f1875e3c6a5794445f9367a4ba8de67cecdf23b3c839e6f2959e2bd9139872f4a91c93cf4547d1b7bac63ad55d409bafff5ce5532037de2184b4099a2776b720d7312ccde5afc591ef6602ca2f7a2233903d34daca03a52bea7763524233f6bac8b132e9a443a25472e63678b25599c5ca9ce390111951ef7f9ea8123c5c76b2c8165d6facdef"}, {0x110, 0x10c, 0x9, "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"}, {0x38, 0x11, 0x9, "de7df841006a5ee81acfd982bb8793b932d1d5b795a14f35d41e857962f606a113538e5650d6b903"}, {0x1010, 0x0, 0x1, "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"}], 0x1250}, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x2d}], 0xaaaae92, 0x0, 0x0, 0x22b89d5f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000000c0)=0xffffffcf, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$inet6(r1, &(0x7f00000000c0)="720cc11a555357f25addcc138846125ce64f63ddefa2247ffcd50a5c528ca2bcb524a1212422574e6affd6438c24347c5f84d3ce10405585819dbe5a4dd3f94668601a3f5e58257b771411b6bb4b3679900031bb956301240d79eef1fe75bb3613351c75aefb3dcb2b453db43a051a3159d9c474d6f5dc27f1962a6b70ec68d516cc37703dbf93b37d7bbb90e8c6011ec0e38f1536c6ac404b5e8948cd53a8be396597493d5e30dcd37f2688ec55bec7c1dec058544b68f777c14340a34ebf4b7661d50f45356bc4b684c1c2f07df878c864a618ee8e3b", 0xd7, 0x3400004d, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @ipv4={[], [], @local}, 0xc22}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x1ff, @dev={0xfe, 0x80, [], 0xf}, 0x2000000}, 0x1c) r6 = getpid() bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001e00)={&(0x7f0000000a80)='./file0\x00'}, 0x10) tkill(r6, 0x1000000000015) ptrace(0x10, r6) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000b6e00200000000464a654300d690f4b6160c"], 0x18}}], 0x1, 0x0) [ 362.902138][ T3914] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 363.283486][ T3914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.296600][ T3914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 363.309713][ T3914] usb 2-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.40 [ 363.318881][ T3914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.376315][ T3914] usb 2-1: config 0 descriptor?? [ 363.854414][ T3914] wacom 0003:056A:00D2.0001: Unknown device_type for 'HID 056a:00d2'. Assuming pen. [ 363.865976][ T3914] input: Wacom Bamboo Craft Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D2.0001/input/input5 [ 363.969187][ T3914] wacom 0003:056A:00D2.0001: hidraw0: USB HID v0.00 Device [HID 056a:00d2] on usb-dummy_hcd.1-1/input0 [ 364.055081][ T3914] usb 2-1: USB disconnect, device number 4 19:56:11 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x800) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x400000, 0x0) r2 = accept$alg(r0, 0x0, 0x0) r3 = eventfd2(0x0, 0x80801) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) r5 = socket(0x2, 0x80000, 0x9b) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0xc0, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80, 0x0) r13 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x260001, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = open_tree(r0, &(0x7f00000003c0)='./file0\x00', 0x1800) r16 = socket$inet_udplite(0x2, 0x2, 0x88) r17 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video1\x00', 0x2, 0x0) r18 = socket$can_raw(0x1d, 0x3, 0x1) r19 = pidfd_open(0xffffffffffffffff, 0x0) r20 = gettid() getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) r22 = getegid() sendmsg$netlink(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000500)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r1, r2]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r4, r5, r6, r0]}}, @rights={{0x18, 0x1, 0x1, [r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r12, r0, r13]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r14, r15, r16, r17, r18]}}, @rights={{0x1c, 0x1, 0x1, [r0, r19, r0]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}], 0x130, 0xde7c9634450a60a5}, 0x20) lseek(r17, 0x47, 0x2) r23 = syz_open_dev$cec(&(0x7f0000000680)='/dev/cec#\x00', 0x3, 0x2) write$P9_RWALK(r23, &(0x7f00000006c0)={0x30, 0x6f, 0x2, {0x3, [{0x40, 0x0, 0x4}, {0x8, 0x0, 0x8}, {0x20, 0x0, 0x6}]}}, 0x30) r24 = syz_open_dev$dspn(&(0x7f0000000700)='/dev/dsp#\x00', 0x3, 0x202240) mmap(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x4, 0x30, r24, 0x0) [ 364.842186][ T3914] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 365.225599][ T3914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.231762][T12382] IPVS: ftp: loaded support on port[0] = 21 [ 365.236663][ T3914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 365.236769][ T3914] usb 2-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.40 [ 365.264886][ T3914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.370402][ T3914] usb 2-1: config 0 descriptor?? [ 365.508092][T12382] chnl_net:caif_netlink_parms(): no params data found [ 365.625537][T12382] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.632879][T12382] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.641658][T12382] device bridge_slave_0 entered promiscuous mode 19:56:12 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x3fe, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x56a, 0xd2, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x3c, {0x34, 0x0, "055b08e2b94db664517b80748e6597b20f948768d71ae713b641a5630d0becb54c4070509bf8d36eff46a06eaf741e45f63374f1a84942d05dc9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') [ 365.732375][ T3914] usbhid 2-1:0.0: can't add hid device: -71 [ 365.738593][ T3914] usbhid: probe of 2-1:0.0 failed with error -71 [ 365.784452][T12382] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.791706][T12382] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.792824][ T3914] usb 2-1: USB disconnect, device number 5 [ 365.800804][T12382] device bridge_slave_1 entered promiscuous mode 19:56:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x40029}}}}]}}]}}, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x29, {0x29, 0x0, "90a6895aefd79b87429d14ba8a6a2c922a8bb666b2dfea61dcba9f5bf786627df702a30d6479aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) [ 365.925480][T12382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.951002][T12382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.005582][T12382] team0: Port device team_slave_0 added [ 366.017883][T12382] team0: Port device team_slave_1 added [ 366.106689][T12382] device hsr_slave_0 entered promiscuous mode [ 366.143202][T12382] device hsr_slave_1 entered promiscuous mode [ 366.184997][T12382] debugfs: Directory 'hsr0' with parent '/' already present! [ 366.214364][ T3914] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 366.233040][T12250] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 366.249210][T12382] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.256586][T12382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.264425][T12382] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.271700][T12382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.359294][T12382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.385686][T12246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.397979][T12246] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.418691][T12246] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.445096][T12246] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 366.472726][T12250] usb 3-1: Using ep0 maxpacket: 8 [ 366.487014][T12382] 8021q: adding VLAN 0 to HW filter on device team0 19:56:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_H^(\x00\x92\xdb\xcc\x87a\xdf/m\xda\xdeFmcast\x00') r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x20000) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x0, 0x1, {0x18, 0x36, 0x11, 0xd, 0x0, 0x56, 0x0, 0x141, 0x1}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffffffffffff, 0x200100) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000240)={0x80, 0x0, 0x10003, 0x4}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000002c0)={0x6, r4, 0x3, 0x9}) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r5 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000140)={{0x1, 0x0, @identifier="e395fd15358d8728229fa6a0e11d863b"}, 0x3e, [], "2928a48ff9fd236b5ad272e75ef218098660879b14def935734002215c8bd12ea2df0dc7426a241c42dfb0b502cb0135580351fafce4ce8cfbe15dbe97fc"}) write$P9_RWRITE(r5, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0xffffffff}, 0xb) lseek(r0, 0x400000000000060, 0x3) [ 366.526451][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.536260][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.545402][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.552648][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.587297][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.597282][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.606355][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.613551][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.622339][ T3914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.623405][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.633378][ T3914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 366.649352][T12250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.654358][ T3914] usb 2-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.40 [ 366.665614][T12250] usb 3-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 366.674566][ T3914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.683439][T12250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:56:13 executing program 0: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd54f7c57decaee87, &(0x7f0000000000)="2ecbb1860d4e2a7e2456a0ef69d82cf021cefa6561e33454747c1416fe60007a6a0e1abe", 0x24) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x1f, 0x0}}], 0x40000000000023d, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000c86f88)={0x2, 0x232, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0/file1\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x2cc, 0x0) [ 366.741316][T12250] usb 3-1: config 0 descriptor?? [ 366.763816][T12382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.775269][T12382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.803908][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.814183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 366.824168][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.833655][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 366.844026][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.853685][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.863066][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.872799][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.882000][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.903825][ T3914] usb 2-1: config 0 descriptor?? [ 366.944923][T12382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.963577][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 366.973786][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 367.229220][T12250] wacom 0003:17EF:6004.0002: unknown main item tag 0x0 [ 367.265823][T12250] wacom 0003:17EF:6004.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6004] on usb-dummy_hcd.2-1/input0 19:56:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="c800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0012001000010069703665727370616e00000088000200140007005e4592e3405362b87ee2a958803366160400120014000700c4ddbba432f1ed5a7009fd4a6dea08ca14000700fe8000000000000000000000000000bb14000600fe8000000000000000000000000000bb080010004e20000008000100", @ANYRES32, @ANYBLOB="08000109", @ANYRES32, @ANYBLOB="0800030001000000080018001f000000080010004e2200000c000a00aaaaaaaaaa1c0000"], 0xc8}}, 0x0) [ 367.391464][ T3914] wacom 0003:056A:00D2.0003: Unknown device_type for 'HID 056a:00d2'. Assuming pen. [ 367.402885][ T3914] input: Wacom Bamboo Craft Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D2.0003/input/input11 [ 367.433222][T12250] usb 3-1: USB disconnect, device number 2 [ 367.446952][T12416] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 367.455675][T12416] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 367.464516][T12416] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 367.472713][T12416] netlink: 'syz-executor.3': attribute type 24 has an invalid length. [ 367.480932][T12416] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 367.494222][T12416] batman_adv: Cannot find parent device [ 367.509849][ T3914] wacom 0003:056A:00D2.0003: hidraw0: USB HID v0.00 Device [HID 056a:00d2] on usb-dummy_hcd.1-1/input0 19:56:14 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x12\x00', 0x80800, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001400)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="be13bbde46d6ef6131cfd023d7536387cb8940cf41298db551d7d254cf2e7ad75d3fd05f9595ee5d315bfba3f9748c1ac5f729d85aa53f5b7e3682601c4d5e0313a7dba46945ef51585767fb0e4e6fe36cd9990488dd013364de05969c4ee1423c79c448ee8537e976ce7e98a0a6f27f2a15532d811f974ccfb19cffadbfc2c62f364c1ae1467f27ee91774559ac731f5a4e30345eaf3c8fcc1d7694da58a4629f4b88ac673750282d96a8aedaa2a622cbb9c5093ee0cebfdffe92621895f6e14a666392da", 0xc5}], 0x1, &(0x7f0000000200)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}], 0x38, 0x1}, {&(0x7f0000000240)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000013c0)=[{&(0x7f00000003c0)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8000}], 0x2, 0x64000000) write$char_usb(r0, &(0x7f0000001540)="d8b83d2cf35cdd65de7896e84d5983363f3b2c909e9fdda337fa0a46e8bd4ff8bfb2f21e1061eb1cf4950692afd875d32b08027d33f063c87f25356e9eea323cca15af2991eae9f10020343d44e21089b3ea2bd1091b027df3a4beaf639d3e20558b5953e41a8be90b3e857c55cea00bd9e4b10b8119219f1c97aeba17f05ae34d1c3d80967c8b1bd70142ec0be056ee15a1cda609c066e241b953f47fc635f1d3ef7a4a9d8741eee26ca45b2ec7e9a8cb424c67e3", 0xb5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x13, &(0x7f0000001480)=ANY=[@ANYBLOB="b7020000f7ffbfa70000000000000702000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe2d64050000000000450400000010000007040000002d2000b7040000100000206a0a00fe00000000850000002e000000b7000000000000009500000000000000b865cab9e15e66c5c5a7c6976cc60e3cfa2f24603c97af26663c866e05e53962cf596ce9beb20be15df355632c"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400}, 0x10}, 0x70) sysfs$3(0x3) [ 367.631757][ T3914] usb 2-1: USB disconnect, device number 6 19:56:14 executing program 3: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@initdev, @dev}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_getnetconf={0x14, 0x52, 0x402, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x44800) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20100, 0x0) getsockname$netlink(r2, &(0x7f0000000280), &(0x7f0000000200)=0xc) 19:56:14 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x3b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "c4112c82d3b100", "37f2120e2be287cabd0cbccfeba9c5da978bfbefbc62ccaedfd7b36846a64a6b", "4b223d85", "0672f669107143f5"}, 0xfffffffffffffe51) 19:56:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) clone3(&(0x7f0000000280)={0x1000, &(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000140)=""/26, 0x1a, &(0x7f0000000180)=""/231}, 0x40) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000002c0)=r5) r6 = socket$can_raw(0x1d, 0x3, 0x1) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000008845d165fce03d703b8b6b08dc8e53c44244b4ba275da8e47179645d3b587438a0f6539b4a"], 0x1, 0x0) bind$can_raw(r6, &(0x7f0000000040), 0x10) setsockopt(r6, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r6) [ 367.980576][T12434] device bridge_slave_1 left promiscuous mode [ 367.987464][T12434] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.037097][T12434] device bridge_slave_0 left promiscuous mode [ 368.043990][T12434] bridge0: port 1(bridge_slave_0) entered disabled state 19:56:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000340)='9', 0x1}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000000c0), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000140)) [ 368.212172][T12250] usb 3-1: new high-speed USB device number 3 using dummy_hcd 19:56:15 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r14 = syz_usb_connect$hid(0x4, 0x6, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYRESHEX, @ANYRES64=r0, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[], @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRESDEC=r0, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESDEC=r5], @ANYRES32=r10, @ANYRES64], @ANYRESHEX], 0x0) syz_usb_control_io(r14, 0x0, 0x0) syz_usb_control_io$hid(r14, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002202"], 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) r18 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r18, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r17, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r19}, 0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r16, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r19, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r15, 0x84, 0x23, &(0x7f0000000100)={r20, 0x8001}, 0x8) syz_usb_control_io(r14, 0x0, 0x0) 19:56:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xc000, 0x0) connect$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x2}, 0x3}}, 0x10) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="240000002c0007041dfffd946f610500070000001d00000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 368.452871][T12250] usb 3-1: Using ep0 maxpacket: 8 [ 368.572961][T12250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.584025][T12250] usb 3-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 368.593218][T12250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.603973][T12250] usb 3-1: config 0 descriptor?? [ 368.677634][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 19:56:15 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cc6c6840110f4020e5e20020000109022400010000000009043dc6d08bd25236f3210f00000000000009058c4e0000000000b406312ef1"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) umount2(&(0x7f0000000040)='./file0\x00', 0xd) connect$inet6(r0, &(0x7f00000000c0), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 'client0\x00', 0xffffffff80000000, "38977155b07008ee", "f9fc9df2a6c6da3ab96991164309c46d9e6ebc7e56ccece7c8d9e648011eff8f", 0x4, 0x81}) [ 368.853135][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 19:56:16 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000140)={"0afb8a0ed7766a039a6e4aeb9f694ad3b1b51c7a1ae3a286a9d9b9c878b75c2642eb8bf30b8cb368c5e9bae3d11f729dd7ec11073c02afd7e3f85c713a47257c5f0a305bfc205237f7f64e9d3cbaf78aabedd3e31891d9d3af377fdef7fa36adc034cafe39ca269fa775594a3f77a1ecb036ccdd5ae391497d0e124f6b8c21f4283ab7089a3573e3357eb3e41867343d463af37a6ccdca92890855d65ba2edad9bd7efc7a9eca1d013c247a4d58ac56b223c936ef8864b179d8258b8a12be10a5ab9c19bc30d57c0fffb669d4f0a335c12b6814175d238c5328cec596618e87f59c15a3879e4f4ee75e3e3eb713917f8c188e1b2105b850ed6710c30532a3a8444593be5854cad40112b3850df520493395751b551db391dda33c0e5aa86d02c44ae93373639acbd4a201684267aee32a3ff61700a1d2cac0b934fad1156c5c6dfb055f06c2c0f4045534d920815ba03a98cfe1dee0857283e76bbb6966c84eb9b34d4e03d15769c53dfc93b37261656e8403f73236b24e5ed52dbaa59c21602e382de6798b3b92dc5029e7829102035f14aeb3c90386ef67d5c2863e3195c546d4f9375f19fb84b500b663ea753c2bf661f6fa1807b0816cc205e74440bc2f8a05ecaeffce9b53ab39aa1203533f5119d33e42784b4b503fe84eb5587042e761627b77211c3af9c002922a305b750f86e01f0a0020e68e3a772bd13360b73b41f6d4ee9a34aa515809e32f757247e4ef68d5cfab14aece68420c951449f59a039aa75d600534192dd4ad28107b928be2120e7d483f29b6e5decac0d3e018bef05de3baa6386ab8f34e793cc7c45c1110b84a1df61b1dc717f64bebdb022c4c4fe339bd694590bf19689615b20e14035a1b8aeeec4df9b20750da842f2944c594173344b00d7d4e9cea835adc9cc60edeff58a1a6a478b9d262273d9bf4f8c804021a6e75de36f65edccfa641ddba408414132ab06ca736882d0ea5e39de0082f4311ea96ca71bb08b266b9eece6f7722f6c3b25d38d333349c5ea0cac56281e4c553b7e5df797ea82b26903bcbb4175b009a22340dc5538a455007d46f365eccf5dc89a8da3de7ba6ef17929dfb7696f0b3db466fef624398d856d323382ed907b8281f08080aebe2eabd195b78fb6c56bbeceba83818731fc9a43999ef3881807c5860b877e0105240d71e4656fa4c77e6904b05e89581014117e6f6b7c9056a4769272c0ff2ee9db8b49e0fb5b6fe1c4fe8ecb2cd76e625566e0ce1f00d84e435f0e528709ce6418c92cebde1c6f058a3e43e682d83e07d1e5647048f933f9e44e5f6467988d1f073b57bee7952350c3e3f94f0b40caddba88390d1a2c7403d16226fc07c66c7474c0b21854f34e9c333a44114908c090267d0c56002e9dbf50dd3d4d88cbbf835e73d131ccd8b19693792ccb6cbed1547aa154c1d190faf"}) syz_usb_connect(0x5, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) 19:56:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000008ef0ed07240000000000109022d00010000000009040000020301010009210000000122060009058103000000000109050203000000000093e3593f92e3f170c2a2dbeb0c93f83f5880881eb40234db3c50dfd1a5f12af8b104991bdcf394618cce0c0b237c11284e01d8feb7eb32da91d50306ba2e11b8491ea73aa373e78726979c0ea6e272f5046ce5d7db0c7c3668d561891c28cd2a7b6011b2298267596327b6ad"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="9ffe"], 0x0}, 0x0) [ 369.083727][T12250] usbhid 3-1:0.0: can't add hid device: -71 [ 369.089974][T12250] usbhid: probe of 3-1:0.0 failed with error -71 [ 369.119953][T12250] usb 3-1: USB disconnect, device number 3 [ 369.182512][ T12] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 369.353349][T12439] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 369.542470][ T12] usb 4-1: config 0 has an invalid interface number: 61 but max is 0 [ 369.550831][ T12] usb 4-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 369.561328][ T12] usb 4-1: config 0 has no interface number 0 [ 369.567616][ T12] usb 4-1: too many endpoints for config 0 interface 61 altsetting 198: 208, using maximum allowed: 30 [ 369.578897][ T12] usb 4-1: config 0 interface 61 altsetting 198 has 0 endpoint descriptors, different from the interface descriptor's value: 208 [ 369.592382][ T12] usb 4-1: config 0 interface 61 has no altsetting 0 [ 369.643646][T12439] usb 1-1: Using ep0 maxpacket: 8 [ 369.672616][ T12] usb 4-1: New USB device found, idVendor=0f11, idProduct=2040, bcdDevice=e2.e5 [ 369.682678][ T12] usb 4-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 369.690850][ T12] usb 4-1: Product: syz [ 369.703026][ T12] usb 4-1: config 0 descriptor?? [ 369.772544][T12439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.783717][T12439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 369.794731][T12439] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.40 [ 369.803893][T12439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.816553][T12439] usb 1-1: config 0 descriptor?? 19:56:17 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x6d, 0x5, 0x40, 0xc45, 0x602d, 0xb2ea, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x0, 0xa, 0xae, 0xbc}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0xac, &(0x7f0000000480)={0x0, 0x0, 0x1, "10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x25}, 0x1) [ 369.986469][ T12] ldusb 4-1:0.61: Interrupt in endpoint not found [ 370.033213][ T12] usb 4-1: USB disconnect, device number 2 19:56:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000240)=0x1ff, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) fsetxattr$security_selinux(r1, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)=ANY=[@ANYBLOB="020100090a000000000000000000000002001000000a00000000000000000000030006000000000002000000e00000010000000000000000030005000000000002000000e00000010000000000000000"], 0x50}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x6, 0x10000) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0xffffffff, 0x7, 0x4, 0xc3, 0xff}) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r2, &(0x7f0000000180), 0x40002c0, 0x0) [ 370.323485][T12250] usb 2-1: new high-speed USB device number 7 using dummy_hcd 19:56:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000140)=0xb6) connect$inet6(r0, &(0x7f00000000c0), 0x1c) r1 = dup2(r0, r0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x7022}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x101, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, [{0x4, 0xa}, {0x4, 0xa}, {0x4, 0x2}, {0x4, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x0) [ 370.682716][T12250] usb 2-1: config 0 has an invalid interface number: 92 but max is 0 [ 370.691085][T12250] usb 2-1: config 0 has no interface number 0 [ 370.697502][T12250] usb 2-1: New USB device found, idVendor=0c45, idProduct=602d, bcdDevice=b2.ea [ 370.706768][T12250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.760834][T12250] usb 2-1: config 0 descriptor?? [ 370.807405][T12250] gspca_main: sonixb-2.14.0 probing 0c45:602d [ 370.849102][T12467] device hsr_slave_1 left promiscuous mode 19:56:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000272000)) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) clone3(&(0x7f0000000240)={0x49252200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 370.992973][T12401] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 371.003006][T12439] usbhid 1-1:0.0: can't add hid device: -71 [ 371.009342][T12439] usbhid: probe of 1-1:0.0 failed with error -71 19:56:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x61) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{}, {}]}) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x329, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000002c0)) fchdir(r4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom$unix(r2, &(0x7f00000000c0)=""/67, 0x43, 0x40000101, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r9 = socket$inet(0x10, 0x3, 0x4) sendmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="4c0000001200ff095ffe00006fa283b724a6006b00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x151}, 0x0) [ 371.046243][T12439] usb 1-1: USB disconnect, device number 4 19:56:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x8dffffff, 0x0, 0x0, 0x0, 0x8000000055}, 0x98) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x1, 0x3, {0x0, 0x1, 0x8000, 0x32bc5c194cfcfb9f, 0x6}}) r4 = dup(r1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f00000000c0), 0x1c) r6 = dup2(r5, r5) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 371.254650][T12250] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 371.353950][T12401] usb 4-1: config 0 has an invalid interface number: 61 but max is 0 [ 371.362921][T12401] usb 4-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 371.373640][T12401] usb 4-1: config 0 has no interface number 0 [ 371.379842][T12401] usb 4-1: too many endpoints for config 0 interface 61 altsetting 198: 208, using maximum allowed: 30 [ 371.391070][T12401] usb 4-1: config 0 interface 61 altsetting 198 has 0 endpoint descriptors, different from the interface descriptor's value: 208 [ 371.404882][T12401] usb 4-1: config 0 interface 61 has no altsetting 0 [ 371.498248][ T3914] usb 2-1: USB disconnect, device number 7 [ 371.562677][T12401] usb 4-1: New USB device found, idVendor=0f11, idProduct=2040, bcdDevice=e2.e5 [ 371.571850][T12401] usb 4-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 371.580384][T12401] usb 4-1: Product: syz [ 371.621526][T12401] usb 4-1: config 0 descriptor?? [ 371.742971][T12441] usb 1-1: new high-speed USB device number 5 using dummy_hcd 19:56:18 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10b400, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x9) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8889}, 0x20000000) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x400042, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r3, &(0x7f0000000240)="fa3e111ad1389837cd08b61aac2721366503020a9dc2c9a520ae92d3bac268601ce65e35cb404231eac212e5fcdf31541aa70c304e5a3c0ce7d72199c7c8f4a4873149a4c6236681f8e77e5fe555a23facc21cbe4e613a003baacb86dac1b5c7dcf7ba9ca622"}, 0x20) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000340)={0x0, 0xcf}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000003c0)={r5, 0x4}, &(0x7f0000000400)=0x8) ioctl$CAPI_GET_MANUFACTURER(r4, 0xc0044306, &(0x7f0000000440)=0x85d) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x561400, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x134, r7, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffc0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc56}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x54}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x91}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$RTC_UIE_ON(r6, 0x7003) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000700)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r8, 0xc0106418, &(0x7f0000000740)={0x2, 0x6, 0x400, 0x3f, 0x10, 0x10000}) r9 = syz_open_dev$sndpcmp(&(0x7f0000000780)='/dev/snd/pcmC#D#p\x00', 0x2, 0x60001) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000007c0)={0x0, @dev, @empty}, &(0x7f0000000800)=0xc) connect$packet(r9, &(0x7f0000000840)={0x11, 0x1, r10, 0x1, 0x1f, 0x6, @remote}, 0x14) r11 = socket$inet_smc(0x2b, 0x1, 0x0) fsync(r11) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x7f, 0x12, 0xc, 0x10, "1703fd73c139459bf6e5f3c6d5259f26fe6b21fa7b4b69b21b73a80d4ce57839c55fbda89c714d37f0317cdd938e32d42b887cf6af2cac078cd0299ebf79ee9a", "de5dc2f5241dfe72dc85bbd48bf0233040764307c3f945efda0a8abd75081f01", [0x8, 0x1]}) r12 = syz_open_dev$radio(&(0x7f0000000940)='/dev/radio#\x00', 0x1, 0x2) fcntl$getflags(r12, 0x40a) r13 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000980)='/dev/dlm-monitor\x00', 0x80180, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r13, 0x84, 0x6c, &(0x7f00000009c0)={r5, 0x25, "cf492c5a520c13470c210f340d8ca79d67939bc2c2322b00b50331f77d2efbe81f6078a9de"}, &(0x7f0000000a00)=0x2d) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000a40)={0x9, 0x5}) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BLKRRPART(r14, 0x125f, 0x0) 19:56:19 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd0, 0xa6, 0x8, 0x1209, 0x2323, 0xdfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x63, 0x62}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000400)=ANY=[@ANYBLOB="080004000000c84b4b01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0xac, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00@\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 371.905712][T12401] ldusb 4-1:0.61: Interrupt in endpoint not found [ 371.943294][T12401] usb 4-1: USB disconnect, device number 3 [ 371.982191][T12441] usb 1-1: Using ep0 maxpacket: 8 19:56:19 executing program 2: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x40000800, 0x1, 0x2000000, 0x1, 0x7, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0xc83a0360dda0959, 0x0) r4 = dup2(r2, r3) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) write$P9_RLERRORu(r4, &(0x7f0000000040)={0x19, 0x7, 0x1, {{0xc, '/dev/radio#\x00'}, 0x6}}, 0x19) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r5, &(0x7f00000000c0), 0x1c) r6 = dup2(r5, r5) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000180)={{0x0, 0x9, 0xb8, 0x6}, 'syz0\x00', 0x4e}) [ 372.106073][T12441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.117288][T12441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 372.128524][T12441] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.40 [ 372.137703][T12441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.214179][T12441] usb 1-1: config 0 descriptor?? 19:56:19 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) rename(&(0x7f0000000240)='./file0/bus/file0\x00', &(0x7f00000003c0)='./file0/bus\x00') r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000000c0), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) write$cgroup_int(r2, &(0x7f0000000080)=0x88, 0x12) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x9, 0x81, 0x2, 0x7}, 0x6) [ 372.274115][ T3914] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 372.442929][T12401] usb 4-1: new high-speed USB device number 4 using dummy_hcd 19:56:19 executing program 2: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace$pokeuser(0x6, r0, 0x8, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) close(r2) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x0, 0x0) readv(r2, &(0x7f00000002c0), 0x3a9) write$P9_RGETLOCK(r3, 0x0, 0x0) 19:56:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_dccp_buf(r0, 0x21, 0x0, &(0x7f0000000180)=""/111, &(0x7f0000000040)=0x6f) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) [ 372.604993][T12519] IPVS: ftp: loaded support on port[0] = 21 [ 372.632470][T12441] usbhid 1-1:0.0: can't add hid device: -71 [ 372.638776][T12441] usbhid: probe of 1-1:0.0 failed with error -71 [ 372.673975][ T3914] usb 2-1: config 0 has an invalid interface number: 92 but max is 0 [ 372.682275][ T3914] usb 2-1: config 0 has no interface number 0 [ 372.682637][T12441] usb 1-1: USB disconnect, device number 5 [ 372.688468][ T3914] usb 2-1: New USB device found, idVendor=0c45, idProduct=602d, bcdDevice=b2.ea [ 372.696647][T12401] usb 4-1: Using ep0 maxpacket: 8 [ 372.703630][ T3914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.795582][ T3914] usb 2-1: config 0 descriptor?? [ 372.836819][ T3914] gspca_main: sonixb-2.14.0 probing 0c45:602d [ 372.843431][T12401] usb 4-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb [ 372.852635][T12401] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.920088][T12401] usb 4-1: config 0 descriptor?? [ 373.049796][T12519] chnl_net:caif_netlink_parms(): no params data found 19:56:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x7, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r5}}, 0x24}}, 0x0) 19:56:20 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)="f7", 0x1}], 0x1, 0x0, 0x5f}}, {{&(0x7f0000000480)={0x2, 0x0, @initdev}, 0xffffffffffffffdc, &(0x7f00000008c0)=[{&(0x7f00000004c0)="d6", 0x1}], 0x1, &(0x7f00000009c0)=[@ip_tos_int={{0x0, 0x0, 0x1, 0x4}}], 0x20}}], 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0xffff, 0x4) [ 373.132703][ T3914] sonixb 2-1:0.92: Error reading register 00: -71 [ 373.167551][ T3914] usb 2-1: USB disconnect, device number 8 19:56:20 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@tipc=@id, &(0x7f0000000480)=0x13a) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000440)=0x48f044398b46f36c, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x24) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f00000000c0)) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r6 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000240)="1b8a7acf1fc43f2056f77ae1c247bbdcaf30a108d5eff6591d21ea57ef93489d569f79eedf09b5bad8f6f732e31c76da5e0919ecd02444f496ca421d5edc2c7fecc3b45f38d40b9eb5f988afb26152b85c5ebbd9ecf0a2501aa25b155946efaee4b681207789905101264811890259a5c0de6e273f0a0bc46d4a070ec0226b77c034badb8f0caa9638c00af4ebb25496cbc7ff0565d5305c018ab03f981feeda6c5cb725b584eaf2d14147"}, {&(0x7f0000000300)="5d1b6d8b429a502aa57da6c5b223618d7d2d2f1354cdf74148228ed991195830cb96e8346d55c5f7b582da0aefe2ce26cd8431b3426945461e9ee0f19fcf4729c819cb36dff48127b6dc9cf8b3f8230ee8ac4ab2059bb0c27ad8d7ebb4565d9979504882ce3fc9b1b7001b1e61876deb265e2b088f1b0fb5d9343bb5b4a4b3f379754ad5dc0ee6d97db6a8bef1e90f9f0f6a365476f728e4aa0904c6cc4202a9dae61d8436cb3ed254d52371d9a206d8b5fcfb4aedaf6d2c8a591d16ed30c3e50f25471f6e1585ccbc01f7be36e1819cdf32658a49bdc540012b434b0366ed1df07973d98053501febb4115217ce6d3baf5ba7f63118e39aa8"}], 0x1000000000000132) r7 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x20}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r19}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r19, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r22}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r23 = socket$nl_route(0x10, 0x3, 0x0) r24 = socket$nl_route(0x10, 0x3, 0x0) r25 = socket$netlink(0x10, 0x3, 0x0) r26 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r25, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r27}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r24, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r27, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r23, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r27}}, 0x20}}, 0x0) write$binfmt_elf64(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r6, @ANYRESOCT, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="013b8f3efe9ddb30f8b5b003d4c3ecb2c5c461af781915509a505374d63e0f49343a84f6a7566b002082e184be7bbddd8c6197b46df2b8965012c90050af1779b37a86166e3beea3edebffce73e276d8b1c62c3a9d967438976f36ec69a91c6e6a253b66512d412fba7ff5640d88ad9363d012f712df08f6fdd374973d31", @ANYRES64=r8, @ANYRESHEX, @ANYBLOB="96e1422042ed9c76a3f7348a9e4e48f3e892565965de654eb265154d6111de128ad3868f2d9450861730abe9c4936683860e28ad813fbabac2a5558d07a8695fb6b74d0dcdf7fa542c69cf484c6798c54b2169217a85c6352dfb7fd3f2e2b42eee45cbbb193e53c80edae23ad41dfb021bffb35ccc1062ea1374be4a419fa3c1a769e7c784d3853e20a4458d93c4a735d67d95c0cc131e9ffe315513cee3", @ANYRES16=r13, @ANYRESDEC=r16], @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRESHEX=r20, @ANYBLOB="a38d3ece1d52fb9d656662817c46b4dea13d7b1eabd2788cc3cdee1d4a3fab917d5fb7d64bb1fa11eefe1e7bc67a86b4"], @ANYRESOCT=r23], 0x1050) close(r3) socket$netlink(0x10, 0x3, 0x8000000004) splice(r0, 0x0, r3, 0x0, 0x80000002, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000400)='security.ima\x00', &(0x7f00000004c0)=@ng={0x4, 0xa, "72b891c6772df03f"}, 0xa, 0x2) exit_group(0x81) [ 373.296230][T12519] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.303850][T12519] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.313000][T12519] device bridge_slave_0 entered promiscuous mode 19:56:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28005f00b483175174f45d5fb200100001080000", @ANYRES32=0x0, @ANYBLOB="001500004c00000008001b0000000000"], 0x28}}, 0x0) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x8, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19:56:20 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESDEC=0x0]], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) syz_usb_disconnect(r2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000100)={0x50, 0xffffffff, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") [ 373.399562][T12519] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.406963][T12519] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.416791][T12519] device bridge_slave_1 entered promiscuous mode [ 373.426148][T12401] gs_usb 4-1:0.0: Configuring for 2 interfaces [ 373.567862][T12519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.598588][T12519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.680115][T12519] team0: Port device team_slave_0 added 19:56:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="763f018baca576b5074c484279a54de4e765000000000004000000000000000000854bb610ceee46cedc3df67e37ee9c1f75a89d004ab2d83e0fb3e0339679650c6dc99dd0b2df4320e0288c5aa6fa35023e85fb12aab2bd8a5ad4e0c7f72a67"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 373.730490][T12519] team0: Port device team_slave_1 added [ 373.792150][T12441] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 373.877380][T12519] device hsr_slave_0 entered promiscuous mode [ 373.912978][T12519] device hsr_slave_1 entered promiscuous mode [ 373.953502][T12519] debugfs: Directory 'hsr0' with parent '/' already present! [ 374.056333][T12441] usb 1-1: Using ep0 maxpacket: 8 [ 374.063319][T12401] usb 4-1: USB disconnect, device number 4 [ 374.173163][T12441] usb 1-1: config 0 has an invalid interface number: 164 but max is 0 [ 374.181559][T12441] usb 1-1: config 0 has no interface number 0 [ 374.187885][T12441] usb 1-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 374.199131][T12441] usb 1-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 374.210672][T12441] usb 1-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 374.222334][T12441] usb 1-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 374.228429][T12519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.233630][T12441] usb 1-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 374.233706][T12441] usb 1-1: config 0 interface 164 has no altsetting 0 [ 374.389842][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 374.443218][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 374.451798][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.468356][T12519] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.522879][T12441] usb 1-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 374.532744][T12441] usb 1-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 374.541086][T12441] usb 1-1: Product: syz [ 374.553114][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 374.562768][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 374.571835][T12401] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.579086][T12401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.587676][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 374.597191][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 374.606227][T12401] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.613461][T12401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.680630][T12441] usb 1-1: config 0 descriptor?? [ 374.689901][T12519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 374.700974][T12519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.863637][T12441] iforce 1-1:0.164: usb_submit_urb failed: -110 [ 374.882445][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 374.891369][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 374.901665][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 374.911515][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.922554][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 374.932629][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 374.942303][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 374.951554][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 374.961473][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 374.970969][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 374.986412][T12519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.986494][T12441] iforce 1-1:0.164: usb_submit_urb failed: -32 [ 375.026127][T12441] iforce 1-1:0.164: usb_submit_urb failed: -32 [ 375.169735][T12250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 375.180264][T12250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 375.192941][T12441] iforce 1-1:0.164: usb_submit_urb failed: -110 [ 375.213496][T12441] iforce 1-1:0.164: usb_submit_urb failed: -32 [ 375.232915][T12441] iforce 1-1:0.164: usb_submit_urb failed: -32 [ 375.310057][T12441] iforce 1-1:0.164: usb_submit_urb failed: -32 [ 375.362483][T12441] iforce 1-1:0.164: usb_submit_urb failed: -32 [ 375.396995][T12441] iforce 1-1:0.164: usb_submit_urb failed: -32 [ 375.426750][T12441] iforce 1-1:0.164: usb_submit_urb failed: -32 [ 375.454475][T12441] iforce 1-1:0.164: usb_submit_urb failed: -32 [ 375.475231][T12401] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 375.494148][T12441] iforce 1-1:0.164: usb_submit_urb failed: -32 [ 375.531196][T12441] iforce 1-1:0.164: usb_submit_urb failed: -32 [ 375.575635][T12441] iforce 1-1:0.164: usb_submit_urb failed: -32 19:56:22 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = accept(r3, &(0x7f00000000c0)=@isdn, &(0x7f0000000040)=0x80) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fadvise64(r8, 0x0, 0x400, 0xa) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r7}, 0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000140)={r7, 0x9}, 0x8) r9 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r9, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r10 = socket$inet6(0xa, 0x802, 0x8a) setsockopt$inet6_udp_int(r10, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r10, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @rand_addr=0x80}}, 0xfffffffffffffee7) sendto$inet6(r10, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0xfffffffffffffe71) recvmmsg(r9, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) [ 375.655353][T12441] iforce 1-1:0.164: usb_submit_urb failed: -71 19:56:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x414080, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000200"/20, @ANYRES32=r2, @ANYBLOB="140006001f000000060000000000000000000000080002007f000001"], 0x34}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r6, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 19:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000070d00b3e79673403c675a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000020012000c000100677265746170000018000200080003000000000008100e000100000004001200"], 0x3}}, 0x0) 19:56:22 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x8000, 0x80) openat$cgroup(r4, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) 19:56:22 executing program 1: syz_usb_connect(0x0, 0x9d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b4276308cd06080130260000000109028b0001000000000904d10002d6e944000905070200000000002208095dae82541b7860ee682f19a35f5ba32f5a3b9e6e68e66a3dbc4ef9c37e623945084d4afb103b21fa694cdd4fd54da46a953089dcb2f2e6dc04782da02e233b23a74105dab3506f93529e6d125c2e330aa1f0477c4a811652c6361f6675e6341e859c941609058a0200000000009888989db5cb864e1dbe33bed254011c7c1723978ea2e7474f64f9532638f9c0c5a3fd2ef2b20a9649d7d4c0a4dd6038dcfc5e869ddfedabd7f7886421f94a540474c58240ea10c2183043843ba0ca7355da6a95"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000080)=@pppol2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f0000000340)=""/143, 0x8f}], 0x3, &(0x7f0000000400)=""/195, 0xc3}, 0x3) r4 = fcntl$dupfd(r0, 0x0, r0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = accept$packet(r5, 0x0, &(0x7f0000000000)) ioctl$sock_ifreq(r6, 0x8991, &(0x7f0000000040)={'bcsh0\x00', @ifru_addrs=@ethernet={0x1, @remote}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 375.708028][T12441] iforce 1-1:0.164: usb_submit_urb failed: -71 [ 375.722924][T12401] usb 4-1: Using ep0 maxpacket: 8 [ 375.773990][T12441] iforce 1-1:0.164: usb_submit_urb failed: -71 [ 375.782531][T12401] usb 4-1: device descriptor read/all, error -71 [ 375.793027][T12441] iforce 1-1:0.164: usb_submit_urb failed: -71 [ 375.838275][T12441] iforce 1-1:0.164: usb_submit_urb failed: -71 [ 375.845224][T12441] input input15: Timeout waiting for response from device. 19:56:23 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000180), &(0x7f0000000200)=0x1c) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000017c0)={0xac, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 375.923084][T12441] usb 1-1: USB disconnect, device number 6 [ 376.112872][ T3914] usb 2-1: new high-speed USB device number 9 using dummy_hcd 19:56:23 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x2fb, 0x0, 0xfc76}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) write$P9_RATTACH(r3, &(0x7f0000000100)={0x14, 0x69, 0x2, {0x4, 0x2, 0x6}}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/wireless\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/160, 0xa0}], 0x1, 0xa2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) recvfrom$inet6(r7, &(0x7f00000002c0)=""/42, 0x2a, 0x2020, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) lseek(r5, 0x29, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) setsockopt$sock_int(r9, 0x1, 0x9, &(0x7f00000001c0)=0x6c, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) [ 376.352140][ T3914] usb 2-1: Using ep0 maxpacket: 8 19:56:23 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000000c0), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000580)}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r1, 0x2}}, 0x18) [ 376.492390][ T3914] usb 2-1: config 0 has an invalid interface number: 209 but max is 0 [ 376.500801][ T3914] usb 2-1: config 0 has no interface number 0 [ 376.507129][ T3914] usb 2-1: config 0 interface 209 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 376.517137][ T3914] usb 2-1: config 0 interface 209 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 376.527314][ T3914] usb 2-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=26.30 [ 376.536602][ T3914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.663700][ T3914] usb 2-1: config 0 descriptor?? [ 376.705338][ T3914] keyspan 2-1:0.209: Keyspan 1 port adapter converter detected [ 376.714182][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 87 [ 376.723509][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 81 [ 376.731582][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 1 [ 376.739538][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 2 [ 376.747484][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 85 19:56:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x607, 0x0, 0x0, {0x0, r5, {}, {0xfff1, 0x9}, {0x4}}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) r11 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000000800000", @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) syz_usb_connect(0x0, 0x7, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="3ddfdf", @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYBLOB="06b332ea758418ca6b33f52b98a79b33bad4dded6f0a2759a7844cbe2240c6f42307c181748556a344bd3a861180830f6e0aa148060d2d06116c4d3076a509b2d7213ab6106d250229819a", @ANYRESOCT, @ANYRES32=r12, @ANYRESDEC]], @ANYPTR, @ANYPTR64, @ANYPTR64, @ANYPTR64], @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR, @ANYPTR], @ANYRESOCT=r10, @ANYBLOB="12b28969e1657ca267ea919a3dae38b70ceaef2148f8f0c28d3f036ccfca3ee3386222968aa6f20c7edcb9a2256ab5099a03a38dd329bb21b0361e0c99cf5f1beb0bad270fedd467b74a2e726ae43e5de9935a7eaaec57ed6e22e62edd31bf4f23186be728d438987bc275066e3c6eb6b10d354163f5a0befe954941098430b4a56a3278b26b1d506b29bd9650fcbc8baba44e76187d785004c3bfef2c1113f92f32c13a12d14bb1bc5f83b8c00c72dbf407df2527d7"], @ANYRESOCT=r11, @ANYRES32=0x0], 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r17}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r18 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="bd000000", @ANYRES16=r18, @ANYBLOB="000100000000fedbdf250b00000034000200080006002231000008000400fca34a7a08000900ff07000008000b0000000000080009000000000008000e004e20000014000100080006006c63000008000600727200003c000100080001000a000000080004004e2400000c000700090000002400000014000300ffffffff00000000000000000000000008000b0073697000080005000900000008000400ff0700000800040000000080"], 0xb0}}, 0x8081) sendmsg$IPVS_CMD_DEL_DEST(r15, &(0x7f0000000680)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xdc, r18, 0x139, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6b2}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x8720402fb6961dd7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4e8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 19:56:23 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000340), 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0xffff, {0x40, 0x7, 0x1}}, 0x9c) r4 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x1f, 0x100800) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000280)={0x400000000000000, 0x8002, 0x8, 0x7, 0x1f}) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) read$rfkill(r5, &(0x7f0000000000), 0x3) ioctl$int_in(r5, 0x800000c0045009, &(0x7f0000000040)=0x8) write$P9_RCLUNK(r5, &(0x7f0000000180)={0x7, 0x79, 0x2}, 0x7) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r7, &(0x7f00000000c0), 0x1c) r8 = dup2(r7, r7) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) inotify_add_watch(r8, &(0x7f00000001c0)='./file0\x00', 0x10000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) clock_getres(0x2, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone(0x4000000, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000002c0)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d238d4f5a649bcccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88") [ 376.755525][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 5 19:56:23 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x8, 0x0, @rand_addr="000000ff0f00"}, 0x1c) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x800, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f00000001c0)={0x10000, 0x5, 0x8, 0x6, 0x5, 0x1}) r4 = dup2(r2, r2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r7}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000300)={r7, 0xfff8, 0x8, 0x6, 0x950d}, 0x14) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000140)={0x0, 0x2, 0x300f}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r8, r9/1000+10000}, {0x77359400}}, 0x100) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000440)={0xe1, &(0x7f0000000340)="0e806260efeac0a41ca39fc25ae5ff6ea4099639a6b112f2595a1a8df09b41447a599a661d4d3d97b98b21231923a11c8c7d8b17f4f8d1b7c02ce2c2f24df9a5d7d5f9fb67aa28ac7a5ea6cc88666f1ea91767b0fbd8f9bd1abca0fcba5913473700696ddd1f76682cd1999e2abd1c745935cd475eb67d704d6c850a7f11bba91a599b75bd3dcf568548b5fb55d8564a7f492a156014eee24868cf091faf8a664348a6e0b2406cd2e7ad7c69264e2a2d42d1b236ecd3489aaa38ddd73c420e0d4cdf3a0eaffd40fd4089f84eeb3135749849ff196ab41e114ec5a880305fc04be2"}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r10, &(0x7f00000000c0), 0x1c) r11 = dup2(r10, r10) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r11, &(0x7f00000002c0)={0xa, 0x4, 0xfa00, {r12}}, 0xc) [ 376.893995][T12638] IPVS: ftp: loaded support on port[0] = 21 [ 376.984138][ T3914] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 377.053708][ T3914] usb 2-1: USB disconnect, device number 9 [ 377.078076][ T3914] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 377.089140][ T3914] keyspan 2-1:0.209: device disconnected 19:56:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) r17 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r18}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r18, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r18}}, 0x20}}, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r21}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) r23 = socket$nl_route(0x10, 0x3, 0x0) r24 = socket$netlink(0x10, 0x3, 0x0) r25 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r25, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r25, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r24, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r26}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r23, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r26, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r22, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r26}}, 0x20}}, 0x0) r27 = socket$nl_route(0x10, 0x3, 0x0) r28 = socket$netlink(0x10, 0x3, 0x0) r29 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r29, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r29, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r28, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r30}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r27, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r30, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r31 = socket$nl_route(0x10, 0x3, 0x0) r32 = socket$nl_route(0x10, 0x3, 0x0) r33 = socket$netlink(0x10, 0x3, 0x0) r34 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r34, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r34, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r33, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r35}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r32, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r35, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r31, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r35}}, 0x20}}, 0x0) r36 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r36, 0x8912, 0x400200) r37 = socket$nl_route(0x10, 0x3, 0x0) r38 = socket$netlink(0x10, 0x3, 0x0) r39 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r39, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r39, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r38, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r40}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r37, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r40, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r41 = socket$nl_route(0x10, 0x3, 0x0) r42 = socket$nl_route(0x10, 0x3, 0x0) r43 = socket$netlink(0x10, 0x3, 0x0) r44 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r44, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r44, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r43, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r45}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r42, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r45, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r41, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r45}}, 0x20}}, 0x0) syz_usb_connect(0xa, 0x8, &(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRESOCT, @ANYRES16=r45, @ANYRES16, @ANYBLOB="cae472bf8843e8b2c03898b07408f8716272b048637e37fe6710b80fc78d6a46efbc84c7ad4e07890573263f9c92727e7d6b6ff2cf09bfbbe6e411d47ab4c3e1b3dcada8503326e72d92ce705307fbde5b2af2a97a7b2d0a72c64bc9a2fa7fbc58ac934ca7b7459a740c09f923a1f8d818", @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESDEC=r5, @ANYBLOB="0b0668e6809dc44adb34edd5e82029c86e9ad19639b75448991ed918cfe5b76c8ce9a43e7c69521090cbc754697b67f0ff8b46b1ee6470b3c9c07c20b3ab7e671fbed9c320f0264ae2dac43df66e99b6d5d010aa1743780a67ce8f80bc4668b4873741bf7c35ca8ca33acacbf541d58d8f17efd0ddf7e102a818d40de6883a11f8e8e0a19cc1416c9b", @ANYRES32=r10, @ANYRESOCT=r14, @ANYRESOCT=r19, @ANYPTR64, @ANYRES16, @ANYPTR64, @ANYRESDEC=r26], @ANYRESOCT, @ANYPTR64=&(0x7f0000001580)=ANY=[], @ANYRESDEC=r27], @ANYRES32, @ANYRESHEX=r31, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT=r25, @ANYRESDEC, @ANYRES16=r36], 0x0) [ 377.702254][ T3914] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 377.952489][ T3914] usb 2-1: Using ep0 maxpacket: 8 [ 378.072971][ T3914] usb 2-1: config 0 has an invalid interface number: 209 but max is 0 [ 378.081299][ T3914] usb 2-1: config 0 has no interface number 0 [ 378.087604][ T3914] usb 2-1: config 0 interface 209 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 378.097969][ T3914] usb 2-1: config 0 interface 209 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 378.108300][ T3914] usb 2-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=26.30 [ 378.117542][ T3914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.188219][ T3914] usb 2-1: config 0 descriptor?? [ 378.235957][ T3914] keyspan 2-1:0.209: Keyspan 1 port adapter converter detected [ 378.246557][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 87 [ 378.255858][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 81 [ 378.263898][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 1 [ 378.271793][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 2 19:56:25 executing program 4: syz_usb_connect(0x0, 0x3b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) 19:56:25 executing program 3: perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) getpid() r0 = getpid() getpid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x8280, 0x0) [ 378.279741][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 85 [ 378.287775][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 5 [ 378.527685][ T3914] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 378.560620][ T3914] usb 2-1: USB disconnect, device number 10 [ 378.595620][ T3914] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 378.606383][ T3914] keyspan 2-1:0.209: device disconnected 19:56:25 executing program 2: r0 = msgget(0x3, 0x4) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/227) prctl$PR_SET_DUMPABLE(0x4, 0x3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5c, 0xe, 0xf4, 0x40, 0x16ca, 0x1502, 0x8208, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x1, 0x50, 0xfc, 0x43, 0x0, [], [{{0x7, 0x5, 0xd, 0x6}}]}}]}}]}}, 0x0) 19:56:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000200200000000000000000000800020000000000", 0x24) r1 = socket(0x10, 0x803, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x12) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000005c2f000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x400, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x75ee3) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) sendfile(r2, r6, &(0x7f00000001c0), 0xfffffffffffff000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1]) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') [ 378.722412][T12401] usb 5-1: new high-speed USB device number 2 using dummy_hcd 19:56:25 executing program 1: syz_usb_connect(0x0, 0x9d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b4276308cd06080130260000000109028b0001000000000904d10002d6e944000905070200000000002208095dae82541b7860ee682f19a35f5ba32f5a3b9e6e68e66a3dbc4ef9c37e623945084d4afb103b21fa694cdd4fd54da46a953089dcb2f2e6dc04782da02e233b23a74105dab3506f93529e6d125c2e330aa1f0477c4a811652c6361f6675e6341e859c941609058a0200000000009888989db5cb864e1dbe33bed254011c7c1723978ea2e7474f64f9532638f9c0c5a3fd2ef2b20a9649d7d4c0a4dd6038dcfc5e869ddfedabd7f7886421f94a540474c58240ea10c2183043843ba0ca7355da6a95"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000080)=@pppol2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f0000000340)=""/143, 0x8f}], 0x3, &(0x7f0000000400)=""/195, 0xc3}, 0x3) r4 = fcntl$dupfd(r0, 0x0, r0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = accept$packet(r5, 0x0, &(0x7f0000000000)) ioctl$sock_ifreq(r6, 0x8991, &(0x7f0000000040)={'bcsh0\x00', @ifru_addrs=@ethernet={0x1, @remote}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 378.964099][T12401] usb 5-1: Using ep0 maxpacket: 16 19:56:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00804813000000460001070000001419000a000f000000f00003f5000000000000ef38bf461e59d7", 0x39}], 0x1) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00'/20, @ANYRES32=r9, @ANYBLOB="00000000f1ffffff0000000008000100686866000c0002000800070009000000"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) recvfrom(r3, &(0x7f0000000340)=""/218, 0xda, 0x40002020, &(0x7f0000000280)=@xdp={0x2c, 0x667320fb514172cb, r9, 0x2}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8}]}}]}, 0x38}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = dup2(0xffffffffffffffff, r10) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000810}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x70, 0x31, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0x1a, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x16, @TCA_ACT_KIND={0x8, 0x1, 'xt\x00'}}, {0x10, 0x19, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x13, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x7, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x890}, 0x80) [ 379.072154][T12246] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 379.082879][T12401] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 379.091256][T12401] usb 5-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 379.102003][T12401] usb 5-1: config 0 has no interface number 0 [ 379.108224][T12401] usb 5-1: config 0 interface 101 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 379.121777][T12401] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=a5.c1 [ 379.127171][T12681] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 379.130998][T12401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.139760][T12681] bond0: (slave caif0): ether type (0) is different from other slaves (1), can not enslave it 19:56:26 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) syz_open_dev$mice(0x0, 0x0, 0x0) write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10003, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) dup(r1) keyctl$get_security(0x11, 0x0, 0x0, 0x153) keyctl$clear(0x7, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) [ 379.203094][T12401] usb 5-1: config 0 descriptor?? [ 379.222448][ T3914] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 379.317745][T12685] IPVS: ftp: loaded support on port[0] = 21 [ 379.462876][ T3914] usb 2-1: Using ep0 maxpacket: 8 [ 379.472719][T12401] usb 5-1: string descriptor 0 read error: -71 [ 379.482791][T12246] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 379.482806][T12401] yurex 5-1:0.101: Could not find endpoints [ 379.484261][T12401] usbhid 5-1:0.101: couldn't find an input interrupt endpoint [ 379.491155][T12246] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.515001][T12246] usb 3-1: config 0 has no interface number 0 [ 379.521210][T12246] usb 3-1: config 0 interface 84 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 379.531172][T12246] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=82.08 [ 379.540765][T12246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.581723][T12401] usb 5-1: USB disconnect, device number 2 [ 379.645696][ T3914] usb 2-1: config 0 has an invalid interface number: 209 but max is 0 [ 379.654136][ T3914] usb 2-1: config 0 has no interface number 0 [ 379.660369][ T3914] usb 2-1: config 0 interface 209 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 379.670407][ T3914] usb 2-1: config 0 interface 209 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 379.680538][ T3914] usb 2-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=26.30 [ 379.689839][ T3914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.733333][T12246] usb 3-1: config 0 descriptor?? [ 379.774754][T12246] aircable 3-1:0.84: aircable converter detected [ 379.792623][T12246] usb 3-1: aircable converter now attached to ttyUSB0 [ 379.808129][ T3914] usb 2-1: config 0 descriptor?? [ 379.855673][ T3914] keyspan 2-1:0.209: Keyspan 1 port adapter converter detected [ 379.863680][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 87 [ 379.872964][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 81 [ 379.880978][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 1 [ 379.888927][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 2 [ 379.896884][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 85 [ 379.904897][ T3914] keyspan 2-1:0.209: found no endpoint descriptor for endpoint 5 [ 379.978330][T12441] usb 3-1: USB disconnect, device number 4 [ 380.003069][T12441] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 380.012725][T12441] aircable 3-1:0.84: device disconnected [ 380.087185][ T3914] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 380.170807][T12695] IPVS: ftp: loaded support on port[0] = 21 [ 380.176681][T12682] device hsr_slave_1 left promiscuous mode [ 380.212737][T12401] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 380.286542][ T3914] usb 2-1: USB disconnect, device number 11 [ 380.322651][ T3914] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 380.333481][ T3914] keyspan 2-1:0.209: device disconnected 19:56:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x75, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="89000000ee110ee84a5c7cdda6534028d94651a4fa34acade276ffe2679851ea77c8ee50bd03aba37db711581b04de5060877b3c204d032b03ae9c8201e3eb99400652f2c54f8581f6a5f4a2e34fc450a9ee9b59f79ff9130096f341eb7b25ef3c31c5fb2a4438d6f676b5a2ca17fa91503937ca051a9850b73e628c43aec69ae301e22c65e95765ebfc117eefca35709633191e14cd0ea2"]) clone(0x40820000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 19:56:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000cc0000000000000017010000000000009500000000000000dfc4633a1739fa5686cb7ed485414b1795b900be75f5379ae4adff8f70a49552edab349a3506812650788b6d53888894e53c5d1f72795058195739fb3050d86b1dc5b0274d0c3ffbb0f9468494f0ad7c4939ffe0a1eb685c7c22158213d211d54b90a8c55cf8188c839b9a6d849f12c16f176affca84a40e743d9768d602aeb8e2b2d8ff77784d3800d2210b9be0ffffadba8ced1863a7e1903b81c84041af3987835b68250710f346879651f352bf9974e3"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xbc, &(0x7f000000cf3d)=""/188, 0x100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 380.493063][T12401] usb 5-1: Using ep0 maxpacket: 16 [ 380.588392][T12702] IPVS: ftp: loaded support on port[0] = 21 [ 380.612341][T12401] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 380.620822][T12401] usb 5-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 380.631739][T12401] usb 5-1: config 0 has no interface number 0 [ 380.638036][T12401] usb 5-1: config 0 interface 101 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 380.651360][T12401] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=a5.c1 [ 380.661048][T12401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.724500][T12401] usb 5-1: config 0 descriptor?? 19:56:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffc7}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010020105000600200000000a00000000000000000500ed0000070000004fa200000000000300000000000002000100f5000000000000020000000005000500000000000a00000000f48d00000000000000de3d00000017000000000000000000e02bd05fe98af84934bca27fb199080ec487d64dcb805a26b9226f231bfb42fb35305753f4992e0de08325431d0645ed6ed9e3255aebb6d387a914b481bcab375a516a1a0f7aadf487453e06057ac8dfe41b56e9951240aa36af8a8ed052bdc151a4b23df4b2d9b86369000000df4b45e7652d668f1654ff23"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'ip_vti0\x00', {0x2, 0x4e22, @multicast1}}) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="0209e02874dfcde64be117926412ecbee0d4000065192cbfa419905a0000000079fe3867d96a804aa2ec14f653b0df670aa6c8c876e930bf736ead48b6a435fc8c13a79391eaca302bbc07486abb00000000000000007ea6ac8967467e8fde9db027625865316cff48ecbeb77ba86afc89769fcc1a540bc9698b0a2db3c5745cdbbd1f3dc18461a0e803d4e2e4e78d0038ca029decccf02beefa41ed673d98f45d0ca713b095ffbf8c92f0e5db7a36e1f4dfd3be0042d05a2956ef0a3ff695971ece90"], 0x10}}, 0x0) [ 380.772476][T12708] IPVS: ftp: loaded support on port[0] = 21 [ 380.878511][T12441] usb 3-1: new high-speed USB device number 5 using dummy_hcd 19:56:28 executing program 1: r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r4}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e24, 0x0, @local, 0x6}}, 0x1f, 0x8000, 0x4, 0x3, 0x50}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r5, 0x9}, &(0x7f0000000180)=0x8) syz_usb_connect(0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0) [ 381.002908][T12401] usb 5-1: string descriptor 0 read error: -71 [ 381.012815][T12401] yurex 5-1:0.101: Could not find endpoints [ 381.020371][T12401] usbhid 5-1:0.101: couldn't find an input interrupt endpoint 19:56:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) [ 381.119417][T12401] usb 5-1: USB disconnect, device number 3 19:56:28 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406a0565004000000000010902240001000000000904000001030100000921000000012206000905810300000000002bfca4f88d25428103a367c0ffab351c6e7d1bd89d982b82907851d97f5d36991aff160047e0524f60fe64f28999770f2390407d8945bf249fd175e02dbdf69b10af2758f7869a7381390121f3ebff7b64f2340bd334a8e55487b87f55c3b940c95f068bd6545024248235a76c2ae07f7051675d5596b03eff87c9b664e5fe97964b39a5b43d1077d8924933991c928bb7949002893619d1573f"], 0x0) 19:56:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffffffffffd4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x94, 0x28, 0x421, 0x0, 0x0, {0x0, r5, {0x4}, {}, {0xd}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x64, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_POLICE={0xc, 0x2, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}}]}}]}, 0x94}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001100018ada2a79a9550200"/26, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 19:56:28 executing program 2: r0 = msgget(0x3, 0x4) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/227) prctl$PR_SET_DUMPABLE(0x4, 0x3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5c, 0xe, 0xf4, 0x40, 0x16ca, 0x1502, 0x8208, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x1, 0x50, 0xfc, 0x43, 0x0, [], [{{0x7, 0x5, 0xd, 0x6}}]}}]}}]}}, 0x0) 19:56:28 executing program 3: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e20, @empty}}) syz_usb_connect(0x3, 0xfb447220b3d90d1, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc7, 0xe7, 0x3a, 0x2008, 0x2357, 0x9000, 0xe824, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0xb4, 0x0, 0x1, 0x1d, 0x91, 0xff, 0x0, [], [{{0x7, 0x5, 0x81, 0x2, 0x400, 0x0, 0x2, 0x0, [@uac_iso={0x0, 0x25, 0x1, 0x84, 0x2, 0x6}]}}]}}]}}]}}, 0x0) 19:56:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) writev(r3, &(0x7f00000026c0)=[{&(0x7f00000003c0)="72e33b34457c3f1f1f2ec17c8440d60d2c23ef9e745e5c2b16ff71ac0bf7e3215810d472bd72ba77af72051f789124a44b4f656c1ec4b607dd72dae5c9a63e485b7b0afb7b42496758696f338f4c94237b87ffd1422a4f7ac21912281615a433313286aa86d8fae33d28c7564413cb", 0x6f}, {&(0x7f0000000440)="77260ba7d5998a1e74030c879e79c10daa25f3019ef4238f42198f5c6d64ef62e13e218f300d0f2ed1a2eae156dc105e63306a5c8911f0ab6e4c50ed534201eab3724a63271d6d9940271b52f98198d34c77078c11630f7589a958c5c6b94f01d141bb066a990afa7fad488e3d6f60dfb5ca0fcec98bc1dc4f3b3b727afee5c869fa4692b4ef8093a12cb64e02172ebf91b884ebff1be0a7160e8fc2b819aec78624da780216dce8090b0e90b98ee3da7a973bbceab4ade9497277e56f19cd55c387d4b8ffde3747f747a341d7fa01", 0xcf}, {&(0x7f0000000540)="bdb72d4520a839cd837cbd4f1276c3c53861c6be41a5a0b4462601e1deaf81412350527dd6ef31c453c87ca49315a333a879bafd6c7c0da02855eea0947efe4499e66fa6a1885bfd6f9ea2c7c4c091c1931223040fab86411b2260ac513273aa31d224e9262f15d7e5d906b456876eecb40c57265f55c81f08504badaaaa7f7ffd41d64dbeb3bdd8453484a0dc712e80fa436f2f9fb984dda1849b9115081556f0d1d59c13c2546b34567afddab6f68194920e1c881d6e34d2be408ff7d73742446ce72f8f3ebecc06bb9f7bd0b5b992522b2afe03661485102078e205bd164f26d7f7e14017197de9f201bf852e8f42c08d41fdcfdd95b9eb4d82bc358e29346dbd19fd13bf693302fab500c3feb746f7afa3f814869622178aec2f334daa09417781e6ed032225f51d342e05ce4ef6a0807c697c489c3cbb37ead4b5688860a563f16a6f729b86324cf939f0f9eb1d084fee4d187b6d25a3aee7fd42cebb0d03dc797c6e7edf158db046db335004b6d4804de70238582ced8a0c38e6dc32f5c5aeef944e27ac0d33d4f8c97d22d08a26d3db606c33b7c95fe3ad46ad86972281983892bfe2d214390fe98af4f74737e621dfe5cbe4653e4d8b328a5b3de660de1ea3fec8f669be2226004179ab4a81a66b8a55c8cf65da1f003d384f1c2cc01e638e3a738c106c4ad7d9c8e3d6ffd156907001dcbfc5610b2661619e3af99e118a1902d91f18d12c664b67859e8970c622ac9990b5eb1f820412e4c054b73c32f7ca83a02a9425e4cfa49bf7ba728581448d5dcef60f30b6aeab1708806589b28a352a52c6ba14222b50b72a79ef5c19a54129b166ba3ec80947fb6e47e4a8d436940ef55249f0a160fdf9740594f46ec99bbb220f33263c8f92248bb592280627fd24d734fcacf5692fa04d890fda6e80ab5c105cc8d46221758d487b676a7096797ce8c731276801aa72063e482a34a59d473e4523ee3799bc3bbd68a1780a0a0a0515e1bc4b17543f8912ca2a9b6c354403549115720f6dd3abecf82a48c37cb9480886a8ab0ea3a019aa7e9c26048e932ef3f86ab1f1e569efd0f92df0a32b2d84c4302bfab886233c1895bc8e301fa7a11f4854eb906cf5433fbce1cddcae513bd84e81f1db2280e39979e709675cf6ceeab4afa5465cb2a9580d09985c7926cd75e773f822b76e304698c32617f3880507e880a662a4e7864653ad5c1932a255e81b9abd397d0a0af9268edc58772fa9948c74617b8e9031461e0fd66bf0af88be4434284370bd97f3d9ab33a883907a6c7370b7e3e03ee408d6eab53e60ea1acface2fa215b5b658733996fb95fe392f856ecd4d550ffed40c24c4c07ae210bc61d5bb19f7d75f08cc21e75f957f20c3e6e0eaad5248d256544bfef495cc9922a009e4847083751cebd83511b9edc257cbf50078ebce94da041a11ebf3d205210c60ca3c1da705de6173014118211f9692a6f7885ea117e7afff59aacd41e6f988907761190ae6fee893d873966031a0b3e28a0f2185ad000c63a066cf6976a5bfa21fa7d2025968057df6029cc7b028d3a497f1e84190d6b4036d4b130f6612420baac0cad0c6c24cfc3737fc5cc320ad43b1dc24c61cb5fb162c0d322fbd0d329b258301f2987ebb9a3911af94d7e7fcd75ead7ee88c61859625dbdddade241278893e23498685df832035a7f899c8189ebab046857c9ad6bdc6da64e6dd9e442478e35d34973f3d4b6bb16a369441af943984031a200a61fea259df67bc9403a1a031405c5daaf751f2e6ff5b9daeff2d5006abc957fcc3527f4e8951ac5edade7b809392eef8ce86cd5c35c855e9833b5433c7d152ec688903a1e1b8826db257587cdc4742348a49a62d0f1d77201aefc16e4e53c9b6819d20103f2af0ba1b3e937449232044e9dec3f9400248b62c5ac12e0e60ff58fae48828c57513f33b835010642c031a228ce67f358d216a9790c4a1902f14c28069da021d101a5818bc6173f432ffb4547baca1dc9f1e58482cff8b5e3c98295f552000a41c6c266f3c697a1451fcf5edb7f7a5145e2b5cbc2cdea37cabadebb0b544c36fcd472b81c4725280f7351ef3b4834e5d6f7026658a3c21dc604909202ab21abc52b28884e228608fec995d9515293a82d71e73db1f2fee452eaceb1992a5e8e5a108886d2edf65cc5211cb365a5e053cb28131bda82bc0909266fb1d9357384e5674b7bf3e554c0b16ea2f0e4fe89911128c695e9d04bab5aead9680893e4be9a8402739ff7431e1b360a58eb6aeda0e0182ccbf1bb77f42de0d346efbbab7cb55335526e686dec5144f60dc0c259059d51ba69a331baec17c03b3097c27b3b11c86ba0b1f01ddac771e0d5668dd60724eb0ce3aa2cb83099132fc17f4e27c1b4334ce0a57d4d18da794ada74557bcd854453fdb073e41cbb528b0f95af31aa48a707d6856fda984436dfae7f7ed412032fdf47f33909718adad30252fb1b57e1a6ca2c18b1d4e2474df0493693c61af844abf6fd39f97591c4e1ee3caf0f71560fb30ec544d5337cbb47c6e39d85dd18f69212717df15fb48ece878fd34c2fc1a50c556269b88f527c194467944b17ee298245bf8b268663b114c1db099b800dda6800afede5507135994f883602da787473f548a061ffb39a023f7fdf5383bba505d9b2aac4b0231d6dbcb2c57f080213eb6907b2a5eb027f0a7e9dfae1758dc42ce0de2afe7f603a09dfcaf9936c1384c9199cc7d4021762d9f9a76891c9b6308dc0cce2704a629e61ccaebfe227e54095118cb75d3328d008f822f7e1d31ec5770c32b27926dcecf4b3defca2897d5e5181e2cf88dc89905fe54c209fa513a8b16b0d0b794ca1861f1bbc1d18e548c72b4dfc1167b7acc9e3e59c369e07e1bbab9ebc95db3e956022bc6eb60155540bda76dcb07c9fee5a76521b2fd482b28bafae5996a601d3057e09d0c4b92226c30b65f825867e94e30e1cef893f114217b2d1684694244ff88b66136eb1c8f2f4181af3aed1373a3fe6337ae6c45cea01fb45e23ffd2621cf4e68e460321eabcec1df5c6fb3cdd792cf46f1264a656f4d8fdf4e5c735759a470ee7c278cf29d535915b02ad6596a3aa31173afb82df115f76911e0e6f03821bbc464950871e1e2fb7e7b44d69e2a35e451885a3c977a1b92047afaa4ae781edec8ba7bfd7f24d82e1b3ded9e91e7181c8c765a38b452e9fe0271ffaa504e6a66c5732327c491208b5b97c53b125fd1479f69e3decd1894a7d1ca492a4130f6a3573b1803244b35b85b12a1b196912170b76c9f6149fc5ce260e5b648c1d6cd09f6d1ef41d7b191d2a3e8630831dba607d005eb1b9ac8f1f02416cd08cdcc842d45b0b5a33755ee0db00a61bc25e830e7c71623e007d8a503de5ec9e14df28205cad0ffc4dd537d136cc3d49eb1b5f057dd3c3090f4c4b823244814ff054af0d737da3c3d388ff2934e6a74e2d6096e654cf818a799cd06540902957a478e048a2b48758931a2640a400972df9a8b3b613ba4b719c317e6bcae2840f5f9bb97f2961608623eab66849ab71fe6a72e829d7cc39bf08b4350b90d453b6cffcbf1f7e78609c74b391c029bca4602c1b327630e2d05ecdef41ee0583d08109db1c19ef65f4c0bc30daea63489287d521239eec54f1deb22e9c341ea0d8cc88e8286d44fb40f29dfa84eddc42f6d93d25135b355177194557f62fcdfae61b0a9b7fbc2c3ed1dd16462f43fec357d84b497af6ac97b4ebd85f2008cca45e5a051860bed557e18783413b31be08edb68cfa869d520f9a4817668032b6d0369d572b633fa28a2f553b6b7cf1d1c49cf9393e8590dc6c0194d804f41c3fb95ff9831cf94d479bba9e0998ee52048b7d4cdb486753704120cd274329daaed7f0698016ad9a4459bd7d6c492d9c6181ddb0dcc8c8adee3bc606dd18c3b45d2f62a76404b9e711aa3508d8edf9d666a381b94d7396f036a973e37b8603085137bb0363ae36eecc8a43576cec1f09c5b9c13a63bd3951226509be486dea0b3202f2dd6f570f101a9414c9c10fb18de7ed8ac1db0a69f124ba9ecc37cc8a7504ec4dabee13cb8fa27783e3525750bbe94a5e974107aff9b2ba7cbeaeaf809c50a355fbfb5aa3a07a5e17f7209baab5c9f6cf77b3172f6c359f5df617590f5130196d79c3f9db260a60f3b7c32083aa614d10b9ab119bd03ff13be901ca8a8f434e9519d5f18159ebd7c6451a36e5df2ce5d51248162b65beb9c9bb1b93f92c37f119922c0378c3f0803d6ea26f1460a6dc11eb84df1c2b7e0762bcb9a7cb6fd0f2c1ce157bd63c1b820fa99fcc42089b046d9017faeb1eb69324be95b9433a66800b26223dbc49a4be0206fd91d6a718e865b4ac17644a99180bdf98eb47d9ec59b920d61d3c62c292fb2da8fed633a6a4015d405780e6dc54431d8e061b42624ba45abe9a19e8798557137fc98ca421b94c69b7109a0c6282c651c29435564fb9cb58725d219f5fa77b38ff8989f3e4e32b2b1d2ee990057c2cda25cccfb96692b3486feb7474678681ebe0ac46dba436e29a9ed7451087717a391fc95041a547682b552addb81f11de522f310e79429b26e05340f82df1a0b39e944a4fb2738b4fda3ab8d500cd90315d0c46c5b72515b7a68ca290cac39ad844c52291db40dd697916e81ebea59d6c9e2836a9ad246dec0b0cab1ca2a82d26e7ae83e881c1fafdf0bd114832aa61312e57840b57c5d3dcd67e99812c8ac58b395a177c758f1951f5cb49b1a8a456856828b677b96bba1a95e9aecb1a9e98a9c8466ca32353195b75620a4ea281115d2bfb77dc71e5e3f4e1ce558a4091ed78c29982d1ddebecbcb017fdff5686a5ea333dd19e0b1000f42f15bbae54045965b396e984cbf6d7c09a822c3f04241a45fdd9d74ab7a6e1548e42c9eca92ef642c9b86b115bc7e1d2d0be6a66f7881b54cc806075399bf3dea923051490629bd07cf1bfcd6f2ca897223b06f1728c0997e42a3ef009a932f2f2f15a251aa01b9658b60ba805c0929f7b9067d8ab2bc7529b7548dd03185197149aa2c84ebfe1767e58b2b5fcebc987c1fc8e04f87a7e62311e84530567970d4616d87706ec741c4cc240b03358df75f8e9e76d71acb8242da86e88134190f4e6c4e7652fb007033f1fe42648ac3d782011bfead69c9e32499488754e27c0a973704d18f535a5cff2d54eb24301f10a272f7a9f2efe93f476646029eac6419168c78c38986e9285831e85bb8a54d931da3c421e70f6ff871eb27d1d2b70083510e203130b586737c403e529bcf34b3c13185cb2563e7619c293351f4305045b99e14866c97a5e6d2760c5c6b4f3575c410654947447edc4c0067ba3b24247d3b4412496f6eeb8d3cda0f9f866ac5c8b52ee65de8c91220776f4fce74c4cb33d2e52d578501ca6006254d59a724a707cec3f785ae7608e33a5af673c089812a9eb02f4bbf6993e1cf68b6e36d680a76137feebe944a72dd118939807e5590075f2ab8aa2211c850cf9404a39c8e0bb1a0bdee3a61abd1ca53b65c9814ab6983874db2e6292f3c375d0cd7d0a373925b15684b88fc35676d41786d0a67826dec788c0a0a719f489dd4e9dd0e5a8f418376cb27934dceef3faae39864f17346f6f1b79075cbd0990b7cd7b65907034db7d972b20a5942cb593234be0671f90f83cfa6892ad4443a748a34565030b2fc1b47387e0aefd7f6481ab090ec0e6c5f77661fcb4a898ddada16bb98b47aa9a12e255e08028bb1124b6bd94fbb19f4800eace2ccb1efd82e3fbbfe", 0x1000}, {&(0x7f0000001540)="f3e1f83eb88b9dcf06b717280c2da1f26761929aff15408cd73310b25557cc658a12f34e4e204674800311247258b67e01983aa629213f689603d7687244b9dd877e88c166a7425ddf86f1082422d4d521a87cfa4be972265fc339b0dfe2bc67d143e5a2502d016dd0165f49465208271ce466bc83f0bcf7c4772c396683713ff579cc7b1602e2253d22", 0x8a}, {&(0x7f0000001600)="d15f43749f90f0c5427a8e4e3f2231a926fdefb44bc9f80db53ddf94b3bea5c45e0b3c830ee4efde44415eb49eca86871fe236900ab1f5c74f7c1abe8481dad137f5fc94cb13a8c0fc0791d8ff4e79020c48915bff7c1b2a41b259", 0x5b}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="189343f6650a6faa", 0x8}], 0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e24, 0x2, 0x4e24, 0x8, 0x2, 0x20, 0x80, 0x3c, r6, r7}, {0x20, 0x0, 0x401, 0xf1a6, 0x7fff, 0x1000, 0x2792}, {0xa, 0x2, 0x3ff, 0x6}, 0x1ff, 0x6e6bb0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4d6, 0x3c}, 0x2, @in6=@empty, 0x3505, 0x0, 0x0, 0x81, 0x8000, 0x3, 0x8}}, 0xe8) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) read(r9, &(0x7f0000002740)=""/173, 0xad) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xa60002, 0x0) renameat2(r8, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0xffff3f76, @dev={0xfe, 0x80, [], 0x23}, 0x1000}, @in6={0xa, 0x4e22, 0x40, @dev={0xfe, 0x80, [], 0x15}, 0x7}], 0x58) syz_open_procfs(0x0, &(0x7f0000272000)) [ 381.792600][ T3914] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 381.856521][T12441] usb 3-1: device descriptor read/64, error -71 [ 381.868187][T12247] usb 5-1: new high-speed USB device number 4 using dummy_hcd 19:56:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket(0x10, 0x6, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) r2 = getpid() tkill(r2, 0x1000000000015) getpgid(r2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @loopback, 0xfffffff8}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') sendfile(r0, r3, 0x0, 0x4000000000dc) [ 382.042403][ T3914] usb 4-1: Using ep0 maxpacket: 8 19:56:29 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "44d5ae"}, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x4, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x81) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 382.222834][ T3914] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 382.231062][ T3914] usb 4-1: can't read configurations, error -22 [ 382.252347][T12247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.263438][T12247] usb 5-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.40 [ 382.272651][T12247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.285232][T12247] usb 5-1: config 0 descriptor?? [ 382.382659][T12441] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 382.390958][T12441] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.401394][T12441] usb 3-1: config 0 has no interface number 0 [ 382.407736][T12441] usb 3-1: config 0 interface 84 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 382.417751][T12441] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=82.08 [ 382.427258][T12441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.442678][ T3914] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 382.446120][T12441] usb 3-1: config 0 descriptor?? [ 382.498217][T12441] aircable 3-1:0.84: aircable converter detected [ 382.527016][T12441] usb 3-1: aircable converter now attached to ttyUSB0 [ 382.644830][T12247] usbhid 5-1:0.0: can't add hid device: -71 [ 382.651060][T12247] usbhid: probe of 5-1:0.0 failed with error -71 [ 382.677174][T12247] usb 5-1: USB disconnect, device number 4 [ 382.712379][ T3914] usb 4-1: Using ep0 maxpacket: 8 [ 382.721593][T12441] usb 3-1: USB disconnect, device number 5 [ 382.735813][T12441] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 382.745126][T12441] aircable 3-1:0.84: device disconnected [ 382.912415][ T3914] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 382.920457][ T3914] usb 4-1: can't read configurations, error -22 [ 382.943160][ T3914] usb usb4-port1: attempt power cycle 19:56:30 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000000c0), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000200)=0xffff) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x6, 0x0, "464b4662fba25c61663131febf5e90523c5279b9f0a88af5c2b84900304713899d793dc6ed01af39d8a1493eab86553380a9f009b02185ea6eba1b42fe86ac788a10d4af95b5a75eb87cfdc8da2cf610"}, 0xd8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="c60072e2b55f0000b9000000"]}) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(0xffffffffffffffff, &(0x7f0000000180), r5, &(0x7f00000001c0), 0x2b3, 0x3) [ 383.313871][T12441] usb 5-1: new high-speed USB device number 5 using dummy_hcd 19:56:30 executing program 5: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x100000000, 0x10000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0x8}, 0x2) write$P9_RRENAMEAT(r0, &(0x7f00000000c0)={0x7, 0x4b, 0x2}, 0x7) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3f, 0x1f, 0xff, 0x5, 0xbf1a41bdecef4482, 0x3, 0x2, 0x2f2, 0x40, 0x1e7, 0x9, 0x484f, 0x38, 0x2, 0x6, 0x1, 0x6a}, [{0xf4d69570ad561e2c, 0x1000, 0x80000000, 0x4fea6a2f, 0x17, 0x100000000, 0x8, 0xae9e}], "5df0452b819a0bf9f2a7d048e34a020b992500e2614877235ca5d04d676e74b22b2c746b06cdd3f9bc13420b0e39a3fd37baec8421043324d67d633b", [[], [], [], []]}, 0x4b4) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000005c0)) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000740)={0x9, &(0x7f0000000600)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}]}) r2 = syz_open_dev$vbi(&(0x7f0000000780)='/dev/vbi#\x00', 0x3, 0x2) sendto$inet6(r2, &(0x7f00000007c0)="0e6a616c8c93e9dd30c49aca6e4f74241279f342487d61e460f14e1b361313be3b6bf553b7e46648f47b6242f2bc77dd86db52d0ab", 0x35, 0x88a0, &(0x7f0000000800)={0xa, 0x4e22, 0x1000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7ff}, 0x1c) r3 = syz_open_dev$dspn(&(0x7f0000000840)='/dev/dsp#\x00', 0x3, 0x10000) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r4, 0x631ae7f90638ead2, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10000000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/hwrng\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a40)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x400) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0x82642, 0x8) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000b80)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/dlm-monitor\x00', 0x440000, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r8 = socket$bt_bnep(0x1f, 0x3, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000c00)={0xc, 0x3, 0x9, 0x800, 0xffffffffffffffff}) r11 = fsopen(&(0x7f0000000c40)='exfat\x00', 0x1) r12 = syz_open_dev$radio(&(0x7f0000000c80)='/dev/radio#\x00', 0x3, 0x2) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000cc0)={0x2, 0x400, 0x7, 0x0, 0x0, [{r0, 0x0, 0x3}, {0xffffffffffffffff, 0x0, 0x8}, {r9}, {r10, 0x0, 0x5}, {r5, 0x0, 0x7}, {r11, 0x0, 0x3}, {r12, 0x0, 0x9}]}) r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000e00)={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r13, 0x40106614, &(0x7f0000000e40)) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000e80)={0x2, 0xffffffffffffffff, 0x1}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x810, r14, 0xa) 19:56:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 19:56:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newsa={0xf0, 0x10, 0x0, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1}, {@in=@empty}, @in=@empty}}, 0xf0}}, 0x0) 19:56:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = inotify_init() readv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/6, 0x10}], 0x1db) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x2a) fcntl$getown(r2, 0x9) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x6000, 0x302) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r9) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$revoke(0x3, r4) keyctl$get_keyring_id(0x0, r4, 0x1) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$BLKTRACESTOP(r13, 0x1275, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100015070000000093ac5c1500000000", @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}]}]}, 0x4c}}, 0x0) [ 383.547960][T12761] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 383.651008][T12766] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.1'. [ 383.674083][T12441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.685377][T12441] usb 5-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.40 [ 383.692080][ T3914] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 383.695244][T12441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.734730][T12441] usb 5-1: config 0 descriptor?? [ 383.952101][ T3914] usb 4-1: Using ep0 maxpacket: 8 [ 384.059509][T12772] IPVS: ftp: loaded support on port[0] = 21 [ 384.072831][T12441] usbhid 5-1:0.0: can't add hid device: -71 [ 384.079094][T12441] usbhid: probe of 5-1:0.0 failed with error -71 [ 384.104195][T12441] usb 5-1: USB disconnect, device number 5 [ 384.163257][ T3914] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 384.171324][ T3914] usb 4-1: can't read configurations, error -22 [ 384.267460][T12772] chnl_net:caif_netlink_parms(): no params data found [ 384.327937][T12772] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.335326][T12772] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.344277][T12772] device bridge_slave_0 entered promiscuous mode [ 384.353399][ T3914] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 384.363229][T12772] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.370432][T12772] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.379578][T12772] device bridge_slave_1 entered promiscuous mode [ 384.411327][T12772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.425686][T12772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.459648][T12772] team0: Port device team_slave_0 added [ 384.469309][T12772] team0: Port device team_slave_1 added 19:56:31 executing program 4: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:31 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = open(&(0x7f0000001ac0)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x8001) [ 384.587320][T12772] device hsr_slave_0 entered promiscuous mode [ 384.613124][T12772] device hsr_slave_1 entered promiscuous mode [ 384.662360][T12772] debugfs: Directory 'hsr0' with parent '/' already present! 19:56:31 executing program 2: r0 = socket(0x10, 0x2, 0xc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x40, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="1f000000010141e20c050054a8c984ca029b189f1b882de4e41a0e982de47a", 0x1f) [ 384.713416][T12772] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.720692][T12772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.728627][T12772] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.735938][T12772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.792340][T12789] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.2'. [ 384.836634][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.847049][ T54] bridge0: port 2(bridge_slave_1) entered disabled state 19:56:31 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffee, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000140001080007000218000000021000e11800000014000200fe889ce6e502000000000000a905"], 0x2c}}, 0x0) r0 = socket(0x1000000010, 0x80003, 0x0) sendmmsg$alg(r0, &(0x7f0000000100), 0x2c1, 0x0) [ 384.978623][T12772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.006990][T12247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 385.016398][T12247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 19:56:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) socket$inet_udplite(0x2, 0x2, 0x88) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) open(0x0, 0x20143042, 0x0) stat(0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 19:56:32 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000100) sched_setattr(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x3) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) mlock(&(0x7f00002e2000/0x4000)=nil, 0x4000) openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) poll(&(0x7f00000000c0), 0x0, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xcd}) gettid() [ 385.031286][T12772] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.038847][T12798] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 385.072325][ T3914] usb 4-1: device not accepting address 10, error -71 [ 385.073829][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.089022][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.099657][T12401] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.109358][T12401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.125423][ T3914] usb usb4-port1: unable to enumerate USB device [ 385.227215][T12772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.238228][T12772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.253482][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 385.263577][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.272802][T12401] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.279987][T12401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.288656][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 385.299225][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 385.309547][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 385.319734][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 385.329655][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 385.339653][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 385.349629][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 385.359011][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 385.369106][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.378531][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.409374][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 385.418815][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 385.469032][T12772] 8021q: adding VLAN 0 to HW filter on device batadv0 19:56:32 executing program 4: clone(0xb6e7611a7e3793c6, 0x0, 0x0, 0x0, 0x0) [ 385.838952][T12825] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 19:56:33 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000000140)=""/166) 19:56:33 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:33 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000100) sched_setattr(r0, &(0x7f0000000000)={0x30, 0x3, 0x0, 0x5b9, 0x5, 0x0, 0xb3}, 0x0) lseek(r1, 0x0, 0x3) mlock(&(0x7f00002e2000/0x4000)=nil, 0x4000) openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) poll(&(0x7f00000000c0), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000100), 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00', 0x6}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) pipe(0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xcd}) gettid() 19:56:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) 19:56:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x1b, 0x6, 0x0, {0x0, @esp_ip6_spec={@mcast2, @mcast2}, {0x0, @broadcast}, @usr_ip6_spec={@ipv4={[], [], @multicast2}, @mcast2}, {0x0, @link_local}}}}) 19:56:33 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x7d20, 0x0, &(0x7f00000001c0), 0x10) 19:56:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x1b, 0x8, 0x0, {0x0, @esp_ip6_spec={@mcast2, @mcast2}, {0x0, @broadcast}, @usr_ip6_spec={@ipv4={[], [], @multicast2}, @mcast2}, {0x0, @link_local}}}}) 19:56:33 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x0, 0xa}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 19:56:33 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x1b, 0x4, 0x0, {0x0, @esp_ip6_spec={@mcast2, @mcast2}, {0x0, @broadcast}, @usr_ip6_spec={@ipv4={[], [], @multicast2}, @mcast2}, {0x0, @link_local}}}}) 19:56:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008165e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8000500ff0005000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 19:56:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#'], 0x1) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @local}, {0x2, 0x0, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000040)) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x2) 19:56:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20000058}}, 0x0) 19:56:33 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 19:56:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x18290a}], 0x1) 19:56:34 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x88101) ioctl$int_in(r0, 0x800060c0045006, &(0x7f0000000040)=0x100000035) 19:56:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x1b, 0x5, 0x0, {0x0, @esp_ip6_spec={@mcast2, @mcast2}, {0x0, @broadcast}, @usr_ip6_spec={@ipv4={[], [], @multicast2}, @mcast2}, {0x0, @link_local}}}}) 19:56:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="0f20d835080000000f22d8430fc7793fc442792a30c744240073ff0000c74424027a0c9b0dc7442406000000000f011424c4826998253b00000066ba410066b80b0026420f01c2c403c568bb703700006d640fd9190f01caf30faec5", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:56:34 executing program 5: unshare(0x24020400) r0 = socket(0x10, 0x3, 0x0) syncfs(r0) 19:56:34 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f4534ff0000c655da1154196de0c3da00000000bb3fe5d76581da89aff941f23df718d213f858c2c29bc42c4e2d6585b402daf6df00000000000048"], 0x3c) r3 = socket$inet(0x2, 0x3, 0x81) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f00000000c0)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 19:56:34 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x8e56b071b577b247, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x1}, 0x50) truncate(&(0x7f0000000000)='./file0/file0\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000001c0)=0xc) write$FUSE_ENTRY(r0, &(0x7f0000000540)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85eb, 0x0, r2}}}, 0x90) 19:56:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800a1695e1dcfe87b1071") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_aout(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/201], 0xc9) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 19:56:34 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x5, 0xa, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 19:56:34 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 19:56:34 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:35 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r2, &(0x7f0000000300), &(0x7f0000000480)=""/219, 0x3}, 0x20) 19:56:35 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "f500", 0x14, 0x6, 0x0, @empty, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:56:35 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0xfffffff5) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0xda4fff08) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'rose0\x00', 0x200}) 19:56:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000023008163e45ae08700000000060f0ec0000000bc4cc91b4dd65b2f0580cb7023f52a556d1cd4f1cbf90a", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) [ 388.060436][T12947] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:56:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x18, @ipv4=@multicast1=0x4000e00}]}]}, 0x24}}, 0x0) 19:56:35 executing program 2: r0 = socket$inet6(0xa, 0x100000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0821b5055e0bcfe87b0071") setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0), 0x4) 19:56:35 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000fc0)) sendmmsg(r0, &(0x7f0000008380)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="a0", 0x2}], 0x1}}], 0x1, 0x0) [ 388.284910][T12956] openvswitch: netlink: Either Ethernet header or EtherType is required. 19:56:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x18d, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000000c0)=0x3) readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0x38a, 0x0}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000680)={{0x4, 0x5000, 0xd, 0x9, 0x3a, 0x1f, 0x1, 0x0, 0x3, 0x9, 0x3, 0x80}, {0x1000, 0x0, 0x0, 0x5, 0x0, 0xfe, 0x0, 0x3d, 0x22, 0x0, 0x4}, {0x0, 0x0, 0xe, 0x0, 0x5, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xff}, {0x2000, 0x4, 0x0, 0x15, 0x1b, 0x4e, 0x1, 0x0, 0x42, 0x5d, 0x1}, {0xd000, 0x10000, 0x10, 0x6, 0x0, 0x7f, 0x3, 0x17, 0x9, 0x80, 0x0, 0x40}, {0xd000, 0x2, 0x0, 0x40, 0x90, 0x0, 0x0, 0x0, 0x6, 0xe5, 0x0, 0x3}, {0x0, 0x5000, 0x9, 0x80, 0x6, 0x3, 0x9, 0x0, 0x0, 0x0, 0xd9}, {0x8c004, 0x100800, 0xb, 0x4, 0x0, 0xfc, 0xfd, 0x3, 0x24, 0x0, 0x0, 0x1}, {0x100000}, {0x104000, 0x1000}, 0x10000, 0x0, 0x4000, 0x10, 0x8, 0xcc00, 0x0, [0x0, 0x0, 0x7d7f, 0x1]}) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) 19:56:35 executing program 2: r0 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000180)=0x380, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) 19:56:35 executing program 0: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) openat(0xffffffffffffff9c, 0x0, 0x240481, 0x51) 19:56:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x0) 19:56:35 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000280)={0x1, 0x0, [{0x0, 0x0, 0x3}]}) 19:56:36 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200001416, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 19:56:36 executing program 5: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000004003}) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000040), 0xff66}]) 19:56:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000000), 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff0100014e2000010028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) 19:56:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x2287) 19:56:36 executing program 2: socket$inet6(0xa, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) pipe(&(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000140)={0x1f5}, &(0x7f0000000200), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:56:37 executing program 0: r0 = msgget$private(0x0, 0x124) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/72) 19:56:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5380) 19:56:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:37 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000023008163e45ae08700000000060f0ec0000000bc4cc91b4dd65b2f0580cb7023f52a556d1cd4f1cbf90a", 0x2e}], 0x1}, 0x0) 19:56:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x49) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x81829100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="871f7e09d2b97090"], 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) fcntl$setstatus(r0, 0x4, 0x2000) 19:56:37 executing program 3: 19:56:37 executing program 5: 19:56:37 executing program 3: 19:56:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:37 executing program 0: 19:56:37 executing program 2: 19:56:37 executing program 5: 19:56:37 executing program 0: 19:56:37 executing program 3: 19:56:37 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:37 executing program 5: 19:56:37 executing program 0: 19:56:37 executing program 2: 19:56:37 executing program 3: 19:56:38 executing program 2: 19:56:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:38 executing program 0: 19:56:38 executing program 5: 19:56:38 executing program 3: 19:56:38 executing program 2: 19:56:38 executing program 3: 19:56:38 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:38 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) 19:56:38 executing program 0: 19:56:38 executing program 2: 19:56:38 executing program 3: 19:56:38 executing program 0: 19:56:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:39 executing program 3: 19:56:39 executing program 2: 19:56:39 executing program 5: 19:56:39 executing program 0: 19:56:39 executing program 0: 19:56:39 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:39 executing program 3: 19:56:39 executing program 2: 19:56:39 executing program 5: 19:56:39 executing program 0: 19:56:39 executing program 5: 19:56:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:40 executing program 0: 19:56:40 executing program 3: 19:56:40 executing program 2: 19:56:40 executing program 5: 19:56:40 executing program 5: 19:56:40 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:40 executing program 2: 19:56:40 executing program 0: 19:56:40 executing program 3: 19:56:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:40 executing program 5: 19:56:40 executing program 0: 19:56:40 executing program 5: 19:56:40 executing program 2: 19:56:40 executing program 3: 19:56:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:41 executing program 0: 19:56:41 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:41 executing program 2: 19:56:41 executing program 3: 19:56:41 executing program 5: 19:56:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) epoll_create1(0x0) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:41 executing program 0: 19:56:41 executing program 5: 19:56:41 executing program 0: 19:56:41 executing program 2: 19:56:41 executing program 3: 19:56:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) epoll_create1(0x0) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:41 executing program 0: 19:56:42 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:42 executing program 5: 19:56:42 executing program 3: 19:56:42 executing program 2: 19:56:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) epoll_create1(0x0) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:42 executing program 0: 19:56:42 executing program 5: 19:56:42 executing program 0: 19:56:42 executing program 3: 19:56:42 executing program 2: 19:56:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:42 executing program 5: 19:56:43 executing program 3: 19:56:43 executing program 0: 19:56:43 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x40000000003a, 0x43ff, @rand_addr="7c75cb47ad0e73292a4ec8119fcd69de", @local, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, [], @local}}}}}}, 0x0) 19:56:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) 19:56:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) [ 396.335642][T13237] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! 19:56:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 19:56:43 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0xffffffffffffff60, 0x0}}], 0x1, 0x0, 0x0) r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) 19:56:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:43 executing program 5: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)) 19:56:43 executing program 2: r0 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00\x00\x00\xfd\x81\x00', 0x1}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @multicast2}, 0x100, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffffffffffe}) ioctl(r0, 0x80000000008936, &(0x7f0000000000)) 19:56:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000fffffffe) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000280)=0x5, 0xfffffffffffffdc9) connect$inet6(r4, &(0x7f00000000c0), 0x1c) r5 = dup2(r4, r4) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0x40a85321, &(0x7f0000000340)={{0x8}, 'port0\x00', 0xee556098af0eea84, 0x8, 0x5, 0x40, 0x3, 0x8, 0x200, 0x0, 0x4, 0x1}) write$binfmt_script(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x10b) 19:56:44 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x6040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x4, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) 19:56:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)) 19:56:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)) 19:56:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/snmp6\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80a) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000800)) 19:56:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x7, &(0x7f0000000080)) fcntl$lock(r2, 0x7, &(0x7f00000000c0)) 19:56:44 executing program 3: fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='\x00', 0xffffff03}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet6(0xa, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RFLUSH(r2, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(0xffffffffffffffff, r5) sendfile(r0, r0, 0x0, 0x24000000) 19:56:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x7, &(0x7f0000000080)) fcntl$lock(r2, 0x7, &(0x7f00000000c0)) 19:56:44 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x2, 0x105b80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000280)={0xffff, 0x9, 0x1, 0xffff, 0x0, 0x8100087, 0x3d, 0x1, r3}, &(0x7f00000002c0)=0x20) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) r6 = socket(0x10, 0x803, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000340)) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_bt_bnep_BNEPCONNDEL(r6, 0x400442c9, &(0x7f0000000140)={0x2, @remote}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) r7 = getpid() tkill(r7, 0x1000000000015) ptrace$poke(0x5, r7, &(0x7f0000000380), 0x38) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCSIG(r11, 0x40045436, 0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[]}}, 0x0) bind$xdp(r5, &(0x7f0000000300)={0x2c, 0x8, r10, 0x2}, 0x10) 19:56:45 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="c2295e5dee274cf1ef8379eca12fe173a13ff90ff9aada75d17c028d7ae31fb0e382fef1fe1ff181f4e3e920763a6457c6e762b056ad7257680c3a88c27cfdfee64ba43280174514f88512de86de8f7e1ce3f12530cb67ce82220fa77603311a6e0fe91d"], 0x1) r0 = socket$inet6(0xa, 0x3, 0x3c) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) io_setup(0x3b24, &(0x7f0000000740)) 19:56:45 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x7, &(0x7f0000000080)) fcntl$lock(r2, 0x7, &(0x7f00000000c0)) 19:56:45 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\xb7\x98\x99\xe3(\xc6i\xe2\xdb\x03Nm\x90\x7f\x82(\xf4\x84)\xe1\x00\x9b\x00\"\xaa\x9c\n\xd4\xae2\x059\xc0\xda3\xe4\xac\xb3ps\xff\xf0p\xe0\xc4\x90w\x02P\x8b\xcc0\xe4\xbf\xbe\xf94\x14\xbf\xf5\x9a\xb8\xf14a\xd5\x05W\xd2\x84S\x9bTo\x16\x92\x88\xd6\xe1\x0e|\xe2\x1a\xd1G\xb6\a\xa2 }\x99.\x80\xa2D\x9c<\x80\xae\fc\x19\xd1\x97\xb8y\x80\x16\xe7\xbb\x8e\xae\xf1\xaf\xfb\x948\x1a\xcc\x02\x91\x95\xa2\x1f\xea\xa8\xeb\x14O\xba\x93\xad\xe3\n\xccP\xa3]\x02\xbdJ\x87\x85\xd7\x91:\xf9E\xf7\x00\xe5DG\xed\x9a#l\xe7c\xdb3\x83\r\xe5(\xefy\xceQ\x93\xd7\x1a\x91a;gs\xf8\x80\"\x90s-]*\xe9\xb9iL\x91\x1e}\xd5\x8c\xeb1\xb9\x84\xc7\x83\xe5c\xa3\xfc\xdb#\x1a\xfe\a\xdb\t\t', 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[]], 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x111}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execveat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) fcntl$setstatus(r0, 0x4, 0x400) 19:56:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f00000000c0)) 19:56:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f00000000c0)) [ 398.712343][T12401] usb 1-1: new low-speed USB device number 7 using dummy_hcd 19:56:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f00000000c0)) [ 399.078178][T12401] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 399.089793][T12401] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 399.099930][T12401] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 19:56:46 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:46 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r1, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f00000000c0)) [ 399.432999][T12401] usb 1-1: string descriptor 0 read error: -22 [ 399.439515][T12401] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 399.448742][T12401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.516538][T12401] cdc_ether: probe of 1-1:1.0 failed with error -22 19:56:46 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 19:56:46 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r1, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f00000000c0)) [ 399.727115][ T3914] usb 1-1: USB disconnect, device number 7 [ 399.952162][T12401] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 400.312315][T12401] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 400.321169][T12401] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 400.331535][T12401] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.492321][T12401] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.501505][T12401] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.509808][T12401] usb 4-1: Product: syz [ 400.514144][T12401] usb 4-1: Manufacturer: syz [ 400.518849][T12401] usb 4-1: SerialNumber: syz [ 400.522085][ T3914] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 400.872570][T12401] usb 4-1: 0:2 : does not exist [ 400.891911][T12401] usb 4-1: USB disconnect, device number 11 19:56:48 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="52aee9e26b1e00d933227f2df0ed3733b57eddde6b8746d50a01765484b4a4dbc775722409e6efc29f60425345640a79f21a5b5c94751e5fe628689986415a5fcd6c73948e27d2f3dfa59526dcb53b58311b9f5e61fb69b50d05521b15196e5672f44e21429f15490ac52692ab4cecc3cbda8c7362ed65005de14cca83e5060054cf27e8fae6402c0d302873a9ae70dd41172251f4a6975d40ec83b10f9a525e556d30741f96985eab90de8d05ce7657892578352fb6978213ca1254c4976f13b69be43212e5b8be39f3b190cd8186b9a60f9a0b30fd6b"], 0x1) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 19:56:48 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r1, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f00000000c0)) 19:56:48 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000000c0), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000000c0), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, 0x0) r7 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x10001) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f0000000040)=0x6) r8 = dup3(r0, r5, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) dup2(r8, r6) 19:56:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="9636f013ec722a6eb7c605a2", 0xc, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15043169"}, 0x6, 0x0, @fd, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 401.111096][T13373] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:56:48 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:48 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) 19:56:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ff4000/0x1000)=nil) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:56:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x1, 0x1, "03"}], 0x18}}], 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) dup3(r0, r1, 0x80000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$caif_seqpacket(0x25, 0x5, 0x4) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000001c0)) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="002b9a91ab000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x607, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) dup2(0xffffffffffffffff, r5) [ 401.575399][T12247] usb 4-1: new high-speed USB device number 12 using dummy_hcd 19:56:48 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) [ 401.962388][T12247] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 401.971188][T12247] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 401.981710][T12247] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 402.172323][T12247] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 402.181505][T12247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.190824][T12247] usb 4-1: Product: syz [ 402.195144][T12247] usb 4-1: Manufacturer: syz [ 402.199886][T12247] usb 4-1: SerialNumber: syz [ 402.562537][T12247] usb 4-1: 0:2 : does not exist [ 402.577029][T12247] usb 4-1: USB disconnect, device number 12 19:56:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r1, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f00000000c0)) 19:56:49 executing program 0: syz_open_dev$hiddev(&(0x7f0000000000)='/dev/uhid\x00\x10\x00', 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x100, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x201) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000001240)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) write$hidraw(r1, &(0x7f0000001200)='\v', 0xffffff45) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc2, 0xb1, 0xb0, 0x0, 0x596, 0x1, 0x9fe2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0xdc, 0xae, 0x36}}]}}]}}, 0x0) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x0, 0x0) 19:56:49 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:49 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0xfffa5e190fcd8dd7, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r10}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000002c0)={r7, 0x9, 0x9, 0x0, 0x9d, 0xf652, 0x1, 0x7, {r10, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x1a}, 0x8000}}, 0xfffffff8, 0x3ff, 0x4, 0x200, 0xfffffff8}}, &(0x7f0000000100)=0xb0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) r14 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x20400, 0x0) bind$inet6(r14, &(0x7f0000000240)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) 19:56:49 executing program 2: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/204, 0xcc) keyctl$chown(0x4, 0x0, 0x0, 0x0) getgroups(0x3, &(0x7f0000000140)=[0x0, r0, 0x0]) getgid() socket$inet_tcp(0x2, 0x1, 0x0) setgroups(0x0, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3e3, 0x3bc177af4b1a627b) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}) clock_gettime(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000480)={0x1, 'syzkaller1\x00', 0x2}, 0x18) connect$inet6(r3, &(0x7f00000000c0), 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r5 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000300)={0x1, 0x0, 0x2, 0x9}) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000340)={r6, 0x7}) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x1c48963f684a34b5) unshare(0x60020000) 19:56:49 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 402.780561][ T3914] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.788328][ T3914] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 19:56:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r1, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f00000000c0)) [ 402.867707][T13421] IPVS: ftp: loaded support on port[0] = 21 [ 402.870067][ T3914] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [] on [ 403.072431][ T3914] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 403.093620][T12247] usb 4-1: new high-speed USB device number 13 using dummy_hcd 19:56:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r1, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f00000000c0)) [ 403.362419][ T3914] usb 1-1: device descriptor read/64, error 18 [ 403.452692][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 403.459245][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 403.465578][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 403.475696][T12247] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 403.484679][T12247] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config 19:56:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x7, &(0x7f0000000080)) fcntl$lock(r2, 0x7, &(0x7f00000000c0)) [ 403.494955][T12247] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.579049][T13439] IPVS: ftp: loaded support on port[0] = 21 19:56:50 executing program 1: r0 = socket(0x50000000010, 0x80000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x7, &(0x7f0000000080)) fcntl$lock(r2, 0x7, &(0x7f00000000c0)) [ 403.746368][T12247] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.755967][T12247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.764427][T12247] usb 4-1: Product: syz [ 403.768686][T12247] usb 4-1: Manufacturer: syz [ 403.773420][T12247] usb 4-1: SerialNumber: syz [ 403.783326][ T3914] usb 1-1: device descriptor read/64, error 18 19:56:50 executing program 2: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/204, 0xcc) keyctl$chown(0x4, 0x0, 0x0, 0x0) getgroups(0x3, &(0x7f0000000140)=[0x0, r0, 0x0]) getgid() socket$inet_tcp(0x2, 0x1, 0x0) setgroups(0x0, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3e3, 0x3bc177af4b1a627b) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}) clock_gettime(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000480)={0x1, 'syzkaller1\x00', 0x2}, 0x18) connect$inet6(r3, &(0x7f00000000c0), 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r5 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000300)={0x1, 0x0, 0x2, 0x9}) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000340)={r6, 0x7}) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x1c48963f684a34b5) unshare(0x60020000) 19:56:50 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0xfffa5e190fcd8dd7, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r10}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000002c0)={r7, 0x9, 0x9, 0x0, 0x9d, 0xf652, 0x1, 0x7, {r10, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x1a}, 0x8000}}, 0xfffffff8, 0x3ff, 0x4, 0x200, 0xfffffff8}}, &(0x7f0000000100)=0xb0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) r14 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x20400, 0x0) bind$inet6(r14, &(0x7f0000000240)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) [ 404.046816][T13456] IPVS: ftp: loaded support on port[0] = 21 [ 404.412680][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 404.419074][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 404.481617][ T3914] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 404.492705][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 404.499083][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 404.505746][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 404.512092][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 404.522632][T12247] usb 4-1: 0:2 : does not exist [ 404.555694][T12247] usb 4-1: USB disconnect, device number 13 [ 404.732677][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 404.752264][ T3914] usb 1-1: device descriptor read/64, error 18 [ 405.142570][ T3914] usb 1-1: device descriptor read/64, error 18 [ 405.262295][ T3914] usb usb1-port1: attempt power cycle 19:56:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000000c0), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x1f, 0x1, 0x6, 0x9}, {0x3, 0x7f, 0x7f, 0x8}, {0x8, 0x40, 0x3f, 0xdc3}, {0x4000, 0x55, 0x6, 0x1000}, {0x2, 0x81, 0x1f, 0xfff}, {0x200, 0x8, 0x79, 0xff}]}) unlinkat(r2, &(0x7f0000000000)='./file0\x00', 0x200) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 19:56:52 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0xfffa5e190fcd8dd7, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r10}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000002c0)={r7, 0x9, 0x9, 0x0, 0x9d, 0xf652, 0x1, 0x7, {r10, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x1a}, 0x8000}}, 0xfffffff8, 0x3ff, 0x4, 0x200, 0xfffffff8}}, &(0x7f0000000100)=0xb0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) r14 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x20400, 0x0) bind$inet6(r14, &(0x7f0000000240)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) 19:56:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x7, &(0x7f0000000080)) fcntl$lock(r2, 0x7, &(0x7f00000000c0)) 19:56:52 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x7, &(0x7f0000000080)) fcntl$lock(r2, 0x7, &(0x7f00000000c0)) 19:56:52 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 19:56:53 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd000705810700010000e5be52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x327}}}}}]}}]}}, 0x0) 19:56:53 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x7, &(0x7f0000000080)) fcntl$lock(r2, 0x7, &(0x7f00000000c0)) 19:56:53 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) [ 406.262705][T12247] usb 4-1: new high-speed USB device number 14 using dummy_hcd 19:56:53 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x7, &(0x7f0000000080)) fcntl$lock(r2, 0x7, &(0x7f00000000c0)) 19:56:53 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) [ 406.502224][T12441] usb 3-1: new high-speed USB device number 6 using dummy_hcd 19:56:53 executing program 1: r0 = socket(0x0, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) [ 406.622403][T12247] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 406.631281][T12247] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 406.641602][T12247] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.762385][T12441] usb 3-1: Using ep0 maxpacket: 8 [ 406.822504][T12247] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 406.831749][T12247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.840354][T12247] usb 4-1: Product: syz [ 406.844680][T12247] usb 4-1: Manufacturer: syz [ 406.849391][T12247] usb 4-1: SerialNumber: syz [ 406.904417][T12441] usb 3-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 406.914925][T12441] usb 3-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.926228][T12441] usb 3-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 406.935420][T12441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.065720][T12441] hub 3-1:118.0: ignoring external hub [ 407.077644][T12441] cdc_wdm 3-1:118.0: cdc-wdm0: USB WDM device [ 407.243309][T12247] usb 4-1: 0:2 : does not exist [ 407.296521][T12247] usb 4-1: USB disconnect, device number 14 19:56:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x13e, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000000)={0xb6e, 0x2, [0x6, 0x9, 0xfae7, 0x4, 0x9], 0x9}) 19:56:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x7, &(0x7f0000000080)) fcntl$lock(r2, 0x7, &(0x7f00000000c0)) 19:56:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x7, &(0x7f0000000080)) fcntl$lock(r2, 0x7, &(0x7f00000000c0)) 19:56:54 executing program 1: r0 = socket(0x0, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:54 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 407.732331][T13488] usb 3-1: reset high-speed USB device number 6 using dummy_hcd 19:56:54 executing program 1: r0 = socket(0x0, 0x80000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) [ 407.992152][T13488] usb 3-1: Using ep0 maxpacket: 8 [ 408.093144][T12441] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 408.322401][ T3914] usb 3-1: USB disconnect, device number 6 [ 408.452331][T12441] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 408.461209][T12441] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 408.471558][T12441] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.642401][T12441] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.651622][T12441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.661213][T12441] usb 4-1: Product: syz [ 408.665579][T12441] usb 4-1: Manufacturer: syz [ 408.670252][T12441] usb 4-1: SerialNumber: syz [ 408.992307][T12441] usb 4-1: 0:2 : does not exist [ 409.008249][T12441] usb 4-1: USB disconnect, device number 15 [ 409.102252][T12486] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 409.372670][T12486] usb 3-1: device descriptor read/64, error 18 [ 409.762140][T12486] usb 3-1: device descriptor read/64, error 18 19:56:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x151000, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffffffffffff0001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x1f, 0x7, 0x39, 0x0, 0xfffffff9, 0xa6, 0x20, 0x6, 0x1, 0x17, 0xa5, 0x6e, 0x0, 0x6, 0x0, 0x9, 0x6, 0x9, 0x7f}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, &(0x7f0000000140), &(0x7f0000000240)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10}, 0x70) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000eb8de108697a010036190000000109021200010000008009040000009be13600"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x80, 0x22, 0xc7, {0xc7, 0xb28af665da49ba42, "3bef0ab29610ee42662ed4e9b3241edaea156d0884096b970e4cdcae3aac51da10779c54c2828b1842d7103ce313c783d880d5525d838a906333250aa1cc0bb739b5f49c12841dc7a670e5f0b66b24de6c212f5db54b6bb70bcc8f99f4635b9ea2e2d683b46c7cd7e9ad97c47061397d3a74701c94c6b4d9a2f7d8ad6a71e2968072fd55ee421193caf38bd32aaf845873f47b0f42aa7c172a485e04449dd943ae748d9d8be7c2a3f035681b9ff32eb7fbf3fde8f207d14cf675c70746af7f78493f679b2c"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x1c, &(0x7f0000000440)={0x40, 0x17, 0x3f, "9cd5e4c0f2969f77df0d846f1b2de304044bfd67b1d596cceb5e64e91941188db6c1ac474d96cf2d1a08455e12cc2702a9a29cd7b13dc6380c0255fe6650ec"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}}) 19:56:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x7, &(0x7f0000000080)) fcntl$lock(r2, 0x7, &(0x7f00000000c0)) 19:56:56 executing program 1: r0 = socket(0x50000000010, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0xf8a9, 0x4, 0x8000}) syz_usb_connect$cdc_ncm(0x0, 0x77, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x9, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x57, {{0x7, 0x24, 0x6, 0x0, 0x1, 'Al'}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0xfe7b, 0x2, 0x4, 0x3a}, {0x6, 0x24, 0x1a, 0x1, 0x40}, [@dmm={0x7, 0x24, 0x14, 0x3ff, 0xd407}]}, {{0x9, 0x5, 0x81, 0x3, 0x1bc, 0x3, 0x7, 0x3}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0x36}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x2, "", {{{0x9, 0x5, 0x82, 0x2, 0x1f0, 0x1, 0xa4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x139, 0x43, 0x80, 0xff}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x8, 0xff, 0xfa, 0xff, 0x4}, 0x14, &(0x7f00000008c0)={0x5, 0xf, 0x14, 0x2, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x7ffc8e9, 0x7800, 0x3}]}, 0x2, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x3001}}, {0xcd, &(0x7f0000000a80)=@string={0xcd, 0x3, "8969d4a3575fae55e83ec56a07e416e53a542d6d2af4b49014a782ff5a531aa37d9c29c76caf3867ea084a43153f54ba9f0c98e09ab85087a554b900f4f41e020a84429f21407953ecdeee307c977f6e8db139783843cad77349b4c09241cbb340058394214085a16fc76d8d4b8a5c26fd31312a4ff159f0c95ac6e92db74fe1b8b3464bead35b5190160c13e0a8ea1af8d63369dadd2cd506f606d9e2eef924701c66e6a3e79044eb0b7b2c42192f64426f82799222d648f24ed0e3da2cf9a1229ab815f8fd94a7a7ad8d"}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0xac, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0xac, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0xc3492af60955efef, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1400050}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r5, &(0x7f00000000c0), 0x1c) r6 = dup2(r5, r5) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f0000000640)=""/217) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000500)={0xfffffffe, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @remote}}}, 0x108) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 19:56:56 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 19:56:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa982, 0x0, 0x0, 0x0, 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x3fb2, 0x19], 0x0, 0x7}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000000c0), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0xfff) 19:56:57 executing program 1: r0 = socket(0x50000000010, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) 19:56:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x7, &(0x7f0000000080)) fcntl$lock(r2, 0x7, &(0x7f00000000c0)) 19:56:57 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2011, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 19:56:57 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='\x19\xed\x00\xea}\x10\xda\x829\x00\x8c\xd9\x00\x80\x00', 0x10) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x18004e20, @multicast1=0xe0000300}, 0x10) 19:56:57 executing program 1: r0 = socket(0x50000000010, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa6bfa4925b61c7d44a8e4aebc48d5916130133b1052ec9800c00000003000000000000000d9a140ed7a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99303009285e3ac9dbeb8b070933ba069fb5e325ea97f4cfc3a00861fa55e2a981d4758ddbc983a2722a3af603875e01a0d23b1cd7b1d36935ab852cbe47ed9984130"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004340), 0x40003e0, 0x0, 0x0) [ 410.185382][T12441] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 410.222593][ T3914] usb 6-1: new high-speed USB device number 2 using dummy_hcd 19:56:57 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) [ 410.434680][T12441] usb 1-1: Using ep0 maxpacket: 16 [ 410.472558][ T3914] usb 6-1: Using ep0 maxpacket: 8 [ 410.552489][T12441] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 496 [ 410.563339][T12441] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 313 [ 410.612525][ T3914] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=19.36 [ 410.621705][ T3914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.631402][ T3914] usb 6-1: config 0 descriptor?? [ 410.676650][ T3914] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 410.733618][T12441] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 410.742979][T12441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.750999][T12441] usb 1-1: Product: syz [ 410.755327][T12441] usb 1-1: Manufacturer: 榉ꏔ彗單㻨櫅吺洭邴꜔ツ博ꌚ鱽윩꽬朸࣪䍊㼕메ಟ뢚蝐咥¹Ȟ萊齂䀡卹ヮ靼湿농砹䌸퟊䥳살䆒돋Հ钃䀡ꆅ읯赭詋♜ㇽ⨱嫉뜭뎸䭆폪兛ᚐጌ꣠᫪훸椳픬⓹ᱰ䒐௫ⱻ᥂搯潂禂⊒䣖仲Ⳛꇹ騢ᖸﷸꞔ궧 [ 410.785129][T12441] usb 1-1: SerialNumber: syz [ 411.025128][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 411.152468][T12441] cdc_ncm 1-1:1.0: bind() failure [ 411.194289][T12441] cdc_ncm 1-1:1.1: bind() failure [ 411.203956][T12441] usb 1-1: USB disconnect, device number 12 [ 411.742288][ T3914] ===================================================== [ 411.749562][ T3914] BUG: KMSAN: uninit-value in friio_power_ctrl+0xb3e/0x1a70 [ 411.756949][ T3914] CPU: 1 PID: 3914 Comm: kworker/1:2 Not tainted 5.4.0-rc3+ #0 [ 411.773973][ T3914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.784152][ T3914] Workqueue: usb_hub_wq hub_event [ 411.789232][ T3914] Call Trace: [ 411.792581][ T3914] dump_stack+0x191/0x1f0 [ 411.796981][ T3914] kmsan_report+0x14a/0x2f0 [ 411.801476][ T3914] __msan_warning+0x73/0xf0 [ 411.805987][ T3914] friio_power_ctrl+0xb3e/0x1a70 [ 411.810924][ T3914] ? kasan_kmalloc+0xd/0x30 [ 411.815420][ T3914] ? gl861_i2c_msg+0x6e0/0x6e0 [ 411.820230][ T3914] dvb_usbv2_probe+0xd3d/0x5dd0 [ 411.825087][ T3914] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 411.831008][ T3914] ? technisat_usb2_i2c_access+0x12a0/0x12a0 [ 411.836995][ T3914] ? technisat_usb2_i2c_access+0x12a0/0x12a0 [ 411.842994][ T3914] usb_probe_interface+0xd19/0x1310 [ 411.848223][ T3914] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 411.854128][ T3914] ? usb_register_driver+0x860/0x860 [ 411.859570][ T3914] really_probe+0xd91/0x1f90 [ 411.864195][ T3914] driver_probe_device+0x1ba/0x510 [ 411.869477][ T3914] __device_attach_driver+0x5b8/0x790 [ 411.874837][ T3914] bus_for_each_drv+0x28e/0x3b0 [ 411.879671][ T3914] ? deferred_probe_work_func+0x400/0x400 [ 411.885379][ T3914] __device_attach+0x489/0x750 [ 411.890139][ T3914] device_initial_probe+0x4a/0x60 [ 411.895151][ T3914] bus_probe_device+0x131/0x390 [ 411.900005][ T3914] device_add+0x25b5/0x2df0 [ 411.904538][ T3914] usb_set_configuration+0x309f/0x3710 [ 411.910003][ T3914] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 411.916115][ T3914] generic_probe+0xe7/0x280 [ 411.920913][ T3914] ? usb_choose_configuration+0xae0/0xae0 [ 411.926624][ T3914] usb_probe_device+0x146/0x200 [ 411.931462][ T3914] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 411.937349][ T3914] ? usb_register_device_driver+0x500/0x500 [ 411.943248][ T3914] really_probe+0xd91/0x1f90 [ 411.947870][ T3914] driver_probe_device+0x1ba/0x510 [ 411.947896][ T3914] __device_attach_driver+0x5b8/0x790 [ 411.947933][ T3914] bus_for_each_drv+0x28e/0x3b0 [ 411.958414][ T3914] ? deferred_probe_work_func+0x400/0x400 [ 411.968997][ T3914] __device_attach+0x489/0x750 [ 411.974296][ T3914] device_initial_probe+0x4a/0x60 [ 411.979420][ T3914] bus_probe_device+0x131/0x390 [ 411.993909][ T3914] device_add+0x25b5/0x2df0 [ 411.998419][ T3914] usb_new_device+0x23e5/0x2fb0 [ 412.003292][ T3914] hub_event+0x581d/0x72f0 [ 412.007731][ T3914] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 412.013609][ T3914] ? led_work+0x720/0x720 [ 412.017922][ T3914] ? led_work+0x720/0x720 [ 412.022382][ T3914] process_one_work+0x1572/0x1ef0 [ 412.027419][ T3914] worker_thread+0x111b/0x2460 [ 412.032256][ T3914] kthread+0x4b5/0x4f0 [ 412.036324][ T3914] ? process_one_work+0x1ef0/0x1ef0 [ 412.041506][ T3914] ? kthread_blkcg+0xf0/0xf0 [ 412.046081][ T3914] ret_from_fork+0x35/0x40 [ 412.050479][ T3914] [ 412.052813][ T3914] Local variable description: ----rbuf.i@friio_power_ctrl [ 412.059905][ T3914] Variable was created at: [ 412.064327][ T3914] friio_power_ctrl+0x92/0x1a70 [ 412.069157][ T3914] friio_power_ctrl+0x92/0x1a70 [ 412.074027][ T3914] ===================================================== [ 412.081084][ T3914] Disabling lock debugging due to kernel taint [ 412.087341][ T3914] Kernel panic - not syncing: panic_on_warn set ... [ 412.093945][ T3914] CPU: 1 PID: 3914 Comm: kworker/1:2 Tainted: G B 5.4.0-rc3+ #0 [ 412.102866][ T3914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.112952][ T3914] Workqueue: usb_hub_wq hub_event [ 412.117974][ T3914] Call Trace: [ 412.121257][ T3914] dump_stack+0x191/0x1f0 [ 412.125639][ T3914] panic+0x3c9/0xc1e [ 412.129550][ T3914] kmsan_report+0x2e8/0x2f0 [ 412.134132][ T3914] __msan_warning+0x73/0xf0 [ 412.138633][ T3914] friio_power_ctrl+0xb3e/0x1a70 [ 412.143650][ T3914] ? kasan_kmalloc+0xd/0x30 [ 412.148146][ T3914] ? gl861_i2c_msg+0x6e0/0x6e0 [ 412.153001][ T3914] dvb_usbv2_probe+0xd3d/0x5dd0 [ 412.157855][ T3914] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 412.163737][ T3914] ? technisat_usb2_i2c_access+0x12a0/0x12a0 [ 412.169699][ T3914] ? technisat_usb2_i2c_access+0x12a0/0x12a0 [ 412.175671][ T3914] usb_probe_interface+0xd19/0x1310 [ 412.180876][ T3914] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 412.186768][ T3914] ? usb_register_driver+0x860/0x860 [ 412.192078][ T3914] really_probe+0xd91/0x1f90 [ 412.196719][ T3914] driver_probe_device+0x1ba/0x510 [ 412.201819][ T3914] __device_attach_driver+0x5b8/0x790 [ 412.207184][ T3914] bus_for_each_drv+0x28e/0x3b0 [ 412.212029][ T3914] ? deferred_probe_work_func+0x400/0x400 [ 412.217744][ T3914] __device_attach+0x489/0x750 [ 412.222526][ T3914] device_initial_probe+0x4a/0x60 [ 412.227575][ T3914] bus_probe_device+0x131/0x390 [ 412.232524][ T3914] device_add+0x25b5/0x2df0 [ 412.237563][ T3914] usb_set_configuration+0x309f/0x3710 [ 412.243730][ T3914] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 412.249816][ T3914] generic_probe+0xe7/0x280 [ 412.254325][ T3914] ? usb_choose_configuration+0xae0/0xae0 [ 412.260029][ T3914] usb_probe_device+0x146/0x200 [ 412.264867][ T3914] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 412.270765][ T3914] ? usb_register_device_driver+0x500/0x500 [ 412.276645][ T3914] really_probe+0xd91/0x1f90 [ 412.281241][ T3914] driver_probe_device+0x1ba/0x510 [ 412.286382][ T3914] __device_attach_driver+0x5b8/0x790 [ 412.291743][ T3914] bus_for_each_drv+0x28e/0x3b0 [ 412.296600][ T3914] ? deferred_probe_work_func+0x400/0x400 [ 412.302347][ T3914] __device_attach+0x489/0x750 [ 412.307383][ T3914] device_initial_probe+0x4a/0x60 [ 412.312407][ T3914] bus_probe_device+0x131/0x390 [ 412.317342][ T3914] device_add+0x25b5/0x2df0 [ 412.321852][ T3914] usb_new_device+0x23e5/0x2fb0 [ 412.326717][ T3914] hub_event+0x581d/0x72f0 [ 412.331184][ T3914] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 412.337077][ T3914] ? led_work+0x720/0x720 [ 412.341399][ T3914] ? led_work+0x720/0x720 [ 412.345721][ T3914] process_one_work+0x1572/0x1ef0 [ 412.350783][ T3914] worker_thread+0x111b/0x2460 [ 412.355565][ T3914] kthread+0x4b5/0x4f0 [ 412.359616][ T3914] ? process_one_work+0x1ef0/0x1ef0 [ 412.364821][ T3914] ? kthread_blkcg+0xf0/0xf0 [ 412.369396][ T3914] ret_from_fork+0x35/0x40 [ 412.375341][ T3914] Kernel Offset: disabled [ 412.379668][ T3914] Rebooting in 86400 seconds..